Trojaner-Board
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Problem: Internet Explorer Meldung getwindowinfo (https://www.trojaner-board.de/138413-problem-internet-explorer-meldung-getwindowinfo.html)

Youdid 18.07.2013 16:48
Problem: Internet Explorer Meldung getwindowinfo
 
Hallo an alle, ich verwende für das Internet chrome manchmal auch firefox. Umso mehr wundert es mich, dass ich ein Problem mit dem Internet Explorer habe. Seit gestern öffnet sich dieser mit der Meldung "Webseite kann nicht geöffnet werden". In der Anzeige steht "hxxp://www_getwindowinfo/". Immer wenn ich den IE schließen möchte, öffnet sich dieser einfach wieder mit der oben erwähnten Meldung.
Ich habe schon den Avira und den Malwarebytes drüberlaufen lassen. Ebenso den adwcleaner. Leider hat nichts etwas gebracht. Handelt es sich hierbei überhaupt um einen Virus? Hat jemand einen Vorschlag, wie ich weiter vorgehen soll. Bitte so leicht wie möglich beschreiben ;-)

Vielen Dank im Voraus!

schrauber 18.07.2013 18:04
Hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Youdid 18.07.2013 19:08
RSST.tx


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-07-2013 02
Ran by Judith (administrator) on 18-07-2013 19:58:18
Running from C:\Users\Judith\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Andrea Electronics Corporation) C:\Windows\system32\aestsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(IDT, Inc.) C:\Windows\system32\STacSV.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(IDT, Inc.) C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(ICQ) C:\Users\Judith\AppData\Roaming\ICQM\icq.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Windows Net) C:\Users\Judith\AppData\Roaming\Windows Net Data\net.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Wajam) C:\Program Files\Wajam\Updater\WajamUpdater.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Microsoft Corporation) C:\Windows\system32\schtasks.exe
() C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

MountPoints2: {7c5992c6-5358-11df-a329-001c23ac3e36} - F:\Sys\Drivers\raidhost.exe
Lsa: [Authentication Packages] msv1_0 relog_ap
WDM\sttray.exe [405504 2007-09-13] (IDT, Inc.)
HKLM\...\Run: [TkBellExe] - C:\program files\real\realplayer\Update\realsched.exe [296056 2012-06-08] (RealNetworks, Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [151952 2012-11-29] (Apple Inc.)
HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Runonce: [Del8828876] - cmd.exe /Q /D /c del "C:\Users\Judith\AppData\Local\Temp\0.del" [x]
HKCU\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [49664 2008-01-19] (Microsoft Corporation)
HKCU\...\Run: [ICQ] - C:\Users\Judith\AppData\Roaming\ICQM\icq.exe [27598184 2013-04-10] (ICQ)
HKCU\...\Run: [Google Update] - C:\Users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-24] (Google Inc.)
HKCU\...\Run: [COMPUTERBILD-Cloud] - C:\Program Files\COMPUTERBILD-Cloud\CGCClient.exe [1781840 2012-08-08] ()
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [SugarSync] - C:\Program Files\SugarSync\SugarSync.exe [12419424 2013-06-26] (SugarSync, Inc.)
HKCU\...\Run: [QtraxNotification] - C:\Users\Judith\Qtrax\Player\Notification.exe [110888 2013-07-08] ()
HKCU\...\Runonce: [Del8828876] - cmd.exe /Q /D /c del "C:\Users\Judith\AppData\Local\Temp\0.del" [x]
HKCU\...\Runonce: [Qtrax] - C:\Program Files\Microsoft Silverlight\sllauncher.exe 2392482256.portal.qtrax.com [x]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files\T-Online\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files\T-Online\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Judith\AppData\Local\Windows\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Judith\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Judith\AppData\Local\Windows\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Judith\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947
SearchScopes: HKCU - {752A9793-46C2-4927-9DCE-8FD9351F6B79} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Plus-HD-2.3 - {11111111-1111-1111-1111-110311341126} - C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-bho.dll (Plus HD)
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files\Wajam\IE\priam_bho.dll (Wajam)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ICQ Sparberater - {E2B5568A-B3BC-49D6-9BEA-4A549AA1E01E} - C:\Program Files\icq\Internet Explorer\icq.dll ()
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU -No Name - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -  No File
Toolbar: HKCU -No Name - {00000000-0000-0000-0000-000000000000} -  No File
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU -No Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
Handler: msdaipp - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 20 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default
FF user.js: detected! => C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\user.js
FF NetworkProxy: "type", 0
FF SelectedSearchEngine: Delta Search
FF NewTab: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947
FF Homepage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @real.com/nppl3260;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Judith\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Judith\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\foxsearch.src
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com
FF Extension: ICQ Sparberater - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\ciuvo-extension@icq.de
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\ffxtlbr@babylon.com
FF Extension: Delta Toolbar - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\ffxtlbr@delta.com
FF Extension: ReminderFox - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}
FF Extension: NoiaFoxoption - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\NoiaFoxoption@davidvincent.tld.xpi
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKCU\...\Firefox\Extensions: [{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}] C:\Users\Judith\AppData\Local\{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}
FF Extension: XULRunner - C:\Users\Judith\AppData\Local\{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] C:\Program Files\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF Extension: No Name - C:\Program Files\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi

Chrome:
=======
CHR RestoreOnStartup: "chrome://newtab/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Judith\AppData\Local\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Judith\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Judith\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Gutscheinmieze-Plugin) - C:\Program Files\Mozilla Firefox\plugins\npmieze.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (amazon.de) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfanmgndpbnpgiopcibekgefiefldmec\1_0
CHR Extension: (YouTube) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Facebook) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm\1.0.3_0
CHR Extension: (Zoho Calendar) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdgmlckojhjdnjnobgogidjdjmgekbcp\1.1_0
CHR Extension: (Twitter for Chrome) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdoinklelehcpndgmcddkkdhibpoglnk\1.9.6_0
CHR Extension: (Google Search) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google+) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm\1.2.0.418_0
CHR Extension: (Open GVoice) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnhfphahnbmmebjmdlmhncohoohmdopb\2.0_0
CHR Extension: (Google Calendar) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0
CHR Extension: (Silver Bird) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\encaiiljifbdbjlphpgpiimidegddhic\1.9.10.2_0
CHR Extension: (Delta Toolbar) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4_0
CHR Extension: (Facebook for Chrome) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp\6.3_0
CHR Extension: (TweetDeck) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl\3.1.3_0
CHR Extension: (Personal Calendar) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieebepklmgmlnjfgmhngammfpadhobfh\1.0_0
CHR Extension: (Dropbox) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl\3.0.6_0
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR Extension: (Wajam) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0
CHR Extension: (Evernote Web) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol\1.0.7_0
CHR Extension: (YouTube Unblocker) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0
CHR Extension: (Plus-HD-2.3) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec\1.23.17_0
CHR Extension: (Gmail) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [411168 2007-02-16] (Acronis)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2827728 2013-05-23] ()
R2 DokanMounter; C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe [14848 2012-02-15] ()
S3 TDslMgrService; C:\Program Files\T-Online\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH)
S3 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [548864 2008-10-21] (Magix AG)
R2 WajamUpdater; C:\Program Files\Wajam\Updater\WajamUpdater.exe [109064 2013-05-02] (Wajam)

==================== Drivers (Whitelisted) ====================

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26080 2012-10-08] (Wondershare)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [299024 2012-04-09] (EldoS Corporation)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [95744 2012-02-15] (Windows (R) Win 7 DDK provider)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [16448 2007-08-01] (T-Systems Enterprise Services GmbH)
S3 dsltestSp5; C:\Windows\System32\Drivers\dsltestSp5.sys [26816 2007-09-12] (Printing Communications Assoc., Inc. (PCAUSA))
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2007-08-21] (Paragon Software Group)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-12-12] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-12-12] (RapidSolution Software AG)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2009-01-10] (Duplex Secure Ltd.)
R3 SSCBFS3; C:\Windows\System32\DRIVERS\sscbfs3.sys [295936 2013-01-30] (EldoS Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31360 2012-07-20] (The OpenVPN Project)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [35592 2012-11-15] (Anchorfree Inc.)
R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39048 2012-12-12] (RapidSolution Software AG)
R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [32768 2008-12-13] (Acronis)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [17792 2008-12-26] (Avnex)
R2 {2E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7}; C:\Program Files\Dell\MediaDirect\000.fcl [13560 2007-04-02] (Cyberlink Corp.)
S3 ActivHidSerMini; system32\DRIVERS\activhidsermini.sys [x]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S4 IpInIp; system32\DRIVERS\ipinip.sys [x]
S4 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S4 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 prmvmouse; system32\DRIVERS\activmouse.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-18 19:58 - 2013-07-18 19:58 - 00000000 ____D C:\FRST
2013-07-18 19:56 - 2013-07-18 19:56 - 01218860 _____ (Farbar) C:\Users\Judith\Downloads\FRST.exe
2013-07-18 19:53 - 2013-07-18 19:53 - 00000000 ____D C:\Users\Judith\Qtrax
2013-07-18 19:50 - 2013-07-18 19:50 - 00001188 _____ C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
2013-07-18 19:50 - 2013-07-18 19:50 - 00001184 _____ C:\Windows\Tasks\Plus-HD-2.3-updater.job
2013-07-18 19:50 - 2013-07-18 19:50 - 00001088 _____ C:\Windows\Tasks\Plus-HD-2.3-enabler.job
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Delta
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\Users\Judith\AppData\Roaming\BabSolution
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\Program Files\Delta
2013-07-18 19:49 - 2013-07-18 19:50 - 00000000 ____D C:\Program Files\Plus-HD-2.3
2013-07-18 19:49 - 2013-07-18 19:49 - 00002039 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-07-18 19:49 - 2013-07-18 19:49 - 00002009 _____ C:\Users\Judith\Desktop\Qtrax Player.lnk
2013-07-18 19:49 - 2013-07-18 19:49 - 00001884 _____ C:\Windows\Tasks\Plus-HD-2.3-chromeinstaller.job
2013-07-18 19:49 - 2013-07-18 19:49 - 00001808 _____ C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job
2013-07-18 19:49 - 2013-07-18 19:49 - 00000909 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-07-18 19:49 - 2013-07-18 19:49 - 00000000 ____D C:\Program Files\OpenIt
2013-07-18 19:48 - 2013-07-18 19:52 - 00000290 _____ C:\Windows\Tasks\DSite.job
2013-07-18 19:48 - 2013-07-18 19:49 - 00000000 ____D C:\Program Files\Wajam
2013-07-18 19:48 - 2013-07-18 19:48 - 00793536 _____ C:\Users\Judith\Downloads\ZipOpenerSetup.exe
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\Users\Judith\AppData\Roaming\DSite
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Babylon
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\Users\Judith\AppData\Local\Wajam
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\ProgramData\Babylon
2013-07-18 19:01 - 2013-07-18 19:01 - 00602112 _____ (OldTimer Tools) C:\Users\Judith\Downloads\OTL (1).exe
2013-07-18 19:00 - 2013-07-18 19:00 - 00602112 _____ (OldTimer Tools) C:\Users\Judith\Downloads\OTL.exe
2013-07-18 17:13 - 2013-07-18 17:14 - 00033686 _____ C:\AdwCleaner[S1].txt
2013-07-18 17:12 - 2013-07-18 17:12 - 00033720 _____ C:\AdwCleaner[R1].txt
2013-07-18 17:11 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Downloads\adwcleaner2305.exe
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setupact.log
2013-07-17 14:00 - 2013-07-17 14:00 - 00650027 _____ C:\Users\Judith\Downloads\adwcleaner_2.3.0.4 (1).exe
2013-07-17 12:22 - 2013-07-18 17:22 - 00002388 _____ C:\Windows\PFRO.log
2013-07-16 23:17 - 2013-07-18 16:41 - 00000830 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-07-16 23:16 - 2013-07-17 12:29 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Windows Net Data
2013-07-16 23:15 - 2013-06-27 07:14 - 00031816 _____ C:\Windows\Launcher.exe
2013-07-16 23:11 - 2013-07-16 23:11 - 00001920 _____ C:\Users\Public\Desktop\Free YouTube Download Manager.lnk
2013-07-16 23:04 - 2013-07-16 23:04 - 00000209 _____ C:\Users\Judith\Desktop\Amazon.url
2013-07-16 23:04 - 2013-07-16 23:04 - 00000000 ____D C:\Users\Judith\AppData\Local\Software Updater
2013-07-16 22:03 - 2013-07-16 22:06 - 00000000 ____D C:\Windows\system32\MRT
2013-07-16 20:10 - 2013-07-16 20:10 - 00283168 _____ C:\Users\Judith\Downloads\Setup (1).exe
2013-07-16 14:35 - 2013-07-16 14:35 - 00895488 _____ M:\Dokumente\Visitenkarten.doc
2013-07-13 03:25 - 2013-07-13 03:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2845142_WM64$
2013-07-13 03:25 - 2007-07-27 10:41 - 00016760 ____N (Microsoft Corporation) C:\Windows\system32\spmsg.dll
2013-07-12 16:40 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-12 16:39 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-12 16:39 - 2013-05-29 13:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 16:39 - 2013-05-29 13:30 - 00916480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 16:39 - 2013-05-29 13:30 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-12 16:39 - 2013-05-29 13:28 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 06016000 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 11111424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-12 16:39 - 2013-05-29 13:24 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-12 16:39 - 2013-05-29 11:47 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-12 16:39 - 2013-05-29 10:07 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-12 16:39 - 2013-05-29 10:06 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-12 16:39 - 2013-05-29 10:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-12 16:39 - 2013-05-29 10:04 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-12 16:39 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-12 16:39 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-12 16:39 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-12 16:39 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-12 16:39 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-12 16:39 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-12 16:38 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 21:53 - 2013-07-10 21:53 - 00024064 _____ M:\Dokumente\Windows Phone Store.doc
2013-07-10 21:51 - 2013-07-10 21:51 - 00000840 _____ C:\Users\Judith\Desktop\Wuala.lnk
2013-07-10 21:48 - 2013-07-18 17:26 - 00000000 ___RD C:\Users\Judith\Dropbox
2013-07-10 21:48 - 2013-07-10 21:48 - 00000992 _____ C:\Users\Judith\Desktop\Dropbox.lnk
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala OverlayIcons
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala CBFS
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 21:47 - 2013-07-10 21:45 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 21:47 - 2012-04-09 16:27 - 00299024 _____ (EldoS Corporation) C:\Windows\system32\Drivers\cbfs3.sys
2013-07-10 21:47 - 2012-04-09 16:27 - 00223760 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll
2013-07-10 21:47 - 2012-04-09 16:27 - 00158224 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 21:44 - 2013-07-10 21:44 - 00000000 ____D C:\Program Files\Dropbox
2013-07-10 21:43 - 2013-07-10 21:43 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-07-10 21:40 - 2013-07-18 17:27 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Dropbox
2013-07-10 21:39 - 2013-07-10 21:40 - 33578320 _____ (Dropbox, Inc.) C:\Users\Judith\Downloads\Dropbox 2.2.8.exe
2013-07-10 21:38 - 2013-07-10 21:38 - 00000594 _____ C:\Users\Judith\Desktop\Mein SugarSync.lnk
2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ____D M:\Dokumente\Mein SugarSync
2013-07-10 21:36 - 2013-07-10 21:38 - 00000000 ____D C:\Users\Judith\AppData\Local\SugarSync
2013-07-10 21:35 - 2013-07-10 21:35 - 00001692 _____ C:\Users\Public\Desktop\SugarSync.lnk
2013-07-10 21:35 - 2013-01-30 13:12 - 00225024 _____ (EldoS Corporation) C:\Windows\system32\SSCbFsNetRdr3.dll
2013-07-10 21:35 - 2013-01-30 13:12 - 00159488 _____ (EldoS Corporation) C:\Windows\system32\SSCbFsMntNtf3.dll
2013-07-10 21:33 - 2013-07-10 21:42 - 00000828 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Wuala
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Local\Wuala
2013-07-10 21:33 - 2013-01-30 13:11 - 00295936 _____ (EldoS Corporation) C:\Windows\system32\Drivers\sscbfs3.sys
2013-07-10 21:32 - 2013-07-10 21:35 - 00000000 ____D C:\Program Files\SugarSync
2013-07-10 21:29 - 2013-07-10 21:29 - 22964952 _____ C:\Users\Judith\Downloads\WualaSetup_04_13.exe
2013-07-10 21:27 - 2013-07-10 21:28 - 20911672 _____ (SugarSync, Inc.) C:\Users\Judith\Downloads\SugarSyncSetup_2.0.27.exe
2013-07-07 21:25 - 2013-07-07 21:25 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00001853 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\Program Files\Avira
2013-07-07 21:21 - 2013-06-20 14:48 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-07 21:21 - 2013-03-06 16:13 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-07 21:21 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-07-07 21:04 - 2013-07-07 21:06 - 104943936 _____ C:\Users\Judith\Downloads\avira3737_free_antivirus_de.exe
2013-07-01 18:20 - 2013-07-01 18:20 - 00005384 _____ C:\Users\Judith\Downloads\Mundharmonika+Noten.htm (7).html
2013-06-28 11:52 - 2013-06-28 11:52 - 00000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-06-28 11:50 - 2013-06-28 11:51 - 22937227 _____ C:\Users\Judith\Downloads\vlc-2.0.7-win32.exe
2013-06-24 18:21 - 2013-06-24 18:21 - 00024064 _____ M:\Dokumente\Schreib-ab homepage.doc
2013-06-24 17:53 - 2013-06-24 17:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 17:25 - 2013-06-24 17:25 - 00001038 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-24 12:29 - 2013-06-24 12:29 - 00017196 _____ C:\Users\Judith\.recently-used.xbel
2013-06-19 20:20 - 2013-06-19 20:20 - 04342573 _____ C:\Users\Judith\Downloads\drehbare_sternkarte.zip

