Trojaner-Board - PC bootet in safemode und fährt dann runter

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - PC bootet in safemode und fährt dann runter (https://www.trojaner-board.de/158402-pc-bootet-safemode-faehrt-dann-runter.html)

Unsere Tools brauchen immer Adminrechte!

Adware & Co. deinstallieren

Lade Dir bitte von hier http://deeprybka.trojaner-board.de/b...ninstaller.pngRevo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:
http://deeprybka.trojaner-board.de/b.../revo/add1.png
diesen Zusatz haben:
http://deeprybka.trojaner-board.de/b...e/revo/att.PNG
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
http://deeprybka.trojaner-board.de/b.../uninstall.PNG http://deeprybka.trojaner-board.de/b...o/moderat2.PNG
Reste löschen:
Klicke auf http://deeprybka.trojaner-board.de/b.../selectall.PNG dann auf http://deeprybka.trojaner-board.de/b...evo/delete.PNG und dann auf http://deeprybka.trojaner-board.de/b...evo/weiter.PNG.

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo,
Beim Revo Uninstaller gab es unter „Additional scan rsults of Farbar Recovery Scan Tool“ keine Programme mit dem Zusatz „Attention“.

FRST kommt in einem seperaten Post wegen der max. Textlänge.

======================================
mbam:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 16.09.2014

Suchlauf-Zeit: 21:12:12

Logdatei: mbam.txt

Administrator: Nein
 

Version: 2.00.2.1012

Malware Datenbank: v2014.09.16.07

Rootkit Datenbank: v2014.09.15.01

Lizenz: Kostenlos

Malware Schutz: Deaktiviert

Bösartiger Webseiten Schutz: Deaktiviert

Self-protection: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: Luca
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 257282

Verstrichene Zeit: 9 Min, 6 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristics: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(No malicious items detected)
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 11

PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, Löschen bei Neustart, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, Löschen bei Neustart, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, Löschen bei Neustart, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.VOPackage.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VOsrv, In Quarantäne, [193e3faff18a66d0e3d88b89887bfc04], 

PUP.Optional.DomaIQ.A, HKLM\SOFTWARE\DomaIQ, Löschen bei Neustart, [ea6dd01e2f4cf73f6bd0af88aa59c937], 

PUP.Optional.Singalong.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\abepbblpkilpjohncjbccmdjhdhbnhdj, Löschen bei Neustart, [a8afa6481e5d2610ffacd050cf34d030], 

PUP.Optional.VOPackage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VOPACKAGE, Löschen bei Neustart, [89cecf1fc6b56dc9a9892ddfb54ea55b], 

PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, In Quarantäne, [6ee9ae40e3985bdb02f8ca443ec5748c], 

PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 
 

Registrierungswerte: 4

PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, In Quarantäne, [0a4d48a6adcebb7b5520275ec63ce61a], 

PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\Web Assistant\Firefox, Löschen bei Neustart, [0a4d48a6adcebb7b5520275ec63ce61a]

PUP.Optional.Incredibar, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\Web Assistant\Firefox, Löschen bei Neustart, [3027925c52293600c943094d1de7f709]

PUP.Optional.VOPackage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VOPACKAGE|UninstallString, "C:\Users\Dirk\AppData\Roaming\VOPackage\uninstall.exe", Löschen bei Neustart, [89cecf1fc6b56dc9a9892ddfb54ea55b]
 

Registrierungsdaten: 0

(No malicious items detected)
 

Ordner: 25

PUP.Optional.RegCleanerPro.A, C:\Users\Luca\AppData\Roaming\Systweak\RegClean Pro, In Quarantäne, [1542d11daecd2313c160943f51b17888], 

PUP.Optional.RegCleanerPro.A, C:\Users\Luca\AppData\Roaming\Systweak\RegClean Pro\Version 6.1, In Quarantäne, [1542d11daecd2313c160943f51b17888], 

PUP.Optional.Conduit, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\igdhbblpcellaljokkpfhcjlagemhgjl, Löschen bei Neustart, [50071ad47efd9c9af7699f35976bf907], 

PUP.Optional.CrossRider.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\jbpkiefagocgkmemidfngdkamloieekf, Löschen bei Neustart, [afa800eeaecd45f191d9e5f27c86ff01], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\html, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\images, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\js, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.Singalong.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\abepbblpkilpjohncjbccmdjhdhbnhdj, Löschen bei Neustart, [06519a540d6e6cca51b65c831de50ff1], 

PUP.Optional.FunMoods.A, c:\users\dirk\appdata\local\google\chrome\user data\default\local extension settings\cjpglkicenollcignonpgiafdgfeehoj, Löschen bei Neustart, [2f28628c9be0c175f0dc4b976999db25], 

PUP.Optional.MixiDJ.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\kpepfkjapeclaafmhoelccknpfedainn, Löschen bei Neustart, [193e7f6fc3b81d19d4b4bd2dc240916f], 

PUP.Optional.SystemSpeedup, c:\users\dirk\appdata\roaming\systweak\ssd, Löschen bei Neustart, [9abd38b69be016203639f1fa2cd6c33d], 

PUP.Optional.MixiDJ.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\boipimhfjpakfgckhbljjengakjhkcbp, Löschen bei Neustart, [17409a543843261024f4b43aa55d40c0], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DigitalSites\UpdateProc, In Quarantäne, [e671fcf2d6a541f5bda847a962a0af51], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc, In Quarantäne, [e96ee00ee7941125f1764ba504feff01], 

PUP.Optional.AdvancedSystemProtector.A, C:\Users\Luca\AppData\Roaming\Systweak\Advanced System Protector, In Quarantäne, [391ea14d651638fe4f08cf294fb306fa], 

PUP.Optional.AdvancedSystemProtector.A, C:\Users\Luca\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.12554, In Quarantäne, [391ea14d651638fe4f08cf294fb306fa], 

PUP.Optional.Perion.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\jifflliplgeajjdhmkcfnngfpgbjonjg, Löschen bei Neustart, [4f0802eca6d5e056cdd3a458ed15e818], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\Plugins, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\Plugins, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.MultiPlug.A, C:\ProgramData\greatsavIng, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 
 

Dateien: 41

PUP.Optional.Outbrowse, c:\users\dirk\appdata\local\temp\instract.exe, Löschen bei Neustart, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.DigitalSites.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe, In Quarantäne, [5cfb46a89edda195ba0aed549968639d], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptimizerPro.exe, Löschen bei Neustart, [a3b4f0fe2457c076dfd1f532d7299769], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProGuard.exe, Löschen bei Neustart, [fc5b608eb5c62e0819ee1127a45d39c7], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe, Löschen bei Neustart, [ff58ab4394e7102620e751e711f00ef2], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProSchedule.exe, Löschen bei Neustart, [e96ed9155b20f2449672f64271900af6], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe, Löschen bei Neustart, [98bff2fce299fd394ebb013729d828d8], 

PUP.Optional.Softango.A, C:\Users\Luca\Downloads\JavaRuntimeEnvironment7Update78BuildB54DeveloperPr_SoftangoDownloader.exe, In Quarantäne, [431442ac82f91f175b39f8333ac7c040], 

PUP.Optional.OutBrowse, C:\Users\Luca\Downloads\setup.exe, In Quarantäne, [4b0cf3fbc1ba251132370f769c657b85], 

PUP.Optional.Conduit.A, C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\searchplugins\conduit-search.xml, In Quarantäne, [74e39955552632045c760df2f11107f9], 

PUP.Optional.VOPackage, C:\Users\Dirk\Desktop\Configure VO Package.lnk, In Quarantäne, [e37441ad07741f172aecf90d1fe48f71], 

PUP.Optional.Babylon.A, c:\Windows\System32\Tasks\epupdater, Löschen bei Neustart, [db7c0ce283f844f25c2d6da4867d0af6], 

PUP.Optional.VOPackage.A, c:\users\dirk\appdata\roaming\vopackage\vosrv.exe, Löschen bei Neustart, [193e3faff18a66d0e3d88b89887bfc04], 

PUP.Optional.VOPackage.A, c:\users\dirk\appdata\roaming\vopackage\vopackage.exe, Löschen bei Neustart, [f95eb63885f6f343f983d7461fe43fc1], 

PUP.Optional.Iminent.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, In Quarantäne, [aaad8b63106bc96db356c559887bcf31], 

PUP.Optional.RegCleanerPro.A, C:\Users\Luca\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\German_rcp.dat, In Quarantäne, [1542d11daecd2313c160943f51b17888], 

PUP.Optional.RegCleanerPro.A, C:\Users\Luca\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_04-25-2014.log, In Quarantäne, [1542d11daecd2313c160943f51b17888], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\manifest.json, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\html\background.html, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\images\icon.128.png, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\images\icon.16.png, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\images\icon.48.png, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\js\background.js, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\js\ex.js, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\js\jquery.js, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc\config.dat, In Quarantäne, [e96ee00ee7941125f1764ba504feff01], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc\info.dat, In Quarantäne, [e96ee00ee7941125f1764ba504feff01], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc\TTL.DAT, In Quarantäne, [e96ee00ee7941125f1764ba504feff01], 

PUP.Optional.AdvancedSystemProtector.A, C:\Users\Luca\AppData\Roaming\Systweak\Advanced System Protector\Settings.db, In Quarantäne, [391ea14d651638fe4f08cf294fb306fa], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\background.html, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\icon.png, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\manifest.json, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\Plugins\PerionNewTabChrome-32.dll, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\background.html, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\icon.png, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\manifest.json, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\Plugins\PerionNewTabChrome-32.dll, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.MultiPlug.A, C:\ProgramData\greatsavIng\pZdiqd6I.dat, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 

PUP.Optional.MultiPlug.A, C:\ProgramData\greatsavIng\pZdiqd6I.exe, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 

PUP.Optional.MultiPlug.A, C:\ProgramData\greatsavIng\pZdiqd6I.tlb, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 

PUP.Optional.Conduit.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: ({"browser":{"last_known_google_url":"hxxp://www.google.de/","last_prompted_google_url":"hxxp://www.google.de/","window_placement":{"bottom":1030,"left":10,"maximized":false,"right":955,"top":10,"work_area_bottom":1040,"work_area_left":0,"work_area_right":1920,"work_area_top":0},"show_home_button":true},"countryid_at_install":17477,"default_apps_install_state":3,"distribution":{"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_history":false,"import_search_engine":false,"make_chrome_default":true,"show_welcome_page":true,"skip_first_run_ui":true,"system_level":true,"verbose_logging":false},"dns_prefetching":{"host_referral_list":[2,["https://get3.adobe.com/",["https://www.adobetag.com/",2.2086570657059998,"https://wwwimages2.adobe.com/",21.14270011615999]],["https://ox-d.adobe.com/",["https://ox-d.adobe.com/",2.2086570657059998,"https://ssl-i.cdn.openx.com/",2.2086570657059998]]],"startup_list":[1,"hxxp://www.google.com/"]},"download":{"directory_upgrade":true},"extensions":{"autoupdate":{"next_check":"13007033462849325"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"last_chrome_version":"25.0.1364.152","settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["appNotifications","management","webstorePrivate"]},"app_launcher_ordinal":"n","blacklist":null,"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13007033136870325","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Web Store","icons":{"16":"webstore_icon_16.png","128":"webstore_icon_128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Chrome Web Store","permissions":["appNotifications","webstorePrivate","management"],"version":"0.1"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\web_store","was_installed_by_default":false},"apdfllckaahabafndbhieahigkjlhalf":{"ack_external":true,"active_permissions":{"api":["background","clipboardRead","clipboardWrite","notifications","unlimitedStorage"]},"app_launcher_ordinal":"x","blacklist":null,"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["background","clipboardRead","clipboardWrite","notifications","unlimitedStorage"]},"install_time":"12999293450080442","location":1,"manifest":{"app":{"launch":{"web_url":"https://drive.google.com/"},"urls":["hxxp://docs.google.com/","hxxp://drive.google.com/","https://docs.google.com/","https://drive.google.com/"]},"background":{"allow_js_access":false},"background_page":null,"content_scripts":null,"current_locale":"de","default_locale":"en_US","description":"Google Drive: Alle Inhalte an einem Ort erstellen, teilen und speichern.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIl5KlKwL2TSkntkpY3naLLz5jsN0YwjhZyObcTOK6Nda4Ie21KRqZau9lx5SHcLh7pE2/S9OiArb+na2dn7YK5EvH+aRXS1ec3uxVlBhqLdnleVgwgwlg5fH95I52IeHcoeK6pR4hW/Nv39GNlI/Uqk6O6GBCCsAxYrdxww9BiQIDAQAB","manifest_version":2,"name":"Google Drive","offline_enabled":true,"options_page":"https://drive.google.com/settings","permissions":["background","clipboardRead","clipboardWrite","notifications","unlimitedStorage"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"6.2"},"page_ordinal":"n","path":"apdfllckaahabafndbhieahigkjlhalf\\6.2_0","state":1,"was_installed_by_default":true},"bakhlbmofdjaipjmkapmkljccjnbpohj":{"active_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"creation_flags":38,"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"initial_keybindings_set":true,"install_time":13032286653000000,"location":4,"path":"C:\\ProgramData\\bakhlbmofdjaipjmkapmkljccjnbpohj\\","state":1,"was_installed_by_default":false},"blpcfgokakmgnkcojhhkbfbldkacnbeo":{"ack_external":true,"active_permissions":{"api":["appNotifications"]},"app_launcher_ordinal":"w","blacklist":null,"from_bookmark":true,"from_webstore":true,"granted_permissions":{"api":["appNotifications"]},"install_time":"12999293449598442","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxp://www.youtube.com/"},"web_content":{"enabled":true,"origin":"hxxp://www.youtube.com"}},"background_page":null,"content_scripts":null,"current_locale":"de","default_locale":"en","description":"Die beliebteste Online-Video-Community der Welt","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB","name":"YouTube","permissions":["appNotifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"4.2.5"},"page_ordinal":"n","path":"blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0","state":1,"was_installed_by_default":true},"coobgpohoikkiipiblmjeljniedjpjpf":{"ack_external":true,"app_launcher_ordinal":"y","blacklist":null,"from_bookmark":true,"from_webstore":true,"install_time":"12999293450562442","location":1,"manifest":{"app":{"launch":{"web_url":"hxxp://www.google.com/webhp?source=search_app"},"urls":["*://www.google.com/search","*://www.google.com/webhp","*://www.google.com/imgres"]},"background_page":null,"content_scripts":null,"current_locale":"de","default_locale":"en","description":"Die schnellste Suche im Web.","icons":{"16":"16.png","32":"32.png","48":"48.png","128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB","name":"Google-Suche","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.0.0.19"},"page_ordinal":"n","path":"coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.19_0","state":1,"was_installed_by_default":true},"eemcgdkfndhakfknompkggombfjjjeno":{"active_permissions":{"api":["bookmarks","bookmarkManagerPrivate","systemPrivate","tabs"],"explicit_host":["chrome://favicon/*","chrome://resources/*"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13007033136870325","location":5,"manifest":{"chrome_url_overrides":{"bookmarks":"main.html"},"content_security_policy":"object-src 'none'; script-src chrome://resources 'self'","description":"Bookmark Manager","incognito":"split","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB","manifest_version":2,"name":"Bookmark Manager","permissions":["bookmarks","bookmarkManagerPrivate","systemPrivate","tabs","chrome://favicon/","chrome://resources/"],"version":"0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\bookmark_manager","was_installed_by_default":false},"ennkphjdgehloodpbhlhldgbnhmacadg":{"active_permissions":{"api":["app.currentWindowInternal","app.runtime","app.window"],"explicit_host":["chrome://settings-frame/*"]},"app_launcher_ordinal":"yn","creation_flags":1,"events":["app.runtime.onLaunched"],"from_bookmark":false,"from_webstore":false,"install_time":"13007033136870325","location":5,"manifest":{"app":{"background":{"scripts":["settings_app.js"]}},"description":"Settings","display_in_launcher":true,"display_in_new_tab_page":false,"icons":{"16":"settings_app_icon_16.png","32":"settings_app_icon_32.png","48":"settings_app_icon_48.png","128":"settings_app_icon_128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB","manifest_version":2,"name":"Settings","permissions":["chrome://settings-frame/"],"version":"0.1"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\settings_app","was_installed_by_default":false},"fghkofpnnkjalaoiicophpbfedkenopm":{"ack_external":true,"active_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"initial_keybindings_set":true,"install_time":13032286640000000,"location":1,"manifest":{"background":{"page":"background.html"},"content_scripts":[{"all_frames":true,"js":["content.js"],"matches":["hxxp://*/*","https://*/*"],"run_at":"document_end"}],"description":"","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHE5KFnOdFY8G0ErmFFUvEi3DFHp038rQ8m0pY5GslpP27LVaMJIR0AqAJqgLy0J6Ht12k62FCWe+ovU0xmF8uWJbfW0YdxfE9RHEgOko9lP1pPlAcq2xy/cuWGLXv/AerPJJX3+ny4BjWC+4wHj+EpAej4b7jp95TRrZOZArPUQIDAQAB","manifest_version":2,"name":"greatsavIng","permissions":["hxxp://*/*","https://*/*","tabs","cookies","management","notifications","contextMenus","management","storage"],"version":"8.3"},"path":"fghkofpnnkjalaoiicophpbfedkenopm\\8.3","state":1,"was_installed_by_default":false},"gencfebafahakkdhhdideplccaehjekp":{"ack_external":true,"active_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"initial_keybindings_set":true,"install_time":13036944613000000,"location":1,"manifest":{"background":{"page":"background.html"},"content_scripts":[{"all_frames":true,"js":["content.js"],"matches":["hxxp://*/*","https://*/*"],"run_at":"document_end"}],"description":"","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDF8hJfdRsH+Soy/7yfQrjVdLYxcGtBsb3MISptEXOQ6RuxHlzDY5QYGR1c8ERS4qZsjoxPSwJHm252v7+OP2TnBmxBgeNtQCut3oOovN2/mGmiWL+IyTir5H6e9zzXAQCPX8GRZor506iG5eJPuIvYnz6LlkIM4b81sbH/Ej3QVQIDAQAB","manifest_version":2,"name":"saver boox","permissions":["hxxp://*/*","https://*/*","tabs","cookies","management","notifications","contextMenus","management","storage"],"version":"5.1"},"path":"gencfebafahakkdhhdideplccaehjekp\\5.1","state":1,"was_installed_by_default":false},"jbpkiefagocgkmemidfngdkamloieekf":{"active_permissions":{"api":["contextMenus","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13007033139128351","location":3,"manifest":{"background":{"page":"html/background.html"},"content_scripts":[{"js":["js/jquery.js","js/ex.js"],"matches":["hxxp://*/*","https://*/*"],"run_at":"document_end"}],"content_security_policy":"script-src 'self' https://ssl.google-analytics.com; object-src 'self'","description":"The must-have App extensions for Television fans! Watch free TV channels, live sports and more","icons":{"16":"images/icon.16.png","48":"images/icon.48.png","128":"images/icon.128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQvKmvRheocvom8DQ9ajU6kiNZencQR7enOXzSQNaO9b2hG6g8Rsfe9c+65quN+1SZsiBKx/dn1xzoV5M+Ax+UTWpBy/oWhqtj8QBQdOVsScqjJgx4/sV39p/HrlKFo9h79JKL4IjUc7hr5pBdVQ6JUo4+A5E1dJrMq7hHwRnBcwIDAQAB","manifest_version":2,"name":"Torntv","permissions":["contextMenus","tabs","hxxp://*/*","https://*/*"],"update_url":"hxxp://cdn.thetorntv.com/Extensions/torntv/chrome/update.xml","version":"1.1"},"path":"jbpkiefagocgkmemidfngdkamloieekf\\1.1_0","state":0,"was_installed_by_default":false},"jifflliplgeajjdhmkcfnngfpgbjonjg":{"ack_external":true,"active_permissions":{"api":["plugin","tabs"]},"blacklist":null,"creation_flags":1,"exclude_from_sideload_wipeout":true,"from_bookmark":false,"from_webstore":false,"install_time":"13007033138579351","location":3,"manifest":{"background_page":"background.html","description":"New Tab for Chrome\xC3\xA2\xC2\x84\xC2\xA2/Firefox\xC3\xA2\xC2\x84\xC2\xA2 provides you with an easy to use search engine powered by Google\xC3\xA2\xC2\x84\xC2\xA2 and a simple and customizable design.","icons":{"16":"icon.png","48":"icon.png","128":"icon.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCWAT3JZOKKaA8Y4bxFKfS6B1WxoLeUE4ooe8dpqfhMIsrddR3r2AvM1H0OnPUpUMYyYwq+7MIlPA4BoslGRRopee2ovB1HuFEKVVmOhUD9bk6oJ27w0twMKQd39xDDdBsNnoteCgRJ7O2qmhdayP3sT2gcXjxiMSE+Rb0nq4a0AwIDAQAB","name":"New tab for Chrome\xC3\xA2\xC2\x84\xC2\xA2","permissions":["tabs"],"plugins":[{"path":"Plugins/PerionNewTabChrome-32.dll","public":true}],"version":"1.0.0"},"path":"jifflliplgeajjdhmkcfnngfpgbjonjg\\1.0.0_1","state":1,"was_installed_by_default":false},"mfehgcgbbipciphmccgaenjidiccnmng":{"active_permissions":{"api":["cloudPrintPrivate"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13007033136870325","location":5,"manifest":{"app":{"launch":{"web_url":"https://www.google.com/cloudprint"},"urls":["https://www.google.com/cloudprint","https://www.google.com/cloudprint/enable_chrome_connector"]},"description":"Cloud Print","display_in_launcher":false,"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB","name":"Cloud Print","permissions":["cloudPrintPrivate"],"version":"0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\cloud_print","was_installed_by_default":false},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_permissions":{"api":["notifications"]},"app_launcher_ordinal":"t","blacklist":null,"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["notifications"]},"install_time":"12999293449104442","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"https://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"background_page":null,"content_scripts":null,"current_locale":"de","default_locale":"en","description":"Schneller E-Mail-Dienst mit Suchfunktion und wenig Spam.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","name":"Google Mail","options_page":"https://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"7"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\7_0","state":1,"was_installed_by_default":true}}},"homepage":"http:\/\/search.conduit.com\/?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=55&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&SSPV=","homepage_is_newtabpage":false,"net":{"http_server_properties":{"servers":{"www.google.com:443":{"settings":{"4":100},"supports_spdy":true}},"version":1}},"ntp":{"promo_resource_cache_update":"1354819849.875442"},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"migrated_to_pepper_flash":true},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"name":"Erster Nutzer"},"promo":{"ntp_notification_promo":[{"closed":false,"end":1353279540.0,"gplus_required":false,"group":666729,"increment":1,"increment_frequency":0,"increment_max":9000,"max_views":15,"num_groups":1000000,"segment":9000,"start":1352674800.0,"text":"Was halten Sie von Chrome? <a href=\"https://survey.googleratings.com/wix/p5963862.aspx?l=7\">Nehmen Sie an der Umfrage teil.</a>","views":0}]},"session":{"restore_on_startup":4,"restore_on_startup_migrated":true,"urls_to_restore_on_startup":["http:\/\/search.conduit.com\/?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=55&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&SSPV="]},"default_search_provider":{"name":"Conduit Search","keyword":"conduit.search","search_url":"http:\/\/search.conduit.com\/Results.aspx?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=58&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&q={searchTerms}&SSPV=","suggest_url":"http:\/\/suggest.search.conduit.com\/CSuggestJson.ashx?prefix={searchTerms}"}}), Ersetzt,[d87fb13dfa81013525fe270dc93cc43c]
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

