Trojaner-Board - Roll Around nach Aktionen noch vorhanden

Hallo,

ich habe mir wohl auch den Roll Around Virus eingefangen und überall gehen Werbe-Popups auf und neue Reiter mit irgendwelchen Seiten werden automatisch geöffnet. Zum Teil wird auch die aktive Internetseite geschlossen bzw. eine andere Seite öffnet sich.

Ich habe hier im Forum eine Beschreibung gelesen und folgendes gemacht:

Downloade Dir bitte Malwarebytes Anti-Malware
Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language Deutsch aus.
Klicke im Anschluss auf Suchlauf, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf jetzt starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Aktionen anwenden.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Wähle Exportieren auf Textdatei (.txt) und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die adwcleaner.exe mit einem Doppelklick.
Akzeptiere die Nutzungsbedingungen.
Klicke auf Suchen und warte, bis der Suchlauf abgeschlossen ist.
Klicke nun auf Löschen.
Bestätige jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Sx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Ergebnisse:
Malwarebytes Anti-Malware
www.malwarebytes.org

Protection, 02.03.2015 14:23:16, SYSTEM, DENIS-FEST, Protection, Malware Protection, Starting,
Protection, 02.03.2015 14:23:16, SYSTEM, DENIS-FEST, Protection, Malware Protection, Started,
Protection, 02.03.2015 14:23:16, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Starting,
Protection, 02.03.2015 14:23:16, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Started,
Update, 02.03.2015 14:23:18, SYSTEM, DENIS-FEST, Manual, Remediation Database, 2013.10.16.1, 2014.12.6.1,
Update, 02.03.2015 14:23:18, SYSTEM, DENIS-FEST, Manual, Rootkit Database, 2014.11.18.1, 2015.2.25.1,
Update, 02.03.2015 14:23:24, SYSTEM, DENIS-FEST, Manual, Malware Database, 2014.11.20.6, 2015.3.2.3,
Protection, 02.03.2015 14:23:24, SYSTEM, DENIS-FEST, Protection, Refresh, Starting,
Protection, 02.03.2015 14:23:24, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Stopping,
Protection, 02.03.2015 14:23:24, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Stopped,
Protection, 02.03.2015 14:23:27, SYSTEM, DENIS-FEST, Protection, Refresh, Success,
Protection, 02.03.2015 14:23:27, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Starting,
Protection, 02.03.2015 14:23:27, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Started,
Detection, 02.03.2015 14:23:28, SYSTEM, DENIS-FEST, Protection, Malware Protection, File, PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll, Quarantine, [6a51cc742d5d54e269340d5659aab34d]
Detection, 02.03.2015 14:28:04, SYSTEM, DENIS-FEST, Protection, Malware Protection, File, PUP.Optional.RollAround.A, C:\ProgramData\2a617352-d396-46a3-a71b-5d89535356cf\plugins\5\Plugin.exe, Quarantine, [a318c27e652584b25b8ea8f258aba15f]
Detection, 02.03.2015 14:29:14, SYSTEM, DENIS-FEST, Protection, Malware Protection, File, PUP.Optional.RollAround.A, C:\ProgramData\2a617352-d396-46a3-a71b-5d89535356cf\plugins\5\Plugin.exe, Quarantine, [a318c27e652584b25b8ea8f258aba15f]
Scan, 02.03.2015 14:33:42, SYSTEM, DENIS-FEST, Manual, Start: % 1 "% 2", Dauer: % 1 min 5 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, 1849-Malwareerkennung,
Protection, 02.03.2015 14:35:14, SYSTEM, DENIS-FEST, Protection, Malware Protection, Starting,
Protection, 02.03.2015 14:35:14, SYSTEM, DENIS-FEST, Protection, Malware Protection, Started,
Protection, 02.03.2015 14:35:14, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Starting,
Protection, 02.03.2015 14:35:14, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Started,
Protection, 02.03.2015 14:50:34, SYSTEM, DENIS-FEST, Protection, Malware Protection, Starting,
Protection, 02.03.2015 14:50:34, SYSTEM, DENIS-FEST, Protection, Malware Protection, Started,
Protection, 02.03.2015 14:50:34, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Starting,
Protection, 02.03.2015 14:50:34, SYSTEM, DENIS-FEST, Protection, Malicious Website Protection, Started,

(end)AdwCleaner Logfile:

Code:

# AdwCleaner v4.111 - Bericht erstellt 02/03/2015 um 14:49:15

# Aktualisiert 18/02/2015 von Xplode

# Datenbank : 2015-03-02.1 [Server]

# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)

# Benutzername : Denis - DENIS-FEST

# Gestarted von : C:\Users\Denis\Downloads\AdwCleaner_4.111.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}

Ordner Gelöscht : C:\Users\Denis\AppData\Local\apn

Ordner Gelöscht : C:\Users\Denis\AppData\Roaming\InetStat

Ordner Gelöscht : C:\Users\Denis\AppData\Roaming\pdfforge

Ordner Gelöscht : C:\Users\Denis\AppData\Roaming\RHEng

Ordner Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\Denis\AppData\Local\Temp\Uninstall.exe

Datei Gelöscht : C:\Users\Denis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Goodgame Empire.lnk

Datei Gelöscht : C:\Users\Denis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Goodgame Empire.lnk

Datei Gelöscht : C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\optimizerpro.lnk

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage-journal

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.boostsaves.com_0.localstorage

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.boostsaves.com_0.localstorage-journal

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.best-deals-products.com_0.localstorage-journal

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.best-deals-products.com_0.localstorage-journal

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.best-deals-products.com_0.localstorage

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.best-deals-products.com_0.localstorage

Datei Gelöscht : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage
 

***** [ Geplante Tasks ] *****
 

Task Gelöscht : Scheduled Update for Ask Toolbar
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]

Schlüssel Gelöscht : HKCU\Software\Classes\Applications\inetstat.exe

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\InetStat

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gelöscht : HKLM\SOFTWARE\SPPDCOM

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\InetStat

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam

Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9

Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
 

***** [ Internetbrowser ] *****
 

-\\ Internet Explorer v11.0.9600.17631
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
 

-\\ Google Chrome v40.0.2214.115
 

[C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=9be92001-8685-41db-b7fe-02ddfbe8a2b5&searchtype=ds&q={searchTerms}&installDate=08/09/2013

[C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=9be92001-8685-41db-b7fe-02ddfbe8a2b5&searchtype=ds&q={searchTerms}&installDate=08/09/2013

[C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M16471982-8DCA-4672-9A37-AC3723D4D376&SearchSource=58&CUI=&UM=5&UP=SP7E347862-08F9-4708-B85D-0885205EE0E5&q={searchTerms}&SSPV=

[C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M16471982-8DCA-4672-9A37-AC3723D4D376&SearchSource=58&CUI=&UM=5&UP=SP7E347862-08F9-4708-B85D-0885205EE0E5&q={searchTerms}&SSPV=SP21635T1B_sp_ch

[C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423327067&from=cvs2&uid=SamsungXSSDX840XPROXSeries_S12RNEAD217567K&q={searchTerms}

[C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423327067&from=cvs2&uid=SamsungXSSDX840XPROXSeries_S12RNEAD217567K&q={searchTerms}

[C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423327067&from=cvs2&uid=SamsungXSSDX840XPROXSeries_S12RNEAD217567K&q={searchTerms}

[C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423327067&from=cvs2&uid=SamsungXSSDX840XPROXSeries_S12RNEAD217567K&q={searchTerms}
 

*************************
 

AdwCleaner[R0].txt - [16889 Bytes] - [02/03/2015 14:46:46]