==================== One Month Modified Files and Folders =======

2013-07-18 19:58 - 2013-07-18 19:58 - 00000000 ____D C:\FRST
2013-07-18 19:56 - 2013-07-18 19:56 - 01218860 _____ (Farbar) C:\Users\Judith\Downloads\FRST.exe
2013-07-18 19:53 - 2013-07-18 19:53 - 00000000 ____D C:\Users\Judith\Qtrax
2013-07-18 19:53 - 2008-12-10 20:45 - 00000000 ____D C:\Users\Judith
2013-07-18 19:52 - 2013-07-18 19:48 - 00000290 _____ C:\Windows\Tasks\DSite.job
2013-07-18 19:50 - 2013-07-18 19:50 - 00001188 _____ C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
2013-07-18 19:50 - 2013-07-18 19:50 - 00001184 _____ C:\Windows\Tasks\Plus-HD-2.3-updater.job
2013-07-18 19:50 - 2013-07-18 19:50 - 00001088 _____ C:\Windows\Tasks\Plus-HD-2.3-enabler.job
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Delta
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\Users\Judith\AppData\Roaming\BabSolution
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-18 19:50 - 2013-07-18 19:50 - 00000000 ____D C:\Program Files\Delta
2013-07-18 19:50 - 2013-07-18 19:49 - 00000000 ____D C:\Program Files\Plus-HD-2.3
2013-07-18 19:49 - 2013-07-18 19:49 - 00002039 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-07-18 19:49 - 2013-07-18 19:49 - 00002009 _____ C:\Users\Judith\Desktop\Qtrax Player.lnk
2013-07-18 19:49 - 2013-07-18 19:49 - 00001884 _____ C:\Windows\Tasks\Plus-HD-2.3-chromeinstaller.job
2013-07-18 19:49 - 2013-07-18 19:49 - 00001808 _____ C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job
2013-07-18 19:49 - 2013-07-18 19:49 - 00000909 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-07-18 19:49 - 2013-07-18 19:49 - 00000000 ____D C:\Program Files\OpenIt
2013-07-18 19:49 - 2013-07-18 19:48 - 00000000 ____D C:\Program Files\Wajam
2013-07-18 19:49 - 2008-12-10 20:45 - 00000000 ___RD C:\Users\Judith\Desktop
2013-07-18 19:49 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-18 19:48 - 2013-07-18 19:48 - 00793536 _____ C:\Users\Judith\Downloads\ZipOpenerSetup.exe
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\Users\Judith\AppData\Roaming\DSite
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Babylon
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\Users\Judith\AppData\Local\Wajam
2013-07-18 19:48 - 2013-07-18 19:48 - 00000000 ____D C:\ProgramData\Babylon
2013-07-18 19:46 - 2012-11-28 17:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-18 19:46 - 2012-11-24 15:33 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000UA.job
2013-07-18 19:46 - 2012-03-04 13:20 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-18 19:46 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-18 19:46 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-18 19:02 - 2006-11-02 14:52 - 01204373 _____ C:\Windows\WindowsUpdate.log
2013-07-18 19:01 - 2013-07-18 19:01 - 00602112 _____ (OldTimer Tools) C:\Users\Judith\Downloads\OTL (1).exe
2013-07-18 19:00 - 2013-07-18 19:00 - 00602112 _____ (OldTimer Tools) C:\Users\Judith\Downloads\OTL.exe
2013-07-18 18:57 - 2011-07-22 18:56 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Skype
2013-07-18 17:33 - 2012-12-10 21:35 - 00000000 ____D C:\Users\Judith\AppData\Roaming\COMPUTERBILD Cloud
2013-07-18 17:27 - 2013-07-10 21:40 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Dropbox
2013-07-18 17:27 - 2012-12-10 21:36 - 00000000 __SHD C:\Users\Judith\wc
2013-07-18 17:26 - 2013-07-10 21:48 - 00000000 ___RD C:\Users\Judith\Dropbox
2013-07-18 17:22 - 2013-07-17 12:22 - 00002388 _____ C:\Windows\PFRO.log
2013-07-18 17:22 - 2012-03-04 13:19 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-18 17:22 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-18 17:21 - 2010-05-25 18:16 - 00008524 _____ C:\Windows\bthservsdp.dat
2013-07-18 17:21 - 2006-11-02 15:01 - 00032606 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-18 17:14 - 2013-07-18 17:13 - 00033686 _____ C:\AdwCleaner[S1].txt
2013-07-18 17:13 - 2008-12-13 19:22 - 00000000 ____D C:\ProgramData\ICQ
2013-07-18 17:13 - 2008-12-13 13:43 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-07-18 17:12 - 2013-07-18 17:12 - 00033720 _____ C:\AdwCleaner[R1].txt
2013-07-18 17:11 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Downloads\adwcleaner2305.exe
2013-07-18 16:41 - 2013-07-16 23:17 - 00000830 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-07-18 14:38 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setupact.log
2013-07-18 03:09 - 2012-11-24 15:33 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000Core.job
2013-07-17 14:02 - 2008-12-13 19:48 - 00000000 ____D M:\Dokumente\Sicherung
2013-07-17 14:00 - 2013-07-17 14:00 - 00650027 _____ C:\Users\Judith\Downloads\adwcleaner_2.3.0.4 (1).exe
2013-07-17 13:57 - 2009-01-05 14:33 - 00027430 _____ C:\Users\Judith\AppData\Roaming\nvModes.001
2013-07-17 12:29 - 2013-07-16 23:16 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Windows Net Data
2013-07-17 12:06 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\ShellNew
2013-07-17 11:49 - 2011-11-22 19:00 - 00000000 ____D C:\Program Files\DsNET Corp
2013-07-16 23:16 - 2010-12-19 20:32 - 00000000 ___HD C:\Users\Judith\AppData\Local\Windows
2013-07-16 23:11 - 2013-07-16 23:11 - 00001920 _____ C:\Users\Public\Desktop\Free YouTube Download Manager.lnk
2013-07-16 23:10 - 2013-02-17 16:41 - 00000000 ____D C:\Program Files\Freetec
2013-07-16 23:08 - 2013-02-17 16:39 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-16 23:04 - 2013-07-16 23:04 - 00000209 _____ C:\Users\Judith\Desktop\Amazon.url
2013-07-16 23:04 - 2013-07-16 23:04 - 00000000 ____D C:\Users\Judith\AppData\Local\Software Updater
2013-07-16 22:06 - 2013-07-16 22:03 - 00000000 ____D C:\Windows\system32\MRT
2013-07-16 20:10 - 2013-07-16 20:10 - 00283168 _____ C:\Users\Judith\Downloads\Setup (1).exe
2013-07-16 14:35 - 2013-07-16 14:35 - 00895488 _____ M:\Dokumente\Visitenkarten.doc
2013-07-16 12:14 - 2008-12-13 12:30 - 00002637 _____ C:\Users\Judith\Desktop\Microsoft Office Word 2003.lnk
2013-07-14 20:33 - 2012-01-20 19:03 - 00000000 ____D M:\Dokumente\Handys N97 Galaxy Ace
2013-07-13 04:07 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-13 03:51 - 2006-11-02 14:47 - 00532888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 03:48 - 2008-12-13 12:40 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 03:47 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-13 03:29 - 2006-11-02 12:33 - 01584126 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-13 03:25 - 2013-07-13 03:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2845142_WM64$
2013-07-13 03:02 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 09:31 - 2008-12-13 12:53 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Mozilla
2013-07-10 21:53 - 2013-07-10 21:53 - 00024064 _____ M:\Dokumente\Windows Phone Store.doc
2013-07-10 21:51 - 2013-07-10 21:51 - 00000840 _____ C:\Users\Judith\Desktop\Wuala.lnk
2013-07-10 21:48 - 2013-07-10 21:48 - 00000992 _____ C:\Users\Judith\Desktop\Dropbox.lnk
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala OverlayIcons
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala CBFS
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 21:45 - 2013-07-10 21:47 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 21:45 - 2012-06-30 12:00 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-07-10 21:45 - 2011-12-22 15:59 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-07-10 21:44 - 2013-07-10 21:44 - 00000000 ____D C:\Program Files\Dropbox
2013-07-10 21:43 - 2013-07-10 21:43 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-07-10 21:42 - 2013-07-10 21:33 - 00000828 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-10 21:40 - 2013-07-10 21:39 - 33578320 _____ (Dropbox, Inc.) C:\Users\Judith\Downloads\Dropbox 2.2.8.exe
2013-07-10 21:40 - 2010-02-17 17:02 - 00039424 _____ M:\Dokumente\mailaccounts community Free sms accounts.doc
2013-07-10 21:38 - 2013-07-10 21:38 - 00000594 _____ C:\Users\Judith\Desktop\Mein SugarSync.lnk
2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ____D M:\Dokumente\Mein SugarSync
2013-07-10 21:38 - 2013-07-10 21:36 - 00000000 ____D C:\Users\Judith\AppData\Local\SugarSync
2013-07-10 21:35 - 2013-07-10 21:35 - 00001692 _____ C:\Users\Public\Desktop\SugarSync.lnk
2013-07-10 21:35 - 2013-07-10 21:32 - 00000000 ____D C:\Program Files\SugarSync
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Wuala
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Local\Wuala
2013-07-10 21:29 - 2013-07-10 21:29 - 22964952 _____ C:\Users\Judith\Downloads\WualaSetup_04_13.exe
2013-07-10 21:28 - 2013-07-10 21:27 - 20911672 _____ (SugarSync, Inc.) C:\Users\Judith\Downloads\SugarSyncSetup_2.0.27.exe
2013-07-07 21:25 - 2013-07-07 21:25 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00001853 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\Program Files\Avira
2013-07-07 21:06 - 2013-07-07 21:04 - 104943936 _____ C:\Users\Judith\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 17:47 - 2012-08-30 13:55 - 00000000 ____D C:\Users\Judith\AppData\Roaming\vlc
2013-07-06 15:41 - 2010-01-15 17:53 - 00000000 ____D C:\Users\Judith\AppData\Roaming\dvdcss
2013-07-02 20:59 - 2013-02-27 19:53 - 00000000 ____D C:\Program Files\LyricSing
2013-07-01 19:15 - 2008-12-13 16:17 - 00000000 ____D M:\Dokumente\Allerlei
2013-07-01 18:46 - 2012-04-27 17:53 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-01 18:20 - 2013-07-01 18:20 - 00005384 _____ C:\Users\Judith\Downloads\Mundharmonika+Noten.htm (7).html
2013-06-28 15:16 - 2008-12-13 18:22 - 00074752 _____ C:\Users\Judith\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-28 11:52 - 2013-06-28 11:52 - 00000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-06-28 11:51 - 2013-06-28 11:50 - 22937227 _____ C:\Users\Judith\Downloads\vlc-2.0.7-win32.exe
2013-06-27 14:47 - 2013-04-01 16:03 - 00000000 ____D M:\Dokumente\Flug USA Herbst 2013
2013-06-27 07:14 - 2013-07-16 23:15 - 00031816 _____ C:\Windows\Launcher.exe
2013-06-24 18:23 - 2011-03-28 18:58 - 00000000 ____D C:\Users\Judith\AppData\Roaming\DVDVideoSoft
2013-06-24 18:21 - 2013-06-24 18:21 - 00024064 _____ M:\Dokumente\Schreib-ab homepage.doc
2013-06-24 17:53 - 2013-06-24 17:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 17:26 - 2008-12-13 13:43 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-06-24 17:25 - 2013-06-24 17:25 - 00001038 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-24 17:14 - 2012-10-13 13:42 - 70431848 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Judith\Downloads\FreeStudio.exe
2013-06-24 12:30 - 2010-08-09 12:10 - 00000000 ____D C:\Users\Judith\.gimp-2.6
2013-06-24 12:29 - 2013-06-24 12:29 - 00017196 _____ C:\Users\Judith\.recently-used.xbel
2013-06-24 00:37 - 2006-11-02 12:24 - 75733144 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-06-21 17:38 - 2009-11-29 19:37 - 00000000 ____D M:\Dokumente\Steuerfälle
2013-06-20 14:48 - 2013-07-07 21:21 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2010-03-20 12:10 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-06-19 20:20 - 2013-06-19 20:20 - 04342573 _____ C:\Users\Judith\Downloads\drehbare_sternkarte.zip