=======================================

AdwCleaner[R0]
AdwCleaner Logfile:

Code:

# AdwCleaner v3.310 - Bericht erstellt am 16/09/2014 um 21:41:23

# Aktualisiert 12/09/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Dirk - LUCA-PC

# Gestartet von : C:\Users\Luca\Desktop\Wartung\AdwCleaner_3.310.exe

# Option : Suchen
 

***** [ Dienste ] *****
 

Dienst Gefunden : 70e6ca8c

Dienst Gefunden : BackupStack

Dienst Gefunden : MgAssistService
 

***** [ Dateien / Ordner ] *****
 

Datei Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage

Datei Gefunden : C:\Users\Dirk\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mobogenie.lnk

Datei Gefunden : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

Datei Gefunden : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\torntv@torntv.com.xpi

Datei Gefunden : C:\Users\Dirk\Desktop\Mobogenie.lnk

Datei Gefunden : C:\Users\Dirk\Desktop\MyPC Backup.lnk

Datei Gefunden : C:\Users\Dirk\Desktop\Sync Folder.lnk

Datei Gefunden : C:\Users\Luca\daemonprocess.txt

Datei Gefunden : C:\Windows\System32\dmwu.exe

Datei Gefunden : C:\Windows\System32\ImhxxpComm.dll

Datei Gefunden : C:\Windows\System32\roboot64.exe

Ordner Gefunden : \Device

Ordner Gefunden : C:\Program Files (x86)\FromDocToPDF_65EI

Ordner Gefunden : C:\Program Files (x86)\goforfiles

Ordner Gefunden : C:\Program Files (x86)\MetaCrawler

Ordner Gefunden : C:\Program Files (x86)\Mobogenie

Ordner Gefunden : C:\Program Files (x86)\MyPC Backup

Ordner Gefunden : C:\Program Files (x86)\Optimizer Pro

Ordner Gefunden : C:\ProgramData\Device

Ordner Gefunden : C:\ProgramData\FlexiiblEShopper

Ordner Gefunden : C:\ProgramData\greatsavIng

Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2

Ordner Gefunden : C:\ProgramData\saver boox

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\abepbblpkilpjohncjbccmdjhdhbnhdj

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\boipimhfjpakfgckhbljjengakjhkcbp

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpepfkjapeclaafmhoelccknpfedainn

Ordner Gefunden : C:\Users\Dirk\AppData\LocalLow\FromDocToPDF_65EI

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\MetaCrawler

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\rjrfyuyc@euay-ee.edu

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\uaanquy@lxervk.co.uk

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\wet0uuy@hkvzhjaw.org

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Systweak

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\VOPackage

Ordner Gefunden : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\fghkofpnnkjalaoiicophpbfedkenopm

Ordner Gefunden : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gencfebafahakkdhhdideplccaehjekp

Ordner Gefunden : C:\Users\Luca\AppData\Roaming\DigitalSites

Ordner Gefunden : C:\Users\Luca\AppData\Roaming\DSite

Ordner Gefunden : C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hotspot shield

Ordner Gefunden : C:\Users\Luca\AppData\Roaming\Systweak

Ordner Gefunden : C:\Windows\System32\ARFC
 

***** [ Tasks ] *****
 

Task Gefunden : DSite

Task Gefunden : EPUpdater

Task Gefunden : Funmoods

Task Gefunden : GoforFilesUpdate

Task Gefunden : MetaCrawler
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Daten Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL

Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gefunden : HKCU\Software\GoforFiles

Schlüssel Gefunden : HKCU\Software\InstallCore

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\GoforFiles

Schlüssel Gefunden : HKCU\Software\OCS

Schlüssel Gefunden : HKCU\Software\SearchProtectINT

Schlüssel Gefunden : HKCU\Software\systweak

Schlüssel Gefunden : [x64] HKCU\Software\GoforFiles

Schlüssel Gefunden : [x64] HKCU\Software\InstallCore

Schlüssel Gefunden : [x64] HKCU\Software\OCS

Schlüssel Gefunden : [x64] HKCU\Software\SearchProtectINT

Schlüssel Gefunden : [x64] HKCU\Software\systweak

Schlüssel Gefunden : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gefunden : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Schlüssel Gefunden : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\d

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gefunden : HKLM\SOFTWARE\GoforFiles

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\abepbblpkilpjohncjbccmdjhdhbnhdj

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg

Schlüssel Gefunden : HKLM\SOFTWARE\InstallCore

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasapi32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasmancs

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A30F3754-C0DC-8242-F3A9-52B360AE9798}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage

Schlüssel Gefunden : HKLM\SOFTWARE\systweak

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\DomaIQ

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0702826FCAC36EE52AC0441EEEEE2170

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1198E28F40C3E185E9958608554D4253

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14C66209FCA938858B9729645C666684

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15A073601B9AEC3549BE4A9314794615

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206AF45B775E3A445B3B2273827DA85F

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\225C3CBCEB850204D860A6C7CC7724AF

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2310FC151CD4F185798FA0996B3524D7

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28572D2E2DE533256AC6B560EA573C22

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29C79786B109AC443B0DC7BFD61B1896

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ABB56EABB920EB59B04BDDD26A62083

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DABA02DFED47E352A2FA2EBDD6F6187

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\311567B4A9A002050BB9423FD73FB880

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\373FCED70D7F84E5FB5F3F7B76BEE024

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BE992C130B235E53A2937391FDCA35B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DA5F64B3483DE549947A9164ACBAD21

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED93605BB9B6635E9D0D86615AF31F1

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4759B017032BA185F9BA6F7DBC95A2D4

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A78ABCBB54E46E5482A3EE0AD66C39E

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F9E947B6B895EB5A86757FC5D3DB862

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEEA83BF72B97E43A2DF0EE4BE4F261

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\509EC7EFB89B7D942997574AB14037A4

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50A730A9A3A61BF5BA70CA8A3B7C133B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51A95A1D4CDE4F958A9451FBB39BF54A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\536133807DE80465BA6CD0A9742B7DE5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E25036E68895D45B95E72D1C3C58C74

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60ECC80C54085B141A40437A96CA2618

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60FD8CD5BE007315CA3B5C7E41F24017

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\618E7D05458C4F257909ED9C8CDC0D66

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\621C21014D3C152529E2460FA6304EE3

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6241FF6F317CABD4EBBEE0DE9076BD94

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\636B9C23C79154B57AB561F39A139BFD

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65AAF0F0CB7F0B45F900FDF19CEAAF2B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6879A5E348601C45986308CA84958E94

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A6F3B7A9805E1F5492A1020EEDF2341

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B1F5D204E4EEB342A5AD1D7E60D61BF

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7005A2A4DCF9DD7548137AB17E3A3AF3

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712EAF07EE73CC65C822CC3BAE3B2483

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75FF6D97AF9FC004A9521D4B83FA6321

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7947B301B2446E752A3FE06EAD7D26B5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7987CE52D13E16258B0E1E3DB1BB0974

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7BEED197C514FDA53901AE8DD8EF0891

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DFDCF03D46C34159BDE29FBDBF1ACF5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\87EC9ACEAFE8ECD52A529663CD35213F

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\890F436B85B790A55A582B7307DA12CE

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C13DA6755F685B529615C8E92B3CA39

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D07CD9CB3E6BE652872BF06A1CCA782

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90841B1FC98200349925C88999866F17

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\94194FDD4DF523E53A888D65722A135D

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95266D07D008D2E4E9B6F8E0DD15432A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4223BBC9438CAD49BBE10B4E344B1DD

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A72F23B1D745C27508518132197BC982

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A89E2B6FB14D8275DA63D075171DA184

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9C43CD4001E9E4518B274AF9A0EFDA9

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABA081CF7F19915FBB80B3BAF47CE63

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC2A0FFD0A1686D53A4E24D6E96949E4

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE5BDB2750259915D8442D4591A7717B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1A79C71D5DC1C150B76B6ED11195DFC

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6D497DB33974935488761F7C4C3D755

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B752EF3300008394886C402CC27B474F

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8C8BCC1206978D51A8B9EECBF806C53

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAD3576CEA646895B962F94754612791

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB4091512C8F4295E99CE2D061ED2020

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE6BBC9A31531F598794A62120B51C7

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C19162788CA4D235E829F88E2F771567

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C71F07DA356B66B5484A8E7F2ADEB7DC

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C96AD15EE8E887B56BAF2136A9088503

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9E6B66ECC49D155888399C51D05C49E

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA360F24F0B214744BE40657FDA0B727

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D869D7D092348847B7481BB59E27

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE85F265816AE2D4E9B73C3E207E679C

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5389AEEA4A1E20428D045E86BCF643B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5B62BB7BC607FB539585E2B7B6AFD16

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB027F01D4D53765C8E4FBE7DB77E07E

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC2EB492393411F5ABE8ED13C59FBF20

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDA2534BD056D1F44B6EC96AAA7F1F6E

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDCA763D4C48A105086B4CCCEE78043F

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEF7558C7CD27EF46AF802AFBE402675

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E05B987540A9E2849AAF9E5B06C27DA8

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E09F4A6B9D2A08B599AE9E38BFC93CD6

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E27B6535D0D94A24E91047C7D86F27BC

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E45D171E075A5425CBACF6631A45FA39

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E513C2076D90AD04F888BD762143F191

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8F4C985459564F5B8DCFF2B3C7EBD27

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E96E33222BAC06B57A1FA9D72951C945

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAA46CE9007F70A5CAFA5F26E5DDEBE5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE43FF091A8714A599F33EF2533FB59A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE790015CF30DAA569960905FF1651A0

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEB44C47185BD304D80FDF5A4BBE8F54

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F214EB834D2EC474CA76C1CDE306CF3A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F25491036D0FA5D5FA6742F5742F151A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2E0D3DD9E5E4B74CA43BCE77815E287

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4D1BA8B482D9734E943EE260A7ADEF2

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6704141BAAF6884785EC6843143D6A7

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7507D4D4C310125E9A22BD909A41FB6

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F79C21D785419125595AC59458A6142D

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA15C90F092A60F53A4E0F88CED02968

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA1CF130B3D58B553833ACB6BE8AFAD4

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB0F1A18E4F0DBD509A42F4D4C05C02A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD17ED194F1C2B457B4F6EF4AE8DEAF3

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

Wert Gefunden : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

Wert Gefunden : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17280
 

Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://i.search.metacrawler.com/?f=2&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=
 

-\\ Mozilla Firefox v32.0.1 (x86 de)
 

[ Datei : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\prefs.js ]
 

Zeile gefunden : user_pref("extensions.0as.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1[...]

Zeile gefunden : user_pref("extensions.ceXcHoU_.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\[...]

Zeile gefunden : user_pref("extensions.iQvsoGNPtOm.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp000008[...]

Zeile gefunden : user_pref("extensions.oJGOfjTPSG.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp0000080[...]
 

[ Datei : C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\prefs.js ]
 

Zeile gefunden : user_pref("browser.search.defaultenginename", "Conduit Search");

Zeile gefunden : user_pref("browser.search.selectedEngine", "Conduit Search");

Zeile gefunden : user_pref("extensions.0as.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf([...]

Zeile gefunden : user_pref("extensions.ceXcHoU_.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.ind[...]

Zeile gefunden : user_pref("extensions.iQvsoGNPtOm.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.[...]

Zeile gefunden : user_pref("extensions.oJGOfjTPSG.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.i[...]
 

-\\ Google Chrome v31.0.1650.63
 

[ Datei : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [28684 octets] - [16/09/2014 21:41:23]
 

########## EOF - \AdwCleaner\AdwCleaner[R0].txt - [28745 octets] ##########

--- --- ---

=======================================

AdwCleanerAdwCleaner Logfile:

Code:

# AdwCleaner v3.310 - Bericht erstellt am 16/09/2014 um 21:50:35

# Aktualisiert 12/09/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Dirk - LUCA-PC

# Gestartet von : C:\Users\Luca\Desktop\Wartung\AdwCleaner_3.310.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : 70e6ca8c

Dienst Gelöscht : BackupStack

Dienst Gelöscht : MgAssistService
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : \Device

Ordner Gelöscht : C:\ProgramData\Device

Ordner Gelöscht : C:\ProgramData\FlexiiblEShopper

Ordner Gelöscht : C:\ProgramData\greatsavIng

Ordner Gelöscht : C:\ProgramData\saver boox

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2

Ordner Gelöscht : C:\Program Files (x86)\FromDocToPDF_65EI

Ordner Gelöscht : C:\Program Files (x86)\goforfiles

Ordner Gelöscht : C:\Program Files (x86)\MetaCrawler

Ordner Gelöscht : C:\Program Files (x86)\Mobogenie

Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup

Ordner Gelöscht : C:\Program Files (x86)\Optimizer Pro

Ordner Gelöscht : C:\Windows\System32\ARFC

Ordner Gelöscht : C:\Users\Dirk\AppData\LocalLow\FromDocToPDF_65EI

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\MetaCrawler

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\VOPackage

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup

Ordner Gelöscht : C:\Users\Luca\AppData\Roaming\DigitalSites

Ordner Gelöscht : C:\Users\Luca\AppData\Roaming\DSite

Ordner Gelöscht : C:\Users\Luca\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hotspot shield

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\rjrfyuyc@euay-ee.edu

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\uaanquy@lxervk.co.uk

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\wet0uuy@hkvzhjaw.org

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\abepbblpkilpjohncjbccmdjhdhbnhdj

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\boipimhfjpakfgckhbljjengakjhkcbp

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpepfkjapeclaafmhoelccknpfedainn

Ordner Gelöscht : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\fghkofpnnkjalaoiicophpbfedkenopm

Ordner Gelöscht : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gencfebafahakkdhhdideplccaehjekp

Datei Gelöscht : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\torntv@torntv.com.xpi

Datei Gelöscht : C:\Windows\System32\dmwu.exe

Datei Gelöscht : C:\Windows\System32\ImhxxpComm.dll

Datei Gelöscht : C:\Windows\System32\roboot64.exe

Datei Gelöscht : C:\Users\Dirk\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mobogenie.lnk

Datei Gelöscht : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

Datei Gelöscht : C:\Users\Dirk\Desktop\Mobogenie.lnk

Datei Gelöscht : C:\Users\Dirk\Desktop\MyPC Backup.lnk

Datei Gelöscht : C:\Users\Dirk\Desktop\Sync Folder.lnk

Datei Gelöscht : C:\Users\Luca\daemonprocess.txt

Datei Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
 

***** [ Tasks ] *****
 

Task Gelöscht : DSite

Task Gelöscht : EPUpdater

Task Gelöscht : Funmoods

Task Gelöscht : GoforFilesUpdate

Task Gelöscht : MetaCrawler
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\abepbblpkilpjohncjbccmdjhdhbnhdj

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\d

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKCU\Software\GoforFiles

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\SearchProtectINT

Schlüssel Gelöscht : HKCU\Software\systweak

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gelöscht : HKLM\SOFTWARE\GoforFiles

Schlüssel Gelöscht : HKLM\SOFTWARE\InstallCore

Schlüssel Gelöscht : HKLM\SOFTWARE\systweak

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\GoforFiles

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A30F3754-C0DC-8242-F3A9-52B360AE9798}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DomaIQ

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0702826FCAC36EE52AC0441EEEEE2170

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1198E28F40C3E185E9958608554D4253

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14C66209FCA938858B9729645C666684

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15A073601B9AEC3549BE4A9314794615

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206AF45B775E3A445B3B2273827DA85F

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\225C3CBCEB850204D860A6C7CC7724AF

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2310FC151CD4F185798FA0996B3524D7

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28572D2E2DE533256AC6B560EA573C22

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29C79786B109AC443B0DC7BFD61B1896

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ABB56EABB920EB59B04BDDD26A62083

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DABA02DFED47E352A2FA2EBDD6F6187

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\311567B4A9A002050BB9423FD73FB880

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\373FCED70D7F84E5FB5F3F7B76BEE024

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BE992C130B235E53A2937391FDCA35B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DA5F64B3483DE549947A9164ACBAD21

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED93605BB9B6635E9D0D86615AF31F1

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4759B017032BA185F9BA6F7DBC95A2D4

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A78ABCBB54E46E5482A3EE0AD66C39E

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F9E947B6B895EB5A86757FC5D3DB862

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEEA83BF72B97E43A2DF0EE4BE4F261

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\509EC7EFB89B7D942997574AB14037A4

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50A730A9A3A61BF5BA70CA8A3B7C133B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51A95A1D4CDE4F958A9451FBB39BF54A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\536133807DE80465BA6CD0A9742B7DE5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E25036E68895D45B95E72D1C3C58C74

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60ECC80C54085B141A40437A96CA2618

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60FD8CD5BE007315CA3B5C7E41F24017

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\618E7D05458C4F257909ED9C8CDC0D66

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\621C21014D3C152529E2460FA6304EE3

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6241FF6F317CABD4EBBEE0DE9076BD94

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\636B9C23C79154B57AB561F39A139BFD

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65AAF0F0CB7F0B45F900FDF19CEAAF2B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6879A5E348601C45986308CA84958E94

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A6F3B7A9805E1F5492A1020EEDF2341

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B1F5D204E4EEB342A5AD1D7E60D61BF

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7005A2A4DCF9DD7548137AB17E3A3AF3

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712EAF07EE73CC65C822CC3BAE3B2483

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75FF6D97AF9FC004A9521D4B83FA6321

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7947B301B2446E752A3FE06EAD7D26B5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7987CE52D13E16258B0E1E3DB1BB0974

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7BEED197C514FDA53901AE8DD8EF0891

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DFDCF03D46C34159BDE29FBDBF1ACF5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\87EC9ACEAFE8ECD52A529663CD35213F

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\890F436B85B790A55A582B7307DA12CE

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C13DA6755F685B529615C8E92B3CA39

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D07CD9CB3E6BE652872BF06A1CCA782

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90841B1FC98200349925C88999866F17

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\94194FDD4DF523E53A888D65722A135D

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95266D07D008D2E4E9B6F8E0DD15432A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4223BBC9438CAD49BBE10B4E344B1DD

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A72F23B1D745C27508518132197BC982

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A89E2B6FB14D8275DA63D075171DA184

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9C43CD4001E9E4518B274AF9A0EFDA9

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABA081CF7F19915FBB80B3BAF47CE63

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC2A0FFD0A1686D53A4E24D6E96949E4

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE5BDB2750259915D8442D4591A7717B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1A79C71D5DC1C150B76B6ED11195DFC

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6D497DB33974935488761F7C4C3D755

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B752EF3300008394886C402CC27B474F

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8C8BCC1206978D51A8B9EECBF806C53

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAD3576CEA646895B962F94754612791

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB4091512C8F4295E99CE2D061ED2020

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE6BBC9A31531F598794A62120B51C7

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C19162788CA4D235E829F88E2F771567

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C71F07DA356B66B5484A8E7F2ADEB7DC

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C96AD15EE8E887B56BAF2136A9088503

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9E6B66ECC49D155888399C51D05C49E

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA360F24F0B214744BE40657FDA0B727

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D869D7D092348847B7481BB59E27

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE85F265816AE2D4E9B73C3E207E679C

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5389AEEA4A1E20428D045E86BCF643B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5B62BB7BC607FB539585E2B7B6AFD16

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB027F01D4D53765C8E4FBE7DB77E07E

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC2EB492393411F5ABE8ED13C59FBF20

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDA2534BD056D1F44B6EC96AAA7F1F6E

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDCA763D4C48A105086B4CCCEE78043F

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEF7558C7CD27EF46AF802AFBE402675

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E05B987540A9E2849AAF9E5B06C27DA8

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E09F4A6B9D2A08B599AE9E38BFC93CD6

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E27B6535D0D94A24E91047C7D86F27BC

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E45D171E075A5425CBACF6631A45FA39

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E513C2076D90AD04F888BD762143F191

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8F4C985459564F5B8DCFF2B3C7EBD27

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E96E33222BAC06B57A1FA9D72951C945

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAA46CE9007F70A5CAFA5F26E5DDEBE5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE43FF091A8714A599F33EF2533FB59A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE790015CF30DAA569960905FF1651A0

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEB44C47185BD304D80FDF5A4BBE8F54

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F214EB834D2EC474CA76C1CDE306CF3A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F25491036D0FA5D5FA6742F5742F151A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2E0D3DD9E5E4B74CA43BCE77815E287

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4D1BA8B482D9734E943EE260A7ADEF2

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6704141BAAF6884785EC6843143D6A7

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7507D4D4C310125E9A22BD909A41FB6

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F79C21D785419125595AC59458A6142D

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA15C90F092A60F53A4E0F88CED02968

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA1CF130B3D58B553833ACB6BE8AFAD4

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB0F1A18E4F0DBD509A42F4D4C05C02A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD17ED194F1C2B457B4F6EF4AE8DEAF3

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17280
 

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
 

-\\ Mozilla Firefox v32.0.1 (x86 de)
 

[ Datei : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.0as.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1[...]

Zeile gelöscht : user_pref("extensions.ceXcHoU_.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\[...]

Zeile gelöscht : user_pref("extensions.iQvsoGNPtOm.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp000008[...]

Zeile gelöscht : user_pref("extensions.oJGOfjTPSG.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp0000080[...]
 

[ Datei : C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Conduit Search");

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Conduit Search");

Zeile gelöscht : user_pref("extensions.0as.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf([...]

Zeile gelöscht : user_pref("extensions.ceXcHoU_.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.ind[...]

Zeile gelöscht : user_pref("extensions.iQvsoGNPtOm.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.[...]

Zeile gelöscht : user_pref("extensions.oJGOfjTPSG.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.i[...]
 