AdwCleaner[S0].txt - [16509 Bytes] - [02/03/2015 14:49:15]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [16569 Bytes] ##########

--- --- ---JRT Logfile:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.4.3 (03.01.2015:1)

OS: Windows 7 Professional x64

Ran by Denis on 02.03.2015 at 14:52:53,29

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"

Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9"
 
 
 

~~~ Files
 

Successfully deleted: [File] "C:\Users\Denis\appdata\local\google\chrome\user data\default\local storage\http_static.boostsaves.com_0.localstorage"

Successfully deleted: [File] "C:\Users\Denis\appdata\local\google\chrome\user data\default\local storage\http_static.boostsaves.com_0.localstorage-journal"

Successfully deleted: [File] "C:\Users\Denis\appdata\local\google\chrome\user data\default\local storage\https_static.boostsaves.com_0.localstorage"

Successfully deleted: [File] "C:\Users\Denis\appdata\local\google\chrome\user data\default\local storage\https_static.boostsaves.com_0.localstorage-journal"
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 02.03.2015 at 14:59:03,36

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---
Leider ist das Problem nach wie vor da.
Was soll ich jetzt machen?

Danke

Grüße,
scholli_1981

Hallo Cosinus,

vielen Dank für die schnelle Reaktion.
Mein Kaspersky Virenscanner hat gestern erst 6 Elemente gelöscht - ich weiß aber nicht, wie ich da ein Logfile bekomme.

FRST bringt folgendes raus:
FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015

Ran by Denis (administrator) on DENIS-FEST on 02-03-2015 17:41:35

Running from C:\Users\Denis\Downloads

Loaded Profiles: Denis (Available profiles: Denis)

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Valve Corporation) D:\Steam\Steam.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Electronic Arts) D:\Origin\Origin.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(SlySoft, Inc.) F:\AnyDVD\AnyDVDtray.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Geek Software GmbH) F:\PDF24\pdf24.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

() F:\AnyDVD\ADvdDiscHlp64.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe

(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe

(Valve Corporation) D:\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Microsoft Corporation) F:\Office12\OUTLOOK.EXE

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

() C:\Users\Denis\Desktop\VOBMerge252.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-02-13] (Apple Inc.)

HKLM-x32\...\Run: [PDFPrint] => F:\PDF24\pdf24.exe [191528 2014-07-04] (Geek Software GmbH)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-01-30] (Raptr, Inc)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-2022827769-3302627499-2916265337-1001\...\Run: [Steam] => D:\Steam\Steam.exe [2874048 2015-02-19] (Valve Corporation)

HKU\S-1-5-21-2022827769-3302627499-2916265337-1001\...\Run: [EADM] => D:\Origin\Origin.exe [3631448 2015-03-01] (Electronic Arts)

HKU\S-1-5-21-2022827769-3302627499-2916265337-1001\...\Run: [HP Officejet 6700 (NET)] => C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-2022827769-3302627499-2916265337-1001\...\Run: [AnyDVD] => F:\AnyDVD\AnyDVD.exe [109480 2015-02-19] (SlySoft, Inc.)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-2022827769-3302627499-2916265337-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Google

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Google

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = Google

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Google

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = Google

HKU\S-1-5-21-2022827769-3302627499-2916265337-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

StartMenuInternet: IEXPLORE.EXE - iexplore.exe
 

FireFox:

========

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)

FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com ()

FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com ()

FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)

FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com

FF Extension: Ngăn chặn trang web nguy hiểm - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2015-02-20]

FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com

FF Extension: Bàn phím ảo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2015-02-20]

FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com

FF Extension: Công cụ kiểm tra liên kết của Kaspersky - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2015-02-20]

FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com

FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2015-02-20]

FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com

FF Extension: An toàn giao dịch tài chính - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2015-02-20]
 

Chrome: 

=======

CHR HomePage: Default -> 

CHR StartupUrls: Default -> "hxxp://www.google.de/"

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Profile: C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-06]

CHR Extension: (Google Drive) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-06]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-08]

CHR Extension: (YouTube) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-06]

CHR Extension: (Google Search) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-06]

CHR Extension: (No Name) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2015-03-02]

CHR Extension: (Google Wallet) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

CHR Extension: (Gmail) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-06]

CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]

CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)

R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)

R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1876816 2015-03-02] (SurfRight B.V.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

S3 Origin Client Service; D:\Origin\OriginClientService.exe [1910640 2015-03-01] (Electronic Arts)

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-06-18] ()

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE" [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 adp3132; C:\Windows\system32\drivers\adp3132.sys [385072 2010-01-28] (Adaptec, Inc.)

S3 amdide64; C:\Windows\system32\drivers\amdide64.sys [11904 2011-12-18] (Advanced Micro Devices Inc.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36520 2012-09-13] (Advanced Micro Devices, Inc.)

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [150440 2014-12-23] (SlySoft, Inc.)

R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [150440 2014-12-23] (SlySoft, Inc.)

S3 asahci64; C:\Windows\system32\drivers\asahci64.sys [49760 2012-01-06] (Asmedia Technology)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2014-02-01] ()

S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc)

S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77040 2012-11-02] (Fresco Logic)

R2 hmpalert; C:\Windows\System32\drivers\hmpalert.sys [93144 2015-03-02] ()

R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28216 2012-11-19] (Intel Corporation)

S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [650200 2012-09-14] (Intel Corporation)

S3 ISASerial; C:\Windows\system32\drivers\ISASerial.sys [72192 2008-02-20] (Windows (R) Codename Longhorn DDK provider)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)

R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [141320 2015-02-20] (Kaspersky Lab ZAO)

R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [793800 2015-02-20] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2014-02-01] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-03-02] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

S3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-07-16] ()

S3 MtsHID; C:\Windows\system32\drivers\MtsHID.sys [27664 2009-07-15] (TechniSat Provide)

S3 nvamacpi; C:\Windows\system32\drivers\NVAMACPI.sys [28192 2009-07-17] (NVIDIA Corporation)

R0 nvrd64; C:\Windows\System32\drivers\nvrd64.sys [175648 2009-08-04] (NVIDIA Corporation)

S3 ocz10xx; C:\Windows\system32\drivers\ocz10xx.sys [139056 2012-04-05] (OCZ Technology Group, Inc.)

S1 oxpar; C:\Windows\system32\drivers\oxpar.sys [158208 2007-01-24] (OEM)