Files to move or delete:
====================
C:\Users\Judith\Firecat Font.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-18 17:31

==================== End Of Log ============================
--- --- ---

--- --- ---


Addition.txt





FRST Additions Logfile:
Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-07-2013 02
Ran by Judith at 2013-07-18 20:00:23
Running from C:\Users\Judith\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

AAVUpdateManager (Version: 18.00.0000)
Acronis*True*Image*Home (Version: 10.0.4942)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
Agama Web Buttons
Apple Application Support (Version: 2.3.2)
Apple Mobile Device Support (Version: 6.0.1.3)
Apple Software Update (Version: 2.1.3.127)
Ashampoo Burning Studio 2013 v.11.0.5 (Version: 11.0.5)
Audacity 1.2.6
Audacity 1.3.6 (Unicode)
Audials (Version: 10.1.509.900)
Audiograbber 1.83 SE  (Version: 1.83 SE)
Avidemux 2.5 (Version: 2.5.1.5249)
Avira Free Antivirus (Version: 13.0.0.3737)
AVS Screen Capture version 2.0.2
AVS Update Manager 1.0
AVS Video Editor 6
AVS Video Recorder 2.5
AVS4YOU Software Navigator 1.4
Bonjour (Version: 3.0.0.10)
BrowserDefender
capella 7 (Version: 7.1.6)
CCleaner (Version: 3.25)
CD- und DVD-Sharing (Version: 1.0.1.4)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
COMPUTERBILD-Cloud
D3DX10 (Version: 15.4.2368.0902)
Dell Resource CD (Version: 1.00.0000)
Delta Chrome Toolbar
Delta toolbar  (Version: 1.8.21.5)
DivxToDVD 0.5.2b (Version: 0.5.2b)
Dropbox (HKCU Version: 2.2.8)
DSL-Manager
EclipseCrossword (Version: 1.2.57)
FileZilla Client 3.6.0.2 (Version: 3.6.0.2)
FormatFactory 2.50 (Version: 2.50)
Forte Free 2.0
Free Audio CD Burner version 1.4.7
Free Studio version 2013 (Version: 6.1.3.622)
Free Video to iPod Converter version 4.2.16.305
Free Video to JPG Converter version 1.5
Free Video to MP3 Converter version 3.2
Free YouTube Download 2.9
Free YouTube Download Manager (Version: 1.0.2.40)
Free YouTube to iPod Converter version 3.2
Free YouTube to MP3 Converter version 3.11.34.1015 (Version: 3.11.34.1015)
FreeMind (Version: 0.8.1)
GIMP 2.6.12 (Version: 2.6.12)
GOM Player (Version: 2.1.40.5106)
Google Chrome (HKCU Version: 28.0.1500.72)
Google Earth (Version: 6.2.0.5905)
Google Talk Plugin (Version: 4.2.1.14031)
Google Update Helper (Version: 1.3.21.153)
Hervorhebe-Funktion (Windows Live Toolbar) (Version: 03.01.0146)
HotPotatoes v 6.3.0.3
IcoFX 1.6.4
ICQ 8.0 (build 6014) (HKCU Version: 8.0.6014.0)
ICQ Sparberater (Version: 1.4.9)
IsoBuster 2.3 (Version: 2.3)
iTunes (Version: 11.0.0.163)
Japanese Fonts Support For Adobe Reader 9 (Version: 9.0.0)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Junk Mail filter update (Version: 15.4.3502.0922)
MAGIX Foto Manager 10 (Version: 8.0.1.136)
MAGIX Online Druck Service (Version: 3.4.3.0)
MAGIX Screenshare (Version: 4.3.6.1987)
MAGIX Xtreme Foto & Grafik Designer 5 (Silver) (Version: 5.1.2.15876)
MediaDirect (Version: 4.7)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Standard Edition 2003 (Version: 11.0.8173.0)
Microsoft Search Enhancement Pack (Version: 3.0.133.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Windows Media Video 9 VCM
Microsoft XML Parser (Version: 8.0.7820.0)
MindManager Smart (Version: 2.1.3)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
neroxml (Version: 1.0.0)
No23 Recorder (Version: 2.1.0.3)
Notepad++ (Version: 6.2.3)
NVIDIA Drivers
Octava SD4 (Version: 5.01)
Open It! (Version: 1.1.1)
OpenOffice.org 3.1 (Version: 3.1.9399)
OutlookAddinSetup (Version: 1.0.0)
Paragon Partition Manager 2007
PDF24 Creator 5.2.0
PDFCreator (Version: 1.2.3)
Pfadfinder 2.0 (Version: 1.0.7)
Phase 5 HTML-Editor (Version: 5.6.2.3)
Phoenix Backup Professional (Version: 3.5.000)
PixiePack Codec Pack (Version: 1.1.400.0)
Plus-HD-2.3 (Version: 1.27.153.8)
Qtrax Connection Manager (HKCU Version: 20.13.07.02)
Qtrax Player
QuickTime (Version: 7.72.80.56)
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)
RealPlayer (Version: 15.0.4)
RealUpgrade 1.1 (Version: 1.1.0)
River Past Video Cleaner Pro (Version: 7.7.7)
Roxio Creator Audio (Version: 3.3.0)
Roxio Creator Copy (Version: 3.3.0)
Roxio Creator Data (Version: 3.3.0)
Roxio Creator DE (Version: 3.3.0)
Roxio Creator Tools (Version: 3.3.0)
Roxio Drag-to-Disc (Version: 9.0)
Roxio Express Labeler (Version: 2.1.0)
Roxio MyDVD DE (Version: 9.0.117)
Roxio Update Manager (Version: 3.0.0)
Rund um (2.0) ... Erlebnis Biologie 1 RS (Version: 1.00.0000)
Rund um (2.0) ... Erlebnis Chemie RP HE NI (Version: 1.00.0000)
Rund um (2.0) ... Erlebnis Naturwissenschaften 5 RP (Version: 1.00.0000)
Rund um ... Biologie heute entdecken 1 (Version: 1.00.0000)
Rund um ... Biologie heute entdecken 2 (Teil 1) (Version: 1.00.0000)
Rund um ... Biologie heute entdecken 2 (Teil 2) (Version: 1.00.0000)
Segoe UI (Version: 15.4.2271.0615)
Sicherheitsupdate für Windows Media Player (KB2845142)
SigmaTel Audio (Version: 5.10.5210.0)
Skype™ 6.5 (Version: 6.5.158)
Smart Menus (Windows Live Toolbar) (Version: 03.01.0146)
Sonic Activation Module (Version: 1.0)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Steuer-Spar-Erklärung 2011 (Version: 16.17)
Steuer-Spar-Erklärung 2012 (Version: 17.02)
Streambox Vcr Suite 2
SugarSync (Version: 2.0.27.114357)
Sweet Home 3D version 3.7
Text-To-Speech-Runtime (Version: 1.0.0.0)
Toxic Biohazard
TubeBox (Version: 4.1.1.0)
Ulead GIF Animator Lite Edition 1.0
Uninstall 1.0.0.1
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
VirtualDJ Home FREE (Version: 7.0.5)
VLC media player 2.0.7 (Version: 2.0.7)
VoiceOver Kit (Version: 1.30.128.0)
Wajam (Version: 1.80)
White Christmas 3D Screensaver and Animated Wallpaper 1.0 (Version: 1.0)
WIDCOMM Bluetooth Software 6.0.1.3100 (Version: 6.0.1.3100)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Toolbar-Erweiterung (Windows Live Toolbar) (Version: 03.01.0146)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0)
Windows Mobile-Gerätecenter: Treiberupdate (Version: 6.1.6965.0)
Windows Utils
WinRAR archiver
Wuala (HKCU Version: 1.0.428.0)
Wuala CBFS (Version: 3.2.107.0)
Wuala OverlayIcons (Version: 1.0.0.2)
XMedia Recode 3.0.8.5 (Version: 3.0.8.5)
 

==================== Restore Points  =========================

09-07-2013 01:00:34 Windows Update
10-07-2013 19:33:20 Gerätetreiber-Paketinstallation: SugarSync
10-07-2013 19:43:57 Installed Java 7 Update 25
11-07-2013 12:13:12 Geplanter Prüfpunkt
13-07-2013 01:00:57 Windows Update
14-07-2013 19:50:22 Geplanter Prüfpunkt
15-07-2013 11:45:56 Geplanter Prüfpunkt
16-07-2013 09:23:01 Geplanter Prüfpunkt
16-07-2013 20:02:16 Windows Update
16-07-2013 21:05:28 Free YouTube Download Manager
17-07-2013 09:50:36 JavaFX 2.1.1 wird entfernt
17-07-2013 09:52:26 Removed LibreOffice 3.6
17-07-2013 22:00:04 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2010-11-10 18:16 - 2012-07-02 19:38 - 00000814 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost
74.208.10.249 gs.apple.com


==================== Scheduled Tasks (whitelisted) =============

Task: {07EFF3F8-57E9-4060-AC8B-63C03D320C8F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {0975BBBA-079F-4F29-A1B2-98D591FA617B} - System32\Tasks\Plus-HD-2.3-enabler => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-enabler.exe [2013-07-18] (Plus HD)
Task: {0DF7E8C6-4CF7-4DE8-8BAA-516D9BB205F9} - System32\Tasks\EPUpdater => C:\Users\Judith\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-06-06] ()
Task: {0E77B391-723F-4AB2-B3D6-896007016FEC} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Judith => C:\Program Files\Windows Calendar\wincal.exe [2009-04-11] (Microsoft Corporation)
Task: {18BF61D8-8C4D-46C1-A397-EB7A6DC96E58} - System32\Tasks\{658EA475-F343-45E9-AF82-B67E5CDA0A49} => c:\program files\mozilla firefox\firefox.exe [2013-06-24] (Mozilla Corporation)
Task: {1B511F1A-A237-4560-BD01-EA6D1CBDD768} - System32\Tasks\Plus-HD-2.3-firefoxinstaller => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe [2013-07-18] (Plus HD)
Task: {1B901AAC-C71F-428C-9F82-F12D6B1601B9} - System32\Tasks\Plus-HD-2.3-chromeinstaller => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-chromeinstaller.exe [2013-07-18] (Plus HD)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2461E8E9-EE40-4DBD-A19C-B63B76A58539} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {2A4B0660-39DE-4D2D-85BC-D8EC95AB904D} - System32\Tasks\Plus-HD-2.3-codedownloader => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe [2013-07-18] (Plus HD)
Task: {2DB895D9-D2FC-42EA-B3EF-22E6FC0EE2F5} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe No File
Task: {36D7A5B8-4472-4F24-A887-D37F62033E77} - System32\Tasks\{1CCCC0B6-CFDB-4CC2-A42A-85FEE189240A} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-03] (Skype Technologies S.A.)
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3C6D8EF0-298B-4F31-80A7-9F3D060DE516} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3758001449-3176424044-3867666295-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {3D5CB9AB-CBA4-4773-8496-A0BB1355C097} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-19] (Microsoft Corporation)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)
Task: {4692C054-BD6B-44FE-AC34-6E8EF7BED887} - System32\Tasks\Hoolapp Init => C:\Users\Judith\AppData\Roaming\HOOLAP~1\Hoolapp.exe No File
Task: {521E92D9-3347-43B0-8FD9-81111C6875F5} - System32\Tasks\icqSWU => C:\Windows\System32\cscript.exe [2009-04-11] (Microsoft Corporation)
Task: {5392E7AF-501E-42B5-9C13-F4F38D0AB0FA} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {54427084-6145-4C10-A6BE-3852819D9086} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-11-24] (Piriform Ltd)
Task: {5EA3018C-5A19-4672-A5D9-1E6798A5DDB6} - System32\Tasks\Microsoft\Windows\RestartManager\{5A2F064A-6F7D-43b3-A3E7-66C404102C38} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {61858FB2-F17C-4365-A209-A1C513102D64} - System32\Tasks\QtraxPlayer => C:\Program Files\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: {6319641D-EF8F-47AB-8F8B-8686C8D0EF51} - System32\Tasks\Hoolapp For Android => C:\Users\Judith\AppData\Roaming\HOOLAP~1\UPDATE~1\UPDATE~1.EXE No File
Task: {6C51054D-758B-4BAD-86DD-53F1A46E3A90} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3758001449-3176424044-3867666295-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {8B3D2A13-BD5E-409A-B91D-4112FC8C84DF} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {937DE204-BC75-40F1-9F78-99C92C20A7F9} - System32\Tasks\{9FB8FE6B-80F2-4C6A-AF86-BBF69CEFAF15} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-03] (Skype Technologies S.A.)
Task: {9B411A20-1FFE-430A-9A15-1FEEBA8C6738} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-03-04] (Google Inc.)
Task: {9CEB093B-75B3-4E5C-82E3-0F00F56EEF97} - System32\Tasks\Microsoft\Windows\RestartManager\{413EBFE5-7F85-4328-8E7F-EE0B67E7758A} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {9EBD668F-185F-49E8-A084-D7A3454DC025} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-03-04] (Google Inc.)
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-19] (Microsoft Corporation)
Task: {A860C6A5-C081-4512-A41B-3CDA091A9F23} - System32\Tasks\User_Feed_Synchronization-{FFEC623E-F341-4E38-8943-ABB2B7D24138} => C:\Windows\system32\msfeedssync.exe [2013-05-29] (Microsoft Corporation)
Task: {B2733B7B-9627-4B2C-B430-A22C5C63C42C} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2006-11-02] (Microsoft Corporation)
Task: {CA11AF58-3534-4B3A-B808-9E78362DCECC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000UA => C:\Users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-24] (Google Inc.)
Task: {CB14B41C-4683-42C5-ABF6-74C9257920F8} - System32\Tasks\Plus-HD-2.3-updater => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-updater.exe [2013-07-18] (Plus HD)
Task: {D0645CD6-D80F-4895-89A2-31762C52DF3B} - System32\Tasks\DSite => C:\Users\Judith\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File
Task: {D36A0565-494E-4C1B-A28D-24EBCC2C4439} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe No File
Task: {DB14B352-D4C4-4BEA-81ED-DC36F12E827B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000Core => C:\Users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-24] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DSite.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000Core.job => C:\Users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000UA.job => C:\Users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-chromeinstaller.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-chromeinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-enabler.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-enabler.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-updater.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-updater.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{FFEC623E-F341-4E38-8943-ABB2B7D24138}.job => C:\Windows\system32\msfeedssync.exe