-\\ Google Chrome v31.0.1650.63
 

[ Datei : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Search Provider] : hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=58&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&q={searchTerms}&SSPV=
 

*************************
 

AdwCleaner[R0].txt - [29308 octets] - [16/09/2014 21:41:23]

AdwCleaner[S0].txt - [28274 octets] - [16/09/2014 21:50:35]
 

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [28335 octets] ##########

--- --- ---
==================================

Junkware Removal Tool:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.5 (09.16.2014:1)

OS: Windows 7 Home Premium x64

Ran by Dirk on 16.09.2014 at 21:57:22,65

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3000299772-3109549842-2761917205-1000\Software\sweetim

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3000299772-3109549842-2761917205-1000\Software\wajam

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E1A167A4-9625-471C-AC41-EA8F4FB4CADB}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\apn"
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Dirk\AppData\Roaming\mozilla\firefox\profiles\v9vnichj.default\prefs.js
 

user_pref("extensions.bootstrappedAddons", "{\"torntv@torntv.com\":{\"version\":\"1.1\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Dirk\\\\AppData\\\\Roaming\\\\Mo

Emptied folder: C:\Users\Dirk\AppData\Roaming\mozilla\firefox\profiles\v9vnichj.default\minidumps [1 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 16.09.2014 at 22:02:31,13

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

================================================

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 16.09.2014

Suchlauf-Zeit: 21:12:12

Logdatei: mbam.txt

Administrator: Nein
 

Version: 2.00.2.1012

Malware Datenbank: v2014.09.16.07

Rootkit Datenbank: v2014.09.15.01

Lizenz: Kostenlos

Malware Schutz: Deaktiviert

Bösartiger Webseiten Schutz: Deaktiviert

Self-protection: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: Luca
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 257282

Verstrichene Zeit: 9 Min, 6 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristics: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(No malicious items detected)
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 11

PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, Löschen bei Neustart, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, Löschen bei Neustart, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, Löschen bei Neustart, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.VOPackage.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VOsrv, In Quarantäne, [193e3faff18a66d0e3d88b89887bfc04], 

PUP.Optional.DomaIQ.A, HKLM\SOFTWARE\DomaIQ, Löschen bei Neustart, [ea6dd01e2f4cf73f6bd0af88aa59c937], 

PUP.Optional.Singalong.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\abepbblpkilpjohncjbccmdjhdhbnhdj, Löschen bei Neustart, [a8afa6481e5d2610ffacd050cf34d030], 

PUP.Optional.VOPackage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VOPACKAGE, Löschen bei Neustart, [89cecf1fc6b56dc9a9892ddfb54ea55b], 

PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, In Quarantäne, [6ee9ae40e3985bdb02f8ca443ec5748c], 

PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 
 

Registrierungswerte: 4

PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, In Quarantäne, [0a4d48a6adcebb7b5520275ec63ce61a], 

PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\Web Assistant\Firefox, Löschen bei Neustart, [0a4d48a6adcebb7b5520275ec63ce61a]

PUP.Optional.Incredibar, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\Web Assistant\Firefox, Löschen bei Neustart, [3027925c52293600c943094d1de7f709]

PUP.Optional.VOPackage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VOPACKAGE|UninstallString, "C:\Users\Dirk\AppData\Roaming\VOPackage\uninstall.exe", Löschen bei Neustart, [89cecf1fc6b56dc9a9892ddfb54ea55b]
 

Registrierungsdaten: 0

(No malicious items detected)
 

Ordner: 25

PUP.Optional.RegCleanerPro.A, C:\Users\Luca\AppData\Roaming\Systweak\RegClean Pro, In Quarantäne, [1542d11daecd2313c160943f51b17888], 

PUP.Optional.RegCleanerPro.A, C:\Users\Luca\AppData\Roaming\Systweak\RegClean Pro\Version 6.1, In Quarantäne, [1542d11daecd2313c160943f51b17888], 

PUP.Optional.Conduit, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\igdhbblpcellaljokkpfhcjlagemhgjl, Löschen bei Neustart, [50071ad47efd9c9af7699f35976bf907], 

PUP.Optional.CrossRider.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\jbpkiefagocgkmemidfngdkamloieekf, Löschen bei Neustart, [afa800eeaecd45f191d9e5f27c86ff01], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\html, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\images, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\js, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.Singalong.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\abepbblpkilpjohncjbccmdjhdhbnhdj, Löschen bei Neustart, [06519a540d6e6cca51b65c831de50ff1], 

PUP.Optional.FunMoods.A, c:\users\dirk\appdata\local\google\chrome\user data\default\local extension settings\cjpglkicenollcignonpgiafdgfeehoj, Löschen bei Neustart, [2f28628c9be0c175f0dc4b976999db25], 

PUP.Optional.MixiDJ.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\kpepfkjapeclaafmhoelccknpfedainn, Löschen bei Neustart, [193e7f6fc3b81d19d4b4bd2dc240916f], 

PUP.Optional.SystemSpeedup, c:\users\dirk\appdata\roaming\systweak\ssd, Löschen bei Neustart, [9abd38b69be016203639f1fa2cd6c33d], 

PUP.Optional.MixiDJ.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\boipimhfjpakfgckhbljjengakjhkcbp, Löschen bei Neustart, [17409a543843261024f4b43aa55d40c0], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DigitalSites\UpdateProc, In Quarantäne, [e671fcf2d6a541f5bda847a962a0af51], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc, In Quarantäne, [e96ee00ee7941125f1764ba504feff01], 

PUP.Optional.AdvancedSystemProtector.A, C:\Users\Luca\AppData\Roaming\Systweak\Advanced System Protector, In Quarantäne, [391ea14d651638fe4f08cf294fb306fa], 

PUP.Optional.AdvancedSystemProtector.A, C:\Users\Luca\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.12554, In Quarantäne, [391ea14d651638fe4f08cf294fb306fa], 

PUP.Optional.Perion.A, c:\users\dirk\appdata\local\google\chrome\user data\default\extensions\jifflliplgeajjdhmkcfnngfpgbjonjg, Löschen bei Neustart, [4f0802eca6d5e056cdd3a458ed15e818], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\Plugins, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\Plugins, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.MultiPlug.A, C:\ProgramData\greatsavIng, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 
 

Dateien: 41

PUP.Optional.Outbrowse, c:\users\dirk\appdata\local\temp\instract.exe, Löschen bei Neustart, [c592e00e0b70ba7cbdff655d13efc23e], 

PUP.Optional.DigitalSites.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe, In Quarantäne, [5cfb46a89edda195ba0aed549968639d], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptimizerPro.exe, Löschen bei Neustart, [a3b4f0fe2457c076dfd1f532d7299769], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProGuard.exe, Löschen bei Neustart, [fc5b608eb5c62e0819ee1127a45d39c7], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe, Löschen bei Neustart, [ff58ab4394e7102620e751e711f00ef2], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProSchedule.exe, Löschen bei Neustart, [e96ed9155b20f2449672f64271900af6], 

PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe, Löschen bei Neustart, [98bff2fce299fd394ebb013729d828d8], 

PUP.Optional.Softango.A, C:\Users\Luca\Downloads\JavaRuntimeEnvironment7Update78BuildB54DeveloperPr_SoftangoDownloader.exe, In Quarantäne, [431442ac82f91f175b39f8333ac7c040], 

PUP.Optional.OutBrowse, C:\Users\Luca\Downloads\setup.exe, In Quarantäne, [4b0cf3fbc1ba251132370f769c657b85], 

PUP.Optional.Conduit.A, C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\searchplugins\conduit-search.xml, In Quarantäne, [74e39955552632045c760df2f11107f9], 

PUP.Optional.VOPackage, C:\Users\Dirk\Desktop\Configure VO Package.lnk, In Quarantäne, [e37441ad07741f172aecf90d1fe48f71], 

PUP.Optional.Babylon.A, c:\Windows\System32\Tasks\epupdater, Löschen bei Neustart, [db7c0ce283f844f25c2d6da4867d0af6], 

PUP.Optional.VOPackage.A, c:\users\dirk\appdata\roaming\vopackage\vosrv.exe, Löschen bei Neustart, [193e3faff18a66d0e3d88b89887bfc04], 

PUP.Optional.VOPackage.A, c:\users\dirk\appdata\roaming\vopackage\vopackage.exe, Löschen bei Neustart, [f95eb63885f6f343f983d7461fe43fc1], 

PUP.Optional.Iminent.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, In Quarantäne, [aaad8b63106bc96db356c559887bcf31], 

PUP.Optional.RegCleanerPro.A, C:\Users\Luca\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\German_rcp.dat, In Quarantäne, [1542d11daecd2313c160943f51b17888], 

PUP.Optional.RegCleanerPro.A, C:\Users\Luca\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_04-25-2014.log, In Quarantäne, [1542d11daecd2313c160943f51b17888], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\manifest.json, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\html\background.html, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\images\icon.128.png, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\images\icon.16.png, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\images\icon.48.png, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\js\background.js, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\js\ex.js, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.CrossRider.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0\js\jquery.js, In Quarantäne, [4d0a608ed1aa00361c4e9b3c45bda060], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc\config.dat, In Quarantäne, [e96ee00ee7941125f1764ba504feff01], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc\info.dat, In Quarantäne, [e96ee00ee7941125f1764ba504feff01], 

PUP.Optional.Updater.A, C:\Users\Luca\AppData\Roaming\DSite\UpdateProc\TTL.DAT, In Quarantäne, [e96ee00ee7941125f1764ba504feff01], 

PUP.Optional.AdvancedSystemProtector.A, C:\Users\Luca\AppData\Roaming\Systweak\Advanced System Protector\Settings.db, In Quarantäne, [391ea14d651638fe4f08cf294fb306fa], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\background.html, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\icon.png, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\manifest.json, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\Plugins\PerionNewTabChrome-32.dll, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\background.html, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\icon.png, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\manifest.json, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.Perion.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\Plugins\PerionNewTabChrome-32.dll, In Quarantäne, [4f08a6488bf023139b0526d64eb4e41c], 

PUP.Optional.MultiPlug.A, C:\ProgramData\greatsavIng\pZdiqd6I.dat, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 

PUP.Optional.MultiPlug.A, C:\ProgramData\greatsavIng\pZdiqd6I.exe, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 

PUP.Optional.MultiPlug.A, C:\ProgramData\greatsavIng\pZdiqd6I.tlb, Löschen bei Neustart, [263113db255665d1d5d1807dea18966a], 

PUP.Optional.Conduit.A, C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: ({"browser":{"last_known_google_url":"hxxp://www.google.de/","last_prompted_google_url":"hxxp://www.google.de/","window_placement":{"bottom":1030,"left":10,"maximized":false,"right":955,"top":10,"work_area_bottom":1040,"work_area_left":0,"work_area_right":1920,"work_area_top":0},"show_home_button":true},"countryid_at_install":17477,"default_apps_install_state":3,"distribution":{"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_history":false,"import_search_engine":false,"make_chrome_default":true,"show_welcome_page":true,"skip_first_run_ui":true,"system_level":true,"verbose_logging":false},"dns_prefetching":{"host_referral_list":[2,["https://get3.adobe.com/",["https://www.adobetag.com/",2.2086570657059998,"https://wwwimages2.adobe.com/",21.14270011615999]],["https://ox-d.adobe.com/",["https://ox-d.adobe.com/",2.2086570657059998,"https://ssl-i.cdn.openx.com/",2.2086570657059998]]],"startup_list":[1,"hxxp://www.google.com/"]},"download":{"directory_upgrade":true},"extensions":{"autoupdate":{"next_check":"13007033462849325"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"last_chrome_version":"25.0.1364.152","settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["appNotifications","management","webstorePrivate"]},"app_launcher_ordinal":"n","blacklist":null,"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13007033136870325","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Web Store","icons":{"16":"webstore_icon_16.png","128":"webstore_icon_128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Chrome Web Store","permissions":["appNotifications","webstorePrivate","management"],"version":"0.1"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\web_store","was_installed_by_default":false},"apdfllckaahabafndbhieahigkjlhalf":{"ack_external":true,"active_permissions":{"api":["background","clipboardRead","clipboardWrite","notifications","unlimitedStorage"]},"app_launcher_ordinal":"x","blacklist":null,"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["background","clipboardRead","clipboardWrite","notifications","unlimitedStorage"]},"install_time":"12999293450080442","location":1,"manifest":{"app":{"launch":{"web_url":"https://drive.google.com/"},"urls":["hxxp://docs.google.com/","hxxp://drive.google.com/","https://docs.google.com/","https://drive.google.com/"]},"background":{"allow_js_access":false},"background_page":null,"content_scripts":null,"current_locale":"de","default_locale":"en_US","description":"Google Drive: Alle Inhalte an einem Ort erstellen, teilen und speichern.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIl5KlKwL2TSkntkpY3naLLz5jsN0YwjhZyObcTOK6Nda4Ie21KRqZau9lx5SHcLh7pE2/S9OiArb+na2dn7YK5EvH+aRXS1ec3uxVlBhqLdnleVgwgwlg5fH95I52IeHcoeK6pR4hW/Nv39GNlI/Uqk6O6GBCCsAxYrdxww9BiQIDAQAB","manifest_version":2,"name":"Google Drive","offline_enabled":true,"options_page":"https://drive.google.com/settings","permissions":["background","clipboardRead","clipboardWrite","notifications","unlimitedStorage"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"6.2"},"page_ordinal":"n","path":"apdfllckaahabafndbhieahigkjlhalf\\6.2_0","state":1,"was_installed_by_default":true},"bakhlbmofdjaipjmkapmkljccjnbpohj":{"active_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"creation_flags":38,"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"initial_keybindings_set":true,"install_time":13032286653000000,"location":4,"path":"C:\\ProgramData\\bakhlbmofdjaipjmkapmkljccjnbpohj\\","state":1,"was_installed_by_default":false},"blpcfgokakmgnkcojhhkbfbldkacnbeo":{"ack_external":true,"active_permissions":{"api":["appNotifications"]},"app_launcher_ordinal":"w","blacklist":null,"from_bookmark":true,"from_webstore":true,"granted_permissions":{"api":["appNotifications"]},"install_time":"12999293449598442","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxp://www.youtube.com/"},"web_content":{"enabled":true,"origin":"hxxp://www.youtube.com"}},"background_page":null,"content_scripts":null,"current_locale":"de","default_locale":"en","description":"Die beliebteste Online-Video-Community der Welt","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB","name":"YouTube","permissions":["appNotifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"4.2.5"},"page_ordinal":"n","path":"blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0","state":1,"was_installed_by_default":true},"coobgpohoikkiipiblmjeljniedjpjpf":{"ack_external":true,"app_launcher_ordinal":"y","blacklist":null,"from_bookmark":true,"from_webstore":true,"install_time":"12999293450562442","location":1,"manifest":{"app":{"launch":{"web_url":"hxxp://www.google.com/webhp?source=search_app"},"urls":["*://www.google.com/search","*://www.google.com/webhp","*://www.google.com/imgres"]},"background_page":null,"content_scripts":null,"current_locale":"de","default_locale":"en","description":"Die schnellste Suche im Web.","icons":{"16":"16.png","32":"32.png","48":"48.png","128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB","name":"Google-Suche","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.0.0.19"},"page_ordinal":"n","path":"coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.19_0","state":1,"was_installed_by_default":true},"eemcgdkfndhakfknompkggombfjjjeno":{"active_permissions":{"api":["bookmarks","bookmarkManagerPrivate","systemPrivate","tabs"],"explicit_host":["chrome://favicon/*","chrome://resources/*"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13007033136870325","location":5,"manifest":{"chrome_url_overrides":{"bookmarks":"main.html"},"content_security_policy":"object-src 'none'; script-src chrome://resources 'self'","description":"Bookmark Manager","incognito":"split","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB","manifest_version":2,"name":"Bookmark Manager","permissions":["bookmarks","bookmarkManagerPrivate","systemPrivate","tabs","chrome://favicon/","chrome://resources/"],"version":"0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\bookmark_manager","was_installed_by_default":false},"ennkphjdgehloodpbhlhldgbnhmacadg":{"active_permissions":{"api":["app.currentWindowInternal","app.runtime","app.window"],"explicit_host":["chrome://settings-frame/*"]},"app_launcher_ordinal":"yn","creation_flags":1,"events":["app.runtime.onLaunched"],"from_bookmark":false,"from_webstore":false,"install_time":"13007033136870325","location":5,"manifest":{"app":{"background":{"scripts":["settings_app.js"]}},"description":"Settings","display_in_launcher":true,"display_in_new_tab_page":false,"icons":{"16":"settings_app_icon_16.png","32":"settings_app_icon_32.png","48":"settings_app_icon_48.png","128":"settings_app_icon_128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB","manifest_version":2,"name":"Settings","permissions":["chrome://settings-frame/"],"version":"0.1"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\settings_app","was_installed_by_default":false},"fghkofpnnkjalaoiicophpbfedkenopm":{"ack_external":true,"active_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"initial_keybindings_set":true,"install_time":13032286640000000,"location":1,"manifest":{"background":{"page":"background.html"},"content_scripts":[{"all_frames":true,"js":["content.js"],"matches":["hxxp://*/*","https://*/*"],"run_at":"document_end"}],"description":"","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHE5KFnOdFY8G0ErmFFUvEi3DFHp038rQ8m0pY5GslpP27LVaMJIR0AqAJqgLy0J6Ht12k62FCWe+ovU0xmF8uWJbfW0YdxfE9RHEgOko9lP1pPlAcq2xy/cuWGLXv/AerPJJX3+ny4BjWC+4wHj+EpAej4b7jp95TRrZOZArPUQIDAQAB","manifest_version":2,"name":"greatsavIng","permissions":["hxxp://*/*","https://*/*","tabs","cookies","management","notifications","contextMenus","management","storage"],"version":"8.3"},"path":"fghkofpnnkjalaoiicophpbfedkenopm\\8.3","state":1,"was_installed_by_default":false},"gencfebafahakkdhhdideplccaehjekp":{"ack_external":true,"active_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["contextMenus","cookies","management","notifications","storage","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"initial_keybindings_set":true,"install_time":13036944613000000,"location":1,"manifest":{"background":{"page":"background.html"},"content_scripts":[{"all_frames":true,"js":["content.js"],"matches":["hxxp://*/*","https://*/*"],"run_at":"document_end"}],"description":"","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDF8hJfdRsH+Soy/7yfQrjVdLYxcGtBsb3MISptEXOQ6RuxHlzDY5QYGR1c8ERS4qZsjoxPSwJHm252v7+OP2TnBmxBgeNtQCut3oOovN2/mGmiWL+IyTir5H6e9zzXAQCPX8GRZor506iG5eJPuIvYnz6LlkIM4b81sbH/Ej3QVQIDAQAB","manifest_version":2,"name":"saver boox","permissions":["hxxp://*/*","https://*/*","tabs","cookies","management","notifications","contextMenus","management","storage"],"version":"5.1"},"path":"gencfebafahakkdhhdideplccaehjekp\\5.1","state":1,"was_installed_by_default":false},"jbpkiefagocgkmemidfngdkamloieekf":{"active_permissions":{"api":["contextMenus","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["hxxp://*/*","https://*/*"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13007033139128351","location":3,"manifest":{"background":{"page":"html/background.html"},"content_scripts":[{"js":["js/jquery.js","js/ex.js"],"matches":["hxxp://*/*","https://*/*"],"run_at":"document_end"}],"content_security_policy":"script-src 'self' https://ssl.google-analytics.com; object-src 'self'","description":"The must-have App extensions for Television fans! Watch free TV channels, live sports and more","icons":{"16":"images/icon.16.png","48":"images/icon.48.png","128":"images/icon.128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQvKmvRheocvom8DQ9ajU6kiNZencQR7enOXzSQNaO9b2hG6g8Rsfe9c+65quN+1SZsiBKx/dn1xzoV5M+Ax+UTWpBy/oWhqtj8QBQdOVsScqjJgx4/sV39p/HrlKFo9h79JKL4IjUc7hr5pBdVQ6JUo4+A5E1dJrMq7hHwRnBcwIDAQAB","manifest_version":2,"name":"Torntv","permissions":["contextMenus","tabs","hxxp://*/*","https://*/*"],"update_url":"hxxp://cdn.thetorntv.com/Extensions/torntv/chrome/update.xml","version":"1.1"},"path":"jbpkiefagocgkmemidfngdkamloieekf\\1.1_0","state":0,"was_installed_by_default":false},"jifflliplgeajjdhmkcfnngfpgbjonjg":{"ack_external":true,"active_permissions":{"api":["plugin","tabs"]},"blacklist":null,"creation_flags":1,"exclude_from_sideload_wipeout":true,"from_bookmark":false,"from_webstore":false,"install_time":"13007033138579351","location":3,"manifest":{"background_page":"background.html","description":"New Tab for Chrome\xC3\xA2\xC2\x84\xC2\xA2/Firefox\xC3\xA2\xC2\x84\xC2\xA2 provides you with an easy to use search engine powered by Google\xC3\xA2\xC2\x84\xC2\xA2 and a simple and customizable design.","icons":{"16":"icon.png","48":"icon.png","128":"icon.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCWAT3JZOKKaA8Y4bxFKfS6B1WxoLeUE4ooe8dpqfhMIsrddR3r2AvM1H0OnPUpUMYyYwq+7MIlPA4BoslGRRopee2ovB1HuFEKVVmOhUD9bk6oJ27w0twMKQd39xDDdBsNnoteCgRJ7O2qmhdayP3sT2gcXjxiMSE+Rb0nq4a0AwIDAQAB","name":"New tab for Chrome\xC3\xA2\xC2\x84\xC2\xA2","permissions":["tabs"],"plugins":[{"path":"Plugins/PerionNewTabChrome-32.dll","public":true}],"version":"1.0.0"},"path":"jifflliplgeajjdhmkcfnngfpgbjonjg\\1.0.0_1","state":1,"was_installed_by_default":false},"mfehgcgbbipciphmccgaenjidiccnmng":{"active_permissions":{"api":["cloudPrintPrivate"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13007033136870325","location":5,"manifest":{"app":{"launch":{"web_url":"https://www.google.com/cloudprint"},"urls":["https://www.google.com/cloudprint","https://www.google.com/cloudprint/enable_chrome_connector"]},"description":"Cloud Print","display_in_launcher":false,"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB","name":"Cloud Print","permissions":["cloudPrintPrivate"],"version":"0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\cloud_print","was_installed_by_default":false},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_permissions":{"api":["notifications"]},"app_launcher_ordinal":"t","blacklist":null,"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["notifications"]},"install_time":"12999293449104442","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"https://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"background_page":null,"content_scripts":null,"current_locale":"de","default_locale":"en","description":"Schneller E-Mail-Dienst mit Suchfunktion und wenig Spam.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","name":"Google Mail","options_page":"https://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"7"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\7_0","state":1,"was_installed_by_default":true}}},"homepage":"http:\/\/search.conduit.com\/?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=55&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&SSPV=","homepage_is_newtabpage":false,"net":{"http_server_properties":{"servers":{"www.google.com:443":{"settings":{"4":100},"supports_spdy":true}},"version":1}},"ntp":{"promo_resource_cache_update":"1354819849.875442"},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"migrated_to_pepper_flash":true},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"name":"Erster Nutzer"},"promo":{"ntp_notification_promo":[{"closed":false,"end":1353279540.0,"gplus_required":false,"group":666729,"increment":1,"increment_frequency":0,"increment_max":9000,"max_views":15,"num_groups":1000000,"segment":9000,"start":1352674800.0,"text":"Was halten Sie von Chrome? <a href=\"https://survey.googleratings.com/wix/p5963862.aspx?l=7\">Nehmen Sie an der Umfrage teil.</a>","views":0}]},"session":{"restore_on_startup":4,"restore_on_startup_migrated":true,"urls_to_restore_on_startup":["http:\/\/search.conduit.com\/?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=55&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&SSPV="]},"default_search_provider":{"name":"Conduit Search","keyword":"conduit.search","search_url":"http:\/\/search.conduit.com\/Results.aspx?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=58&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&q={searchTerms}&SSPV=","suggest_url":"http:\/\/suggest.search.conduit.com\/CSuggestJson.ashx?prefix={searchTerms}"}}), Ersetzt,[d87fb13dfa81013525fe270dc93cc43c]
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

=======================================

AdwCleaner[R0]
AdwCleaner Logfile:

Code:

# AdwCleaner v3.310 - Bericht erstellt am 16/09/2014 um 21:41:23

# Aktualisiert 12/09/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Dirk - LUCA-PC

# Gestartet von : C:\Users\Luca\Desktop\Wartung\AdwCleaner_3.310.exe

# Option : Suchen
 

***** [ Dienste ] *****
 

Dienst Gefunden : 70e6ca8c

Dienst Gefunden : BackupStack

Dienst Gefunden : MgAssistService
 

***** [ Dateien / Ordner ] *****
 

Datei Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage

Datei Gefunden : C:\Users\Dirk\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mobogenie.lnk

Datei Gefunden : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

Datei Gefunden : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\torntv@torntv.com.xpi