S3 OxPCIeSer; C:\Windows\system32\drivers\OxPCIeSer.sys [101672 2008-04-04] (OEM)

S3 OxPPort; C:\Windows\system32\drivers\OxPPort.sys [98304 2008-07-31] (OEM)

S3 oxser; C:\Windows\system32\drivers\oxser.sys [98352 2009-05-26] (OEM)

S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [72192 2008-05-22] (Windows (R) Codename Longhorn DDK provider)

S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [95744 2008-05-22] ()

S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [126464 2008-05-22] ()

S3 PPorts; C:\Windows\system32\drivers\PPorts.sys [95744 2008-02-20] ()

S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [102912 2012-03-15] (Renesas Electronics Corporation)

S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [220672 2012-03-15] (Renesas Electronics Corporation)

S3 Si3124r5; C:\Windows\system32\drivers\Si3124r5.sys [340008 2010-04-13] (Silicon Image, Inc)

R0 SiFilter; C:\Windows\System32\drivers\SiWinAcc.sys [22568 2010-04-13] (Silicon Image, Inc.)

R0 SiRemFil; C:\Windows\System32\drivers\SiRemFil.sys [16936 2010-04-13] (Silicon Image, Inc.)

S3 SPorts; C:\Windows\system32\drivers\SPorts.sys [124416 2008-02-20] ()

S3 StnPport; C:\Windows\system32\drivers\StnPport.sys [97280 2009-12-17] ()

S3 StnSport; C:\Windows\system32\drivers\StnSport.sys [126464 2009-11-14] ()

S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]

S3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [210944 2012-05-30] (VIA Technologies, Inc.)

S3 xhcdrv; C:\Windows\system32\drivers\xhcdrv.sys [261120 2012-05-30] (VIA Technologies, Inc.)

S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]

S3 NmPar; \SystemRoot\system32\drivers\NmPar.sys [X]

S3 nmserial; \SystemRoot\system32\drivers\nmserial.sys [X]

S3 Oxmfuf; \SystemRoot\system32\drivers\oxmfuf.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-03-02 17:41 - 2015-03-02 17:41 - 00023901 _____ () C:\Users\Denis\Downloads\FRST.txt

2015-03-02 17:40 - 2015-03-02 17:41 - 00000000 ____D () C:\FRST

2015-03-02 17:40 - 2015-03-02 17:40 - 02092544 _____ (Farbar) C:\Users\Denis\Downloads\FRST64.exe

2015-03-02 15:11 - 2015-03-02 14:49 - 00016750 _____ () C:\Users\Denis\Desktop\AdwCleaner[S0].txt

2015-03-02 15:10 - 2015-03-02 15:10 - 00003088 _____ () C:\Users\Denis\Desktop\mbam.txt

2015-03-02 14:59 - 2015-03-02 14:59 - 00001536 _____ () C:\Users\Denis\Desktop\JRT.txt

2015-03-02 14:46 - 2015-03-02 14:49 - 00000000 ____D () C:\AdwCleaner

2015-03-02 14:23 - 2015-03-02 16:31 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-03-02 14:23 - 2015-03-02 14:23 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-03-02 14:23 - 2015-03-02 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-03-02 14:22 - 2015-03-02 14:23 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-03-02 14:22 - 2015-03-02 14:22 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-03-02 14:22 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-03-02 14:22 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-03-02 14:22 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-03-02 14:06 - 2015-03-02 14:06 - 00000159 _____ () C:\Users\Denis\Desktop\Neue Internetverknüpfung.url

2015-03-02 14:05 - 2015-03-02 14:06 - 01388333 _____ (Thisisu) C:\Users\Denis\Downloads\JRT.exe

2015-03-02 14:05 - 2015-03-02 14:05 - 02126848 _____ () C:\Users\Denis\Downloads\AdwCleaner_4.111.exe

2015-03-02 14:04 - 2015-03-02 14:05 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Denis\Downloads\mbam-setup-2.0.4.1028.exe

2015-03-02 07:55 - 2015-03-02 17:30 - 00000000 ____D () C:\Windows\CryptoGuard

2015-03-02 07:55 - 2015-03-02 14:34 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert

2015-03-02 07:55 - 2015-03-02 09:01 - 00548424 _____ (SurfRight) C:\Windows\system32\hmpalert.dll

2015-03-02 07:55 - 2015-03-02 09:01 - 00477008 _____ (SurfRight) C:\Windows\SysWOW64\hmpalert.dll

2015-03-02 07:55 - 2015-03-02 09:01 - 00093144 _____ () C:\Windows\system32\Drivers\hmpalert.sys

2015-03-02 07:55 - 2015-03-02 07:55 - 01889616 _____ (SurfRight B.V.) C:\Users\Denis\Downloads\hmpalert.exe

2015-03-02 07:55 - 2015-03-02 07:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert

2015-03-02 07:55 - 2015-03-02 07:55 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert

2015-03-02 07:19 - 2015-03-02 07:19 - 00000528 _____ () C:\Users\Public\Desktop\AnyDVD.lnk

2015-03-02 07:19 - 2015-03-02 07:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlySoft

2015-03-01 19:51 - 2015-03-01 19:51 - 00000426 _____ () C:\Users\Denis\Downloads\CloneDVD_Key_13813108.CloneDVD

2015-03-01 19:51 - 2015-03-01 19:51 - 00000416 _____ () C:\Users\Denis\Downloads\AnyDVDHD_Key_13813107.AnyDVDHD

2015-03-01 19:51 - 2015-03-01 19:51 - 00000000 ____D () C:\ProgramData\Elaborate Bytes

2015-03-01 17:30 - 2015-03-01 17:30 - 11737488 _____ () C:\Users\Denis\Downloads\SetupAnyDVD7580.exe

2015-03-01 17:15 - 2015-03-01 17:15 - 00000556 _____ () C:\Users\Public\Desktop\CloneDVD2.lnk

2015-03-01 17:15 - 2015-03-01 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes

2015-03-01 17:14 - 2015-03-01 17:14 - 05185720 _____ () C:\Users\Denis\Downloads\SetupCloneDVD2930Slysoft (1).exe

2015-03-01 16:54 - 2015-03-01 16:54 - 01939560 _____ () C:\Users\Denis\Downloads\winrar-x64-521.exe

2015-03-01 16:54 - 2015-03-01 16:54 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\WinRAR

2015-03-01 16:54 - 2015-03-01 16:54 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2015-03-01 16:54 - 2015-03-01 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2015-02-27 13:27 - 2015-03-01 16:47 - 00000000 ____D () C:\Users\Denis\AppData\Local\File Viewer

2015-02-27 13:26 - 2015-02-27 13:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Viewer Lite

2015-02-27 13:26 - 2015-02-27 13:26 - 00000000 ____D () C:\Program Files (x86)\File Viewer Lite

2015-02-27 13:25 - 2015-02-27 13:25 - 30433368 _____ (Sharpened Productions ) C:\Users\Denis\Downloads\fvl_setup_132c.exe

2015-02-25 06:13 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls

2015-02-25 06:13 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls

2015-02-24 07:24 - 2015-02-24 07:24 - 00001324 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk

2015-02-24 07:24 - 2015-02-24 07:24 - 00000000 ____D () C:\Users\Denis\Documents\Freemake

2015-02-24 07:24 - 2015-02-24 07:24 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake

2015-02-24 07:24 - 2015-02-24 07:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake

2015-02-24 07:24 - 2015-02-24 07:24 - 00000000 ____D () C:\ProgramData\Freemake

2015-02-24 07:24 - 2015-02-24 07:24 - 00000000 ____D () C:\Program Files (x86)\Freemake

2015-02-24 07:22 - 2015-02-24 07:22 - 01270544 _____ (Ellora Assets Corporation ) C:\Users\Denis\Downloads\FreemakeVideoConverterSetup.exe

2015-02-23 15:30 - 2009-09-27 09:39 - 00415744 ___SH (The Public) C:\Windows\SysWOW64\avisynth.dll

2015-02-23 15:30 - 2005-07-14 12:31 - 00032256 ___SH () C:\Windows\SysWOW64\AVSredirect.dll

2015-02-23 15:30 - 2004-02-22 10:11 - 00764416 ___SH (Abysmal Software) C:\Windows\SysWOW64\devil.dll

2015-02-23 15:30 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\Windows\SysWOW64\yv12vfw.dll

2015-02-23 15:30 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\Windows\SysWOW64\i420vfw.dll

2015-02-23 15:17 - 2015-02-23 15:21 - 69127184 _____ (eRightSoft ) C:\Users\Denis\Downloads\SUPERsetup.exe

2015-02-23 15:03 - 2015-02-23 15:10 - 00000000 ____D () C:\Windows\system32\appmgmt

2015-02-23 14:27 - 2015-03-02 11:35 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\dvdcss

2015-02-23 14:13 - 2015-02-23 14:13 - 00000000 ____D () C:\Users\Denis\Documents\eRightSoft

2015-02-23 14:12 - 2015-02-24 10:23 - 00000000 ____D () C:\Program Files (x86)\eRightSoft

2015-02-23 14:12 - 2004-10-10 08:50 - 00278528 _____ (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll

2015-02-23 14:12 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\drvc.dll

2015-02-23 14:12 - 2004-04-05 09:31 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll

2015-02-23 14:12 - 2004-04-05 09:31 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll

2015-02-23 13:46 - 2015-02-23 13:46 - 00322393 _____ () C:\Users\Denis\Downloads\vobmerge-2.52.zip

2015-02-21 20:46 - 2015-02-21 20:46 - 00001753 _____ () C:\Users\Public\Desktop\iTunes.lnk