==================== Faulty Device Manager Devices =============

Name: Microsoft-ISATAP-Adapter #6
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/18/2013 07:50:39 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\JUDITH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JPMBFLELDCGKLDADPDINHJJOPDFPJFJP\1.24_0> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
        Ein an das System angeschlossenes Gerät funktioniert nicht.  (0x8007001f)

Error: (07/18/2013 07:50:39 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\JUDITH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JPMBFLELDCGKLDADPDINHJJOPDFPJFJP\1.24_0> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
        Ein an das System angeschlossenes Gerät funktioniert nicht.  (0x8007001f)

Error: (07/18/2013 07:02:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5211

Error: (07/18/2013 07:02:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5211

Error: (07/18/2013 07:02:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/18/2013 07:02:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4197

Error: (07/18/2013 07:02:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4197

Error: (07/18/2013 07:02:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/18/2013 07:02:49 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3183

Error: (07/18/2013 07:02:49 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3183


System errors:
=============
Error: (07/18/2013 07:45:52 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (07/18/2013 06:57:09 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (07/18/2013 05:23:50 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (07/18/2013 05:06:09 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (07/18/2013 04:10:22 PM) (Source: Service Control Manager) (User: )
Description: Windows Update

Error: (07/18/2013 04:06:53 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (07/18/2013 03:42:04 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (07/18/2013 03:37:40 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (07/18/2013 03:33:24 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (07/18/2013 02:42:57 PM) (Source: Service Control Manager) (User: )
Description: Windows Update


Microsoft Office Sessions:
=========================
Error: (07/18/2013 07:50:39 PM) (Source: Windows Search Service)(User: )
Description: Kontext:  Anwendung, SystemIndex Katalog


Details:
        Ein an das System angeschlossenes Gerät funktioniert nicht.  (0x8007001f)
C:\USERS\JUDITH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JPMBFLELDCGKLDADPDINHJJOPDFPJFJP\1.24_0

Error: (07/18/2013 07:50:39 PM) (Source: Windows Search Service)(User: )
Description: Kontext:  Anwendung, SystemIndex Katalog


Details:
        Ein an das System angeschlossenes Gerät funktioniert nicht.  (0x8007001f)
C:\USERS\JUDITH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JPMBFLELDCGKLDADPDINHJJOPDFPJFJP\1.24_0

Error: (07/18/2013 07:02:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5211

Error: (07/18/2013 07:02:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5211

Error: (07/18/2013 07:02:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/18/2013 07:02:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4197

Error: (07/18/2013 07:02:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4197

Error: (07/18/2013 07:02:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/18/2013 07:02:49 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3183

Error: (07/18/2013 07:02:49 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3183


CodeIntegrity Errors:
===================================
  Date: 2013-07-17 15:37:59.555
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:59.226
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:58.844
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:58.504
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:58.177
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:57.840
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-30 16:54:35.531
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\msiltcfg.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-04 17:06:43.935
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-04 17:06:43.628
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-04 17:06:43.232
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 66%
Total physical RAM: 2045.31 MB
Available physical RAM: 692.2 MB
Total Pagefile: 4329.88 MB
Available Pagefile: 2606.04 MB
Total Virtual: 2047.88 MB
Available Virtual: 1884.52 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:99.88 GB) (Free:31.13 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive j: (Samsung Festplatte neu) (Fixed) (Total:931.51 GB) (Free:617.61 GB) NTFS
Drive m: (Daten) (Fixed) (Total:130.95 GB) (Free:4.26 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 00000080)
Partition 1: (Not Active) - (Size=47 MB) - (Type=DE)
Partition 2: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=133 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 932 GB) (Disk ID: 54349CA3)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---