Datei Gefunden : C:\Users\Dirk\Desktop\Mobogenie.lnk

Datei Gefunden : C:\Users\Dirk\Desktop\MyPC Backup.lnk

Datei Gefunden : C:\Users\Dirk\Desktop\Sync Folder.lnk

Datei Gefunden : C:\Users\Luca\daemonprocess.txt

Datei Gefunden : C:\Windows\System32\dmwu.exe

Datei Gefunden : C:\Windows\System32\ImhxxpComm.dll

Datei Gefunden : C:\Windows\System32\roboot64.exe

Ordner Gefunden : \Device

Ordner Gefunden : C:\Program Files (x86)\FromDocToPDF_65EI

Ordner Gefunden : C:\Program Files (x86)\goforfiles

Ordner Gefunden : C:\Program Files (x86)\MetaCrawler

Ordner Gefunden : C:\Program Files (x86)\Mobogenie

Ordner Gefunden : C:\Program Files (x86)\MyPC Backup

Ordner Gefunden : C:\Program Files (x86)\Optimizer Pro

Ordner Gefunden : C:\ProgramData\Device

Ordner Gefunden : C:\ProgramData\FlexiiblEShopper

Ordner Gefunden : C:\ProgramData\greatsavIng

Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2

Ordner Gefunden : C:\ProgramData\saver boox

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\abepbblpkilpjohncjbccmdjhdhbnhdj

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\boipimhfjpakfgckhbljjengakjhkcbp

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg

Ordner Gefunden : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpepfkjapeclaafmhoelccknpfedainn

Ordner Gefunden : C:\Users\Dirk\AppData\LocalLow\FromDocToPDF_65EI

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\MetaCrawler

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\rjrfyuyc@euay-ee.edu

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\uaanquy@lxervk.co.uk

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\wet0uuy@hkvzhjaw.org

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\Systweak

Ordner Gefunden : C:\Users\Dirk\AppData\Roaming\VOPackage

Ordner Gefunden : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\fghkofpnnkjalaoiicophpbfedkenopm

Ordner Gefunden : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gencfebafahakkdhhdideplccaehjekp

Ordner Gefunden : C:\Users\Luca\AppData\Roaming\DigitalSites

Ordner Gefunden : C:\Users\Luca\AppData\Roaming\DSite

Ordner Gefunden : C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hotspot shield

Ordner Gefunden : C:\Users\Luca\AppData\Roaming\Systweak

Ordner Gefunden : C:\Windows\System32\ARFC
 

***** [ Tasks ] *****
 

Task Gefunden : DSite

Task Gefunden : EPUpdater

Task Gefunden : Funmoods

Task Gefunden : GoforFilesUpdate

Task Gefunden : MetaCrawler
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Daten Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL

Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gefunden : HKCU\Software\GoforFiles

Schlüssel Gefunden : HKCU\Software\InstallCore

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\GoforFiles

Schlüssel Gefunden : HKCU\Software\OCS

Schlüssel Gefunden : HKCU\Software\SearchProtectINT

Schlüssel Gefunden : HKCU\Software\systweak

Schlüssel Gefunden : [x64] HKCU\Software\GoforFiles

Schlüssel Gefunden : [x64] HKCU\Software\InstallCore

Schlüssel Gefunden : [x64] HKCU\Software\OCS

Schlüssel Gefunden : [x64] HKCU\Software\SearchProtectINT

Schlüssel Gefunden : [x64] HKCU\Software\systweak

Schlüssel Gefunden : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gefunden : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Schlüssel Gefunden : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\d

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gefunden : HKLM\SOFTWARE\GoforFiles

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\abepbblpkilpjohncjbccmdjhdhbnhdj

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg

Schlüssel Gefunden : HKLM\SOFTWARE\InstallCore

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasapi32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasmancs

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A30F3754-C0DC-8242-F3A9-52B360AE9798}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage

Schlüssel Gefunden : HKLM\SOFTWARE\systweak

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\DomaIQ

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0702826FCAC36EE52AC0441EEEEE2170

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1198E28F40C3E185E9958608554D4253

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14C66209FCA938858B9729645C666684

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15A073601B9AEC3549BE4A9314794615

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206AF45B775E3A445B3B2273827DA85F

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\225C3CBCEB850204D860A6C7CC7724AF

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2310FC151CD4F185798FA0996B3524D7

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28572D2E2DE533256AC6B560EA573C22

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29C79786B109AC443B0DC7BFD61B1896

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ABB56EABB920EB59B04BDDD26A62083

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DABA02DFED47E352A2FA2EBDD6F6187

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\311567B4A9A002050BB9423FD73FB880

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\373FCED70D7F84E5FB5F3F7B76BEE024

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BE992C130B235E53A2937391FDCA35B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DA5F64B3483DE549947A9164ACBAD21

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED93605BB9B6635E9D0D86615AF31F1

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4759B017032BA185F9BA6F7DBC95A2D4

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A78ABCBB54E46E5482A3EE0AD66C39E

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F9E947B6B895EB5A86757FC5D3DB862

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEEA83BF72B97E43A2DF0EE4BE4F261

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\509EC7EFB89B7D942997574AB14037A4

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50A730A9A3A61BF5BA70CA8A3B7C133B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51A95A1D4CDE4F958A9451FBB39BF54A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\536133807DE80465BA6CD0A9742B7DE5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E25036E68895D45B95E72D1C3C58C74

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60ECC80C54085B141A40437A96CA2618

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60FD8CD5BE007315CA3B5C7E41F24017

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\618E7D05458C4F257909ED9C8CDC0D66

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\621C21014D3C152529E2460FA6304EE3

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6241FF6F317CABD4EBBEE0DE9076BD94

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\636B9C23C79154B57AB561F39A139BFD

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65AAF0F0CB7F0B45F900FDF19CEAAF2B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6879A5E348601C45986308CA84958E94

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A6F3B7A9805E1F5492A1020EEDF2341

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B1F5D204E4EEB342A5AD1D7E60D61BF

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7005A2A4DCF9DD7548137AB17E3A3AF3

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712EAF07EE73CC65C822CC3BAE3B2483

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75FF6D97AF9FC004A9521D4B83FA6321

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7947B301B2446E752A3FE06EAD7D26B5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7987CE52D13E16258B0E1E3DB1BB0974

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7BEED197C514FDA53901AE8DD8EF0891

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DFDCF03D46C34159BDE29FBDBF1ACF5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\87EC9ACEAFE8ECD52A529663CD35213F

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\890F436B85B790A55A582B7307DA12CE

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C13DA6755F685B529615C8E92B3CA39

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D07CD9CB3E6BE652872BF06A1CCA782

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90841B1FC98200349925C88999866F17

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\94194FDD4DF523E53A888D65722A135D

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95266D07D008D2E4E9B6F8E0DD15432A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4223BBC9438CAD49BBE10B4E344B1DD

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A72F23B1D745C27508518132197BC982

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A89E2B6FB14D8275DA63D075171DA184

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9C43CD4001E9E4518B274AF9A0EFDA9

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABA081CF7F19915FBB80B3BAF47CE63

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC2A0FFD0A1686D53A4E24D6E96949E4

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE5BDB2750259915D8442D4591A7717B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1A79C71D5DC1C150B76B6ED11195DFC

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6D497DB33974935488761F7C4C3D755

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B752EF3300008394886C402CC27B474F

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8C8BCC1206978D51A8B9EECBF806C53

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAD3576CEA646895B962F94754612791

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB4091512C8F4295E99CE2D061ED2020

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE6BBC9A31531F598794A62120B51C7

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C19162788CA4D235E829F88E2F771567

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C71F07DA356B66B5484A8E7F2ADEB7DC

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C96AD15EE8E887B56BAF2136A9088503

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9E6B66ECC49D155888399C51D05C49E

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA360F24F0B214744BE40657FDA0B727

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D869D7D092348847B7481BB59E27

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE85F265816AE2D4E9B73C3E207E679C

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5389AEEA4A1E20428D045E86BCF643B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5B62BB7BC607FB539585E2B7B6AFD16

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB027F01D4D53765C8E4FBE7DB77E07E

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC2EB492393411F5ABE8ED13C59FBF20

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDA2534BD056D1F44B6EC96AAA7F1F6E

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDCA763D4C48A105086B4CCCEE78043F

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEF7558C7CD27EF46AF802AFBE402675

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E05B987540A9E2849AAF9E5B06C27DA8

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E09F4A6B9D2A08B599AE9E38BFC93CD6

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E27B6535D0D94A24E91047C7D86F27BC

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E45D171E075A5425CBACF6631A45FA39

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E513C2076D90AD04F888BD762143F191

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8F4C985459564F5B8DCFF2B3C7EBD27

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E96E33222BAC06B57A1FA9D72951C945

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAA46CE9007F70A5CAFA5F26E5DDEBE5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE43FF091A8714A599F33EF2533FB59A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE790015CF30DAA569960905FF1651A0

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEB44C47185BD304D80FDF5A4BBE8F54

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F214EB834D2EC474CA76C1CDE306CF3A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F25491036D0FA5D5FA6742F5742F151A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2E0D3DD9E5E4B74CA43BCE77815E287

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4D1BA8B482D9734E943EE260A7ADEF2

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6704141BAAF6884785EC6843143D6A7

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7507D4D4C310125E9A22BD909A41FB6

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F79C21D785419125595AC59458A6142D

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA15C90F092A60F53A4E0F88CED02968

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA1CF130B3D58B553833ACB6BE8AFAD4

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB0F1A18E4F0DBD509A42F4D4C05C02A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD17ED194F1C2B457B4F6EF4AE8DEAF3

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

Wert Gefunden : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

Wert Gefunden : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17280
 

Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://i.search.metacrawler.com/?f=2&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=
 

-\\ Mozilla Firefox v32.0.1 (x86 de)
 

[ Datei : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\prefs.js ]
 

Zeile gefunden : user_pref("extensions.0as.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1[...]

Zeile gefunden : user_pref("extensions.ceXcHoU_.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\[...]

Zeile gefunden : user_pref("extensions.iQvsoGNPtOm.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp000008[...]

Zeile gefunden : user_pref("extensions.oJGOfjTPSG.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp0000080[...]
 

[ Datei : C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\prefs.js ]
 

Zeile gefunden : user_pref("browser.search.defaultenginename", "Conduit Search");

Zeile gefunden : user_pref("browser.search.selectedEngine", "Conduit Search");

Zeile gefunden : user_pref("extensions.0as.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf([...]

Zeile gefunden : user_pref("extensions.ceXcHoU_.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.ind[...]

Zeile gefunden : user_pref("extensions.iQvsoGNPtOm.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.[...]

Zeile gefunden : user_pref("extensions.oJGOfjTPSG.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.i[...]
 

-\\ Google Chrome v31.0.1650.63
 

[ Datei : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [28684 octets] - [16/09/2014 21:41:23]
 

########## EOF - \AdwCleaner\AdwCleaner[R0].txt - [28745 octets] ##########

--- --- ---

=======================================

AdwCleanerAdwCleaner Logfile:

Code:

# AdwCleaner v3.310 - Bericht erstellt am 16/09/2014 um 21:50:35

# Aktualisiert 12/09/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Dirk - LUCA-PC

# Gestartet von : C:\Users\Luca\Desktop\Wartung\AdwCleaner_3.310.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : 70e6ca8c

Dienst Gelöscht : BackupStack

Dienst Gelöscht : MgAssistService
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : \Device

Ordner Gelöscht : C:\ProgramData\Device

Ordner Gelöscht : C:\ProgramData\FlexiiblEShopper

Ordner Gelöscht : C:\ProgramData\greatsavIng

Ordner Gelöscht : C:\ProgramData\saver boox

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2

Ordner Gelöscht : C:\Program Files (x86)\FromDocToPDF_65EI

Ordner Gelöscht : C:\Program Files (x86)\goforfiles

Ordner Gelöscht : C:\Program Files (x86)\MetaCrawler

Ordner Gelöscht : C:\Program Files (x86)\Mobogenie

Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup

Ordner Gelöscht : C:\Program Files (x86)\Optimizer Pro

Ordner Gelöscht : C:\Windows\System32\ARFC

Ordner Gelöscht : C:\Users\Dirk\AppData\LocalLow\FromDocToPDF_65EI

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\MetaCrawler

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\VOPackage

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup

Ordner Gelöscht : C:\Users\Luca\AppData\Roaming\DigitalSites

Ordner Gelöscht : C:\Users\Luca\AppData\Roaming\DSite

Ordner Gelöscht : C:\Users\Luca\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hotspot shield

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\rjrfyuyc@euay-ee.edu

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\uaanquy@lxervk.co.uk

Ordner Gelöscht : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\wet0uuy@hkvzhjaw.org

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\abepbblpkilpjohncjbccmdjhdhbnhdj

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\boipimhfjpakfgckhbljjengakjhkcbp

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg

Ordner Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpepfkjapeclaafmhoelccknpfedainn

Ordner Gelöscht : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\fghkofpnnkjalaoiicophpbfedkenopm

Ordner Gelöscht : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gencfebafahakkdhhdideplccaehjekp

Datei Gelöscht : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\torntv@torntv.com.xpi

Datei Gelöscht : C:\Windows\System32\dmwu.exe

Datei Gelöscht : C:\Windows\System32\ImhxxpComm.dll

Datei Gelöscht : C:\Windows\System32\roboot64.exe

Datei Gelöscht : C:\Users\Dirk\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mobogenie.lnk

Datei Gelöscht : C:\Users\Dirk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

Datei Gelöscht : C:\Users\Dirk\Desktop\Mobogenie.lnk

Datei Gelöscht : C:\Users\Dirk\Desktop\MyPC Backup.lnk

Datei Gelöscht : C:\Users\Dirk\Desktop\Sync Folder.lnk

Datei Gelöscht : C:\Users\Luca\daemonprocess.txt

Datei Gelöscht : C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
 

***** [ Tasks ] *****
 

Task Gelöscht : DSite

Task Gelöscht : EPUpdater

Task Gelöscht : Funmoods

Task Gelöscht : GoforFilesUpdate

Task Gelöscht : MetaCrawler
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\abepbblpkilpjohncjbccmdjhdhbnhdj

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\d

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKCU\Software\GoforFiles

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\SearchProtectINT

Schlüssel Gelöscht : HKCU\Software\systweak

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gelöscht : HKLM\SOFTWARE\GoforFiles

Schlüssel Gelöscht : HKLM\SOFTWARE\InstallCore

Schlüssel Gelöscht : HKLM\SOFTWARE\systweak

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\GoforFiles

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A30F3754-C0DC-8242-F3A9-52B360AE9798}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DomaIQ

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0702826FCAC36EE52AC0441EEEEE2170

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1198E28F40C3E185E9958608554D4253

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14C66209FCA938858B9729645C666684

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15A073601B9AEC3549BE4A9314794615

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206AF45B775E3A445B3B2273827DA85F

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\225C3CBCEB850204D860A6C7CC7724AF

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2310FC151CD4F185798FA0996B3524D7

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28572D2E2DE533256AC6B560EA573C22

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29C79786B109AC443B0DC7BFD61B1896

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ABB56EABB920EB59B04BDDD26A62083

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DABA02DFED47E352A2FA2EBDD6F6187

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\311567B4A9A002050BB9423FD73FB880

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\373FCED70D7F84E5FB5F3F7B76BEE024

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BE992C130B235E53A2937391FDCA35B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DA5F64B3483DE549947A9164ACBAD21

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED93605BB9B6635E9D0D86615AF31F1

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4759B017032BA185F9BA6F7DBC95A2D4

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A78ABCBB54E46E5482A3EE0AD66C39E

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F9E947B6B895EB5A86757FC5D3DB862

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEEA83BF72B97E43A2DF0EE4BE4F261

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\509EC7EFB89B7D942997574AB14037A4

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50A730A9A3A61BF5BA70CA8A3B7C133B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51A95A1D4CDE4F958A9451FBB39BF54A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\536133807DE80465BA6CD0A9742B7DE5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E25036E68895D45B95E72D1C3C58C74

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60ECC80C54085B141A40437A96CA2618

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60FD8CD5BE007315CA3B5C7E41F24017

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\618E7D05458C4F257909ED9C8CDC0D66

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\621C21014D3C152529E2460FA6304EE3

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6241FF6F317CABD4EBBEE0DE9076BD94

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\636B9C23C79154B57AB561F39A139BFD

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65AAF0F0CB7F0B45F900FDF19CEAAF2B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6879A5E348601C45986308CA84958E94

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A6F3B7A9805E1F5492A1020EEDF2341

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B1F5D204E4EEB342A5AD1D7E60D61BF

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7005A2A4DCF9DD7548137AB17E3A3AF3

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712EAF07EE73CC65C822CC3BAE3B2483

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75FF6D97AF9FC004A9521D4B83FA6321

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7947B301B2446E752A3FE06EAD7D26B5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7987CE52D13E16258B0E1E3DB1BB0974

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7BEED197C514FDA53901AE8DD8EF0891

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DFDCF03D46C34159BDE29FBDBF1ACF5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\87EC9ACEAFE8ECD52A529663CD35213F

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\890F436B85B790A55A582B7307DA12CE

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C13DA6755F685B529615C8E92B3CA39

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D07CD9CB3E6BE652872BF06A1CCA782

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90841B1FC98200349925C88999866F17

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\94194FDD4DF523E53A888D65722A135D

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95266D07D008D2E4E9B6F8E0DD15432A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4223BBC9438CAD49BBE10B4E344B1DD

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A72F23B1D745C27508518132197BC982

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A89E2B6FB14D8275DA63D075171DA184

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9C43CD4001E9E4518B274AF9A0EFDA9

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABA081CF7F19915FBB80B3BAF47CE63

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC2A0FFD0A1686D53A4E24D6E96949E4

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE5BDB2750259915D8442D4591A7717B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1A79C71D5DC1C150B76B6ED11195DFC

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6D497DB33974935488761F7C4C3D755

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B752EF3300008394886C402CC27B474F

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8C8BCC1206978D51A8B9EECBF806C53

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAD3576CEA646895B962F94754612791

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB4091512C8F4295E99CE2D061ED2020

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE6BBC9A31531F598794A62120B51C7

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C19162788CA4D235E829F88E2F771567

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C71F07DA356B66B5484A8E7F2ADEB7DC

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C96AD15EE8E887B56BAF2136A9088503

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9E6B66ECC49D155888399C51D05C49E

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA360F24F0B214744BE40657FDA0B727

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D869D7D092348847B7481BB59E27

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE85F265816AE2D4E9B73C3E207E679C

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5389AEEA4A1E20428D045E86BCF643B

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5B62BB7BC607FB539585E2B7B6AFD16

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB027F01D4D53765C8E4FBE7DB77E07E

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC2EB492393411F5ABE8ED13C59FBF20

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDA2534BD056D1F44B6EC96AAA7F1F6E

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDCA763D4C48A105086B4CCCEE78043F

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEF7558C7CD27EF46AF802AFBE402675

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E05B987540A9E2849AAF9E5B06C27DA8

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E09F4A6B9D2A08B599AE9E38BFC93CD6

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E27B6535D0D94A24E91047C7D86F27BC

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E45D171E075A5425CBACF6631A45FA39

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E513C2076D90AD04F888BD762143F191

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8F4C985459564F5B8DCFF2B3C7EBD27

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E96E33222BAC06B57A1FA9D72951C945

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAA46CE9007F70A5CAFA5F26E5DDEBE5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE43FF091A8714A599F33EF2533FB59A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE790015CF30DAA569960905FF1651A0

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEB44C47185BD304D80FDF5A4BBE8F54

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F214EB834D2EC474CA76C1CDE306CF3A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F25491036D0FA5D5FA6742F5742F151A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2E0D3DD9E5E4B74CA43BCE77815E287

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4D1BA8B482D9734E943EE260A7ADEF2

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6704141BAAF6884785EC6843143D6A7

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7507D4D4C310125E9A22BD909A41FB6

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F79C21D785419125595AC59458A6142D

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA15C90F092A60F53A4E0F88CED02968

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA1CF130B3D58B553833ACB6BE8AFAD4

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB0F1A18E4F0DBD509A42F4D4C05C02A

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD17ED194F1C2B457B4F6EF4AE8DEAF3

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17280
 

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
 

-\\ Mozilla Firefox v32.0.1 (x86 de)
 

[ Datei : C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.0as.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1[...]

Zeile gelöscht : user_pref("extensions.ceXcHoU_.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\[...]

Zeile gelöscht : user_pref("extensions.iQvsoGNPtOm.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp000008[...]

Zeile gelöscht : user_pref("extensions.oJGOfjTPSG.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp0000080[...]
 

[ Datei : C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Conduit Search");

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Conduit Search");

Zeile gelöscht : user_pref("extensions.0as.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf([...]

Zeile gelöscht : user_pref("extensions.ceXcHoU_.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.ind[...]

Zeile gelöscht : user_pref("extensions.iQvsoGNPtOm.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.[...]

Zeile gelöscht : user_pref("extensions.oJGOfjTPSG.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.i[...]
 