2015-02-21 20:46 - 2015-02-21 20:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-02-21 20:46 - 2015-02-21 20:46 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7

2015-02-21 20:46 - 2015-02-21 20:46 - 00000000 ____D () C:\Program Files\iTunes

2015-02-21 20:46 - 2015-02-21 20:46 - 00000000 ____D () C:\Program Files\iPod

2015-02-21 20:46 - 2015-02-21 20:46 - 00000000 ____D () C:\Program Files (x86)\iTunes

2015-02-20 10:25 - 2015-03-02 17:08 - 00000000 ____D () C:\ProgramData\Kaspersky Lab

2015-02-20 10:25 - 2015-02-21 06:29 - 00002334 _____ () C:\Users\Denis\Desktop\Sicherer Zahlungsverkehr.lnk

2015-02-20 10:25 - 2015-02-20 10:27 - 00793800 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2015-02-20 10:25 - 2015-02-20 10:27 - 00141320 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys

2015-02-20 10:25 - 2015-02-20 10:25 - 00001196 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk

2015-02-20 10:25 - 2015-02-20 10:25 - 00000000 ____D () C:\Windows\ELAMBKUP

2015-02-20 10:25 - 2015-02-20 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security

2015-02-20 10:25 - 2015-02-20 10:25 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab

2015-02-20 10:25 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys

2015-02-20 10:25 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll

2015-02-20 10:21 - 2015-02-20 10:24 - 359402848 _____ (Microsoft Corporation) C:\Users\Denis\Downloads\SQLServer2005SP3-KB955706-x86-DEU.exe

2015-02-20 09:58 - 2015-02-20 09:58 - 01038704 _____ (Amazon Services LLC) C:\Users\Denis\Downloads\Kaspersky_Internet_Security_2015_3_PCs_Downloader.exe

2015-02-19 07:19 - 2015-02-19 07:19 - 00000000 ____D () C:\Users\Denis\AppData\Local\Steam

2015-02-12 06:38 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-02-12 06:38 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-02-12 06:38 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-02-12 06:38 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-02-11 06:38 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll

2015-02-11 06:38 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll

2015-02-11 06:38 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll

2015-02-11 06:38 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll

2015-02-11 06:37 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-02-11 06:37 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-02-11 06:37 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-02-11 06:37 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-02-11 06:37 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-02-11 06:37 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-02-11 06:37 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-02-11 06:37 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-02-11 06:37 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-02-11 06:37 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-02-11 06:37 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-02-11 06:37 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-02-11 06:37 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-02-11 06:37 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-02-11 06:37 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-02-11 06:37 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-02-11 06:37 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-02-11 06:37 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-02-11 06:37 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-02-11 06:37 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-02-11 06:37 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-02-11 06:37 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-02-11 06:37 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-02-11 06:37 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-02-11 06:37 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-02-11 06:37 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-02-11 06:37 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-02-11 06:37 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-02-11 06:37 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-02-11 06:37 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-02-11 06:37 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-02-11 06:37 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-02-11 06:37 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-02-11 06:37 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-02-11 06:37 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-02-11 06:37 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-02-11 06:37 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-02-11 06:37 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-02-11 06:37 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-02-11 06:37 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-02-11 06:37 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-02-11 06:37 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-02-11 06:37 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-02-11 06:37 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-02-11 06:37 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-02-11 06:37 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-02-11 06:37 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-02-11 06:37 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-02-11 06:37 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-02-11 06:37 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-02-11 06:37 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-02-11 06:37 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-02-11 06:37 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-02-11 06:37 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-02-11 06:37 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-02-11 06:37 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-02-11 06:37 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-02-11 06:37 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-02-11 06:37 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-02-11 06:37 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-02-11 06:37 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-02-11 06:37 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-02-11 06:37 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-02-11 06:37 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-02-11 06:37 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-02-11 06:37 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-02-11 06:37 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-02-11 06:37 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-02-11 06:37 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-02-11 06:37 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-02-11 06:37 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-02-11 06:37 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-02-11 06:37 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-02-11 06:37 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-02-11 06:36 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-02-11 06:36 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-02-11 06:36 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-02-11 06:36 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-02-11 06:36 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-02-11 06:36 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-02-11 06:36 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-02-11 06:36 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-02-11 06:36 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-02-11 06:36 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-02-11 06:36 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-02-11 06:36 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-02-11 06:36 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-02-11 06:36 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-02-11 06:36 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-02-11 06:36 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-02-11 06:36 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-02-11 06:36 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-02-11 06:36 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-02-11 06:36 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-02-11 06:36 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-02-11 06:36 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-02-11 06:36 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-02-11 06:36 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-02-11 06:36 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-02-11 06:36 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-02-11 06:36 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-02-11 06:36 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-02-11 06:36 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-02-11 06:36 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-02-11 06:36 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-02-11 06:36 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-02-11 06:36 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-02-11 06:36 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-02-07 18:09 - 2015-03-02 12:46 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\vlc