schrauber 19.07.2013 08:58
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Youdid 19.07.2013 10:24
Combofix Logfile:
Code:
ComboFix 13-07-18.04 - Judith 19.07.2013  10:52:34.1.2 - x86
Microsoft® Windows Vista™ Home Premium  6.0.6002.2.1252.49.1031.18.2045.1102 [GMT 2:00]
ausgeführt von:: c:\users\Judith\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\DFR999B.tmp
c:\users\Judith\AppData\Roaming\Bitrix Security
c:\users\Judith\AppData\Roaming\Bitrix Security\fg.txt
c:\users\Judith\AppData\Roaming\Bitrix Security\ircix
c:\users\Judith\AppData\Roaming\Bitrix Security\jje.txt
c:\users\Judith\AppData\Roaming\Bitrix Security\kahvux_shrd
c:\users\Judith\AppData\Roaming\Bitrix Security\ljgh.txt
c:\users\Judith\AppData\Roaming\Bitrix Security\mcx.txt
c:\users\Judith\AppData\Roaming\Bitrix Security\mxd1.txt
c:\users\Judith\AppData\Roaming\Bitrix Security\qnf.txt
c:\users\Judith\AppData\Roaming\Bitrix Security\rty.txt
c:\users\Judith\AppData\Roaming\Microsoft\~DFKa3b731.tmp
c:\users\Judith\AppData\Roaming\Microsoft\~DFKa3bd77.tmp
c:\users\Judith\AppData\Roaming\Microsoft\1eaadjc.dll
c:\users\Judith\AppData\Roaming\Microsoft\bass.dll
c:\users\Judith\AppData\Roaming\Microsoft\engine_vx.dll
c:\users\Judith\AppData\Roaming\Microsoft\kfgresk.dll
c:\users\Judith\AppData\Roaming\Microsoft\peaadje.dll
c:\users\Judith\AppData\Roaming\Microsoft\qwadjb.dll
c:\users\Judith\AppData\Roaming\Microsoft\rsaadjd.dll
c:\users\Judith\Firecat Font.exe
c:\users\Public\sdelevURL.tmp
c:\windows\IsUn0407.exe
c:\windows\unin0407.exe
m:\dokumente\~WRL0599.tmp
.
.
(((((((((((((((((((((((((((((((((((((((  Treiber/Dienste  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_BrowserDefendert
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-06-19 bis 2013-07-19  ))))))))))))))))))))))))))))))
.
.
2013-07-18 17:58 . 2013-07-18 17:58        --------        d-----w-        C:\FRST
2013-07-18 17:53 . 2013-07-18 17:53        --------        d-----w-        c:\users\Judith\Qtrax
2013-07-18 17:50 . 2013-07-18 17:50        --------        d-----w-        c:\programdata\BrowserDefender
2013-07-18 17:50 . 2013-07-18 17:50        --------        d-----w-        c:\program files\Delta
2013-07-18 17:50 . 2013-07-18 17:50        --------        d-----w-        c:\users\Judith\AppData\Roaming\BabSolution
2013-07-18 17:50 . 2013-07-18 17:50        --------        d-----w-        c:\users\Judith\AppData\Roaming\Delta
2013-07-18 17:49 . 2013-07-18 17:50        --------        d-----w-        c:\program files\Plus-HD-2.3
2013-07-18 17:48 . 2013-07-18 17:48        --------        d-----w-        c:\users\Judith\AppData\Local\Wajam
2013-07-18 17:48 . 2013-07-18 17:48        --------        d-----w-        c:\users\Judith\AppData\Roaming\DSite
2013-07-18 17:48 . 2013-07-18 17:49        --------        d-----w-        c:\program files\Wajam
2013-07-18 17:48 . 2013-07-18 17:48        --------        d-----w-        c:\programdata\Babylon
2013-07-18 17:48 . 2013-07-18 17:48        --------        d-----w-        c:\users\Judith\AppData\Roaming\Babylon
2013-07-16 21:16 . 2013-07-17 10:29        --------        d-----w-        c:\users\Judith\AppData\Roaming\Windows Net Data
2013-07-16 21:15 . 2013-06-27 05:14        31816        ----a-w-        c:\windows\Launcher.exe
2013-07-16 21:04 . 2013-07-16 21:04        --------        d-----w-        c:\users\Judith\AppData\Local\Software Updater
2013-07-16 20:03 . 2013-07-16 20:06        --------        d-----w-        c:\windows\system32\MRT
2013-07-12 14:40 . 2013-06-01 04:06        505344        ----a-w-        c:\windows\system32\qedit.dll
2013-07-12 14:38 . 2013-05-08 04:04        1548288        ----a-w-        c:\windows\system32\WMVDECOD.DLL
2013-07-12 14:38 . 2013-04-09 03:52        1218048        ----a-w-        c:\program files\Windows Journal\NBDoc.DLL
2013-07-12 14:38 . 2013-04-09 03:51        983552        ----a-w-        c:\program files\Windows Journal\JNTFiltr.dll
2013-07-12 14:38 . 2013-04-09 03:51        964608        ----a-w-        c:\program files\Windows Journal\JNWDRV.dll
2013-07-12 14:38 . 2013-04-09 03:51        936960        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-10 19:48 . 2013-07-18 15:26        --------        d-----r-        c:\users\Judith\Dropbox
2013-07-10 19:47 . 2013-07-10 19:47        --------        d-----w-        c:\program files\Wuala OverlayIcons
2013-07-10 19:47 . 2012-04-09 14:27        158224        ----a-w-        c:\windows\system32\CbFsMntNtf3.dll
2013-07-10 19:47 . 2012-04-09 14:27        223760        ----a-w-        c:\windows\system32\CbFsNetRdr3.dll
2013-07-10 19:47 . 2012-04-09 14:27        299024        ----a-w-        c:\windows\system32\drivers\cbfs3.sys
2013-07-10 19:47 . 2013-07-10 19:47        --------        d-----w-        c:\program files\Wuala CBFS
2013-07-10 19:47 . 2013-07-10 19:47        --------        d-----w-        c:\program files\Common Files\Java
2013-07-10 19:45 . 2013-07-10 19:45        94632        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll
2013-07-10 19:44 . 2013-07-10 19:44        --------        d-----w-        c:\program files\Dropbox
2013-07-10 19:40 . 2013-07-18 15:27        --------        d-----w-        c:\users\Judith\AppData\Roaming\Dropbox
2013-07-10 19:36 . 2013-07-10 19:38        --------        d-----w-        c:\users\Judith\AppData\Local\SugarSync
2013-07-10 19:35 . 2013-01-30 11:12        225024        ----a-w-        c:\windows\system32\SSCbFsNetRdr3.dll
2013-07-10 19:35 . 2013-01-30 11:12        159488        ----a-w-        c:\windows\system32\SSCbFsMntNtf3.dll
2013-07-10 19:33 . 2013-07-10 19:33        --------        d-----w-        c:\users\Judith\AppData\Roaming\Wuala
2013-07-10 19:33 . 2013-07-10 19:33        --------        d-----w-        c:\users\Judith\AppData\Local\Wuala
2013-07-10 19:33 . 2013-01-30 11:11        295936        ----a-w-        c:\windows\system32\drivers\sscbfs3.sys
2013-07-10 19:32 . 2013-07-10 19:35        --------        d-----w-        c:\program files\SugarSync
2013-07-07 19:25 . 2013-07-07 19:25        --------        d-----w-        c:\users\Judith\AppData\Roaming\Avira
2013-07-07 19:21 . 2013-06-20 12:48        135136        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2013-07-07 19:21 . 2013-03-06 14:13        37352        ----a-w-        c:\windows\system32\drivers\avkmgr.sys
2013-07-07 19:21 . 2013-07-07 19:21        --------        d-----w-        c:\programdata\Avira
2013-07-07 19:21 . 2013-07-07 19:21        --------        d-----w-        c:\program files\Avira
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-10 19:45 . 2012-06-30 10:00        867240        ----a-w-        c:\windows\system32\npDeployJava1.dll
2013-07-10 19:45 . 2011-12-22 13:59        789416        ----a-w-        c:\windows\system32\deployJava1.dll
2013-06-20 12:48 . 2010-03-20 10:10        84744        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2013-06-12 14:19 . 2012-03-28 14:45        692104        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2013-06-12 14:19 . 2011-08-26 16:01        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2013-06-12 04:18 . 2013-06-28 08:38        7068072        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{304E4F51-E24F-4195-B15C-7513613B5F06}\mpengine.dll
2013-05-16 19:41 . 2011-07-12 13:35        22240        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-09 22:13 . 2003-06-23 00:44        1696256        ----a-w-        c:\windows\system32\wmv9vcm.dll
2013-05-08 04:37 . 2013-06-12 13:22        905576        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2013-05-02 22:03 . 2013-06-12 13:19        3603832        ----a-w-        c:\windows\system32\ntkrnlpa.exe
2013-05-02 22:03 . 2013-06-12 13:19        3551096        ----a-w-        c:\windows\system32\ntoskrnl.exe
2013-05-02 04:04 . 2013-06-12 13:21        443904        ----a-w-        c:\windows\system32\win32spl.dll
2013-05-02 04:03 . 2013-06-12 13:21        37376        ----a-w-        c:\windows\system32\printcom.dll
2013-05-02 00:06 . 2009-10-03 08:27        238872        ------w-        c:\windows\system32\MpSigStub.exe
2013-04-24 04:00 . 2013-06-12 13:21        985600        ----a-w-        c:\windows\system32\crypt32.dll
2013-04-24 04:00 . 2013-06-12 13:21        133120        ----a-w-        c:\windows\system32\cryptsvc.dll
2013-04-24 04:00 . 2013-06-12 13:21        98304        ----a-w-        c:\windows\system32\cryptnet.dll
2013-04-24 04:00 . 2013-06-12 13:21        41984        ----a-w-        c:\windows\system32\certenc.dll
2013-04-24 01:46 . 2013-06-12 13:21        812544        ----a-w-        c:\windows\system32\certutil.exe
2003-03-21 12:45 . 2008-12-13 17:32        250544        ----a-w-        c:\program files\Common Files\keyhelp.ocx
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{E2B5568A-B3BC-49D6-9BEA-4A549AA1E01E}]
2012-08-22 09:19        181352        ----a-w-        c:\program files\icq\Internet Explorer\icq.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon1]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2012-05-02 12:10        1688576        ----a-w-        c:\program files\Wuala OverlayIcons\OverlayIcon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon2]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2012-05-02 12:10        1688576        ----a-w-        c:\program files\Wuala OverlayIcons\OverlayIcon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon3]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2012-05-02 12:10        1688576        ----a-w-        c:\program files\Wuala OverlayIcons\OverlayIcon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon4]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2012-05-02 12:10        1688576        ----a-w-        c:\program files\Wuala OverlayIcons\OverlayIcon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1EldosIconOverlay]
@="{31A58A4C-47DA-4279-AEF7-867D1EDB9403}"
[HKEY_CLASSES_ROOT\CLSID\{31A58A4C-47DA-4279-AEF7-867D1EDB9403}]
2012-04-09 14:27        158224        ----a-w-        c:\windows\System32\CbFsMntNtf3.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\CloudIcon_DOWNLOAD]
@="{C3DBFBE2-A521-4619-9F32-502318CB4EC2}"
[HKEY_CLASSES_ROOT\CLSID\{C3DBFBE2-A521-4619-9F32-502318CB4EC2}]
2012-08-08 09:36        230992        ----a-w-        c:\program files\COMPUTERBILD-Cloud\ShellExt32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\CloudIcon_ERROR]
@="{851C758E-C636-4045-B323-059931A3A331}"
[HKEY_CLASSES_ROOT\CLSID\{851C758E-C636-4045-B323-059931A3A331}]
2012-08-08 09:36        230992        ----a-w-        c:\program files\COMPUTERBILD-Cloud\ShellExt32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\CloudIcon_INSYNC]
@="{580030D3-492E-45EA-A1C9-A0AC525BEB26}"
[HKEY_CLASSES_ROOT\CLSID\{580030D3-492E-45EA-A1C9-A0AC525BEB26}]
2012-08-08 09:36        230992        ----a-w-        c:\program files\COMPUTERBILD-Cloud\ShellExt32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\CloudIcon_REFRESH]
@="{FEBF62C8-B6B3-43B7-BEC4-1A9CD61BDCD2}"
[HKEY_CLASSES_ROOT\CLSID\{FEBF62C8-B6B3-43B7-BEC4-1A9CD61BDCD2}]
2012-08-08 09:36        230992        ----a-w-        c:\program files\COMPUTERBILD-Cloud\ShellExt32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\CloudIcon_UPLOAD]
@="{EBED3602-8915-43F9-81F7-CAA6FC4F70D6}"
[HKEY_CLASSES_ROOT\CLSID\{EBED3602-8915-43F9-81F7-CAA6FC4F70D6}]
2012-08-08 09:36        230992        ----a-w-        c:\program files\COMPUTERBILD-Cloud\ShellExt32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-21 23:34        130736        ----a-w-        c:\users\Judith\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-21 23:34        130736        ----a-w-        c:\users\Judith\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-21 23:34        130736        ----a-w-        c:\users\Judith\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
@="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
[HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
2012-04-09 14:27        158224        ----a-w-        c:\windows\System32\CbFsMntNtf3.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncBackedUp]
@="{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}"
[HKEY_CLASSES_ROOT\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}]
2013-06-26 17:22        2090848        ----a-w-        c:\program files\SugarSync\SugarSyncShellExt.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncPending]
@="{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}"
[HKEY_CLASSES_ROOT\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}]
2013-06-26 17:22        2090848        ----a-w-        c:\program files\SugarSync\SugarSyncShellExt.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncRoot]
@="{39D54CC2-69CF-43b4-B167-577D25E7F496}"
[HKEY_CLASSES_ROOT\CLSID\{39D54CC2-69CF-43b4-B167-577D25E7F496}]
2013-06-26 17:22        2090848        ----a-w-        c:\program files\SugarSync\SugarSyncShellExt.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncShared]
@="{1574C9EF-7D58-488F-B358-8B78C1538F51}"
[HKEY_CLASSES_ROOT\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}]
2013-06-26 17:22        2090848        ----a-w-        c:\program files\SugarSync\SugarSyncShellExt.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncSharedPending]
@="{F7395C2E-A5D8-4a32-9536-5C6A9F1DC450}"
[HKEY_CLASSES_ROOT\CLSID\{F7395C2E-A5D8-4a32-9536-5C6A9F1DC450}]
2013-06-26 17:22        2090848        ----a-w-        c:\program files\SugarSync\SugarSyncShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Speech Recognition"="c:\windows\Speech\Common\sapisvr.exe" [2008-01-18 49664]
"ICQ"="c:\users\Judith\AppData\Roaming\ICQM\icq.exe" [2013-04-10 27598184]
"COMPUTERBILD-Cloud"="c:\program files\COMPUTERBILD-Cloud\CGCClient.exe" [2012-08-08 1781840]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-06-03 19603048]
"SugarSync"="c:\program files\SugarSync\SugarSync.exe" [2013-06-26 12419424]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]
"CD- und DVD-Sharing"="c:\program files\CD- und DVD-Sharing\ODSAgent.exe" [2008-02-20 619832]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2007-09-13 405504]
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2012-06-08 296056]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-11-28 151952]
"PDFPrint"="c:\program files\PDF24\pdf24.exe" [2012-12-12 163000]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2013-06-20 345144]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
DSL-Manager.lnk - c:\program files\T-Online\DSL-Manager\DslMgr.exe [2008-12-13 1085440]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-11-3 703280]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
DSL-Manager.lnk - c:\program files\T-Online\DSL-Manager\DslMgr.exe [2008-12-13 1085440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{C28617FD-4FE7-4043-AD51-C8132CE90106}"= "c:\windows\system32\SSCbFsMntNtf3.dll" [2013-01-30 159488]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~2\BROWSE~1\261339~1.144\{C16C1~1\BrowserDefender.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2007-02-16 17:49        149024        ----a-w-        c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
2007-02-17 12:35        1966928        ----a-w-        c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2006-10-03 10:35        221184        ----a-w-        c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2006-10-03 10:37        81920        ----a-w-        c:\program files\Common Files\InstallShield\UpdateService\issch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
2010-04-29 13:39        1090952        ----a-w-        c:\program files\Malwarebytes' Anti-Malware\mbam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2007-10-04 20:24        8497696        ----a-w-        c:\windows\System32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NVHotkey]
2007-10-04 20:24        86016        ----a-w-        c:\windows\System32\nvhotkey.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2007-10-04 20:24        81920        ----a-w-        c:\windows\System32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvSvc]
2007-10-04 20:24        86016        ----a-w-        c:\windows\System32\nvsvc.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]
2007-04-16 15:10        184320        ------w-        c:\program files\Dell\MediaDirect\PCMService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Phoenix Backup]
2007-07-10 00:00        482304        ----a-w-        c:\progra~1\SYDATEC\PHOENI~1\pbtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
2006-11-05 10:22        221184        ----a-w-        c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2009-04-11 06:28        1233920        ----a-w-        c:\program files\Windows Sidebar\sidebar.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SigmatelSysTrayApp]
2007-09-13 13:44        405504        ----a-w-        c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2007-02-17 12:31        1194728        ----a-w-        c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
R3 ActivHidSerMini;Promethean Serial Board Driver;c:\windows\system32\DRIVERS\activhidsermini.sys [x]
S2 AAV UpdateService;AAV UpdateService;c:\program files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [2008-10-24 128296]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\aestsrv.exe [2007-09-20 73728]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation        REG_MULTI_SZ          FontCache
bthsvcs        REG_MULTI_SZ          BthServ
WindowsMobile        REG_MULTI_SZ          wcescomm rapimgr
LocalServiceRestricted        REG_MULTI_SZ          WcesComm RapiMgr
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\AutorunsDisabled\{9C450606-ED24-4958-92BA-B8940C99D441}]
2009-03-04 15:32        8192        ----a-w-        c:\program files\PixiePack Codec Pack\InstallerHelper.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-28 14:19]
.
2013-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-03-04 11:19]
.
2013-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-03-04 11:19]
.
2013-07-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000Core.job
- c:\users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-24 13:33]
.
2013-07-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000UA.job
- c:\users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-24 13:33]
.
2013-07-19 c:\windows\Tasks\Plus-HD-2.3-chromeinstaller.job
- c:\program files\Plus-HD-2.3\Plus-HD-2.3-chromeinstaller.exe [2013-07-18 17:49]
.
2013-07-19 c:\windows\Tasks\Plus-HD-2.3-codedownloader.job
- c:\program files\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe [2013-07-18 17:50]
.
2013-07-19 c:\windows\Tasks\Plus-HD-2.3-enabler.job
- c:\program files\Plus-HD-2.3\Plus-HD-2.3-enabler.exe [2013-07-18 17:50]
.
2013-07-19 c:\windows\Tasks\Plus-HD-2.3-firefoxinstaller.job
- c:\program files\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe [2013-07-18 17:49]
.
2013-07-19 c:\windows\Tasks\Plus-HD-2.3-updater.job
- c:\program files\Plus-HD-2.3\Plus-HD-2.3-updater.exe [2013-07-18 17:50]
.
2013-01-25 c:\windows\Tasks\User_Feed_Synchronization-{FFEC623E-F341-4E38-8943-ABB2B7D24138}.job
- c:\windows\system32\msfeedssync.exe [2013-07-12 08:05]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947
uDefault_Search_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = <local>;*.local
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Free YouTube Download - c:\users\Judith\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Free YouTube to Mp3 Converter - c:\users\Judith\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\
FF - prefs.js: browser.search.selectedEngine - Delta Search
FF - prefs.js: browser.startup.homepage - hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2013-07-02 20:59; {C2564BE4-35C1-4056-979E-9AA26348BC72}; c:\program files\LyricsLauncher\116.xpi
FF - ExtSQL: 2013-07-17 01:15; {24532715-4abc-47ee-bd4f-a6774d0723d2}; c:\users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
FF - user.js: extensions.delta.tlbrSrchUrl -
FF - user.js: extensions.delta.id - 8429b65400000000000000242cae8099
FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
FF - user.js: extensions.delta.instlDay - 15904
FF - user.js: extensions.delta.vrsn - 1.8.21.5
FF - user.js: extensions.delta.vrsni - 1.8.21.5
FF - user.js: extensions.delta.vrsnTs - 1.8.21.519:50
FF - user.js: extensions.delta.prtnrId - delta
FF - user.js: extensions.delta.prdct - delta
FF - user.js: extensions.delta.aflt - babsst
FF - user.js: extensions.delta.smplGrp - none
FF - user.js: extensions.delta.tlbrId - base
FF - user.js: extensions.delta.instlRef - sst
FF - user.js: extensions.delta.dfltLng - de
FF - user.js: extensions.delta.excTlbr - false
FF - user.js: extensions.delta.ffxUnstlRst - true
FF - user.js: extensions.delta.admin - false
FF - user.js: extensions.delta_i.babTrack - affID=119357&tsp=4947
FF - user.js: extensions.delta_i.babExt -
FF - user.js: extensions.delta_i.srcExt - ss
FF - user.js: extensions.delta.autoRvrt - false
FF - user.js: extensions.delta.rvrt - false
FF - user.js: extensions.delta.newTab - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
WebBrowser-{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-ActivControl - c:\program files\Activ Software\ActivDriver\ActivControl2.exe
MSConfigStartUp-Duden Korrektor SysTray - c:\program files\Duden\Duden Korrektor\DKTray.exe
MSConfigStartUp-HPUsageTracking - c:\program files\HP\HP UT\bin\hppusg.exe
MSConfigStartUp-HYPERFOLIO BROWSER SPY - c:\program files\HyperFolio\hfbspy.exe
MSConfigStartUp-MAGIXautostart - d:\addon\programs\MusicMaker.exe
MSConfigStartUp-monpuser - c:\users\Judith\AppData\Roaming\monpuser.exe
MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre6\bin\jusched.exe
MSConfigStartUp-{6515DDE7-025A-82F5-5A1E-7D7F95220C33} - c:\users\Judith\AppData\Roaming\Ovte\toda.exe
AddRemove-MJ - c:\program files\d-lusion\MJ\uninstall.exe
.
.
.
**************************************************************************
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien:
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{2E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7}]
"ImagePath"="\??\c:\program files\Dell\MediaDirect\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.alb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FotoManager10Deluxe.8.alb"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'lsass.exe'(812)
c:\windows\system32\relog_ap.dll
.
- - - - - - - > 'Explorer.exe'(3528)
c:\program files\Wuala OverlayIcons\OverlayIcon.dll
c:\windows\system32\CbFsMntNtf3.dll
c:\users\Judith\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
c:\windows\system32\SSCbFsMntNtf3.dll
c:\windows\system32\btncopy.dll
c:\program files\Roxio\Drag-to-Disc\Shellex.dll
c:\windows\system32\DLAAPI_W.DLL
c:\program files\Roxio\Drag-to-Disc\ShellRes.dll
c:\windows\system32\CbFsNetRdr3.dll
c:\windows\system32\SSCbFsNetRdr3.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\Avira\AntiVir Desktop\sched.exe
c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\STacSV.exe
c:\program files\Wajam\Updater\WajamUpdater.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
c:\windows\system32\conime.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-07-19  11:18:05 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-07-19 09:17
.
Vor Suchlauf: 13 Verzeichnis(se), 32.974.266.368 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 31.959.527.424 Bytes frei
.
- - End Of File - - 83087C4AD0A437FDDC61462D27C59459
--- --- ---
5C616939100B85E558DA92B899A0FC36

schrauber 19.07.2013 10:48
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Youdid 19.07.2013 11:34
AdwCleaner Logfile:
Code:
# AdwCleaner v2.305 - Datei am 19/07/2013 um 11:50:37 erstellt
# Aktualisiert am 11/07/2013 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : Judith - LAPTOPJUDITH
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Judith\Desktop\adwcleaner2305.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : WajamUpdater

***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Datei Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\Babylon.xml
Datei Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\delta.xml
Datei Gelöscht : C:\Windows\tasks\Plus-HD-2.3-chromeinstaller.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-enabler.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-updater.job
Gelöscht mit Neustart : C:\ProgramData\BrowserDefender
Ordner Gelöscht : C:\Program Files\delta
Ordner Gelöscht : C:\Program Files\Plus-HD-2.3
Ordner Gelöscht : C:\Program Files\Wajam
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Ordner Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Ordner Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec
Ordner Gelöscht : C:\Users\Judith\AppData\Local\Wajam
Ordner Gelöscht : C:\Users\Judith\AppData\LocalLow\delta
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\delta
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\extensions\ffxtlbr@babylon.com
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\extensions\ffxtlbr@delta.com

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\532dcd0e63ae945
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Wajam
Schlüssel Gelöscht : HKLM\SOFTWARE\532dcd0e63ae945
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Schlüssel Gelöscht : HKLM\Software\Wajam
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]

***** [Internet Browser] *****

-\\ Internet Explorer v8.0.6001.19443

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - bProtectTabs] = hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947 --> hxxp://www.google.com

-\\ Mozilla Firefox v21.0 (de)

Datei : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\prefs.js

C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\user.js ... Gelöscht !