-\\ Google Chrome v31.0.1650.63
 

[ Datei : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Search Provider] : hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=58&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&q={searchTerms}&SSPV=
 

*************************
 

AdwCleaner[R0].txt - [29308 octets] - [16/09/2014 21:41:23]

AdwCleaner[S0].txt - [28274 octets] - [16/09/2014 21:50:35]
 

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [28335 octets] ##########

--- --- ---

==================================

Junkware Removal Tool:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.5 (09.16.2014:1)

OS: Windows 7 Home Premium x64

Ran by Dirk on 16.09.2014 at 21:57:22,65

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3000299772-3109549842-2761917205-1000\Software\sweetim

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3000299772-3109549842-2761917205-1000\Software\wajam

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E1A167A4-9625-471C-AC41-EA8F4FB4CADB}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\apn"
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Dirk\AppData\Roaming\mozilla\firefox\profiles\v9vnichj.default\prefs.js
 

user_pref("extensions.bootstrappedAddons", "{\"torntv@torntv.com\":{\"version\":\"1.1\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Dirk\\\\AppData\\\\Roaming\\\\Mo

Emptied folder: C:\Users\Dirk\AppData\Roaming\mozilla\firefox\profiles\v9vnichj.default\minidumps [1 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 16.09.2014 at 22:02:31,13

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

================================================

Und noch FRST:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014

Ran by Luca (ATTENTION: The logged in user is not administrator) on LUCA-PC on 16-09-2014 22:23:15

Running from C:\Users\Luca\Desktop\Wartung\FRST

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(WinZip Computing, Inc. and H.C. Top Systems B.V.) C:\Program Files (x86)\WinZip\WZQKPICK.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12666984 2011-08-09] (Realtek Semiconductor)

HKLM\...\Run: [Cm106Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd

HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190472 2009-09-17] (Logitech Inc.)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)

HKLM-x32\...\Run: [ChicoSys] => C:\Windows\SysWOW64\cc32\webtmr.exe [6484352 2009-07-14] (Salfeld Computer)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)

HKU\.DEFAULT\...\Run: [CCWinTray] => C:\Windows\tray\wintmr.exe [6864256 2009-07-14] (Salfeld Computer)

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DisableClock] 1

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DisableLockWorkstation] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoFind] 0

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk

ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-3000299772-3109549842-2761917205-1002\User: Group Policy restriction detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=55&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&SSPV=

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9E34843840D2CC01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

SearchScopes: HKLM - {7C2360B9-08CA-8C54-843A-689F5B9F2EBE} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

SearchScopes: HKLM-x32 - {3237C8AF-001A-4C1F-9C64-26DD38C58B87} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

SearchScopes: HKCU - {C888714D-D117-487A-81A0-D4AF51BFC142} URL = hxxp://www.search.ask.com/web?p2=%5EADN%5EOSJ000%5EYY%5EDE&gct=&itbv=12.6.0.11&o=APN10616&tpid=ORJ-V7&apn_uid=47CA41B7-1F3E-4120-9C21-38501944B538&apn_ptnrs=ADN&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=ie_10.0.9200.16720&doi=2013-11-11&trgb=IE&q={searchTerms}&psv=

BHO: No Name -> {00C6482D-C502-44C8-8409-FCE54AD9C208} ->  No File

BHO: No Name -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} ->  No File

BHO: No Name -> {53707962-6F74-2D53-2644-206D7942484F} ->  No File

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: HelperObject Class -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\SnagIt 7\SnagItBHO.dll (TechSmith Corporation)

BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 7\SnagItIEAddin.dll (TechSmith Corporation)

Toolbar: HKLM-x32 - metacrawler  Toolbar - {7EACAC38-B7F6-4514-9DC1-3428A7964ABD} - C:\Program Files (x86)\metaCrawler\1.8.19.0\metacrawlerTlbr.dll No File

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - No Name - {4F524A2D-5637-006A-76A7-7A786E7484D7} -  No File

DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} 

DPF: HKLM {8AD9C840-044E-11D1-B3E9-00805F499D93} 

DPF: HKLM {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} 

DPF: HKLM {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} 

DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} 

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: HKLM-x32 {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} 

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()

FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll No File

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @ei.FromDocToPDF_65.com/Plugin -> C:\Program Files (x86)\FromDocToPDF_65EI\Installr\1.bin\NP65EISB.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @Webzen.com/NPBrowserExt -> C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll (WEBZEN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Google.com/GoogleEarthPlugin -> C:\Users\Luca\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Avira Browser Safety - C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\Extensions\abs@avira.com [2014-08-28]

FF Extension: Better Battlelog (BBLog) - C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack [2014-07-21]

FF Extension: Adblock Plus - C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-04]
 

Chrome: 

=======

Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

CHR Profile: C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Drive) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-06]

CHR Extension: (YouTube) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-06]

CHR Extension: (Google Search) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-06]

CHR Extension: (No Name) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\fghkofpnnkjalaoiicophpbfedkenopm [2013-12-23]

CHR Extension: (No Name) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gencfebafahakkdhhdideplccaehjekp [2014-02-15]

CHR Extension: (Gmail) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-06]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

S2 ksupmgr; C:\Windows\SysWOW64\ksupmgr.exe [765592 2010-08-25] (Salfeld Computer)

R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 lmhosts; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)

R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 NlaSvc; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 nsi; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-09-13] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-09-13] ()

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-10-22] (TuneUp Software)

S4 OtShotUpdateService; C:\Program Files (x86)\OtShot\OtshotUpdateServiceEx.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-01-14] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-26] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-01-14] ()

R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

S3 StarOpen; No ImagePath

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)

S3 USBMULCD; C:\Windows\System32\drivers\CM10664.sys [1307648 2011-03-31] (C-Media Electronics Inc)

S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-16 22:07 - 2014-09-16 22:07 - 00001166 _____ () C:\Users\Dirk\Desktop\Mozilla Firefox.lnk

2014-09-16 21:52 - 2014-09-16 21:52 - 00000000 ___HD () C:\ProgramData\Device

2014-09-16 21:51 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-09-16 21:41 - 2014-09-16 21:51 - 00000000 ____D () C:\AdwCleaner

2014-09-15 21:45 - 2014-09-15 21:56 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-15 21:45 - 2014-09-15 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2014-09-15 21:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-09-15 21:44 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-09-15 21:44 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-09-15 21:22 - 2014-09-15 21:27 - 00001280 _____ () C:\Users\Dirk\Desktop\Revo Uninstaller.lnk

2014-09-15 21:22 - 2014-09-15 21:27 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-09-15 21:18 - 2014-09-16 22:18 - 00000000 ____D () C:\Users\Luca\Desktop\Wartung

2014-09-14 18:13 - 2014-09-14 18:16 - 00000000 ____D () C:\Users\Luca\Documents\Spiele-launcher

2014-09-14 18:11 - 2014-09-14 18:13 - 00000000 ____D () C:\Users\Luca\Documents\Sauerbraten

2014-09-13 16:07 - 2014-09-13 16:11 - 00000000 ____D () C:\Users\Luca\Documents\Battlefield 4 CTE

2014-09-13 16:06 - 2014-09-13 16:07 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(1).exe

2014-09-13 16:02 - 2014-09-13 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4 CTE

2014-09-13 11:38 - 2014-09-13 11:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-09-13 03:15 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-09-13 03:15 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-09-13 03:15 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-09-13 03:15 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-09-13 03:15 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-09-13 03:15 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-09-13 03:15 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-09-13 03:15 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-09-13 03:15 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-09-13 03:15 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-09-13 03:15 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-09-13 03:15 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-09-13 03:15 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-09-13 03:15 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-09-13 03:15 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-09-13 03:15 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-09-13 03:15 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-09-13 03:15 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-09-13 03:15 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-09-13 03:15 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-09-13 03:15 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-09-13 03:15 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-09-13 03:15 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-09-13 03:15 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-09-13 03:15 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-09-13 03:15 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-09-13 03:15 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-09-13 03:15 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-09-13 03:15 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-09-13 03:15 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-09-13 03:15 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-09-13 03:15 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-09-13 03:15 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-09-13 03:15 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-09-13 03:15 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-09-13 03:15 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-09-13 03:15 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-09-13 03:15 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-09-13 03:15 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-09-13 03:15 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-09-13 03:15 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-09-13 03:15 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-09-13 03:15 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-09-13 03:15 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-09-13 03:15 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-09-13 03:15 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-09-13 03:15 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-09-13 03:15 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-09-13 03:15 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-09-13 03:15 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-09-13 03:01 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-09-13 03:01 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-09-12 14:05 - 2014-09-12 14:05 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2014-09-12 12:38 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-09-12 12:38 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-09-12 12:38 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-09-12 12:38 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-09-12 12:38 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-09-12 12:38 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-09-12 12:38 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-09-12 12:38 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-09-12 12:38 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-09-12 12:25 - 2014-09-12 12:25 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149.exe

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-09-07 19:34 - 2014-09-16 22:23 - 00000000 ____D () C:\FRST

2014-09-07 13:44 - 2014-09-07 13:47 - 00000000 ___HD () C:\System Shared

2014-08-30 10:35 - 2014-08-30 10:37 - 17088592 _____ (Electronic Arts, Inc.) C:\Users\Luca\Downloads\OriginThinSetup.exe

2014-08-29 19:24 - 2014-08-29 19:24 - 01101648 _____ () C:\Users\Luca\Downloads\LogMeIn Hamachi - CHIP-Installer.exe

2014-08-29 18:27 - 2013-03-04 06:34 - 01808510 _____ () C:\Users\Luca\Downloads\TekkitLite.jar

2014-08-29 18:27 - 2013-03-04 06:33 - 02061638 _____ () C:\Users\Luca\Downloads\minecraft_server.jar

2014-08-29 18:27 - 2013-01-12 05:40 - 00000000 ____D () C:\Users\Luca\Downloads\mods

2014-08-29 18:27 - 2013-01-12 05:39 - 00000000 ____D () C:\Users\Luca\Downloads\coremods

2014-08-29 18:27 - 2013-01-04 09:42 - 00000555 _____ () C:\Users\Luca\Downloads\server.properties

2014-08-29 18:27 - 2013-01-04 09:20 - 00000054 _____ () C:\Users\Luca\Downloads\launch.sh

2014-08-29 18:27 - 2013-01-04 09:20 - 00000051 _____ () C:\Users\Luca\Downloads\launch.bat

2014-08-29 18:17 - 2014-08-29 18:22 - 00001376 _____ () C:\Users\Luca\Desktop\TechnicLauncher - Verknüpfung.lnk

2014-08-29 18:17 - 2014-08-29 18:19 - 00000000 ____D () C:\Users\Luca\Documents\Tekkit

2014-08-29 18:14 - 2014-08-29 18:16 - 20827501 _____ () C:\Users\Luca\Downloads\Tekkit_Lite_Server_0.6.5.zip

2014-08-28 17:44 - 2014-08-28 17:44 - 01397992 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.0_148.exe

2014-08-28 15:01 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-28 15:01 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-28 15:01 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-27 17:27 - 2014-08-27 17:27 - 02249144 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.4.0_147.exe

2014-08-21 12:20 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-08-21 12:20 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-08-21 12:20 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-08-21 12:20 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-08-21 12:20 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-08-21 12:19 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-08-21 12:19 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-08-21 12:19 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-08-21 12:19 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-08-18 14:08 - 2014-08-18 14:09 - 02836320 _____ (FlyVPN) C:\Users\Luca\Downloads\FlyClientInstaller_3.0.1.8(1).exe

2014-08-18 14:01 - 2014-08-18 14:09 - 00001033 _____ () C:\Users\Dirk\Desktop\FlyVPN.lnk

2014-08-18 14:01 - 2014-08-18 14:09 - 00000000 ____D () C:\Program Files (x86)\FlyVPN

2014-08-18 14:01 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\FlyVPN

2014-08-18 14:00 - 2014-08-18 14:00 - 02836320 _____ (FlyVPN) C:\Users\Luca\Downloads\FlyClientInstaller_3.0.1.8.exe

2014-08-18 13:56 - 2014-09-13 03:43 - 00001149 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-08-17 22:37 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2014-08-17 22:37 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll

2014-08-17 22:37 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-08-17 22:37 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-08-17 22:37 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2014-08-17 22:37 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2014-08-17 22:37 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe

2014-08-17 22:37 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll

2014-08-17 19:24 - 2014-08-17 20:36 - 620143037 _____ () C:\Users\Luca\Downloads\mb_warband_setup_1160.exe

2014-08-17 18:16 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-08-17 18:16 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-08-17 18:16 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-08-17 18:16 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-08-17 18:16 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-08-17 18:16 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-08-17 18:16 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-08-17 18:16 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-08-17 18:16 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-08-17 18:16 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-08-17 18:16 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-08-17 18:16 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-08-17 18:11 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-08-17 18:11 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-16 22:23 - 2014-09-07 19:34 - 00000000 ____D () C:\FRST

2014-09-16 22:21 - 2012-01-22 18:47 - 00001268 _____ () C:\Windows\SysWOW64\excltmp~.dat

2014-09-16 22:18 - 2014-09-15 21:18 - 00000000 ____D () C:\Users\Luca\Desktop\Wartung

2014-09-16 22:18 - 2009-07-14 06:45 - 00022512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-16 22:18 - 2009-07-14 06:45 - 00022512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-16 22:15 - 2013-06-02 21:21 - 00000000 ____D () C:\Users\Dirk\Desktop\Wartung

2014-09-16 22:14 - 2012-01-22 18:46 - 00000415 _____ () C:\NET.INI

2014-09-16 22:14 - 2012-01-14 00:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-16 22:14 - 2012-01-12 14:25 - 01435948 _____ () C:\Windows\WindowsUpdate.log

2014-09-16 22:12 - 2012-02-19 12:48 - 00000000 ____D () C:\Users\Luca\AppData\Local\LogMeIn Hamachi

2014-09-16 22:11 - 2014-01-16 15:31 - 00010049 _____ () C:\Windows\SysWOW64\cchservice.err

2014-09-16 22:11 - 2009-07-14 06:51 - 00213886 _____ () C:\Windows\setupact.log

2014-09-16 22:10 - 2012-01-12 14:51 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-09-16 22:10 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-16 22:07 - 2014-09-16 22:07 - 00001166 _____ () C:\Users\Dirk\Desktop\Mozilla Firefox.lnk

2014-09-16 22:05 - 2012-11-02 19:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-09-16 21:55 - 2012-01-14 00:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-16 21:52 - 2014-09-16 21:52 - 00000000 ___HD () C:\ProgramData\Device

2014-09-16 21:52 - 2010-11-21 05:47 - 00688694 _____ () C:\Windows\PFRO.log

2014-09-16 21:51 - 2014-09-16 21:41 - 00000000 ____D () C:\AdwCleaner

2014-09-16 21:51 - 2012-01-14 00:02 - 00000000 ____D () C:\Users\Luca

2014-09-16 18:06 - 2013-09-30 16:07 - 00000000 ____D () C:\ProgramData\Origin

2014-09-16 17:56 - 2013-09-30 16:59 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-09-16 17:41 - 2013-09-30 16:07 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-09-16 15:35 - 2013-08-22 19:35 - 00000203 _____ () C:\Users\Luca\AppData\Roaming\WB.CFG

2014-09-16 15:13 - 2013-09-30 16:59 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-09-15 21:56 - 2014-09-15 21:45 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-15 21:45 - 2014-09-15 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-15 21:45 - 2014-09-15 21:44 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2013-05-23 21:52 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-09-15 21:27 - 2014-09-15 21:22 - 00001280 _____ () C:\Users\Dirk\Desktop\Revo Uninstaller.lnk

2014-09-15 21:27 - 2014-09-15 21:22 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-09-14 18:16 - 2014-09-14 18:13 - 00000000 ____D () C:\Users\Luca\Documents\Spiele-launcher

2014-09-14 18:13 - 2014-09-14 18:11 - 00000000 ____D () C:\Users\Luca\Documents\Sauerbraten

2014-09-14 10:48 - 2013-10-01 14:10 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins

2014-09-14 10:48 - 2013-06-03 20:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-09-13 18:01 - 2010-11-21 08:50 - 00718866 _____ () C:\Windows\system32\perfh007.dat

2014-09-13 18:01 - 2010-11-21 08:50 - 00156680 _____ () C:\Windows\system32\perfc007.dat

2014-09-13 18:01 - 2009-07-14 07:13 - 01662620 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-13 17:57 - 2012-01-17 22:53 - 00000000 ____D () C:\Users\Luca\Documents\Outlook-Dateien

2014-09-13 16:11 - 2014-09-13 16:07 - 00000000 ____D () C:\Users\Luca\Documents\Battlefield 4 CTE

2014-09-13 16:10 - 2014-06-28 10:23 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe

2014-09-13 16:07 - 2014-09-13 16:06 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(1).exe

2014-09-13 16:02 - 2014-09-13 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4 CTE

2014-09-13 16:02 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-09-13 16:01 - 2013-09-30 16:59 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-09-13 16:00 - 2012-01-12 15:18 - 00328254 _____ () C:\Windows\DirectX.log

2014-09-13 11:38 - 2014-09-13 11:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-09-13 06:44 - 2012-01-12 14:26 - 00000000 ____D () C:\Users\Dirk

2014-09-13 04:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-09-13 03:43 - 2014-08-18 13:56 - 00001149 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-09-13 03:43 - 2013-12-26 04:56 - 00000000 ____D () C:\ProgramData\Package Cache

2014-09-13 03:43 - 2013-05-24 10:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-09-13 03:43 - 2013-05-24 10:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-09-13 03:15 - 2012-01-15 18:47 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-13 03:13 - 2013-05-20 18:48 - 01635964 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-09-13 03:12 - 2013-08-18 12:38 - 00000000 ____D () C:\Windows\system32\MRT

2014-09-13 03:02 - 2012-01-12 16:21 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-09-12 14:06 - 2012-11-02 19:25 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-09-12 14:06 - 2012-01-12 14:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-09-12 14:05 - 2014-09-12 14:05 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2014-09-12 12:27 - 2013-09-30 16:22 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-09-12 12:25 - 2014-09-12 12:25 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149.exe

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-09-09 23:45 - 2013-11-07 21:53 - 00000000 ____D () C:\Windows\pss

2014-09-09 23:45 - 2013-03-24 11:42 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\Skype

2014-09-09 23:45 - 2012-07-11 19:42 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2014-09-07 14:11 - 2010-11-21 09:00 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-09-07 13:47 - 2014-09-07 13:44 - 00000000 ___HD () C:\System Shared

2014-08-30 10:37 - 2014-08-30 10:35 - 17088592 _____ (Electronic Arts, Inc.) C:\Users\Luca\Downloads\OriginThinSetup.exe

2014-08-29 21:00 - 2013-03-10 10:53 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\.minecraft

2014-08-29 19:24 - 2014-08-29 19:24 - 01101648 _____ () C:\Users\Luca\Downloads\LogMeIn Hamachi - CHIP-Installer.exe

2014-08-29 18:29 - 2012-07-08 11:02 - 00003072 ___SH () C:\Users\Luca\Thumbs.db

2014-08-29 18:22 - 2014-08-29 18:17 - 00001376 _____ () C:\Users\Luca\Desktop\TechnicLauncher - Verknüpfung.lnk

2014-08-29 18:19 - 2014-08-29 18:17 - 00000000 ____D () C:\Users\Luca\Documents\Tekkit

2014-08-29 18:16 - 2014-08-29 18:14 - 20827501 _____ () C:\Users\Luca\Downloads\Tekkit_Lite_Server_0.6.5.zip

2014-08-29 14:20 - 2013-04-19 17:37 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\.technic

2014-08-28 17:44 - 2014-08-28 17:44 - 01397992 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.0_148.exe

2014-08-28 17:34 - 2009-07-14 06:45 - 00414096 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-27 17:27 - 2014-08-27 17:27 - 02249144 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.4.0_147.exe

2014-08-25 06:53 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-08-23 04:07 - 2014-08-28 15:01 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-23 03:45 - 2014-08-28 15:01 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-23 02:59 - 2014-08-28 15:01 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-19 20:05 - 2014-09-13 03:15 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-08-19 19:39 - 2014-09-13 03:15 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-08-19 07:41 - 2013-01-27 15:40 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-08-19 01:01 - 2014-09-13 03:15 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-08-19 00:29 - 2014-09-13 03:15 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-08-19 00:29 - 2014-09-13 03:15 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-08-19 00:26 - 2014-09-13 03:15 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-08-19 00:20 - 2014-09-13 03:15 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-08-19 00:19 - 2014-09-13 03:15 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-08-19 00:15 - 2014-09-13 03:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-08-19 00:15 - 2014-09-13 03:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-08-19 00:14 - 2014-09-13 03:15 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-08-19 00:14 - 2014-09-13 03:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-08-19 00:08 - 2014-09-13 03:15 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-08-19 00:08 - 2014-09-13 03:15 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-08-19 00:08 - 2014-09-13 03:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-08-19 00:05 - 2014-09-13 03:15 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-08-19 00:03 - 2014-09-13 03:15 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-08-19 00:03 - 2014-09-13 03:15 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-08-19 00:03 - 2014-09-13 03:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-08-18 23:57 - 2014-09-13 03:15 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-08-18 23:56 - 2014-09-13 03:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-08-18 23:51 - 2014-09-13 03:15 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-08-18 23:46 - 2014-09-13 03:15 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-08-18 23:45 - 2014-09-13 03:15 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-08-18 23:45 - 2014-09-13 03:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-08-18 23:44 - 2014-09-13 03:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-08-18 23:44 - 2014-09-13 03:15 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-08-18 23:42 - 2014-09-13 03:15 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-08-18 23:40 - 2014-09-13 03:15 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-08-18 23:39 - 2014-09-13 03:15 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-08-18 23:39 - 2014-09-13 03:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-08-18 23:39 - 2014-09-13 03:15 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-08-18 23:38 - 2014-09-13 03:15 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-08-18 23:37 - 2014-09-13 03:15 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-08-18 23:36 - 2014-09-13 03:15 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-08-18 23:35 - 2014-09-13 03:15 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-08-18 23:27 - 2014-09-13 03:15 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-08-18 23:25 - 2014-09-13 03:15 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-08-18 23:25 - 2014-09-13 03:15 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-08-18 23:23 - 2014-09-13 03:15 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-08-18 23:23 - 2014-09-13 03:15 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-08-18 23:22 - 2014-09-13 03:15 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-08-18 23:19 - 2014-09-13 03:15 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-08-18 23:17 - 2014-09-13 03:15 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-08-18 23:17 - 2014-09-13 03:15 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-08-18 23:16 - 2014-09-13 03:15 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-08-18 23:15 - 2014-09-13 03:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-08-18 23:15 - 2014-09-13 03:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-08-18 23:09 - 2014-09-13 03:15 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-08-18 23:08 - 2014-09-13 03:15 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-08-18 23:07 - 2014-09-13 03:15 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-08-18 22:55 - 2014-09-13 03:15 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-08-18 22:46 - 2014-09-13 03:15 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-08-18 22:38 - 2014-09-13 03:15 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-08-18 22:38 - 2014-09-13 03:15 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-08-18 22:36 - 2014-09-13 03:15 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-08-18 14:09 - 2014-08-18 14:08 - 02836320 _____ (FlyVPN) C:\Users\Luca\Downloads\FlyClientInstaller_3.0.1.8(1).exe

2014-08-18 14:09 - 2014-08-18 14:01 - 00001033 _____ () C:\Users\Dirk\Desktop\FlyVPN.lnk

2014-08-18 14:09 - 2014-08-18 14:01 - 00000000 ____D () C:\Program Files (x86)\FlyVPN

2014-08-18 14:01 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\FlyVPN

2014-08-18 14:00 - 2014-08-18 14:00 - 02836320 _____ (FlyVPN) C:\Users\Luca\Downloads\FlyClientInstaller_3.0.1.8.exe

2014-08-18 13:56 - 2013-05-24 10:48 - 00000000 ____D () C:\ProgramData\Avira

2014-08-18 13:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-08-17 21:16 - 2012-05-28 21:44 - 00001156 _____ () C:\Users\Dirk\Desktop\Mount&Blade Warband.lnk

2014-08-17 21:16 - 2012-01-21 16:58 - 00001156 _____ () C:\Users\Luca\Desktop\Mount&Blade Warband.lnk

2014-08-17 21:15 - 2012-01-21 16:58 - 00000000 ____D () C:\Program Files (x86)\Mount&Blade Warband

2014-08-17 20:36 - 2014-08-17 19:24 - 620143037 _____ () C:\Users\Luca\Downloads\mb_warband_setup_1160.exe

2014-08-17 19:00 - 2013-10-01 19:39 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr

2014-08-17 18:47 - 2013-03-15 19:32 - 00000000 ____D () C:\ProgramData\Skype
 

Some content of TEMP:

====================

C:\Users\Luca\AppData\Local\Temp\avgnt.exe

C:\Users\Luca\AppData\Local\Temp\vlc-2.1.3-win32.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Und noch FRST:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014

Ran by Luca (ATTENTION: The logged in user is not administrator) on LUCA-PC on 16-09-2014 22:23:15

Running from C:\Users\Luca\Desktop\Wartung\FRST

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(WinZip Computing, Inc. and H.C. Top Systems B.V.) C:\Program Files (x86)\WinZip\WZQKPICK.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12666984 2011-08-09] (Realtek Semiconductor)

HKLM\...\Run: [Cm106Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd

HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190472 2009-09-17] (Logitech Inc.)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)

HKLM-x32\...\Run: [ChicoSys] => C:\Windows\SysWOW64\cc32\webtmr.exe [6484352 2009-07-14] (Salfeld Computer)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)

HKU\.DEFAULT\...\Run: [CCWinTray] => C:\Windows\tray\wintmr.exe [6864256 2009-07-14] (Salfeld Computer)

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DisableClock] 1

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DisableLockWorkstation] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoFind] 0

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk

ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-3000299772-3109549842-2761917205-1002\User: Group Policy restriction detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=55&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&SSPV=

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9E34843840D2CC01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

SearchScopes: HKLM - {7C2360B9-08CA-8C54-843A-689F5B9F2EBE} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

SearchScopes: HKLM-x32 - {3237C8AF-001A-4C1F-9C64-26DD38C58B87} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