2015-02-07 18:08 - 2015-02-07 18:08 - 00000871 _____ () C:\Users\Public\Desktop\VLC media player.lnk

2015-02-07 18:08 - 2015-02-07 18:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2015-02-07 18:08 - 2015-02-07 18:08 - 00000000 ____D () C:\Program Files\VideoLAN

2015-02-07 18:07 - 2015-02-07 18:07 - 01198368 _____ () C:\Users\Denis\Downloads\VLC media player 64 Bit - CHIP-Installer.exe

2015-02-07 18:07 - 2015-02-07 18:07 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft

2015-02-07 18:07 - 2015-02-07 18:07 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\DesktopIconGoodgame

2015-02-07 18:07 - 2015-02-07 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater

2015-02-07 18:07 - 2015-02-07 18:07 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater

2015-02-07 17:39 - 2015-03-02 14:34 - 00000000 ____D () C:\ProgramData\{2a2dd6bf-07a2-88f1-2a2d-dd6bf07a5afc}

2015-02-07 17:36 - 2015-02-07 17:36 - 00620496 _____ () C:\Users\Denis\Downloads\vlc-2.1.5-win64.7z-Download.exe

2015-02-07 17:36 - 2015-02-07 17:36 - 00000000 __SHD () C:\Users\Denis\AppData\Local\EmieBrowserModeList

2015-02-07 14:27 - 2015-02-07 14:27 - 00000000 ____D () C:\Users\Denis\Documents\AnyDVDHD

2015-02-07 14:24 - 2015-02-07 14:24 - 00001995 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk

2015-02-07 14:24 - 2015-02-07 14:24 - 00000326 _____ () C:\Users\Denis\Desktop\HP Druckerdiagnosetools.url

2015-02-07 14:24 - 2015-02-07 14:24 - 00000000 ____D () C:\ProgramData\Visan

2015-02-07 14:24 - 2015-02-07 14:24 - 00000000 ____D () C:\ProgramData\HP Photo Creations

2015-02-07 14:24 - 2015-02-07 14:24 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations

2015-02-07 14:22 - 2015-03-02 07:21 - 00000125 ___SH () C:\ProgramData\.zreglib

2015-02-07 14:21 - 2015-02-07 14:21 - 00000000 ____D () C:\ProgramData\SlySoft

2015-02-07 14:20 - 2015-02-07 14:20 - 11658240 _____ () C:\Users\Denis\Downloads\SetupAnyDVD7570.exe

2015-02-07 14:20 - 2015-02-07 14:20 - 05185720 _____ () C:\Users\Denis\Downloads\SetupCloneDVD2930Slysoft.exe

2015-02-03 12:48 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-02-03 06:32 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-02-03 06:32 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2015-02-03 06:32 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-02-03 06:32 - 2014-05-08 10:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2015-02-02 08:23 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2015-02-02 08:23 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2015-02-02 08:23 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2015-02-02 08:23 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2015-02-02 08:23 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2015-02-02 08:23 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2015-02-02 08:23 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2015-02-02 08:23 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2015-02-02 08:23 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2015-02-02 08:23 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2015-02-02 08:23 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2015-02-02 08:23 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2015-02-02 08:23 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2015-02-02 08:23 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2015-02-02 08:23 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2015-02-02 08:22 - 2015-02-02 08:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-02-02 08:22 - 2015-02-02 08:22 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2015-02-02 08:22 - 2015-02-02 08:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2015-02-02 08:22 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-02-02 08:22 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2015-02-02 08:22 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys

2015-02-02 08:22 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2015-02-02 08:22 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2015-02-02 07:51 - 2015-02-02 07:51 - 00000817 _____ () C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2015.lnk

2015-02-02 07:50 - 2015-02-02 07:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Steuer-Sparbuch 2015

2015-01-31 13:17 - 2015-01-31 13:17 - 00000967 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2015-01-31 13:17 - 2015-01-31 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2015-01-31 13:16 - 2015-01-31 13:16 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack

2015-01-31 13:15 - 2015-01-31 13:15 - 34792128 _____ (DVDVideoSoft Ltd. ) C:\Users\Denis\Downloads\FreeYouTubeToMP354Converter.exe

2015-01-31 06:54 - 2015-01-31 06:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-03-02 17:35 - 2013-03-05 08:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-03-02 16:42 - 2013-03-06 18:28 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-03-02 15:19 - 2013-02-28 09:36 - 01650940 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-03-02 15:19 - 2010-11-21 07:50 - 00703678 _____ () C:\Windows\system32\perfh007.dat

2015-03-02 15:19 - 2010-11-21 07:50 - 00150816 _____ () C:\Windows\system32\perfc007.dat

2015-03-02 14:57 - 2009-07-14 05:45 - 00032576 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-03-02 14:57 - 2009-07-14 05:45 - 00032576 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-03-02 14:56 - 2009-07-14 06:13 - 01622706 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-03-02 14:53 - 2013-03-06 18:17 - 01603833 _____ () C:\Windows\WindowsUpdate.log

2015-03-02 14:52 - 2013-03-06 19:10 - 00000000 ____D () C:\ProgramData\Origin

2015-03-02 14:50 - 2014-12-28 17:59 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Raptr

2015-03-02 14:50 - 2013-03-06 18:28 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-03-02 14:50 - 2010-11-21 04:47 - 00637944 _____ () C:\Windows\PFRO.log

2015-03-02 14:50 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-03-02 14:50 - 2009-07-14 05:51 - 00123442 _____ () C:\Windows\setupact.log

2015-03-02 07:22 - 2013-03-06 18:18 - 00000000 ____D () C:\Users\Denis

2015-02-27 13:36 - 2014-09-10 19:17 - 00000000 ____D () C:\Users\Denis\Documents\My Kindle Content

2015-02-24 07:24 - 2014-05-19 17:50 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2015-02-24 07:24 - 2014-05-19 17:50 - 00000000 ____D () C:\ProgramData\TuneUp Software

2015-02-23 14:06 - 2010-12-13 18:21 - 00326656 _____ () C:\Users\Denis\Desktop\VOBMerge252.exe

2015-02-21 20:46 - 2013-09-08 18:26 - 00000000 ____D () C:\Program Files\Common Files\Apple

2015-02-20 11:22 - 2013-03-06 18:18 - 00001437 _____ () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-02-20 10:28 - 2013-03-06 18:29 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-02-20 10:08 - 2013-03-06 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-02-18 12:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-02-14 17:45 - 2015-01-30 15:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\HpUpdate