Gelöscht : user_pref("browser.search.selectedEngine", "Delta Search");
Gelöscht : user_pref("browser.newtab.url", "hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=842900242CAE8099&[...]
Gelöscht : user_pref("browser.startup.homepage", "hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=842900242CA[...]

-\\ Google Chrome v28.0.1500.72

Datei : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Preferences

Gelöscht [l.3634] : urls_to_restore_on_startup = [ "chrome://newtab/", "hxxp://www1.delta-search.com/?babsrc=HP_s[...]

*************************

AdwCleaner[R1].txt - [33720 octets] - [18/07/2013 17:12:30]
AdwCleaner[S1].txt - [33686 octets] - [18/07/2013 17:13:12]
AdwCleaner[S2].txt - [11387 octets] - [19/07/2013 11:50:37]

########## EOF - C:\AdwCleaner[S2].txt - [11448 octets] ##########
--- --- ---


AdwCleaner Logfile:
Code:
# AdwCleaner v2.305 - Datei am 19/07/2013 um 11:50:37 erstellt
# Aktualisiert am 11/07/2013 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : Judith - LAPTOPJUDITH
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Judith\Desktop\adwcleaner2305.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : WajamUpdater

***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Datei Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\Babylon.xml
Datei Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\delta.xml
Datei Gelöscht : C:\Windows\tasks\Plus-HD-2.3-chromeinstaller.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-enabler.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-updater.job
Gelöscht mit Neustart : C:\ProgramData\BrowserDefender
Ordner Gelöscht : C:\Program Files\delta
Ordner Gelöscht : C:\Program Files\Plus-HD-2.3
Ordner Gelöscht : C:\Program Files\Wajam
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Ordner Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Ordner Gelöscht : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec
Ordner Gelöscht : C:\Users\Judith\AppData\Local\Wajam
Ordner Gelöscht : C:\Users\Judith\AppData\LocalLow\delta
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\delta
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\extensions\ffxtlbr@babylon.com
Ordner Gelöscht : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\extensions\ffxtlbr@delta.com

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\532dcd0e63ae945
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Wajam
Schlüssel Gelöscht : HKLM\SOFTWARE\532dcd0e63ae945
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Schlüssel Gelöscht : HKLM\Software\Wajam
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]

***** [Internet Browser] *****

-\\ Internet Explorer v8.0.6001.19443

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - bProtectTabs] = hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=842900242CAE8099&affID=119357&tsp=4947 --> hxxp://www.google.com

-\\ Mozilla Firefox v21.0 (de)

Datei : C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\prefs.js

C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\user.js ... Gelöscht !

Gelöscht : user_pref("browser.search.selectedEngine", "Delta Search");
Gelöscht : user_pref("browser.newtab.url", "hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=842900242CAE8099&[...]
Gelöscht : user_pref("browser.startup.homepage", "hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=842900242CA[...]

-\\ Google Chrome v28.0.1500.72

Datei : C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Preferences

Gelöscht [l.3634] : urls_to_restore_on_startup = [ "chrome://newtab/", "hxxp://www1.delta-search.com/?babsrc=HP_s[...]

*************************

AdwCleaner[R1].txt - [33720 octets] - [18/07/2013 17:12:30]
AdwCleaner[S1].txt - [33686 octets] - [18/07/2013 17:13:12]
AdwCleaner[S2].txt - [11387 octets] - [19/07/2013 11:50:37]

########## EOF - C:\AdwCleaner[S2].txt - [11448 octets] ##########
--- --- ---

Hoppla, da habe ich zwei mal das gleiche gepostet. War keine Absicht. Entschuldigung.
Bei dem anderen kommt folgende Meldung:
Der Wert AppInit_DLLs ist vorhanden. Überschreiben <j/n>

Soll ich j oder n eingeben?

schrauber 19.07.2013 12:19
jap :)