SearchScopes: HKCU - {C888714D-D117-487A-81A0-D4AF51BFC142} URL = hxxp://www.search.ask.com/web?p2=%5EADN%5EOSJ000%5EYY%5EDE&gct=&itbv=12.6.0.11&o=APN10616&tpid=ORJ-V7&apn_uid=47CA41B7-1F3E-4120-9C21-38501944B538&apn_ptnrs=ADN&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=ie_10.0.9200.16720&doi=2013-11-11&trgb=IE&q={searchTerms}&psv=

BHO: No Name -> {00C6482D-C502-44C8-8409-FCE54AD9C208} ->  No File

BHO: No Name -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} ->  No File

BHO: No Name -> {53707962-6F74-2D53-2644-206D7942484F} ->  No File

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: HelperObject Class -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\SnagIt 7\SnagItBHO.dll (TechSmith Corporation)

BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 7\SnagItIEAddin.dll (TechSmith Corporation)

Toolbar: HKLM-x32 - metacrawler  Toolbar - {7EACAC38-B7F6-4514-9DC1-3428A7964ABD} - C:\Program Files (x86)\metaCrawler\1.8.19.0\metacrawlerTlbr.dll No File

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - No Name - {4F524A2D-5637-006A-76A7-7A786E7484D7} -  No File

DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} 

DPF: HKLM {8AD9C840-044E-11D1-B3E9-00805F499D93} 

DPF: HKLM {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} 

DPF: HKLM {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} 

DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} 

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: HKLM-x32 {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} 

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()

FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll No File

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @ei.FromDocToPDF_65.com/Plugin -> C:\Program Files (x86)\FromDocToPDF_65EI\Installr\1.bin\NP65EISB.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @Webzen.com/NPBrowserExt -> C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll (WEBZEN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Google.com/GoogleEarthPlugin -> C:\Users\Luca\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Avira Browser Safety - C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\Extensions\abs@avira.com [2014-08-28]

FF Extension: Better Battlelog (BBLog) - C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack [2014-07-21]

FF Extension: Adblock Plus - C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-04]
 

Chrome: 

=======

Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

CHR Profile: C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Drive) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-06]

CHR Extension: (YouTube) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-06]

CHR Extension: (Google Search) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-06]

CHR Extension: (No Name) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\fghkofpnnkjalaoiicophpbfedkenopm [2013-12-23]

CHR Extension: (No Name) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gencfebafahakkdhhdideplccaehjekp [2014-02-15]

CHR Extension: (Gmail) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-06]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

S2 ksupmgr; C:\Windows\SysWOW64\ksupmgr.exe [765592 2010-08-25] (Salfeld Computer)

R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 lmhosts; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)

R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 NlaSvc; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 nsi; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-09-13] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-09-13] ()

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-10-22] (TuneUp Software)

S4 OtShotUpdateService; C:\Program Files (x86)\OtShot\OtshotUpdateServiceEx.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-01-14] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-26] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-01-14] ()

R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

S3 StarOpen; No ImagePath

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)

S3 USBMULCD; C:\Windows\System32\drivers\CM10664.sys [1307648 2011-03-31] (C-Media Electronics Inc)

S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-16 22:07 - 2014-09-16 22:07 - 00001166 _____ () C:\Users\Dirk\Desktop\Mozilla Firefox.lnk

2014-09-16 21:52 - 2014-09-16 21:52 - 00000000 ___HD () C:\ProgramData\Device

2014-09-16 21:51 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-09-16 21:41 - 2014-09-16 21:51 - 00000000 ____D () C:\AdwCleaner

2014-09-15 21:45 - 2014-09-15 21:56 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-15 21:45 - 2014-09-15 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2014-09-15 21:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-09-15 21:44 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-09-15 21:44 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-09-15 21:22 - 2014-09-15 21:27 - 00001280 _____ () C:\Users\Dirk\Desktop\Revo Uninstaller.lnk

2014-09-15 21:22 - 2014-09-15 21:27 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-09-15 21:18 - 2014-09-16 22:18 - 00000000 ____D () C:\Users\Luca\Desktop\Wartung

2014-09-14 18:13 - 2014-09-14 18:16 - 00000000 ____D () C:\Users\Luca\Documents\Spiele-launcher

2014-09-14 18:11 - 2014-09-14 18:13 - 00000000 ____D () C:\Users\Luca\Documents\Sauerbraten

2014-09-13 16:07 - 2014-09-13 16:11 - 00000000 ____D () C:\Users\Luca\Documents\Battlefield 4 CTE

2014-09-13 16:06 - 2014-09-13 16:07 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(1).exe

2014-09-13 16:02 - 2014-09-13 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4 CTE

2014-09-13 11:38 - 2014-09-13 11:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-09-13 03:15 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-09-13 03:15 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-09-13 03:15 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-09-13 03:15 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-09-13 03:15 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-09-13 03:15 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-09-13 03:15 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-09-13 03:15 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-09-13 03:15 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-09-13 03:15 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-09-13 03:15 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-09-13 03:15 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-09-13 03:15 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-09-13 03:15 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-09-13 03:15 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-09-13 03:15 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-09-13 03:15 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-09-13 03:15 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-09-13 03:15 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-09-13 03:15 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-09-13 03:15 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-09-13 03:15 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-09-13 03:15 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-09-13 03:15 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-09-13 03:15 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-09-13 03:15 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-09-13 03:15 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-09-13 03:15 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-09-13 03:15 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-09-13 03:15 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-09-13 03:15 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-09-13 03:15 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-09-13 03:15 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-09-13 03:15 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-09-13 03:15 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-09-13 03:15 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-09-13 03:15 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-09-13 03:15 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-09-13 03:15 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-09-13 03:15 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-09-13 03:15 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-09-13 03:15 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-09-13 03:15 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-09-13 03:15 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-09-13 03:15 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-09-13 03:15 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-09-13 03:15 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-09-13 03:15 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-09-13 03:15 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-09-13 03:15 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-09-13 03:01 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-09-13 03:01 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-09-12 14:05 - 2014-09-12 14:05 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2014-09-12 12:38 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-09-12 12:38 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-09-12 12:38 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-09-12 12:38 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-09-12 12:38 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-09-12 12:38 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-09-12 12:38 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-09-12 12:38 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-09-12 12:38 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-09-12 12:25 - 2014-09-12 12:25 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149.exe

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-09-07 19:34 - 2014-09-16 22:23 - 00000000 ____D () C:\FRST

2014-09-07 13:44 - 2014-09-07 13:47 - 00000000 ___HD () C:\System Shared

2014-08-30 10:35 - 2014-08-30 10:37 - 17088592 _____ (Electronic Arts, Inc.) C:\Users\Luca\Downloads\OriginThinSetup.exe

2014-08-29 19:24 - 2014-08-29 19:24 - 01101648 _____ () C:\Users\Luca\Downloads\LogMeIn Hamachi - CHIP-Installer.exe

2014-08-29 18:27 - 2013-03-04 06:34 - 01808510 _____ () C:\Users\Luca\Downloads\TekkitLite.jar

2014-08-29 18:27 - 2013-03-04 06:33 - 02061638 _____ () C:\Users\Luca\Downloads\minecraft_server.jar

2014-08-29 18:27 - 2013-01-12 05:40 - 00000000 ____D () C:\Users\Luca\Downloads\mods

2014-08-29 18:27 - 2013-01-12 05:39 - 00000000 ____D () C:\Users\Luca\Downloads\coremods

2014-08-29 18:27 - 2013-01-04 09:42 - 00000555 _____ () C:\Users\Luca\Downloads\server.properties

2014-08-29 18:27 - 2013-01-04 09:20 - 00000054 _____ () C:\Users\Luca\Downloads\launch.sh

2014-08-29 18:27 - 2013-01-04 09:20 - 00000051 _____ () C:\Users\Luca\Downloads\launch.bat

2014-08-29 18:17 - 2014-08-29 18:22 - 00001376 _____ () C:\Users\Luca\Desktop\TechnicLauncher - Verknüpfung.lnk

2014-08-29 18:17 - 2014-08-29 18:19 - 00000000 ____D () C:\Users\Luca\Documents\Tekkit

2014-08-29 18:14 - 2014-08-29 18:16 - 20827501 _____ () C:\Users\Luca\Downloads\Tekkit_Lite_Server_0.6.5.zip

2014-08-28 17:44 - 2014-08-28 17:44 - 01397992 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.0_148.exe

2014-08-28 15:01 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-28 15:01 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-28 15:01 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-27 17:27 - 2014-08-27 17:27 - 02249144 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.4.0_147.exe

2014-08-21 12:20 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-08-21 12:20 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-08-21 12:20 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-08-21 12:20 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-08-21 12:20 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-08-21 12:20 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-08-21 12:19 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-08-21 12:19 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-08-21 12:19 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-08-21 12:19 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-08-18 14:08 - 2014-08-18 14:09 - 02836320 _____ (FlyVPN) C:\Users\Luca\Downloads\FlyClientInstaller_3.0.1.8(1).exe

2014-08-18 14:01 - 2014-08-18 14:09 - 00001033 _____ () C:\Users\Dirk\Desktop\FlyVPN.lnk

2014-08-18 14:01 - 2014-08-18 14:09 - 00000000 ____D () C:\Program Files (x86)\FlyVPN

2014-08-18 14:01 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\FlyVPN

2014-08-18 14:00 - 2014-08-18 14:00 - 02836320 _____ (FlyVPN) C:\Users\Luca\Downloads\FlyClientInstaller_3.0.1.8.exe

2014-08-18 13:56 - 2014-09-13 03:43 - 00001149 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-08-17 22:37 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2014-08-17 22:37 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll

2014-08-17 22:37 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-08-17 22:37 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-08-17 22:37 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2014-08-17 22:37 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2014-08-17 22:37 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe

2014-08-17 22:37 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll

2014-08-17 19:24 - 2014-08-17 20:36 - 620143037 _____ () C:\Users\Luca\Downloads\mb_warband_setup_1160.exe

2014-08-17 18:16 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-08-17 18:16 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-08-17 18:16 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-08-17 18:16 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-08-17 18:16 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-08-17 18:16 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-08-17 18:16 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-08-17 18:16 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-08-17 18:16 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-08-17 18:16 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-08-17 18:16 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-08-17 18:16 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-08-17 18:11 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-08-17 18:11 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-16 22:23 - 2014-09-07 19:34 - 00000000 ____D () C:\FRST

2014-09-16 22:21 - 2012-01-22 18:47 - 00001268 _____ () C:\Windows\SysWOW64\excltmp~.dat

2014-09-16 22:18 - 2014-09-15 21:18 - 00000000 ____D () C:\Users\Luca\Desktop\Wartung

2014-09-16 22:18 - 2009-07-14 06:45 - 00022512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-16 22:18 - 2009-07-14 06:45 - 00022512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-16 22:15 - 2013-06-02 21:21 - 00000000 ____D () C:\Users\Dirk\Desktop\Wartung

2014-09-16 22:14 - 2012-01-22 18:46 - 00000415 _____ () C:\NET.INI

2014-09-16 22:14 - 2012-01-14 00:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-16 22:14 - 2012-01-12 14:25 - 01435948 _____ () C:\Windows\WindowsUpdate.log

2014-09-16 22:12 - 2012-02-19 12:48 - 00000000 ____D () C:\Users\Luca\AppData\Local\LogMeIn Hamachi

2014-09-16 22:11 - 2014-01-16 15:31 - 00010049 _____ () C:\Windows\SysWOW64\cchservice.err

2014-09-16 22:11 - 2009-07-14 06:51 - 00213886 _____ () C:\Windows\setupact.log

2014-09-16 22:10 - 2012-01-12 14:51 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-09-16 22:10 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-16 22:07 - 2014-09-16 22:07 - 00001166 _____ () C:\Users\Dirk\Desktop\Mozilla Firefox.lnk

2014-09-16 22:05 - 2012-11-02 19:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-09-16 21:55 - 2012-01-14 00:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-16 21:52 - 2014-09-16 21:52 - 00000000 ___HD () C:\ProgramData\Device

2014-09-16 21:52 - 2010-11-21 05:47 - 00688694 _____ () C:\Windows\PFRO.log

2014-09-16 21:51 - 2014-09-16 21:41 - 00000000 ____D () C:\AdwCleaner

2014-09-16 21:51 - 2012-01-14 00:02 - 00000000 ____D () C:\Users\Luca

2014-09-16 18:06 - 2013-09-30 16:07 - 00000000 ____D () C:\ProgramData\Origin

2014-09-16 17:56 - 2013-09-30 16:59 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-09-16 17:41 - 2013-09-30 16:07 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-09-16 15:35 - 2013-08-22 19:35 - 00000203 _____ () C:\Users\Luca\AppData\Roaming\WB.CFG

2014-09-16 15:13 - 2013-09-30 16:59 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-09-15 21:56 - 2014-09-15 21:45 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-15 21:45 - 2014-09-15 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-15 21:45 - 2014-09-15 21:44 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2013-05-23 21:52 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-09-15 21:27 - 2014-09-15 21:22 - 00001280 _____ () C:\Users\Dirk\Desktop\Revo Uninstaller.lnk

2014-09-15 21:27 - 2014-09-15 21:22 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-09-14 18:16 - 2014-09-14 18:13 - 00000000 ____D () C:\Users\Luca\Documents\Spiele-launcher

2014-09-14 18:13 - 2014-09-14 18:11 - 00000000 ____D () C:\Users\Luca\Documents\Sauerbraten

2014-09-14 10:48 - 2013-10-01 14:10 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins

2014-09-14 10:48 - 2013-06-03 20:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-09-13 18:01 - 2010-11-21 08:50 - 00718866 _____ () C:\Windows\system32\perfh007.dat

2014-09-13 18:01 - 2010-11-21 08:50 - 00156680 _____ () C:\Windows\system32\perfc007.dat

2014-09-13 18:01 - 2009-07-14 07:13 - 01662620 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-13 17:57 - 2012-01-17 22:53 - 00000000 ____D () C:\Users\Luca\Documents\Outlook-Dateien

2014-09-13 16:11 - 2014-09-13 16:07 - 00000000 ____D () C:\Users\Luca\Documents\Battlefield 4 CTE

2014-09-13 16:10 - 2014-06-28 10:23 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe

2014-09-13 16:07 - 2014-09-13 16:06 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(1).exe

2014-09-13 16:02 - 2014-09-13 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4 CTE

2014-09-13 16:02 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-09-13 16:01 - 2013-09-30 16:59 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-09-13 16:00 - 2012-01-12 15:18 - 00328254 _____ () C:\Windows\DirectX.log

2014-09-13 11:38 - 2014-09-13 11:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-09-13 06:44 - 2012-01-12 14:26 - 00000000 ____D () C:\Users\Dirk

2014-09-13 04:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-09-13 03:43 - 2014-08-18 13:56 - 00001149 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-09-13 03:43 - 2013-12-26 04:56 - 00000000 ____D () C:\ProgramData\Package Cache

2014-09-13 03:43 - 2013-05-24 10:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-09-13 03:43 - 2013-05-24 10:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-09-13 03:15 - 2012-01-15 18:47 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-13 03:13 - 2013-05-20 18:48 - 01635964 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-09-13 03:12 - 2013-08-18 12:38 - 00000000 ____D () C:\Windows\system32\MRT

2014-09-13 03:02 - 2012-01-12 16:21 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-09-12 14:06 - 2012-11-02 19:25 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-09-12 14:06 - 2012-01-12 14:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-09-12 14:05 - 2014-09-12 14:05 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2014-09-12 12:27 - 2013-09-30 16:22 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-09-12 12:25 - 2014-09-12 12:25 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149.exe

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-09-09 23:45 - 2013-11-07 21:53 - 00000000 ____D () C:\Windows\pss

2014-09-09 23:45 - 2013-03-24 11:42 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\Skype

2014-09-09 23:45 - 2012-07-11 19:42 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2014-09-07 14:11 - 2010-11-21 09:00 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-09-07 13:47 - 2014-09-07 13:44 - 00000000 ___HD () C:\System Shared

2014-08-30 10:37 - 2014-08-30 10:35 - 17088592 _____ (Electronic Arts, Inc.) C:\Users\Luca\Downloads\OriginThinSetup.exe

2014-08-29 21:00 - 2013-03-10 10:53 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\.minecraft

2014-08-29 19:24 - 2014-08-29 19:24 - 01101648 _____ () C:\Users\Luca\Downloads\LogMeIn Hamachi - CHIP-Installer.exe

2014-08-29 18:29 - 2012-07-08 11:02 - 00003072 ___SH () C:\Users\Luca\Thumbs.db

2014-08-29 18:22 - 2014-08-29 18:17 - 00001376 _____ () C:\Users\Luca\Desktop\TechnicLauncher - Verknüpfung.lnk

2014-08-29 18:19 - 2014-08-29 18:17 - 00000000 ____D () C:\Users\Luca\Documents\Tekkit

2014-08-29 18:16 - 2014-08-29 18:14 - 20827501 _____ () C:\Users\Luca\Downloads\Tekkit_Lite_Server_0.6.5.zip

2014-08-29 14:20 - 2013-04-19 17:37 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\.technic

2014-08-28 17:44 - 2014-08-28 17:44 - 01397992 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.0_148.exe

2014-08-28 17:34 - 2009-07-14 06:45 - 00414096 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-27 17:27 - 2014-08-27 17:27 - 02249144 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.4.0_147.exe

2014-08-25 06:53 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-08-23 04:07 - 2014-08-28 15:01 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-23 03:45 - 2014-08-28 15:01 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-23 02:59 - 2014-08-28 15:01 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-19 20:05 - 2014-09-13 03:15 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-08-19 19:39 - 2014-09-13 03:15 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-08-19 07:41 - 2013-01-27 15:40 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-08-19 01:01 - 2014-09-13 03:15 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-08-19 00:29 - 2014-09-13 03:15 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-08-19 00:29 - 2014-09-13 03:15 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-08-19 00:26 - 2014-09-13 03:15 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-08-19 00:20 - 2014-09-13 03:15 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-08-19 00:19 - 2014-09-13 03:15 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-08-19 00:15 - 2014-09-13 03:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-08-19 00:15 - 2014-09-13 03:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-08-19 00:14 - 2014-09-13 03:15 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-08-19 00:14 - 2014-09-13 03:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-08-19 00:08 - 2014-09-13 03:15 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-08-19 00:08 - 2014-09-13 03:15 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-08-19 00:08 - 2014-09-13 03:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-08-19 00:05 - 2014-09-13 03:15 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-08-19 00:03 - 2014-09-13 03:15 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-08-19 00:03 - 2014-09-13 03:15 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-08-19 00:03 - 2014-09-13 03:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-08-18 23:57 - 2014-09-13 03:15 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-08-18 23:56 - 2014-09-13 03:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-08-18 23:51 - 2014-09-13 03:15 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-08-18 23:46 - 2014-09-13 03:15 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-08-18 23:45 - 2014-09-13 03:15 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-08-18 23:45 - 2014-09-13 03:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-08-18 23:44 - 2014-09-13 03:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-08-18 23:44 - 2014-09-13 03:15 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-08-18 23:42 - 2014-09-13 03:15 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-08-18 23:40 - 2014-09-13 03:15 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-08-18 23:39 - 2014-09-13 03:15 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-08-18 23:39 - 2014-09-13 03:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-08-18 23:39 - 2014-09-13 03:15 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-08-18 23:38 - 2014-09-13 03:15 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-08-18 23:37 - 2014-09-13 03:15 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-08-18 23:36 - 2014-09-13 03:15 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-08-18 23:35 - 2014-09-13 03:15 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-08-18 23:27 - 2014-09-13 03:15 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-08-18 23:25 - 2014-09-13 03:15 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-08-18 23:25 - 2014-09-13 03:15 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-08-18 23:23 - 2014-09-13 03:15 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-08-18 23:23 - 2014-09-13 03:15 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-08-18 23:22 - 2014-09-13 03:15 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-08-18 23:19 - 2014-09-13 03:15 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-08-18 23:17 - 2014-09-13 03:15 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-08-18 23:17 - 2014-09-13 03:15 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-08-18 23:16 - 2014-09-13 03:15 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-08-18 23:15 - 2014-09-13 03:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-08-18 23:15 - 2014-09-13 03:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-08-18 23:09 - 2014-09-13 03:15 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-08-18 23:08 - 2014-09-13 03:15 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-08-18 23:07 - 2014-09-13 03:15 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-08-18 22:55 - 2014-09-13 03:15 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-08-18 22:46 - 2014-09-13 03:15 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-08-18 22:38 - 2014-09-13 03:15 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-08-18 22:38 - 2014-09-13 03:15 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-08-18 22:36 - 2014-09-13 03:15 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-08-18 14:09 - 2014-08-18 14:08 - 02836320 _____ (FlyVPN) C:\Users\Luca\Downloads\FlyClientInstaller_3.0.1.8(1).exe

2014-08-18 14:09 - 2014-08-18 14:01 - 00001033 _____ () C:\Users\Dirk\Desktop\FlyVPN.lnk

2014-08-18 14:09 - 2014-08-18 14:01 - 00000000 ____D () C:\Program Files (x86)\FlyVPN

2014-08-18 14:01 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\FlyVPN

2014-08-18 14:00 - 2014-08-18 14:00 - 02836320 _____ (FlyVPN) C:\Users\Luca\Downloads\FlyClientInstaller_3.0.1.8.exe

2014-08-18 13:56 - 2013-05-24 10:48 - 00000000 ____D () C:\ProgramData\Avira

2014-08-18 13:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-08-17 21:16 - 2012-05-28 21:44 - 00001156 _____ () C:\Users\Dirk\Desktop\Mount&Blade Warband.lnk

2014-08-17 21:16 - 2012-01-21 16:58 - 00001156 _____ () C:\Users\Luca\Desktop\Mount&Blade Warband.lnk

2014-08-17 21:15 - 2012-01-21 16:58 - 00000000 ____D () C:\Program Files (x86)\Mount&Blade Warband

2014-08-17 20:36 - 2014-08-17 19:24 - 620143037 _____ () C:\Users\Luca\Downloads\mb_warband_setup_1160.exe

2014-08-17 19:00 - 2013-10-01 19:39 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr

2014-08-17 18:47 - 2013-03-15 19:32 - 00000000 ____D () C:\ProgramData\Skype
 

Some content of TEMP:

====================

C:\Users\Luca\AppData\Local\Temp\avgnt.exe

C:\Users\Luca\AppData\Local\Temp\vlc-2.1.3-win32.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 

==================== End Of Log ============================

--- --- ---

--- --- ---

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Hallo! Nein, Probleme gibts keine mehr. Vielen Dank !!