2015-02-13 19:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2015-02-12 06:31 - 2009-07-14 05:45 - 00420136 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-02-12 06:30 - 2014-12-13 06:03 - 00000000 ____D () C:\Windows\system32\appraiser

2015-02-12 06:30 - 2014-05-06 14:32 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-02-12 06:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2015-02-12 06:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-02-11 22:27 - 2014-08-06 08:33 - 00000000 ____D () C:\ProgramData\Package Cache

2015-02-11 22:26 - 2013-09-08 13:54 - 00000000 ____D () C:\ProgramData\Microsoft Help

2015-02-11 22:26 - 2013-08-18 07:45 - 00000000 ____D () C:\Windows\system32\MRT

2015-02-11 22:22 - 2013-03-16 10:31 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-02-11 06:31 - 2013-03-06 18:33 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-02-08 06:08 - 2013-07-31 06:03 - 00000000 ____D () C:\Program Files (x86)\Canon

2015-02-07 18:07 - 2014-08-24 14:10 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Abelssoft

2015-02-07 18:07 - 2014-08-24 14:10 - 00000000 ____D () C:\Users\Denis\AppData\Local\Abelssoft

2015-02-07 18:03 - 2014-10-05 10:57 - 00000080 _____ () C:\Windows\wiso.ini

2015-02-07 18:02 - 2014-10-05 10:57 - 00000000 ____D () C:\Users\Denis\Documents\Mein Steuer-Sparbuch Heute

2015-02-07 18:02 - 2013-03-05 08:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2015-02-07 18:01 - 2013-08-01 07:34 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Canon

2015-02-07 18:00 - 2013-09-20 09:53 - 00000000 ___HD () C:\ProgramData\CanonIJScan

2015-02-07 14:24 - 2015-01-30 15:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

2015-02-05 08:37 - 2013-03-06 18:28 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-02-05 08:37 - 2013-03-06 18:28 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-02-02 08:24 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2015-02-02 07:54 - 2014-10-05 10:59 - 00000000 ____D () C:\Users\Denis\Documents\Steuer-Sparbuch

2015-02-02 07:51 - 2014-10-05 10:57 - 00000000 ____D () C:\Users\Denis\AppData\Local\Buhl

2015-02-02 07:01 - 2014-05-19 17:48 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\DVDVideoSoft

2015-01-31 07:27 - 2014-09-24 23:30 - 00000000 ____D () C:\Users\Denis\Documents\FIFA 15

2015-01-31 06:53 - 2014-12-28 17:59 - 00000000 ____D () C:\Program Files (x86)\Raptr

2015-01-31 06:52 - 2013-03-05 08:17 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-01-31 06:51 - 2013-09-08 14:08 - 00000000 ____D () C:\Users\Denis\Desktop\Spiele
 

==================== Files in the root of some directories =======
 

2015-02-07 14:22 - 2015-03-02 07:21 - 0000125 ___SH () C:\ProgramData\.zreglib

2015-01-30 15:44 - 2015-01-30 15:44 - 0000057 _____ () C:\ProgramData\Ament.ini
 

Some content of TEMP:

====================

C:\Users\Denis\AppData\Local\Temp\abscb.exe

C:\Users\Denis\AppData\Local\Temp\amd-catalyst-14-9-win7-win8.1-64bit-dd-ccc-whql.exe

C:\Users\Denis\AppData\Local\Temp\AutoRun.exe

C:\Users\Denis\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\Denis\AppData\Local\Temp\avgnt.exe

C:\Users\Denis\AppData\Local\Temp\crdli.dll

C:\Users\Denis\AppData\Local\Temp\D4E8FBEE-E915-0A47-FDBE-8FEC2F9EDEA1.dll

C:\Users\Denis\AppData\Local\Temp\D4E8FBEE-E915-0A47-FDBE-8FEC2F9EDEA1.exe

C:\Users\Denis\AppData\Local\Temp\DseShExt-x64.dll

C:\Users\Denis\AppData\Local\Temp\DseShExt-x86.dll

C:\Users\Denis\AppData\Local\Temp\EAInstall.dll

C:\Users\Denis\AppData\Local\Temp\FreemakeVideoConverterFull.exe

C:\Users\Denis\AppData\Local\Temp\Installer.exe

C:\Users\Denis\AppData\Local\Temp\MSETUP4.EXE

C:\Users\Denis\AppData\Local\Temp\optprosetup.exe

C:\Users\Denis\AppData\Local\Temp\ose00000.exe

C:\Users\Denis\AppData\Local\Temp\ose00001.exe

C:\Users\Denis\AppData\Local\Temp\Quarantine.exe

C:\Users\Denis\AppData\Local\Temp\raptrpatch.exe

C:\Users\Denis\AppData\Local\Temp\raptr_stub.exe

C:\Users\Denis\AppData\Local\Temp\SDShelEx-win32.dll

C:\Users\Denis\AppData\Local\Temp\SDShelEx-x64.dll

C:\Users\Denis\AppData\Local\Temp\setup.exe

C:\Users\Denis\AppData\Local\Temp\sonarinst.exe

C:\Users\Denis\AppData\Local\Temp\sqlite3.dll

C:\Users\Denis\AppData\Local\Temp\tmd_34013652.exe

C:\Users\Denis\AppData\Local\Temp\tmd_34017675.exe

C:\Users\Denis\AppData\Local\Temp\tmd_34019212.exe

C:\Users\Denis\AppData\Local\Temp\tmd_34019755.exe

C:\Users\Denis\AppData\Local\Temp\tmp3E59.exe

C:\Users\Denis\AppData\Local\Temp\tmp63C6.exe

C:\Users\Denis\AppData\Local\Temp\tmpCBA7.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-02-23 18:49
 

==================== End Of Log ============================

--- --- ---

--- --- ---
FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-03-2015

Ran by Denis at 2015-03-02 17:41:59

Running from C:\Users\Denis\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}

AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.6.602.171 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Amazon Kindle (HKU\S-1-5-21-2022827769-3302627499-2916265337-1001\...\Amazon Kindle) (Version:  - Amazon)

AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.5.8.0 - SlySoft)

Apple Application Support (32-Bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Assassin's Creed (HKLM-x32\...\{8CFA9151-6404-409A-AF22-4632D04582FD}) (Version: 1.02 - Ubisoft)

Aufstieg des Hexenkönigs™ (HKLM-x32\...\{B931FB80-537A-4600-00AD-AC5DEDB6C25B}) (Version:  - )

Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)

Avira (x32 Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden

Batman™: Arkham Origins (HKLM-x32\...\Steam App 209000) (Version:  - WB Games Montreal)

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.1.7 - EA Digital Illusions CE AB)

BingProtect (HKLM-x32\...\{A441E7D3-BC9B-4062-B9E4-9B81C0059F6A}) (Version: 11.127.85.21299 - BBI)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

CHIP Updater (HKLM-x32\...\CHIP Updater_is1) (Version: 2.39 - Abelssoft)

CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version:  - FromSoftware)

Die Schlacht um Mittelerde™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version:  - )

Dragon Age™ II (HKLM-x32\...\{4D565319-8B91-41CB-961C-0DDC86101AC5}) (Version: 1.04.8524.0 - Electronic Arts)

EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.4.0.0 - Electronic Arts)

ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)

File Viewer Lite (HKLM-x32\...\{C8B24B83-920A-446E-B027-38F72C9D8898}_is1) (Version: 1.3.2 - Sharpened Productions)

Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)

Freemake Video Converter Version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Green Line 6 Sprachtrainer (HKLM-x32\...\{D9469C49-087E-46C9-9B47-E25CF0543B5C}) (Version: 1.00.000 - Klett)

HitmanPro.Alert (HKLM\...\HitmanPro.Alert) (Version: 2.6.5.77 - SurfRight B.V.)

HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)

HP Officejet 6700 - Grundlegende Software für das Gerät (HKLM\...\{9086D601-50B7-491D-A143-28193DADE36B}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden

I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation)

iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)

Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4}) (Version: 15.0.0.463 - Kaspersky Lab)

Kaspersky Internet Security (x32 Version: 15.0.0.463 - Kaspersky Lab) Hidden

Mafia II (HKLM-x32\...\Steam App 50130) (Version:  - 2K Czech)

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Professional 2007 (HKLM-x32\...\PROR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2022827769-3302627499-2916265337-1001\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server Native Client (HKLM\...\{F90F5A11-53E6-4045-ACB1-BC03D71FB06C}) (Version: 9.00.4035.00 - Microsoft Corporation)

Microsoft SQL Server VSS Writer (HKLM\...\{F68310EC-B615-4044-B7D7-1A6349758D42}) (Version: 9.00.4035.00 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version:  - Monolith Productions, Inc.)

Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)

Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)

PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF24 Creator 6.7.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)

Sprachtrainer Fonts (HKLM-x32\...\{FBCF2ED3-AFB5-475E-BF9A-30BEAD366FBC}) (Version: 1.00.01 - Ernst Klett Verlag GmbH)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM-x32\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.4035.00 - Microsoft Corporation)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)

WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{4E66CD78-A6F9-41E8-923B-4EFB6467DE29}) (Version: 22.00.8811 - Buhl Data Service GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-2022827769-3302627499-2916265337-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Denis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2022827769-3302627499-2916265337-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Denis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2022827769-3302627499-2916265337-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Denis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2022827769-3302627499-2916265337-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Denis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2022827769-3302627499-2916265337-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Denis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\FileSyncApi64.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

20-02-2015 10:16:17 Windows Update

22-02-2015 19:00:11 Windows-Sicherung

24-02-2015 07:06:52 Windows Update

25-02-2015 06:13:01 Windows Update

01-03-2015 19:00:25 Windows-Sicherung
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {4E877B91-F10B-4CA4-82FE-69A828CCF5A4} - System32\Tasks\{C87E324A-1B75-48D0-A02D-B6975495896C} => pcalua.exe -a "D:\Assassin's Creed\assassins_creed_1.02.exe" -d "D:\Assassin's Creed"

Task: {5F8C245A-E623-4614-A6D5-8995C4873EBC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-05] (Adobe Systems Incorporated)

Task: {6CB98D0A-E9FF-4DE5-B34C-20CC68458C75} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {8A894DFF-ED76-43C7-A86C-B64098B88045} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)

Task: {984DD9DE-71BA-4524-9EE4-72AD525A3B93} - System32\Tasks\{E89A9EDF-373F-4920-B543-2C528C038F37} => pcalua.exe -a C:\Users\Denis\Downloads\assassins_creed_1.02.exe -d C:\Users\Denis\Downloads

Task: {A2971CD6-B80B-4071-BCF1-A98BB25B52BD} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe [2014-12-04] (CHIP)

Task: {B6C95881-63A3-4CB4-B186-BF7016CC418D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)

Task: {E475A858-A5B0-475A-B2AB-9B8889DE2A67} - System32\Tasks\{915D4930-E049-440F-93D4-8A879D659104} => pcalua.exe -a E:\SetupLauncher.exe -d E:\

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-01-20 22:35 - 2015-01-20 22:35 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2013-06-13 20:37 - 2013-06-18 21:10 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-09-30 01:51 - 2014-09-30 01:51 - 00074664 _____ () F:\AnyDVD\ADvdDiscHlp64.exe

2010-12-13 18:21 - 2015-02-23 14:06 - 00326656 _____ () C:\Users\Denis\Desktop\VOBMerge252.exe

2014-03-06 15:00 - 2014-03-06 15:00 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\kpcengine.2.3.dll

2013-03-12 17:10 - 2014-11-11 19:47 - 00774656 _____ () D:\Steam\SDL2.dll

2015-01-26 19:42 - 2014-12-02 01:29 - 05002752 _____ () D:\Steam\v8.dll

2015-01-26 19:42 - 2014-12-02 01:29 - 01612800 _____ () D:\Steam\icui18n.dll

2015-01-26 19:42 - 2014-12-02 01:29 - 01210368 _____ () D:\Steam\icuuc.dll

2014-05-21 18:44 - 2015-02-19 00:51 - 02360000 _____ () D:\Steam\video.dll

2014-08-29 07:52 - 2014-12-01 22:31 - 02396672 _____ () D:\Steam\libavcodec-56.dll

2014-08-29 07:52 - 2014-12-01 22:31 - 00442880 _____ () D:\Steam\libavutil-54.dll

2014-08-29 07:52 - 2014-12-01 22:31 - 00479744 _____ () D:\Steam\libavformat-56.dll

2014-08-29 07:52 - 2014-12-01 22:31 - 00332800 _____ () D:\Steam\libavresample-2.dll

2014-08-29 07:52 - 2014-12-01 22:31 - 00485888 _____ () D:\Steam\libswscale-3.dll

2013-02-25 07:39 - 2015-02-19 00:51 - 00702656 _____ () D:\Steam\bin\chromehtml.DLL

2014-01-31 23:30 - 2015-03-01 16:14 - 01007104 _____ () D:\Origin\platforms\qwindows.dll

2014-01-31 23:30 - 2015-03-01 16:14 - 00023552 _____ () D:\Origin\imageformats\qgif.dll

2014-01-31 23:30 - 2015-03-01 16:14 - 00024576 _____ () D:\Origin\imageformats\qico.dll

2014-01-31 23:30 - 2015-03-01 16:14 - 00216576 _____ () D:\Origin\imageformats\qjpeg.dll

2014-01-31 23:30 - 2015-03-01 16:14 - 00261120 _____ () D:\Origin\imageformats\qmng.dll

2014-01-31 23:30 - 2015-03-01 16:14 - 00019456 _____ () D:\Origin\imageformats\qtga.dll

2014-01-31 23:30 - 2015-03-01 16:14 - 00337408 _____ () D:\Origin\imageformats\qtiff.dll

2014-01-31 23:30 - 2015-03-01 16:14 - 00018944 _____ () D:\Origin\imageformats\qwbmp.dll

2010-11-22 23:56 - 2010-11-22 23:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd

2010-11-22 23:57 - 2010-11-22 23:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll

2010-11-22 23:56 - 2010-11-22 23:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd

2010-11-22 23:57 - 2010-11-22 23:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd

2010-11-22 23:57 - 2010-11-22 23:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd

2011-02-15 19:17 - 2011-02-15 19:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll

2010-11-22 23:57 - 2010-11-22 23:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd

2014-05-14 00:26 - 2014-05-14 00:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll

2010-11-22 23:57 - 2010-11-22 23:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd

2014-08-14 01:37 - 2014-08-14 01:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll

2014-08-14 01:37 - 2014-08-14 01:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll

2010-11-22 23:56 - 2010-11-22 23:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd

2010-11-22 23:57 - 2010-11-22 23:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd

2010-11-22 23:56 - 2010-11-22 23:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd

2013-11-21 01:05 - 2013-11-21 01:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll

2010-11-22 23:57 - 2010-11-22 23:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd

2014-06-18 01:56 - 2014-06-18 01:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd

2011-02-15 19:17 - 2011-02-15 19:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll

2010-11-23 00:06 - 2010-11-23 00:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll

2013-05-10 00:52 - 2013-05-10 00:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll

2013-05-10 00:52 - 2013-05-10 00:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll

2013-05-10 00:52 - 2013-05-10 00:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll

2013-05-03 19:56 - 2013-05-03 19:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll

2013-05-03 19:56 - 2013-05-03 19:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll

2013-05-03 19:56 - 2013-05-03 19:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll

2013-05-03 19:57 - 2013-05-03 19:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll

2013-02-19 11:48 - 2015-01-28 02:30 - 34641288 _____ () D:\Steam\bin\libcef.dll

2015-02-04 06:58 - 2015-02-04 06:58 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\582f6038931a9b63060e663814d293d0\PSIClient.ni.dll

2009-02-26 12:46 - 2009-02-26 12:46 - 00064344 _____ () F:\Office12\ADDINS\COLLEA~1.DLL

2011-06-22 10:46 - 2011-06-22 10:46 - 00434016 _____ () F:\Office12\ADDINS\UMOUTL~1.DLL

2013-07-10 17:07 - 2013-07-10 17:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL

2015-02-20 07:44 - 2015-02-17 23:44 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libglesv2.dll

2015-02-20 07:44 - 2015-02-17 23:44 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libegl.dll

2015-02-20 07:44 - 2015-02-17 23:44 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\pdf.dll

2015-02-20 07:44 - 2015-02-17 23:44 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-2022827769-3302627499-2916265337-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.0.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-2022827769-3302627499-2916265337-500 - Administrator - Disabled)

Denis (S-1-5-21-2022827769-3302627499-2916265337-1001 - Administrator - Enabled) => C:\Users\Denis

Gast (S-1-5-21-2022827769-3302627499-2916265337-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2022827769-3302627499-2916265337-1006 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============