Youdid 19.07.2013 12:24
egal was?JRT Logfile:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.1.6 (07.17.2013:4)
OS: Windows Vista (TM) Home Premium x86
Ran by Judith on 19.07.2013 at 12:05:08,67
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\anchorfree
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322342226}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550355345526}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660366346626}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355345526}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366346626}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\browserdefender"
Successfully deleted: [Folder] "C:\Program Files\lyricsing"
Successfully deleted: [Folder] "C:\Windows\system32\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{3C0775DA-7A4E-4FA7-B484-61633E1E9832}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{3C7DE076-8664-46FE-A59B-2CCE38D442ED}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{3EC3880D-E9A5-42CD-93DA-AED8CFCC3A66}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{4CE05C36-4081-465C-AB76-CC6423B6D7CD}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{922A2E87-92FD-409B-8E20-4E8939CB0AC0}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{94EC459F-6891-4718-AE74-0B8B584F8730}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{99B9CA56-0C00-4A3D-9777-66E6E9206D8D}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{A93DD65E-D95B-453C-B4B1-9463F4FE4BD5}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{A96B8707-998B-4770-B656-7BC389255EF4}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{BBD8F14A-69FD-4C2F-924E-5738571EB3C3}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{C7C2AB5E-62B9-4E4B-B436-26AC2BD1CA42}
Successfully deleted: [Empty Folder] C:\Users\Judith\appdata\local\{E33927C2-AA72-4547-AA48-CADAB1F2CFE5}



~~~ FireFox

Emptied folder: C:\Users\Judith\AppData\Roaming\mozilla\firefox\profiles\pi8ce2ez.default\minidumps [96 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.07.2013 at 13:23:41,71
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---

schrauber 19.07.2013 12:26
Perfekt, dann jetzt bitte ein frisches FRST log.

Youdid 19.07.2013 12:28
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-07-2013 02
Ran by Judith (administrator) on 19-07-2013 13:25:02
Running from C:\Users\Judith\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Andrea Electronics Corporation) C:\Windows\system32\aestsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(IDT, Inc.) C:\Windows\system32\STacSV.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(IDT, Inc.) C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(ICQ) C:\Users\Judith\AppData\Roaming\ICQM\icq.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(SugarSync, Inc.) C:\Program Files\SugarSync\SugarSync.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Dropbox, Inc.) C:\Users\Judith\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Windows Net) C:\Users\Judith\AppData\Roaming\Windows Net Data\net.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

Lsa: [Authentication Packages] msv1_0 relog_ap
2-06-08] (RealNetworks, Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [151952 2012-11-29] (Apple Inc.)
HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [49664 2008-01-19] (Microsoft Corporation)
HKCU\...\Run: [ICQ] - C:\Users\Judith\AppData\Roaming\ICQM\icq.exe [27598184 2013-04-10] (ICQ)
HKCU\...\Run: [COMPUTERBILD-Cloud] - C:\Program Files\COMPUTERBILD-Cloud\CGCClient.exe [1781840 2012-08-08] ()
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [SugarSync] - C:\Program Files\SugarSync\SugarSync.exe [12419424 2013-06-26] (SugarSync, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files\T-Online\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files\T-Online\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Judith\AppData\Local\Windows\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Judith\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Judith\AppData\Local\Windows\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Judith\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files\Internet Explorer\iexplore.exe"
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Bing
SearchScopes: HKCU - {752A9793-46C2-4927-9DCE-8FD9351F6B79} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ICQ Sparberater - {E2B5568A-B3BC-49D6-9BEA-4A549AA1E01E} - C:\Program Files\icq\Internet Explorer\icq.dll ()
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKCU -No Name - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -  No File
Toolbar: HKCU -No Name - {00000000-0000-0000-0000-000000000000} -  No File
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
Handler: msdaipp - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 20 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @real.com/nppl3260;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Judith\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Judith\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\foxsearch.src
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com
FF Extension: ICQ Sparberater - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\ciuvo-extension@icq.de
FF Extension: ReminderFox - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}
FF Extension: NoiaFoxoption - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\NoiaFoxoption@davidvincent.tld.xpi
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKCU\...\Firefox\Extensions: [{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}] C:\Users\Judith\AppData\Local\{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}
FF Extension: XULRunner - C:\Users\Judith\AppData\Local\{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}

Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Judith\AppData\Local\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Judith\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Judith\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (Google Talk Plugin) - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0

========================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [411168 2007-02-16] (Acronis)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 DokanMounter; C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe [14848 2012-02-15] ()
S3 TDslMgrService; C:\Program Files\T-Online\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH)
S3 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [548864 2008-10-21] (Magix AG)

==================== Drivers (Whitelisted) ====================

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26080 2012-10-08] (Wondershare)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [299024 2012-04-09] (EldoS Corporation)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [95744 2012-02-15] (Windows (R) Win 7 DDK provider)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [16448 2007-08-01] (T-Systems Enterprise Services GmbH)
S3 dsltestSp5; C:\Windows\System32\Drivers\dsltestSp5.sys [26816 2007-09-12] (Printing Communications Assoc., Inc. (PCAUSA))
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2007-08-21] (Paragon Software Group)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-12-12] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-12-12] (RapidSolution Software AG)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2009-01-10] (Duplex Secure Ltd.)
R3 SSCBFS3; C:\Windows\System32\DRIVERS\sscbfs3.sys [295936 2013-01-30] (EldoS Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31360 2012-07-20] (The OpenVPN Project)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [35592 2012-11-15] (Anchorfree Inc.)
R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39048 2012-12-12] (RapidSolution Software AG)
R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [32768 2008-12-13] (Acronis)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [17792 2008-12-26] (Avnex)
R2 {2E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7}; C:\Program Files\Dell\MediaDirect\000.fcl [13560 2007-04-02] (Cyberlink Corp.)
S3 ActivHidSerMini; system32\DRIVERS\activhidsermini.sys [x]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S4 IpInIp; system32\DRIVERS\ipinip.sys [x]
S4 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S4 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 prmvmouse; system32\DRIVERS\activmouse.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-19 13:23 - 2013-07-19 13:23 - 00003328 _____ C:\Users\Judith\Desktop\JRT.txt
2013-07-19 12:03 - 2013-07-19 12:03 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Downloads\JRT.exe
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Desktop\JRT.exe
2013-07-19 11:50 - 2013-07-19 11:52 - 00011518 _____ C:\AdwCleaner[S2].txt
2013-07-19 11:50 - 2013-07-19 11:52 - 00000098 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 11:50 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Desktop\adwcleaner2305.exe
2013-07-19 11:18 - 2013-07-19 11:18 - 00030260 _____ C:\ComboFix.txt
2013-07-19 10:47 - 2013-07-19 10:45 - 05091168 ____R (Swearware) C:\Users\Judith\Desktop\ComboFix.exe
2013-07-19 10:47 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-19 10:47 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-19 10:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-19 10:46 - 2013-07-19 11:18 - 00000000 ____D C:\Qoobox
2013-07-19 10:45 - 2013-07-19 11:15 - 00000000 ____D C:\Windows\erdnt
2013-07-19 10:44 - 2013-07-19 10:45 - 05091168 ____R (Swearware) C:\Users\Judith\Downloads\ComboFix.exe
2013-07-18 19:58 - 2013-07-18 19:58 - 00000000 ____D C:\FRST
2013-07-18 19:56 - 2013-07-18 19:56 - 01218860 _____ (Farbar) C:\Users\Judith\Downloads\FRST.exe
2013-07-18 19:53 - 2013-07-18 19:53 - 00000000 ____D C:\Users\Judith\Qtrax
2013-07-18 19:48 - 2013-07-18 19:48 - 00793536 _____ C:\Users\Judith\Downloads\ZipOpenerSetup.exe
2013-07-18 17:13 - 2013-07-18 17:14 - 00033686 _____ C:\AdwCleaner[S1].txt
2013-07-18 17:12 - 2013-07-18 17:12 - 00033720 _____ C:\AdwCleaner[R1].txt
2013-07-18 17:11 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Downloads\adwcleaner2305.exe
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setupact.log
2013-07-17 12:22 - 2013-07-19 11:07 - 00005314 _____ C:\Windows\PFRO.log
2013-07-16 23:17 - 2013-07-18 16:41 - 00000830 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-07-16 23:16 - 2013-07-17 12:29 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Windows Net Data
2013-07-16 23:15 - 2013-06-27 07:14 - 00031816 _____ C:\Windows\Launcher.exe
2013-07-16 23:11 - 2013-07-16 23:11 - 00001920 _____ C:\Users\Public\Desktop\Free YouTube Download Manager.lnk
2013-07-16 23:04 - 2013-07-16 23:04 - 00000209 _____ C:\Users\Judith\Desktop\Amazon.url
2013-07-16 23:04 - 2013-07-16 23:04 - 00000000 ____D C:\Users\Judith\AppData\Local\Software Updater
2013-07-16 22:03 - 2013-07-16 22:06 - 00000000 ____D C:\Windows\system32\MRT
2013-07-16 20:10 - 2013-07-16 20:10 - 00283168 _____ C:\Users\Judith\Downloads\Setup (1).exe
2013-07-16 14:35 - 2013-07-16 14:35 - 00895488 _____ M:\Dokumente\Visitenkarten.doc
2013-07-13 03:25 - 2013-07-13 03:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2845142_WM64$
2013-07-13 03:25 - 2007-07-27 10:41 - 00016760 ____N (Microsoft Corporation) C:\Windows\system32\spmsg.dll
2013-07-12 16:40 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-12 16:39 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-12 16:39 - 2013-05-29 13:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 16:39 - 2013-05-29 13:30 - 00916480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 16:39 - 2013-05-29 13:30 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-12 16:39 - 2013-05-29 13:28 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 06016000 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 11111424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-12 16:39 - 2013-05-29 13:24 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-12 16:39 - 2013-05-29 11:47 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-12 16:39 - 2013-05-29 10:07 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-12 16:39 - 2013-05-29 10:06 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-12 16:39 - 2013-05-29 10:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-12 16:39 - 2013-05-29 10:04 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-12 16:39 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-12 16:39 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-12 16:39 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-12 16:39 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-12 16:39 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-12 16:39 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-12 16:38 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 21:53 - 2013-07-10 21:53 - 00024064 _____ M:\Dokumente\Windows Phone Store.doc
2013-07-10 21:51 - 2013-07-10 21:51 - 00000840 _____ C:\Users\Judith\Desktop\Wuala.lnk
2013-07-10 21:48 - 2013-07-19 11:58 - 00000000 ___RD C:\Users\Judith\Dropbox
2013-07-10 21:48 - 2013-07-10 21:48 - 00000992 _____ C:\Users\Judith\Desktop\Dropbox.lnk
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala OverlayIcons
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala CBFS
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 21:47 - 2013-07-10 21:45 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 21:47 - 2012-04-09 16:27 - 00299024 _____ (EldoS Corporation) C:\Windows\system32\Drivers\cbfs3.sys
2013-07-10 21:47 - 2012-04-09 16:27 - 00223760 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll
2013-07-10 21:47 - 2012-04-09 16:27 - 00158224 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 21:44 - 2013-07-10 21:44 - 00000000 ____D C:\Program Files\Dropbox
2013-07-10 21:43 - 2013-07-10 21:43 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-07-10 21:40 - 2013-07-19 11:58 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Dropbox
2013-07-10 21:39 - 2013-07-10 21:40 - 33578320 _____ (Dropbox, Inc.) C:\Users\Judith\Downloads\Dropbox 2.2.8.exe
2013-07-10 21:38 - 2013-07-10 21:38 - 00000594 _____ C:\Users\Judith\Desktop\Mein SugarSync.lnk
2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ____D M:\Dokumente\Mein SugarSync
2013-07-10 21:36 - 2013-07-10 21:38 - 00000000 ____D C:\Users\Judith\AppData\Local\SugarSync
2013-07-10 21:35 - 2013-07-10 21:35 - 00001692 _____ C:\Users\Public\Desktop\SugarSync.lnk
2013-07-10 21:35 - 2013-01-30 13:12 - 00225024 _____ (EldoS Corporation) C:\Windows\system32\SSCbFsNetRdr3.dll
2013-07-10 21:35 - 2013-01-30 13:12 - 00159488 _____ (EldoS Corporation) C:\Windows\system32\SSCbFsMntNtf3.dll
2013-07-10 21:33 - 2013-07-10 21:42 - 00000828 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Wuala
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Local\Wuala
2013-07-10 21:33 - 2013-01-30 13:11 - 00295936 _____ (EldoS Corporation) C:\Windows\system32\Drivers\sscbfs3.sys
2013-07-10 21:32 - 2013-07-10 21:35 - 00000000 ____D C:\Program Files\SugarSync
2013-07-10 21:29 - 2013-07-10 21:29 - 22964952 _____ C:\Users\Judith\Downloads\WualaSetup_04_13.exe
2013-07-10 21:27 - 2013-07-10 21:28 - 20911672 _____ (SugarSync, Inc.) C:\Users\Judith\Downloads\SugarSyncSetup_2.0.27.exe
2013-07-07 21:25 - 2013-07-07 21:25 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00001853 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\Program Files\Avira
2013-07-07 21:21 - 2013-06-20 14:48 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-07 21:21 - 2013-03-06 16:13 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-07 21:21 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-07-07 21:04 - 2013-07-07 21:06 - 104943936 _____ C:\Users\Judith\Downloads\avira3737_free_antivirus_de.exe
2013-07-01 18:20 - 2013-07-01 18:20 - 00005384 _____ C:\Users\Judith\Downloads\Mundharmonika+Noten.htm (7).html
2013-06-28 11:52 - 2013-06-28 11:52 - 00000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-06-28 11:50 - 2013-06-28 11:51 - 22937227 _____ C:\Users\Judith\Downloads\vlc-2.0.7-win32.exe
2013-06-24 18:21 - 2013-06-24 18:21 - 00024064 _____ M:\Dokumente\Schreib-ab homepage.doc
2013-06-24 17:53 - 2013-06-24 17:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 17:25 - 2013-06-24 17:25 - 00001038 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-24 12:29 - 2013-06-24 12:29 - 00017196 _____ C:\Users\Judith\.recently-used.xbel
2013-06-19 20:20 - 2013-06-19 20:20 - 04342573 _____ C:\Users\Judith\Downloads\drehbare_sternkarte.zip

==================== One Month Modified Files and Folders =======

2013-07-19 13:23 - 2013-07-19 13:23 - 00003328 _____ C:\Users\Judith\Desktop\JRT.txt
2013-07-19 13:23 - 2008-12-10 20:45 - 00000000 ___RD C:\Users\Judith\Desktop
2013-07-19 13:19 - 2012-11-28 17:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-19 13:11 - 2012-03-04 13:20 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-19 13:09 - 2012-11-24 15:33 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000UA.job
2013-07-19 12:04 - 2006-11-02 14:52 - 01235172 _____ C:\Windows\WindowsUpdate.log
2013-07-19 12:03 - 2013-07-19 12:03 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Downloads\JRT.exe
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Desktop\JRT.exe
2013-07-19 11:59 - 2012-12-10 21:36 - 00000000 __SHD C:\Users\Judith\wc
2013-07-19 11:59 - 2012-12-10 21:35 - 00000000 ____D C:\Users\Judith\AppData\Roaming\COMPUTERBILD Cloud
2013-07-19 11:58 - 2013-07-10 21:48 - 00000000 ___RD C:\Users\Judith\Dropbox
2013-07-19 11:58 - 2013-07-10 21:40 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Dropbox
2013-07-19 11:53 - 2012-03-04 13:19 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-19 11:53 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-19 11:53 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-19 11:53 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-19 11:52 - 2013-07-19 11:50 - 00011518 _____ C:\AdwCleaner[S2].txt
2013-07-19 11:52 - 2013-07-19 11:50 - 00000098 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 11:52 - 2010-05-25 18:16 - 00008524 _____ C:\Windows\bthservsdp.dat
2013-07-19 11:52 - 2006-11-02 15:01 - 00032606 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-19 11:18 - 2013-07-19 11:18 - 00030260 _____ C:\ComboFix.txt
2013-07-19 11:18 - 2013-07-19 10:46 - 00000000 ____D C:\Qoobox
2013-07-19 11:18 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2013-07-19 11:18 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-07-19 11:15 - 2013-07-19 10:45 - 00000000 ____D C:\Windows\erdnt