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014

Ran by Luca (ATTENTION: The logged in user is not administrator) on LUCA-PC on 21-09-2014 18:27:44

Running from C:\Users\Luca\Desktop\Wartung\FRST

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(WinZip Computing, Inc. and H.C. Top Systems B.V.) C:\Program Files (x86)\WinZip\WZQKPICK.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12666984 2011-08-09] (Realtek Semiconductor)

HKLM\...\Run: [Cm106Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd

HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190472 2009-09-17] (Logitech Inc.)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)

HKLM-x32\...\Run: [ChicoSys] => C:\Windows\SysWOW64\cc32\webtmr.exe [6484352 2009-07-14] (Salfeld Computer)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)

HKU\.DEFAULT\...\Run: [CCWinTray] => C:\Windows\tray\wintmr.exe [6864256 2009-07-14] (Salfeld Computer)

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DisableClock] 1

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DisableLockWorkstation] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoFind] 0

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk

ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-3000299772-3109549842-2761917205-1002\User: Group Policy restriction detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=M5AE8E295-B993-47C6-8DDD-8940876D483D&SearchSource=55&CUI=&UM=5&UP=SP3142CD60-8666-44CB-9353-9A6443C1AC0A&SSPV=

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9E34843840D2CC01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

SearchScopes: HKLM - {7C2360B9-08CA-8C54-843A-689F5B9F2EBE} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

SearchScopes: HKLM-x32 - {3237C8AF-001A-4C1F-9C64-26DD38C58B87} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

SearchScopes: HKCU - {C888714D-D117-487A-81A0-D4AF51BFC142} URL = hxxp://www.search.ask.com/web?p2=%5EADN%5EOSJ000%5EYY%5EDE&gct=&itbv=12.6.0.11&o=APN10616&tpid=ORJ-V7&apn_uid=47CA41B7-1F3E-4120-9C21-38501944B538&apn_ptnrs=ADN&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=ie_10.0.9200.16720&doi=2013-11-11&trgb=IE&q={searchTerms}&psv=

BHO: No Name -> {00C6482D-C502-44C8-8409-FCE54AD9C208} ->  No File

BHO: No Name -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} ->  No File

BHO: No Name -> {53707962-6F74-2D53-2644-206D7942484F} ->  No File

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: HelperObject Class -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\SnagIt 7\SnagItBHO.dll (TechSmith Corporation)

BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 7\SnagItIEAddin.dll (TechSmith Corporation)

Toolbar: HKLM-x32 - metacrawler  Toolbar - {7EACAC38-B7F6-4514-9DC1-3428A7964ABD} - C:\Program Files (x86)\metaCrawler\1.8.19.0\metacrawlerTlbr.dll No File

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - No Name - {4F524A2D-5637-006A-76A7-7A786E7484D7} -  No File

DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} 

DPF: HKLM {8AD9C840-044E-11D1-B3E9-00805F499D93} 

DPF: HKLM {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} 

DPF: HKLM {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} 

DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} 

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: HKLM-x32 {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} 

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()

FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll No File

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @ei.FromDocToPDF_65.com/Plugin -> C:\Program Files (x86)\FromDocToPDF_65EI\Installr\1.bin\NP65EISB.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @Webzen.com/NPBrowserExt -> C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll (WEBZEN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Google.com/GoogleEarthPlugin -> C:\Users\Luca\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Avira Browser Safety - C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\Extensions\abs@avira.com [2014-08-28]

FF Extension: Better Battlelog (BBLog) - C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack [2014-09-20]

FF Extension: Adblock Plus - C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\316ztsti.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-04]
 

Chrome: 

=======

Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

CHR Profile: C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Drive) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-06]

CHR Extension: (YouTube) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-06]

CHR Extension: (Google Search) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-06]

CHR Extension: (No Name) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\fghkofpnnkjalaoiicophpbfedkenopm [2013-12-23]

CHR Extension: (No Name) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gencfebafahakkdhhdideplccaehjekp [2014-02-15]

CHR Extension: (Gmail) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-06]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

S2 ksupmgr; C:\Windows\SysWOW64\ksupmgr.exe [765592 2010-08-25] (Salfeld Computer)

R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 lmhosts; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)

R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 NlaSvc; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 nsi; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-09-13] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-09-13] ()

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-10-22] (TuneUp Software)

S4 OtShotUpdateService; C:\Program Files (x86)\OtShot\OtshotUpdateServiceEx.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-01-14] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-26] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-01-14] ()

R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

S3 StarOpen; No ImagePath

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)

S3 USBMULCD; C:\Windows\System32\drivers\CM10664.sys [1307648 2011-03-31] (C-Media Electronics Inc)

S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-20 10:54 - 2014-09-20 10:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-09-18 17:50 - 2014-09-18 17:50 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(2).exe

2014-09-16 22:07 - 2014-09-16 22:07 - 00001166 _____ () C:\Users\Dirk\Desktop\Mozilla Firefox.lnk

2014-09-16 21:52 - 2014-09-16 21:52 - 00000000 ___HD () C:\ProgramData\Device

2014-09-16 21:51 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-09-16 21:41 - 2014-09-16 21:51 - 00000000 ____D () C:\AdwCleaner

2014-09-15 21:45 - 2014-09-15 21:56 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-15 21:45 - 2014-09-15 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2014-09-15 21:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-09-15 21:44 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-09-15 21:44 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-09-15 21:22 - 2014-09-15 21:27 - 00001280 _____ () C:\Users\Dirk\Desktop\Revo Uninstaller.lnk

2014-09-15 21:22 - 2014-09-15 21:27 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-09-15 21:18 - 2014-09-20 20:17 - 00000000 ____D () C:\Users\Luca\Desktop\Wartung

2014-09-14 18:13 - 2014-09-14 18:16 - 00000000 ____D () C:\Users\Luca\Documents\Spiele-launcher

2014-09-14 18:11 - 2014-09-14 18:13 - 00000000 ____D () C:\Users\Luca\Documents\Sauerbraten

2014-09-13 16:07 - 2014-09-13 16:11 - 00000000 ____D () C:\Users\Luca\Documents\Battlefield 4 CTE

2014-09-13 16:06 - 2014-09-13 16:07 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(1).exe

2014-09-13 16:02 - 2014-09-13 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4 CTE

2014-09-13 03:15 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-09-13 03:15 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-09-13 03:15 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-09-13 03:15 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-09-13 03:15 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-09-13 03:15 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-09-13 03:15 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-09-13 03:15 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-09-13 03:15 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-09-13 03:15 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-09-13 03:15 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-09-13 03:15 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-09-13 03:15 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-09-13 03:15 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-09-13 03:15 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-09-13 03:15 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-09-13 03:15 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-09-13 03:15 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-09-13 03:15 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-09-13 03:15 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-09-13 03:15 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-09-13 03:15 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-09-13 03:15 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-09-13 03:15 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-09-13 03:15 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-09-13 03:15 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-09-13 03:15 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-09-13 03:15 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-09-13 03:15 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-09-13 03:15 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-09-13 03:15 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-09-13 03:15 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-09-13 03:15 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-09-13 03:15 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-09-13 03:15 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-09-13 03:15 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-09-13 03:15 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-09-13 03:15 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-09-13 03:15 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-09-13 03:15 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-09-13 03:15 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-09-13 03:15 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-09-13 03:15 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-09-13 03:15 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-09-13 03:15 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-09-13 03:15 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-09-13 03:15 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-09-13 03:15 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-09-13 03:15 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-09-13 03:15 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-09-13 03:01 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-09-13 03:01 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-09-12 14:05 - 2014-09-12 14:05 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2014-09-12 12:38 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-09-12 12:38 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-09-12 12:38 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-09-12 12:38 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-09-12 12:38 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-09-12 12:38 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-09-12 12:38 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-09-12 12:38 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-09-12 12:38 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-09-12 12:25 - 2014-09-12 12:25 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149.exe

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-09-07 19:34 - 2014-09-21 18:27 - 00000000 ____D () C:\FRST

2014-09-07 13:44 - 2014-09-19 19:06 - 00000000 ___HD () C:\System Shared

2014-08-30 10:35 - 2014-08-30 10:37 - 17088592 _____ (Electronic Arts, Inc.) C:\Users\Luca\Downloads\OriginThinSetup.exe

2014-08-29 19:24 - 2014-08-29 19:24 - 01101648 _____ () C:\Users\Luca\Downloads\LogMeIn Hamachi - CHIP-Installer.exe

2014-08-29 18:27 - 2013-03-04 06:34 - 01808510 _____ () C:\Users\Luca\Downloads\TekkitLite.jar

2014-08-29 18:27 - 2013-03-04 06:33 - 02061638 _____ () C:\Users\Luca\Downloads\minecraft_server.jar

2014-08-29 18:27 - 2013-01-12 05:40 - 00000000 ____D () C:\Users\Luca\Downloads\mods

2014-08-29 18:27 - 2013-01-12 05:39 - 00000000 ____D () C:\Users\Luca\Downloads\coremods

2014-08-29 18:27 - 2013-01-04 09:42 - 00000555 _____ () C:\Users\Luca\Downloads\server.properties

2014-08-29 18:27 - 2013-01-04 09:20 - 00000054 _____ () C:\Users\Luca\Downloads\launch.sh

2014-08-29 18:27 - 2013-01-04 09:20 - 00000051 _____ () C:\Users\Luca\Downloads\launch.bat

2014-08-29 18:17 - 2014-08-29 18:22 - 00001376 _____ () C:\Users\Luca\Desktop\TechnicLauncher - Verknüpfung.lnk

2014-08-29 18:17 - 2014-08-29 18:19 - 00000000 ____D () C:\Users\Luca\Documents\Tekkit

2014-08-29 18:14 - 2014-08-29 18:16 - 20827501 _____ () C:\Users\Luca\Downloads\Tekkit_Lite_Server_0.6.5.zip

2014-08-28 17:44 - 2014-08-28 17:44 - 01397992 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.0_148.exe

2014-08-28 15:01 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-28 15:01 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-28 15:01 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-27 17:27 - 2014-08-27 17:27 - 02249144 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.4.0_147.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-21 18:27 - 2014-09-07 19:34 - 00000000 ____D () C:\FRST

2014-09-21 18:26 - 2012-02-19 12:48 - 00000000 ____D () C:\Users\Luca\AppData\Local\LogMeIn Hamachi

2014-09-21 18:26 - 2012-01-22 18:47 - 00001268 _____ () C:\Windows\SysWOW64\excltmp~.dat

2014-09-21 18:25 - 2014-01-16 15:31 - 00011119 _____ () C:\Windows\SysWOW64\cchservice.err

2014-09-21 18:25 - 2012-01-22 18:46 - 00000415 _____ () C:\NET.INI

2014-09-21 18:25 - 2012-01-14 00:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-21 18:25 - 2012-01-12 14:51 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-09-21 18:25 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-21 18:25 - 2009-07-14 06:51 - 00215622 _____ () C:\Windows\setupact.log

2014-09-21 14:32 - 2012-01-12 14:25 - 01574030 _____ () C:\Windows\WindowsUpdate.log

2014-09-21 14:15 - 2009-07-14 06:45 - 00022512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-21 14:15 - 2009-07-14 06:45 - 00022512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-21 14:13 - 2013-09-30 16:59 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-09-21 14:09 - 2013-09-30 16:07 - 00000000 ____D () C:\ProgramData\Origin

2014-09-21 14:09 - 2013-09-30 16:07 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-09-21 11:40 - 2013-09-30 16:59 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-09-21 11:05 - 2012-11-02 19:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-09-21 10:55 - 2012-01-14 00:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-20 20:17 - 2014-09-15 21:18 - 00000000 ____D () C:\Users\Luca\Desktop\Wartung

2014-09-20 16:54 - 2013-05-20 21:26 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-09-20 16:53 - 2012-01-12 14:26 - 00000000 ____D () C:\Users\Dirk

2014-09-20 16:51 - 2013-06-03 20:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-09-20 10:55 - 2014-09-20 10:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-09-19 19:06 - 2014-09-07 13:44 - 00000000 ___HD () C:\System Shared

2014-09-19 19:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-09-18 17:51 - 2013-10-01 14:10 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins

2014-09-18 17:50 - 2014-09-18 17:50 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(2).exe

2014-09-16 22:15 - 2013-06-02 21:21 - 00000000 ____D () C:\Users\Dirk\Desktop\Wartung

2014-09-16 22:07 - 2014-09-16 22:07 - 00001166 _____ () C:\Users\Dirk\Desktop\Mozilla Firefox.lnk

2014-09-16 21:52 - 2014-09-16 21:52 - 00000000 ___HD () C:\ProgramData\Device

2014-09-16 21:52 - 2010-11-21 05:47 - 00688694 _____ () C:\Windows\PFRO.log

2014-09-16 21:51 - 2014-09-16 21:41 - 00000000 ____D () C:\AdwCleaner

2014-09-16 21:51 - 2012-01-14 00:02 - 00000000 ____D () C:\Users\Luca

2014-09-16 15:35 - 2013-08-22 19:35 - 00000203 _____ () C:\Users\Luca\AppData\Roaming\WB.CFG

2014-09-15 21:56 - 2014-09-15 21:45 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-15 21:45 - 2014-09-15 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-15 21:45 - 2014-09-15 21:44 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2013-05-23 21:52 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-09-15 21:27 - 2014-09-15 21:22 - 00001280 _____ () C:\Users\Dirk\Desktop\Revo Uninstaller.lnk

2014-09-15 21:27 - 2014-09-15 21:22 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-09-14 18:16 - 2014-09-14 18:13 - 00000000 ____D () C:\Users\Luca\Documents\Spiele-launcher

2014-09-14 18:13 - 2014-09-14 18:11 - 00000000 ____D () C:\Users\Luca\Documents\Sauerbraten

2014-09-13 18:01 - 2010-11-21 08:50 - 00718866 _____ () C:\Windows\system32\perfh007.dat

2014-09-13 18:01 - 2010-11-21 08:50 - 00156680 _____ () C:\Windows\system32\perfc007.dat

2014-09-13 18:01 - 2009-07-14 07:13 - 01662620 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-13 17:57 - 2012-01-17 22:53 - 00000000 ____D () C:\Users\Luca\Documents\Outlook-Dateien

2014-09-13 16:11 - 2014-09-13 16:07 - 00000000 ____D () C:\Users\Luca\Documents\Battlefield 4 CTE

2014-09-13 16:10 - 2014-06-28 10:23 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe

2014-09-13 16:07 - 2014-09-13 16:06 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(1).exe

2014-09-13 16:02 - 2014-09-13 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4 CTE

2014-09-13 16:02 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-09-13 16:01 - 2013-09-30 16:59 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-09-13 16:00 - 2012-01-12 15:18 - 00328254 _____ () C:\Windows\DirectX.log

2014-09-13 04:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-09-13 03:43 - 2014-08-18 13:56 - 00001149 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-09-13 03:43 - 2013-12-26 04:56 - 00000000 ____D () C:\ProgramData\Package Cache

2014-09-13 03:43 - 2013-05-24 10:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-09-13 03:43 - 2013-05-24 10:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-09-13 03:15 - 2012-01-15 18:47 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-13 03:13 - 2013-05-20 18:48 - 01635964 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-09-13 03:12 - 2013-08-18 12:38 - 00000000 ____D () C:\Windows\system32\MRT

2014-09-13 03:02 - 2012-01-12 16:21 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-09-12 14:06 - 2012-11-02 19:25 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-09-12 14:06 - 2012-01-12 14:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-09-12 14:05 - 2014-09-12 14:05 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2014-09-12 12:27 - 2013-09-30 16:22 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-09-12 12:25 - 2014-09-12 12:25 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149.exe

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-09-09 23:45 - 2013-11-07 21:53 - 00000000 ____D () C:\Windows\pss

2014-09-09 23:45 - 2013-03-24 11:42 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\Skype

2014-09-09 23:45 - 2012-07-11 19:42 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2014-09-07 14:11 - 2010-11-21 09:00 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-08-30 10:37 - 2014-08-30 10:35 - 17088592 _____ (Electronic Arts, Inc.) C:\Users\Luca\Downloads\OriginThinSetup.exe

2014-08-29 21:00 - 2013-03-10 10:53 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\.minecraft

2014-08-29 19:24 - 2014-08-29 19:24 - 01101648 _____ () C:\Users\Luca\Downloads\LogMeIn Hamachi - CHIP-Installer.exe

2014-08-29 18:29 - 2012-07-08 11:02 - 00003072 ___SH () C:\Users\Luca\Thumbs.db

2014-08-29 18:22 - 2014-08-29 18:17 - 00001376 _____ () C:\Users\Luca\Desktop\TechnicLauncher - Verknüpfung.lnk

2014-08-29 18:19 - 2014-08-29 18:17 - 00000000 ____D () C:\Users\Luca\Documents\Tekkit

2014-08-29 18:16 - 2014-08-29 18:14 - 20827501 _____ () C:\Users\Luca\Downloads\Tekkit_Lite_Server_0.6.5.zip

2014-08-29 14:20 - 2013-04-19 17:37 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\.technic

2014-08-28 17:44 - 2014-08-28 17:44 - 01397992 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.0_148.exe

2014-08-28 17:34 - 2009-07-14 06:45 - 00414096 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-27 17:27 - 2014-08-27 17:27 - 02249144 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.4.0_147.exe

2014-08-25 06:53 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-08-23 04:07 - 2014-08-28 15:01 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-23 03:45 - 2014-08-28 15:01 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-23 02:59 - 2014-08-28 15:01 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
 

Some content of TEMP:

====================

C:\Users\Luca\AppData\Local\Temp\avgnt.exe

C:\Users\Luca\AppData\Local\Temp\vlc-2.1.3-win32.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 

==================== BCD ================================

Der Speicher fr die Startkonfigurationsdaten konnte nicht ge”ffnet werden.

Zugriff verweigert
 
 

==================== End Of Log ============================

--- --- ---

Hatte ich doch eigentlich schon geschickt:
20.9. 19:25: Revo Uninstaller, mbam, AdwCleaner, Junkware Removal Tool

ESET? SecurityCheck?

Hallo,
hier das log von Eset

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=7628efacfc509b42951d75f7b660e4c0

# engine=20328

# end=stopped

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2014-09-27 06:45:33

# local_time=2014-09-27 08:45:33 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Avira Desktop'

# compatibility_mode=1810 16777213 100 100 8659 156395711 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 41073 163473383 0 0

# scanned=230622

# found=44

# cleaned=0

# scan_time=5033

sh=7503703BB6B837A2CC3982A5C3D36A2DCAC4816F ft=1 fh=537fd5797bd531d3 vn="Win32/Toolbar.MyWebSearch evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65EI\Installr\1.bin\65EIPlug.dll.vir"

sh=BB86578A6378B5C3933332C0AD990745752503B8 ft=1 fh=8c8f295d8992cd34 vn="Variante von Win32/Toolbar.MyWebSearch.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65EI\Installr\1.bin\65EZSETP.dll.vir"

sh=38C92074A1F09E6653D6C7A371B79E00E12E0A80 ft=1 fh=a84b2ac9d43880fd vn="Win32/Toolbar.MyWebSearch evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65EI\Installr\1.bin\NP65EISb.dll.vir"

sh=D845C08AA95B26C50A67FABA9F1BB8C569826CF3 ft=1 fh=ea188e9087211b2b vn="Win32/YourFileDownloader.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\goforfiles\GFFUpdater.exe.vir"

sh=B1B0F39ED5795D29F4574D42AF9A162134E4F9ED ft=1 fh=deb392e704818978 vn="Win32/Toolbar.Montiera.J evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\escortShld.dll.vir"

sh=7C37B2BC1334EACBFE95768462B259B3D6608CB8 ft=1 fh=c71c0011faab6c24 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\metacrawlerApp.dll.vir"

sh=C60A7F65B55FF089C5AB2EC2C6E9D6629314A9D8 ft=1 fh=c71c001174b731d0 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\metacrawlerEng.dll.vir"

sh=76296F7C706DECE5D1F57C0A3C108DF27710A5C0 ft=1 fh=c71c001178cd107c vn="Variante von Win32/Toolbar.Montiera.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\metacrawlerTlbr.dll.vir"

sh=090C82291DF1DFEA5E37A07E0C2C1A444303F054 ft=1 fh=be674838b3d53d38 vn="Variante von Win32/DealPly.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\MetaCrawlerUpdater.exe.vir"

sh=72C832BDC6DB63144D4C183D2942C6250FA2524F ft=1 fh=c71c0011676d57d5 vn="Variante von Win32/Toolbar.Escort.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\bh\metacrawler.dll.vir"

sh=654E0A1A6AE72E25E7F414FAECF512D45B86161A ft=1 fh=7ff8a1903ba68236 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\DaemonProcess.exe.vir"

sh=7459B123E67C9DF4F5C2DB3D4B53922F79B9908A ft=1 fh=6093839fb77ef0e5 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\Mobogenie.exe.vir"

sh=99B67770BF8FEEF51BF266F528CE9E0C1EE5F7EB ft=1 fh=cf35ef3f6cb55427 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\UpdateMoboGenie.exe.vir"

sh=E726D8BAED9714F2CCF9E8EE01DA76F32716870A ft=1 fh=3a4d9e1ea77ed494 vn="Win32/SpeedingUpMyPC.O Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Optimizer Pro\OptimizerPro.exe.vir"

sh=8B9A9FA0DDD24217598859F0C4CA99EA503C438F ft=1 fh=c925ea0925b96d8e vn="Variante von Win32/SProtector.J evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll.vir"

sh=A2B332C78DDC4AA7669097C889A2B42C099CC349 ft=1 fh=09c2eef65b5784b6 vn="Variante von Win64/SProtector.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll.vir"

sh=C5828B700B9EF61FA1534D5D18482BF12F591CBF ft=1 fh=0404da55e35b3671 vn="Variante von Win32/AdWare.SpeedingUpMyPC.D Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Optimizer Pro\OptProLauncher.exe.vir"

sh=DDD2974F59F7DBB2C99557C05FB33787C7B27748 ft=1 fh=b62022df389e395a vn="Variante von Win32/Adware.SpeedingUpMyPC.C Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe.vir"

sh=59ED2B887805A6ED6A639BD415A50ADAF351F998 ft=1 fh=c43a7abb73919f5a vn="Variante von Win32/Toolbar.MyWebSearch.O evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dirk\AppData\LocalLow\FromDocToPDF_65EI\Installr\Cache\003187C6.exe.vir"

sh=185359CC91E21233E6E6856FC096199426382AAA ft=1 fh=e7faf7da9eb961d7 vn="Variante von Win32/DealPly.S evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dirk\AppData\Roaming\MetaCrawler\UpdateProc\UpdateTask.exe.vir"

sh=F24541519C94E40229E18BC9B69F804BFF3C6184 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\rjrfyuyc@euay-ee.edu\content\bg.js.vir"

sh=48E370A95D245317D3702443EA909B6066894B7C ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\wet0uuy@hkvzhjaw.org\content\bg.js.vir"

sh=9E77E1D2FD7B77B0FD8A71A70C35DD5A16836CF3 ft=1 fh=b241df9fafd25e77 vn="Win32/Systweak.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dirk\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir"

sh=B8E6BA69D75149795E4283A8A484B694CC50C001 ft=1 fh=7690bee84a2cb28f vn="Win32/VOPackage.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dirk\AppData\Roaming\VOPackage\Uninstall.exe.vir"

sh=44ED55CB1079D34027CB77CD62248064FF5A0A09 ft=1 fh=3916453e74289c7d vn="Win32/VOPackage.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dirk\AppData\Roaming\VOPackage\VOPackage.exe.vir"

sh=312B4326F089F044FEFE73A81FD94223E3F36410 ft=1 fh=789dc111d976203c vn="Variante von Win32/VOPackage.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dirk\AppData\Roaming\VOPackage\VOsrv.exe.vir"

sh=DA987CA3C9BE4E3150A8EDB739BB79BB913610B8 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\fghkofpnnkjalaoiicophpbfedkenopm\8.3\KIHIyHENEr.js.vir"

sh=61897FE467FE567D4E93C0E87AF1899DB5416CA2 ft=1 fh=2b4e98822df8a714 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"

sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\apnic.dll"

sh=FFA8B6510D624A55F3EB7FFD6D5221A44944681C ft=1 fh=3386eb0d6ed0e5e1 vn="Variante von Win32/Bundled.Toolbar.Ask.G potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\apnstub.exe"

sh=1A3F14C0A66F9AF050D1F34FBACBAADC31751A07 ft=1 fh=2704a03a0f47b728 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\apntoolbarinstaller.exe"

sh=4B553651EF610C0614F8393D6C25ABA0A8F09ECA ft=1 fh=92ef1bb072edf568 vn="Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\Offercast_AVIRAV7_.exe"

sh=5C313EC43EF08DA63104A8F8F9072730B42483C6 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\ProgramData\bakhlbmofdjaipjmkapmkljccjnbpohj\JTMUzSnW61X.js"

sh=5C313EC43EF08DA63104A8F8F9072730B42483C6 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\All Users\bakhlbmofdjaipjmkapmkljccjnbpohj\JTMUzSnW61X.js"

sh=44ED55CB1079D34027CB77CD62248064FF5A0A09 ft=1 fh=3916453e74289c7d vn="Win32/VOPackage.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8Z92QI7B\VuuPC-Installer[1].exe"

sh=A961D65EC7A27F8397FC9ED89C698FDC3E2B8018 ft=1 fh=e75f14cc30ca7c64 vn="Variante von Win32/Reporter.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GQ037YZH\RegClean2[1].exe"

sh=FEC19241949864DE766A2D193BC81E3366E379E4 ft=1 fh=ac6e9bcd558de938 vn="Win32/Conduit.SearchProtect.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OAYORZ2Z\SPSetup[1].exe"

sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X3EDH256\ApnIC[1].0"

sh=4CACDA09043243E84A3DBA2997836C150A2C2B0B ft=1 fh=c18395028fe7b6f5 vn="Win32/Mobogenie.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X3EDH256\Mobogenie_Setup_2.2.5_563[1].exe"

sh=5E877F079FC2912CE8FB7CD6977B74B84827FD7E ft=1 fh=481830f7804beb9f vn="Variante von Win32/DealPly.R evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X3EDH256\PriceMeter[1].exe"

sh=030AD18F823D1EB34F468CC4126A17555055F71C ft=1 fh=20230c57ed3eb8bf vn="Win32/OutBrowse.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X3EDH256\SearchProtectGeneric2[1].exe"

sh=2FABD278B0E388A9DC7834AC9412DD94CAC9F31E ft=1 fh=afdd8b6557ec58c1 vn="Variante von Win32/OutBrowse.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Temp\instract.exe"

sh=C4420C6E94B8CAACCB3811384280D8A93CB0A37D ft=1 fh=25f111c507a31a21 vn="Win32/Toolbar.Conduit.R evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Temp\SearchProtectINT.exe"

sh=FEC19241949864DE766A2D193BC81E3366E379E4 ft=1 fh=ac6e9bcd558de938 vn="Win32/Conduit.SearchProtect.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Dirk\AppData\Local\Temp\nsaA833\SpSetup.exe"

und von Security check:

Code:

 Results of screen317's Security Check version 0.99.87  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop   

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 Spybot - Search & Destroy 

 TuneUp Utilities 2012   

 TuneUp Utilities Language Pack (de-DE) 

 Java 7 Update 45  

 Java version out of Date! 