Error: (03/02/2015 05:26:45 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "50AX800_SERIES",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E33071A1-541F-4039-B10C-5F933FEDA346}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 
 

Microsoft Office Sessions:

=========================
 

CodeIntegrity Errors:

===================================

  Date: 2015-03-02 17:37:55.388

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-03-02 16:17:25.627

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-03-02 14:59:57.335

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-03-02 14:50:26.787

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-03-02 14:42:31.274

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-03-02 14:35:06.694

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-03-02 14:33:42.817

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-03-02 14:21:53.458

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-03-02 14:02:59.002

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-03-02 13:47:25.711

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz

Percentage of memory in use: 24%

Total physical RAM: 32718.93 MB

Available physical RAM: 24606.21 MB

Total Pagefile: 65436.04 MB

Available Pagefile: 60505.32 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:238.47 GB) (Free:58.67 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: () (Fixed) (Total:931.51 GB) (Free:820.29 GB) NTFS

Drive f: (BOOT) (Fixed) (Total:465.76 GB) (Free:458.28 GB) NTFS

Drive g: (BACKUP) (Fixed) (Total:445.75 GB) (Free:445.65 GB) NTFS

Drive h: (RECOVER) (Fixed) (Total:19.99 GB) (Free:16.27 GB) FAT32

Drive i: (HITACHI) (Fixed) (Total:931.51 GB) (Free:119.63 GB) NTFS

Drive j: (Filme_1) (Fixed) (Total:4657.49 GB) (Free:1502.23 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 46211ED6)

Partition 1: (Active) - (Size=238.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 46211EDE)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (Size: 465.8 GB) (Disk ID: D9A198D6)

Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
 

========================================================

Disk: 3 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 5E8CFF8E)

Partition 1: (Not Active) - (Size=465.8 GB) - (Type=OF Extended)
 

========================================================

Disk: 4 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: C727490B)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 5.
 

==================== End Of Log ============================

--- --- ---
Grüße,
scholli

Jetzt habe ich doch noch einen Weg gefunden, die Daten aus Kaspersky zu bekommen...hier das Resultat:

01.03.2015 17.17.30 Vollständige Untersuchung des Computers Aufgabe wurde abgeschlossen Ende: Gestern, 01.03.2015, 17:17
01.03.2015 17.17.30 Gefundenes Objekt (Datei) wurde gelöscht c:\documents and settings\denis\appdata\local\temp\2180ef0b-c4e0-b9e3-4b43-4fb3fc4af60a.exe Datei: c:\documents and settings\denis\appdata\local\temp\2180ef0b-c4e0-b9e3-4b43-4fb3fc4af60a.exe Objektname: not-a-virus:AdWare.Win32.AddLyrics.cjc
01.03.2015 17.17.23 Gefundenes Objekt (Datei) wurde gelöscht c:\documents and settings\denis\appdata\local\microsoft\windows\temporary internet files\content.ie5\2ka87h7e\sam__2268_il21277[1].exe Datei: c:\documents and settings\denis\appdata\local\microsoft\windows\temporary internet files\content.ie5\2ka87h7e\sam__2268_il21277[1].exe Objektname: not-a-virus:AdWare.Win32.Amonetize.acut
01.03.2015 17.17.18 Gefundenes Objekt (Datei) wurde gelöscht c:\documents and settings\denis\appdata\local\google\chrome\user data\default\file system\002\t\00\00000000//data0000.res Datei: c:\documents and settings\denis\appdata\local\google\chrome\user data\default\file system\002\t\00\00000000//data0000.res Objektname: not-a-virus:AdWare.MSIL.DomaIQ.avkd
01.03.2015 17.16.56 Gefundenes Objekt (Datei) wurde desinfiziert c:\documents and settings\denis\anwendungsdaten\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk Datei: c:\documents and settings\denis\anwendungsdaten\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk Objektname: HEUR:Trojan.WinLNK.StartPage.gena
01.03.2015 17.16.55 Gefundenes Objekt (Datei) wurde desinfiziert c:\documents and settings\denis\anwendungsdaten\microsoft\internet explorer\quick launch\google chrome.lnk Datei: c:\documents and settings\denis\anwendungsdaten\microsoft\internet explorer\quick launch\google chrome.lnk Objektname: HEUR:Trojan.WinLNK.StartPage.gena
01.03.2015 16.31.58 Objekt (Datei) wurde nicht verarbeitet C:\Documents and Settings\Denis\AppData\Local\Temp\2180EF0B-C4E0-B9E3-4B43-4FB3FC4AF60A.exe Datei: C:\Documents and Settings\Denis\AppData\Local\Temp\2180EF0B-C4E0-B9E3-4B43-4FB3FC4AF60A.exe Objektname: not-a-virus:AdWare.Win32.AddLyrics.cjc Grund: Zurückgestellt
01.03.2015 16.31.58 Objekt (Datei) wurde gefunden C:\Documents and Settings\Denis\AppData\Local\Temp\2180EF0B-C4E0-B9E3-4B43-4FB3FC4AF60A.exe Datei: C:\Documents and Settings\Denis\AppData\Local\Temp\2180EF0B-C4E0-B9E3-4B43-4FB3FC4AF60A.exe Objektname: not-a-virus:AdWare.Win32.AddLyrics.cjc
01.03.2015 16.31.50 Objekt (Datei) wurde nicht verarbeitet C:\Documents and Settings\Denis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2KA87H7E\sam__2268_il21277[1].exe Datei: C:\Documents and Settings\Denis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2KA87H7E\sam__2268_il21277[1].exe Objektname: not-a-virus:AdWare.Win32.Amonetize.acut Grund: Zurückgestellt
01.03.2015 16.31.50 Objekt (Datei) wurde gefunden C:\Documents and Settings\Denis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2KA87H7E\sam__2268_il21277[1].exe Datei: C:\Documents and Settings\Denis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2KA87H7E\sam__2268_il21277[1].exe Objektname: not-a-virus:AdWare.Win32.Amonetize.acut
01.03.2015 16.31.46 Objekt (Datei) wurde nicht verarbeitet C:\Documents and Settings\Denis\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000//# Datei: C:\Documents and Settings\Denis\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000//# Objektname: not-a-virus:AdWare.MSIL.DomaIQ.avkd Grund: Zurückgestellt
01.03.2015 16.31.46 Objekt (Datei) wurde gefunden C:\Documents and Settings\Denis\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000//# Datei: C:\Documents and Settings\Denis\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000//# Objektname: not-a-virus:AdWare.MSIL.DomaIQ.avkd
01.03.2015 16.31.46 Objekt (Datei) wurde nicht verarbeitet C:\Documents and Settings\Denis\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000//data0000.res Datei: C:\Documents and Settings\Denis\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000//data0000.res Objektname: not-a-virus:AdWare.MSIL.DomaIQ.avkd Grund: Zurückgestellt
01.03.2015 16.31.46 Objekt (Datei) wurde gefunden C:\Documents and Settings\Denis\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000//data0000.res Datei: C:\Documents and Settings\Denis\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000//data0000.res Objektname: not-a-virus:AdWare.MSIL.DomaIQ.avkd
01.03.2015 16.31.41 Objekt (Datei) wurde nicht verarbeitet C:\Documents and Settings\Denis\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Datei: C:\Documents and Settings\Denis\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Objektname: HEUR:Trojan.WinLNK.StartPage.gena Grund: Zurückgestellt
01.03.2015 16.31.41 Objekt (Datei) wurde nicht verarbeitet C:\Documents and Settings\Denis\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk Datei: C:\Documents and Settings\Denis\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk Objektname: HEUR:Trojan.WinLNK.StartPage.gena Grund: Zurückgestellt
01.03.2015 16.31.41 Objekt (Datei) wurde gefunden C:\Documents and Settings\Denis\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Datei: C:\Documents and Settings\Denis\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Objektname: HEUR:Trojan.WinLNK.StartPage.gena
01.03.2015 16.31.41 Objekt (Datei) wurde gefunden C:\Documents and Settings\Denis\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk Datei: C:\Documents and Settings\Denis\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk Objektname: HEUR:Trojan.WinLNK.StartPage.gena
01.03.2015 16.30.13 Vollständige Untersuchung des Computers Aufgabe wurde gestartet Zeitpunkt: Gestern, 01.03.2015, 16:30

Grüße,
scholli