 Adobe Flash Player 15.0.0.152  

 Adobe Reader XI  

 Mozilla Firefox (32.0.3) 

 Google Chrome 31.0.1650.57  

 Google Chrome 31.0.1650.63  
 ````````Process Check: objlist.exe by Laurent````````  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Java updaten.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Frisches FRST log und Antwort auf meine Frage fehlt.

Hallo!
Java update ist geschehen.
TFC ist gelaufen.
Antwort auf deine Frage: Wenn du die Frage meinst, ob ich noch Probleme habe, die Antwort ist nein. Falls du eine andere Frage meinst: Bitte noch mal wiederholen.
Ich habe auch noch eine Frage: ESET hatte 44 Probleme gefunden. Muss man die nicht beheben?
Und hier noch FRST:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-09-2014 01

Ran by Dirk (administrator) on LUCA-PC on 28-09-2014 19:29:01

Running from C:\Users\Dirk\Desktop\Wartung2014\FRST

Loaded Profiles: Dirk & Luca (Available profiles: Dirk & Luca)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Salfeld Computer) C:\Windows\tray\wintmr.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_15_0_0_167_ActiveX.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12666984 2011-08-09] (Realtek Semiconductor)

HKLM\...\Run: [Cm106Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd

HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190472 2009-09-17] (Logitech Inc.)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)

HKLM-x32\...\Run: [ChicoSys] => C:\Windows\SysWOW64\cc32\webtmr.exe [6484352 2009-07-14] (Salfeld Computer)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-3000299772-3109549842-2761917205-1000\...\Run: [CCWinTray] => C:\Windows\tray\wintmr.exe [6864256 2009-07-14] (Salfeld Computer)

HKU\S-1-5-21-3000299772-3109549842-2761917205-1000\...\Run: [SpybotSD TeaTimer] => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)

HKU\S-1-5-21-3000299772-3109549842-2761917205-1000\...\Policies\system: [DisableLockWorkstation] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1000\...\Policies\system: [DisableClock] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1000\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-3000299772-3109549842-2761917205-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-3000299772-3109549842-2761917205-1000\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1000\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1000\...\MountPoints2: {602e1347-3d17-11e1-aa0a-806e6f6e6963} - D:\Run.exe

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DisableClock] 1

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DisableLockWorkstation] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-3000299772-3109549842-2761917205-1002\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-18\...\Run: [CCWinTray] => C:\Windows\tray\wintmr.exe [6864256 2009-07-14] (Salfeld Computer)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk

ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-3000299772-3109549842-2761917205-1002\User: Group Policy restriction detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDA429B1028D1CC01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - {7C2360B9-08CA-8C54-843A-689F5B9F2EBE} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

SearchScopes: HKLM-x32 - {3237C8AF-001A-4C1F-9C64-26DD38C58B87} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

SearchScopes: HKCU - DefaultScope {7C2360B9-08CA-8C54-843A-689F5B9F2EBE} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

SearchScopes: HKCU - {7C2360B9-08CA-8C54-843A-689F5B9F2EBE} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0BtDyEzzyB0A0F0AyEzyyB0B0FtCtA0AtN0D0Tzu0CyCtDtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu&cr=614645060&ir=

BHO: No Name -> {00C6482D-C502-44C8-8409-FCE54AD9C208} ->  No File

BHO: No Name -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} ->  No File

BHO: No Name -> {53707962-6F74-2D53-2644-206D7942484F} ->  No File

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: HelperObject Class -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\SnagIt 7\SnagItBHO.dll (TechSmith Corporation)

BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 7\SnagItIEAddin.dll (TechSmith Corporation)

Toolbar: HKLM-x32 - metacrawler  Toolbar - {7EACAC38-B7F6-4514-9DC1-3428A7964ABD} - C:\Program Files (x86)\metaCrawler\1.8.19.0\metacrawlerTlbr.dll No File

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - No Name - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} -  No File

DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} 

DPF: HKLM {8AD9C840-044E-11D1-B3E9-00805F499D93} 

DPF: HKLM {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} 

DPF: HKLM {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} 

DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} 

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: HKLM-x32 {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} 

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default

FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");

FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");

FF SelectedSearchEngine: Google

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()

FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll No File

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @ei.FromDocToPDF_65.com/Plugin -> C:\Program Files (x86)\FromDocToPDF_65EI\Installr\1.bin\NP65EISB.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @Webzen.com/NPBrowserExt -> C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll (WEBZEN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: TableConveRter - C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\7wfutslk@xhlwcooyy.net [2014-04-25]

FF Extension: Adblock Plus - C:\Users\Dirk\AppData\Roaming\Mozilla\Firefox\Profiles\v9vnichj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-01-27]
 

Chrome: 

=======

CHR Profile: C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (No Name) - C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\abepbblpkilpjohncjbccmdjhdhbnhdj [2013-05-17]

CHR Extension: (YouTube) - C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-27]

CHR Extension: (Google Search) - C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-27]

CHR Extension: (No Name) - C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg [2013-05-12]

CHR Extension: (Gmail) - C:\Users\Dirk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-27]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

S2 ksupmgr; C:\Windows\SysWOW64\ksupmgr.exe [765592 2010-08-25] (Salfeld Computer)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-09-13] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-09-13] ()

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-12-11] (TuneUp Software)

S4 OtShotUpdateService; C:\Program Files (x86)\OtShot\OtshotUpdateServiceEx.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-01-14] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-26] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-01-14] ()

R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

S3 StarOpen; No ImagePath

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)

S3 USBMULCD; C:\Windows\System32\drivers\CM10664.sys [1307648 2011-03-31] (C-Media Electronics Inc)

S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-28 18:59 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-09-28 18:59 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-09-28 18:59 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-09-28 18:59 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-09-28 18:58 - 2014-09-28 18:59 - 00005784 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log

2014-09-27 18:29 - 2014-09-27 18:29 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-09-27 09:34 - 2014-09-27 09:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-09-27 09:20 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-09-27 09:20 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-09-18 17:50 - 2014-09-18 17:50 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(2).exe

2014-09-16 22:07 - 2014-09-16 22:07 - 00001166 _____ () C:\Users\Dirk\Desktop\Mozilla Firefox.lnk

2014-09-16 21:52 - 2014-09-16 21:52 - 00000000 ___HD () C:\ProgramData\Device

2014-09-16 21:51 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-09-16 21:41 - 2014-09-16 21:51 - 00000000 ____D () C:\AdwCleaner

2014-09-15 21:45 - 2014-09-15 21:56 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-15 21:45 - 2014-09-15 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2014-09-15 21:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-15 21:44 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-09-15 21:44 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-09-15 21:44 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-09-15 21:36 - 2014-09-15 21:36 - 00000000 ____D () C:\Users\Dirk\AppData\Local\Adobe

2014-09-15 21:22 - 2014-09-15 21:27 - 00001280 _____ () C:\Users\Dirk\Desktop\Revo Uninstaller.lnk

2014-09-15 21:22 - 2014-09-15 21:27 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-09-15 21:18 - 2014-09-28 19:22 - 00000000 ____D () C:\Users\Dirk\Desktop\Wartung2014

2014-09-14 18:13 - 2014-09-14 18:16 - 00000000 ____D () C:\Users\Luca\Documents\Spiele-launcher

2014-09-14 18:11 - 2014-09-14 18:13 - 00000000 ____D () C:\Users\Luca\Documents\Sauerbraten

2014-09-13 16:07 - 2014-09-13 16:11 - 00000000 ____D () C:\Users\Luca\Documents\Battlefield 4 CTE

2014-09-13 16:06 - 2014-09-13 16:07 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149(1).exe

2014-09-13 16:02 - 2014-09-13 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4 CTE

2014-09-13 03:15 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-09-13 03:15 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-09-13 03:15 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-09-13 03:15 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-09-13 03:15 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-09-13 03:15 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-09-13 03:15 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-09-13 03:15 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-09-13 03:15 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-09-13 03:15 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-09-13 03:15 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-09-13 03:15 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-09-13 03:15 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-09-13 03:15 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-09-13 03:15 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-09-13 03:15 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-09-13 03:15 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-09-13 03:15 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-09-13 03:15 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-09-13 03:15 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-09-13 03:15 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-09-13 03:15 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-09-13 03:15 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-09-13 03:15 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-09-13 03:15 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-09-13 03:15 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-09-13 03:15 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-09-13 03:15 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-09-13 03:15 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-09-13 03:15 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-09-13 03:15 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-09-13 03:15 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-09-13 03:15 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-09-13 03:15 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-09-13 03:15 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-09-13 03:15 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-09-13 03:15 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-09-13 03:15 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-09-13 03:15 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-09-13 03:15 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-09-13 03:15 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-09-13 03:15 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-09-13 03:15 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-09-13 03:15 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-09-13 03:15 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-09-13 03:15 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-09-13 03:15 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-09-13 03:15 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-09-13 03:15 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-09-13 03:15 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-09-13 03:15 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-09-13 03:15 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-09-13 03:01 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-09-13 03:01 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-09-12 12:38 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-09-12 12:38 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-09-12 12:38 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-09-12 12:38 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-09-12 12:38 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-09-12 12:38 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-09-12 12:38 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-09-12 12:38 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-09-12 12:38 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-09-12 12:25 - 2014-09-12 12:25 - 01402920 _____ () C:\Users\Luca\Downloads\battlelog-web-plugins_2.5.1_149.exe

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-09-12 12:20 - 2014-09-12 12:20 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-09-07 19:34 - 2014-09-28 19:29 - 00000000 ____D () C:\FRST

2014-09-07 13:44 - 2014-09-19 19:06 - 00000000 ___HD () C:\System Shared

2014-08-30 10:35 - 2014-08-30 10:37 - 17088592 _____ (Electronic Arts, Inc.) C:\Users\Luca\Downloads\OriginThinSetup.exe

2014-08-29 19:24 - 2014-08-29 19:24 - 01101648 _____ () C:\Users\Luca\Downloads\LogMeIn Hamachi - CHIP-Installer.exe

2014-08-29 18:27 - 2013-03-04 06:34 - 01808510 _____ () C:\Users\Luca\Downloads\TekkitLite.jar

2014-08-29 18:27 - 2013-03-04 06:33 - 02061638 _____ () C:\Users\Luca\Downloads\minecraft_server.jar

2014-08-29 18:27 - 2013-01-12 05:40 - 00000000 ____D () C:\Users\Luca\Downloads\mods

2014-08-29 18:27 - 2013-01-12 05:39 - 00000000 ____D () C:\Users\Luca\Downloads\coremods

2014-08-29 18:27 - 2013-01-04 09:42 - 00000555 _____ () C:\Users\Luca\Downloads\server.properties

2014-08-29 18:27 - 2013-01-04 09:20 - 00000054 _____ () C:\Users\Luca\Downloads\launch.sh

2014-08-29 18:27 - 2013-01-04 09:20 - 00000051 _____ () C:\Users\Luca\Downloads\launch.bat

2014-08-29 18:17 - 2014-08-29 18:22 - 00001376 _____ () C:\Users\Luca\Desktop\TechnicLauncher - Verknüpfung.lnk

2014-08-29 18:17 - 2014-08-29 18:19 - 00000000 ____D () C:\Users\Luca\Documents\Tekkit

2014-08-29 18:14 - 2014-08-29 18:16 - 20827501 _____ () C:\Users\Luca\Downloads\Tekkit_Lite_Server_0.6.5.zip
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-28 19:23 - 2012-01-22 18:47 - 00001268 _____ () C:\Windows\SysWOW64\excltmp~.dat

2014-09-28 19:23 - 2012-01-22 18:46 - 00000415 _____ () C:\NET.INI

2014-09-28 19:17 - 2012-02-19 20:28 - 00000000 ____D () C:\Users\Dirk\AppData\Local\LogMeIn Hamachi

2014-09-28 19:17 - 2012-01-14 00:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-28 19:11 - 2009-07-14 06:45 - 00022512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-28 19:11 - 2009-07-14 06:45 - 00022512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-28 19:05 - 2012-11-02 19:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-09-28 19:04 - 2012-02-19 12:48 - 00000000 ____D () C:\Users\Luca\AppData\Local\LogMeIn Hamachi

2014-09-28 19:03 - 2014-01-16 15:31 - 00011761 _____ () C:\Windows\SysWOW64\cchservice.err

2014-09-28 19:03 - 2012-01-12 14:51 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-09-28 19:03 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-28 19:03 - 2009-07-14 06:51 - 00216630 _____ () C:\Windows\setupact.log

2014-09-28 19:02 - 2012-01-12 14:25 - 01808348 _____ () C:\Windows\WindowsUpdate.log

2014-09-28 18:59 - 2013-11-10 21:12 - 00000000 ____D () C:\ProgramData\Oracle

2014-09-28 18:59 - 2013-08-19 17:33 - 00000000 ____D () C:\Program Files (x86)\Java

2014-09-28 18:55 - 2012-01-14 00:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-28 16:36 - 2013-09-30 16:07 - 00000000 ____D () C:\ProgramData\Origin

2014-09-28 15:24 - 2013-09-30 16:59 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-09-28 15:23 - 2013-09-30 16:59 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-09-28 15:18 - 2013-09-30 16:07 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-09-28 10:44 - 2010-11-21 05:47 - 00689992 _____ () C:\Windows\PFRO.log

2014-09-27 18:21 - 2013-06-03 20:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-09-27 15:10 - 2013-03-24 11:42 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\Skype

2014-09-27 14:59 - 2012-01-25 22:18 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2012

2014-09-27 10:55 - 2013-10-01 19:39 - 00348928 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr

2014-09-27 10:05 - 2012-11-02 19:25 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-09-27 10:05 - 2012-11-02 19:25 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-09-27 10:05 - 2012-01-12 14:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-09-20 16:54 - 2013-05-20 21:26 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-09-20 16:53 - 2012-01-12 14:26 - 00000000 ____D () C:\Users\Dirk

2014-09-19 19:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-09-18 17:51 - 2013-10-01 14:10 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins

2014-09-16 22:15 - 2013-06-02 21:21 - 00000000 ____D () C:\Users\Dirk\Desktop\Wartung2013

2014-09-16 21:58 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-09-16 21:51 - 2012-01-14 00:02 - 00000000 ____D () C:\Users\Luca

2014-09-16 15:35 - 2013-08-22 19:35 - 00000203 _____ () C:\Users\Luca\AppData\Roaming\WB.CFG

2014-09-15 21:44 - 2013-05-23 21:52 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-09-15 09:06 - 2010-11-21 05:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-09-13 18:01 - 2010-11-21 08:50 - 00718866 _____ () C:\Windows\system32\perfh007.dat

2014-09-13 18:01 - 2010-11-21 08:50 - 00156680 _____ () C:\Windows\system32\perfc007.dat

2014-09-13 18:01 - 2009-07-14 07:13 - 01662620 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-13 17:57 - 2012-01-17 22:53 - 00000000 ____D () C:\Users\Luca\Documents\Outlook-Dateien

2014-09-13 16:10 - 2014-06-28 10:23 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe

2014-09-13 16:02 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-09-13 16:01 - 2013-09-30 16:59 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-09-13 16:00 - 2012-01-12 15:18 - 00328254 _____ () C:\Windows\DirectX.log

2014-09-13 04:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-09-13 03:43 - 2014-08-18 13:56 - 00001149 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-09-13 03:43 - 2013-12-26 04:56 - 00000000 ____D () C:\ProgramData\Package Cache

2014-09-13 03:43 - 2013-05-24 10:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-09-13 03:43 - 2013-05-24 10:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-09-13 03:15 - 2012-01-15 18:47 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-13 03:13 - 2013-05-20 18:48 - 01635964 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-09-13 03:12 - 2013-08-18 12:38 - 00000000 ____D () C:\Windows\system32\MRT

2014-09-13 03:02 - 2012-01-12 16:21 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-09-12 12:27 - 2013-09-30 16:22 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-09-09 23:45 - 2013-11-07 21:53 - 00000000 ____D () C:\Windows\pss

2014-09-09 23:45 - 2012-07-11 19:42 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration

2014-09-09 23:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2014-09-07 14:11 - 2010-11-21 09:00 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-08-29 21:00 - 2013-03-10 10:53 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\.minecraft

2014-08-29 18:29 - 2012-07-08 11:02 - 00003072 ___SH () C:\Users\Luca\Thumbs.db

2014-08-29 14:20 - 2013-04-19 17:37 - 00000000 ____D () C:\Users\Luca\AppData\Roaming\.technic
 

Some content of TEMP:

====================

C:\Users\Dirk\AppData\Local\Temp\avgnt.exe

C:\Users\Luca\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 

==================== BCD ================================
 

Windows-Start-Manager

---------------------

Bezeichner              {bootmgr}

device                  partition=\Device\HarddiskVolume1

description             Windows Boot Manager

locale                  de-DE

inherit                 {globalsettings}

default                 {current}

resumeobject            {4ce375f1-3d17-11e1-bc5e-86918ed0c13b}

displayorder            {current}

toolsdisplayorder       {memdiag}

timeout                 0
 

Windows-Startladeprogramm

-------------------------

Bezeichner              {current}

device                  partition=C:

path                    \Windows\system32\winload.exe

description             Windows 7

locale                  de-DE

inherit                 {bootloadersettings}

recoverysequence        {4ce375f3-3d17-11e1-bc5e-86918ed0c13b}

recoveryenabled         Yes

osdevice                partition=C:

systemroot              \Windows

resumeobject            {4ce375f1-3d17-11e1-bc5e-86918ed0c13b}

nx                      OptIn
 

Windows-Startladeprogramm

-------------------------

Bezeichner              {4ce375f3-3d17-11e1-bc5e-86918ed0c13b}

device                  ramdisk=[C:]\Recovery\4ce375f3-3d17-11e1-bc5e-86918ed0c13b\Winre.wim,{4ce375f4-3d17-11e1-bc5e-86918ed0c13b}

path                    \windows\system32\winload.exe

description             Windows Recovery Environment

inherit                 {bootloadersettings}

osdevice                ramdisk=[C:]\Recovery\4ce375f3-3d17-11e1-bc5e-86918ed0c13b\Winre.wim,{4ce375f4-3d17-11e1-bc5e-86918ed0c13b}

systemroot              \windows

nx                      OptIn

winpe                   Yes
 

Wiederaufnahme aus dem Ruhezustand

----------------------------------

Bezeichner              {4ce375f1-3d17-11e1-bc5e-86918ed0c13b}

device                  partition=C:

path                    \Windows\system32\winresume.exe

description             Windows Resume Application

locale                  de-DE

inherit                 {resumeloadersettings}

filedevice              partition=C:

filepath                \hiberfil.sys

debugoptionenabled      No
 

Windows-Speichertestprogramm

----------------------------

Bezeichner              {memdiag}

device                  partition=\Device\HarddiskVolume1

path                    \boot\memtest.exe

description             Windows-Speicherdiagnose

locale                  de-DE

inherit                 {globalsettings}

badmemoryaccess         Yes
 

EMS-Einstellungen

-----------------

Bezeichner              {emssettings}

bootems                 Yes
 

Debuggereinstellungen

---------------------

Bezeichner              {dbgsettings}

debugtype               Serial

debugport               1

baudrate                115200
 

RAM-Defekte

-----------

Bezeichner              {badmemory}
 

Globale Einstellungen

---------------------

Bezeichner              {globalsettings}

inherit                 {dbgsettings}

                        {emssettings}

                        {badmemory}
 

Startladeprogramm-Einstellungen

-------------------------------

Bezeichner              {bootloadersettings}

inherit                 {globalsettings}

                        {hypervisorsettings}
 

Hypervisoreinstellungen

-------------------

Bezeichner              {hypervisorsettings}

hypervisordebugtype     Serial

hypervisordebugport     1

hypervisorbaudrate      115200
 

Einstellungen zur Ladeprogrammfortsetzung

-----------------------------------------

Bezeichner              {resumeloadersettings}

inherit                 {globalsettings}
 

Ger„teoptionen

--------------

Bezeichner              {4ce375f4-3d17-11e1-bc5e-86918ed0c13b}

description             Ramdisk Options

ramdisksdidevice        partition=C:

ramdisksdipath          \Recovery\4ce375f3-3d17-11e1-bc5e-86918ed0c13b\boot.sdi
 
 
 

LastRegBack: 2014-09-27 13:03
 

==================== End Of Log ============================

--- --- ---

Die Funde sind in der Quarantäne von AdwCleaner, nicht schlimm. Oder in den Temps, haben wir mit TFC geleert.

Um die restlichen Funde zu entfernen müsstest du schon Antivir entsorgen ;)

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-3000299772-3109549842-2761917205-1002\User: Group Policy restriction detected <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.