2013-07-19 11:09 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2013-07-19 11:07 - 2013-07-17 12:22 - 00005314 _____ C:\Windows\PFRO.log
2013-07-19 11:07 - 2006-11-02 12:22 - 59244544 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 45350912 _____ C:\Windows\system32\config\COMPON~2.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 24903680 _____ C:\Windows\system32\config\SYSTEM.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 00786432 _____ C:\Windows\system32\config\DEFAULT.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-07-19 11:04 - 2008-12-10 20:45 - 00000000 ____D C:\Users\Judith
2013-07-19 10:45 - 2013-07-19 10:47 - 05091168 ____R (Swearware) C:\Users\Judith\Desktop\ComboFix.exe
2013-07-19 10:45 - 2013-07-19 10:44 - 05091168 ____R (Swearware) C:\Users\Judith\Downloads\ComboFix.exe
2013-07-19 10:41 - 2011-07-22 18:56 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Skype
2013-07-18 20:16 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-18 19:58 - 2013-07-18 19:58 - 00000000 ____D C:\FRST
2013-07-18 19:56 - 2013-07-18 19:56 - 01218860 _____ (Farbar) C:\Users\Judith\Downloads\FRST.exe
2013-07-18 19:53 - 2013-07-18 19:53 - 00000000 ____D C:\Users\Judith\Qtrax
2013-07-18 19:48 - 2013-07-18 19:48 - 00793536 _____ C:\Users\Judith\Downloads\ZipOpenerSetup.exe
2013-07-18 17:14 - 2013-07-18 17:13 - 00033686 _____ C:\AdwCleaner[S1].txt
2013-07-18 17:13 - 2008-12-13 19:22 - 00000000 ____D C:\ProgramData\ICQ
2013-07-18 17:13 - 2008-12-13 13:43 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-07-18 17:12 - 2013-07-18 17:12 - 00033720 _____ C:\AdwCleaner[R1].txt
2013-07-18 17:11 - 2013-07-19 11:50 - 00662345 _____ C:\Users\Judith\Desktop\adwcleaner2305.exe
2013-07-18 17:11 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Downloads\adwcleaner2305.exe
2013-07-18 16:41 - 2013-07-16 23:17 - 00000830 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-07-18 14:38 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setupact.log
2013-07-18 03:09 - 2012-11-24 15:33 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000Core.job
2013-07-17 14:02 - 2008-12-13 19:48 - 00000000 ____D M:\Dokumente\Sicherung
2013-07-17 13:57 - 2009-01-05 14:33 - 00027430 _____ C:\Users\Judith\AppData\Roaming\nvModes.001
2013-07-17 12:29 - 2013-07-16 23:16 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Windows Net Data
2013-07-17 12:06 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\ShellNew
2013-07-17 11:49 - 2011-11-22 19:00 - 00000000 ____D C:\Program Files\DsNET Corp
2013-07-16 23:16 - 2010-12-19 20:32 - 00000000 ___HD C:\Users\Judith\AppData\Local\Windows
2013-07-16 23:11 - 2013-07-16 23:11 - 00001920 _____ C:\Users\Public\Desktop\Free YouTube Download Manager.lnk
2013-07-16 23:10 - 2013-02-17 16:41 - 00000000 ____D C:\Program Files\Freetec
2013-07-16 23:08 - 2013-02-17 16:39 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-16 23:04 - 2013-07-16 23:04 - 00000209 _____ C:\Users\Judith\Desktop\Amazon.url
2013-07-16 23:04 - 2013-07-16 23:04 - 00000000 ____D C:\Users\Judith\AppData\Local\Software Updater
2013-07-16 22:06 - 2013-07-16 22:03 - 00000000 ____D C:\Windows\system32\MRT
2013-07-16 20:10 - 2013-07-16 20:10 - 00283168 _____ C:\Users\Judith\Downloads\Setup (1).exe
2013-07-16 14:35 - 2013-07-16 14:35 - 00895488 _____ M:\Dokumente\Visitenkarten.doc
2013-07-16 12:14 - 2008-12-13 12:30 - 00002637 _____ C:\Users\Judith\Desktop\Microsoft Office Word 2003.lnk
2013-07-14 20:33 - 2012-01-20 19:03 - 00000000 ____D M:\Dokumente\Handys N97 Galaxy Ace
2013-07-13 04:07 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-13 03:51 - 2006-11-02 14:47 - 00532888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 03:48 - 2008-12-13 12:40 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 03:47 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-13 03:29 - 2006-11-02 12:33 - 01584126 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-13 03:25 - 2013-07-13 03:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2845142_WM64$
2013-07-13 03:02 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 09:31 - 2008-12-13 12:53 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Mozilla
2013-07-10 21:53 - 2013-07-10 21:53 - 00024064 _____ M:\Dokumente\Windows Phone Store.doc
2013-07-10 21:51 - 2013-07-10 21:51 - 00000840 _____ C:\Users\Judith\Desktop\Wuala.lnk
2013-07-10 21:48 - 2013-07-10 21:48 - 00000992 _____ C:\Users\Judith\Desktop\Dropbox.lnk
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala OverlayIcons
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala CBFS
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 21:45 - 2013-07-10 21:47 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 21:45 - 2012-06-30 12:00 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-07-10 21:45 - 2011-12-22 15:59 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-07-10 21:44 - 2013-07-10 21:44 - 00000000 ____D C:\Program Files\Dropbox
2013-07-10 21:43 - 2013-07-10 21:43 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-07-10 21:42 - 2013-07-10 21:33 - 00000828 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-10 21:40 - 2013-07-10 21:39 - 33578320 _____ (Dropbox, Inc.) C:\Users\Judith\Downloads\Dropbox 2.2.8.exe
2013-07-10 21:40 - 2010-02-17 17:02 - 00039424 _____ M:\Dokumente\mailaccounts community Free sms accounts.doc
2013-07-10 21:38 - 2013-07-10 21:38 - 00000594 _____ C:\Users\Judith\Desktop\Mein SugarSync.lnk
2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ____D M:\Dokumente\Mein SugarSync
2013-07-10 21:38 - 2013-07-10 21:36 - 00000000 ____D C:\Users\Judith\AppData\Local\SugarSync
2013-07-10 21:35 - 2013-07-10 21:35 - 00001692 _____ C:\Users\Public\Desktop\SugarSync.lnk
2013-07-10 21:35 - 2013-07-10 21:32 - 00000000 ____D C:\Program Files\SugarSync
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Wuala
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Local\Wuala
2013-07-10 21:29 - 2013-07-10 21:29 - 22964952 _____ C:\Users\Judith\Downloads\WualaSetup_04_13.exe
2013-07-10 21:28 - 2013-07-10 21:27 - 20911672 _____ (SugarSync, Inc.) C:\Users\Judith\Downloads\SugarSyncSetup_2.0.27.exe
2013-07-07 21:25 - 2013-07-07 21:25 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00001853 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\Program Files\Avira
2013-07-07 21:06 - 2013-07-07 21:04 - 104943936 _____ C:\Users\Judith\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 17:47 - 2012-08-30 13:55 - 00000000 ____D C:\Users\Judith\AppData\Roaming\vlc
2013-07-06 15:41 - 2010-01-15 17:53 - 00000000 ____D C:\Users\Judith\AppData\Roaming\dvdcss
2013-07-01 19:15 - 2008-12-13 16:17 - 00000000 ____D M:\Dokumente\Allerlei
2013-07-01 18:46 - 2012-04-27 17:53 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-01 18:20 - 2013-07-01 18:20 - 00005384 _____ C:\Users\Judith\Downloads\Mundharmonika+Noten.htm (7).html
2013-06-28 15:16 - 2008-12-13 18:22 - 00074752 _____ C:\Users\Judith\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-28 11:52 - 2013-06-28 11:52 - 00000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-06-28 11:51 - 2013-06-28 11:50 - 22937227 _____ C:\Users\Judith\Downloads\vlc-2.0.7-win32.exe
2013-06-27 14:47 - 2013-04-01 16:03 - 00000000 ____D M:\Dokumente\Flug USA Herbst 2013
2013-06-27 07:14 - 2013-07-16 23:15 - 00031816 _____ C:\Windows\Launcher.exe
2013-06-24 18:23 - 2011-03-28 18:58 - 00000000 ____D C:\Users\Judith\AppData\Roaming\DVDVideoSoft
2013-06-24 18:21 - 2013-06-24 18:21 - 00024064 _____ M:\Dokumente\Schreib-ab homepage.doc
2013-06-24 17:53 - 2013-06-24 17:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 17:26 - 2008-12-13 13:43 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-06-24 17:25 - 2013-06-24 17:25 - 00001038 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-24 17:14 - 2012-10-13 13:42 - 70431848 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Judith\Downloads\FreeStudio.exe
2013-06-24 12:30 - 2010-08-09 12:10 - 00000000 ____D C:\Users\Judith\.gimp-2.6
2013-06-24 12:29 - 2013-06-24 12:29 - 00017196 _____ C:\Users\Judith\.recently-used.xbel
2013-06-24 00:37 - 2006-11-02 12:24 - 75733144 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-06-21 17:38 - 2009-11-29 19:37 - 00000000 ____D M:\Dokumente\Steuerfälle
2013-06-20 14:48 - 2013-07-07 21:21 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2010-03-20 12:10 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-06-19 20:20 - 2013-06-19 20:20 - 04342573 _____ C:\Users\Judith\Downloads\drehbare_sternkarte.zip

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-19 12:01

==================== End Of Log ============================
--- --- ---

--- --- ---


FRST Additions Logfile:
Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-07-2013 02
Ran by Judith at 2013-07-19 13:26:24
Running from C:\Users\Judith\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

AAVUpdateManager (Version: 18.00.0000)
Acronis*True*Image*Home (Version: 10.0.4942)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
Agama Web Buttons
Apple Application Support (Version: 2.3.2)
Apple Mobile Device Support (Version: 6.0.1.3)
Apple Software Update (Version: 2.1.3.127)
Ashampoo Burning Studio 2013 v.11.0.5 (Version: 11.0.5)
Audacity 1.2.6
Audacity 1.3.6 (Unicode)
Audials (Version: 10.1.509.900)
Audiograbber 1.83 SE  (Version: 1.83 SE)
Avidemux 2.5 (Version: 2.5.1.5249)
Avira Free Antivirus (Version: 13.0.0.3737)
AVS Screen Capture version 2.0.2
AVS Update Manager 1.0
AVS Video Editor 6
AVS Video Recorder 2.5
AVS4YOU Software Navigator 1.4
Bonjour (Version: 3.0.0.10)
capella 7 (Version: 7.1.6)
CCleaner (Version: 3.25)
CD- und DVD-Sharing (Version: 1.0.1.4)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
COMPUTERBILD-Cloud
D3DX10 (Version: 15.4.2368.0902)
Dell Resource CD (Version: 1.00.0000)
DivxToDVD 0.5.2b (Version: 0.5.2b)
Dropbox (HKCU Version: 2.2.8)
DSL-Manager
EclipseCrossword (Version: 1.2.57)
FileZilla Client 3.6.0.2 (Version: 3.6.0.2)
FormatFactory 2.50 (Version: 2.50)
Forte Free 2.0
Free Audio CD Burner version 1.4.7
Free Studio version 2013 (Version: 6.1.3.622)
Free Video to iPod Converter version 4.2.16.305
Free Video to JPG Converter version 1.5
Free Video to MP3 Converter version 3.2
Free YouTube Download 2.9
Free YouTube Download Manager (Version: 1.0.2.40)
Free YouTube to iPod Converter version 3.2
Free YouTube to MP3 Converter version 3.11.34.1015 (Version: 3.11.34.1015)
FreeMind (Version: 0.8.1)
GIMP 2.6.12 (Version: 2.6.12)
GOM Player (Version: 2.1.40.5106)
Google Chrome (HKCU Version: 28.0.1500.72)
Google Earth (Version: 6.2.0.5905)
Google Talk Plugin (Version: 4.2.1.14031)
Google Update Helper (Version: 1.3.21.153)
Hervorhebe-Funktion (Windows Live Toolbar) (Version: 03.01.0146)
HotPotatoes v 6.3.0.3
IcoFX 1.6.4
ICQ 8.0 (build 6014) (HKCU Version: 8.0.6014.0)
ICQ Sparberater (Version: 1.4.9)
IsoBuster 2.3 (Version: 2.3)
iTunes (Version: 11.0.0.163)
Japanese Fonts Support For Adobe Reader 9 (Version: 9.0.0)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Junk Mail filter update (Version: 15.4.3502.0922)
MAGIX Foto Manager 10 (Version: 8.0.1.136)
MAGIX Online Druck Service (Version: 3.4.3.0)
MAGIX Screenshare (Version: 4.3.6.1987)
MAGIX Xtreme Foto & Grafik Designer 5 (Silver) (Version: 5.1.2.15876)
MediaDirect (Version: 4.7)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Standard Edition 2003 (Version: 11.0.8173.0)
Microsoft Search Enhancement Pack (Version: 3.0.133.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Windows Media Video 9 VCM
Microsoft XML Parser (Version: 8.0.7820.0)
MindManager Smart (Version: 2.1.3)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
neroxml (Version: 1.0.0)
No23 Recorder (Version: 2.1.0.3)
Notepad++ (Version: 6.2.3)
NVIDIA Drivers
Octava SD4 (Version: 5.01)
OpenOffice.org 3.1 (Version: 3.1.9399)
OutlookAddinSetup (Version: 1.0.0)
Paragon Partition Manager 2007
PDF24 Creator 5.2.0
PDFCreator (Version: 1.2.3)
Pfadfinder 2.0 (Version: 1.0.7)
Phase 5 HTML-Editor (Version: 5.6.2.3)
Phoenix Backup Professional (Version: 3.5.000)
PixiePack Codec Pack (Version: 1.1.400.0)
Plus-HD-2.3 (Version: 1.27.153.8)
QuickTime (Version: 7.72.80.56)
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)
RealPlayer (Version: 15.0.4)
RealUpgrade 1.1 (Version: 1.1.0)
River Past Video Cleaner Pro (Version: 7.7.7)
Roxio Creator Audio (Version: 3.3.0)
Roxio Creator Copy (Version: 3.3.0)
Roxio Creator Data (Version: 3.3.0)
Roxio Creator DE (Version: 3.3.0)
Roxio Creator Tools (Version: 3.3.0)
Roxio Drag-to-Disc (Version: 9.0)
Roxio Express Labeler (Version: 2.1.0)
Roxio MyDVD DE (Version: 9.0.117)
Roxio Update Manager (Version: 3.0.0)
Rund um (2.0) ... Erlebnis Biologie 1 RS (Version: 1.00.0000)
Rund um (2.0) ... Erlebnis Chemie RP HE NI (Version: 1.00.0000)
Rund um (2.0) ... Erlebnis Naturwissenschaften 5 RP (Version: 1.00.0000)
Rund um ... Biologie heute entdecken 1 (Version: 1.00.0000)
Rund um ... Biologie heute entdecken 2 (Teil 1) (Version: 1.00.0000)
Rund um ... Biologie heute entdecken 2 (Teil 2) (Version: 1.00.0000)
Segoe UI (Version: 15.4.2271.0615)
Sicherheitsupdate für Windows Media Player (KB2845142)
SigmaTel Audio (Version: 5.10.5210.0)
Skype™ 6.5 (Version: 6.5.158)
Smart Menus (Windows Live Toolbar) (Version: 03.01.0146)
Sonic Activation Module (Version: 1.0)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Steuer-Spar-Erklärung 2011 (Version: 16.17)
Steuer-Spar-Erklärung 2012 (Version: 17.02)
Streambox Vcr Suite 2
SugarSync (Version: 2.0.27.114357)
Sweet Home 3D version 3.7
Text-To-Speech-Runtime (Version: 1.0.0.0)
Toxic Biohazard
TubeBox (Version: 4.1.1.0)
Ulead GIF Animator Lite Edition 1.0
Uninstall 1.0.0.1
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
VirtualDJ Home FREE (Version: 7.0.5)
VLC media player 2.0.7 (Version: 2.0.7)
VoiceOver Kit (Version: 1.30.128.0)
White Christmas 3D Screensaver and Animated Wallpaper 1.0 (Version: 1.0)
WIDCOMM Bluetooth Software 6.0.1.3100 (Version: 6.0.1.3100)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Toolbar-Erweiterung (Windows Live Toolbar) (Version: 03.01.0146)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0)
Windows Mobile-Gerätecenter: Treiberupdate (Version: 6.1.6965.0)
Windows Utils
WinRAR archiver
Wuala (HKCU Version: 1.0.428.0)
Wuala CBFS (Version: 3.2.107.0)
Wuala OverlayIcons (Version: 1.0.0.2)
XMedia Recode 3.0.8.5 (Version: 3.0.8.5)
 

==================== Restore Points  =========================

09-07-2013 01:00:34 Windows Update
10-07-2013 19:33:20 Gerätetreiber-Paketinstallation: SugarSync
10-07-2013 19:43:57 Installed Java 7 Update 25
11-07-2013 12:13:12 Geplanter Prüfpunkt
13-07-2013 01:00:57 Windows Update
14-07-2013 19:50:22 Geplanter Prüfpunkt
15-07-2013 11:45:56 Geplanter Prüfpunkt
16-07-2013 09:23:01 Geplanter Prüfpunkt
16-07-2013 20:02:16 Windows Update
16-07-2013 21:05:28 Free YouTube Download Manager
17-07-2013 09:50:36 JavaFX 2.1.1 wird entfernt
17-07-2013 09:52:26 Removed LibreOffice 3.6
17-07-2013 22:00:04 Geplanter Prüfpunkt
19-07-2013 08:47:18 ComboFix created restore point
19-07-2013 08:49:20 ComboFix created restore point

==================== Hosts content: ==========================

2010-11-10 18:16 - 2013-07-19 11:05 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07EFF3F8-57E9-4060-AC8B-63C03D320C8F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {0DF7E8C6-4CF7-4DE8-8BAA-516D9BB205F9} - System32\Tasks\EPUpdater => C:\Users\Judith\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe No File
Task: {18BF61D8-8C4D-46C1-A397-EB7A6DC96E58} - System32\Tasks\{658EA475-F343-45E9-AF82-B67E5CDA0A49} => c:\program files\mozilla firefox\firefox.exe [2013-06-24] (Mozilla Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2461E8E9-EE40-4DBD-A19C-B63B76A58539} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {2DB895D9-D2FC-42EA-B3EF-22E6FC0EE2F5} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe No File
Task: {36D7A5B8-4472-4F24-A887-D37F62033E77} - System32\Tasks\{1CCCC0B6-CFDB-4CC2-A42A-85FEE189240A} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-03] (Skype Technologies S.A.)
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3C6D8EF0-298B-4F31-80A7-9F3D060DE516} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3758001449-3176424044-3867666295-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {3D5CB9AB-CBA4-4773-8496-A0BB1355C097} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-19] (Microsoft Corporation)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)
Task: {4692C054-BD6B-44FE-AC34-6E8EF7BED887} - System32\Tasks\Hoolapp Init => C:\Users\Judith\AppData\Roaming\HOOLAP~1\Hoolapp.exe No File
Task: {521E92D9-3347-43B0-8FD9-81111C6875F5} - System32\Tasks\icqSWU => C:\Windows\System32\cscript.exe [2009-04-11] (Microsoft Corporation)
Task: {5392E7AF-501E-42B5-9C13-F4F38D0AB0FA} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {54427084-6145-4C10-A6BE-3852819D9086} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-11-24] (Piriform Ltd)
Task: {5EA3018C-5A19-4672-A5D9-1E6798A5DDB6} - System32\Tasks\Microsoft\Windows\RestartManager\{5A2F064A-6F7D-43b3-A3E7-66C404102C38} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {61858FB2-F17C-4365-A209-A1C513102D64} - System32\Tasks\QtraxPlayer => C:\Program Files\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: {6319641D-EF8F-47AB-8F8B-8686C8D0EF51} - System32\Tasks\Hoolapp For Android => C:\Users\Judith\AppData\Roaming\HOOLAP~1\UPDATE~1\UPDATE~1.EXE No File
Task: {6C51054D-758B-4BAD-86DD-53F1A46E3A90} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3758001449-3176424044-3867666295-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {7C3F2BC2-7BE5-4A40-B44B-CD268951471A} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Judith => C:\Program Files\Windows Calendar\wincal.exe [2009-04-11] (Microsoft Corporation)
Task: {8B3D2A13-BD5E-409A-B91D-4112FC8C84DF} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {937DE204-BC75-40F1-9F78-99C92C20A7F9} - System32\Tasks\{9FB8FE6B-80F2-4C6A-AF86-BBF69CEFAF15} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-03] (Skype Technologies S.A.)
Task: {9B411A20-1FFE-430A-9A15-1FEEBA8C6738} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-03-04] (Google Inc.)
Task: {9CEB093B-75B3-4E5C-82E3-0F00F56EEF97} - System32\Tasks\Microsoft\Windows\RestartManager\{413EBFE5-7F85-4328-8E7F-EE0B67E7758A} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {9EBD668F-185F-49E8-A084-D7A3454DC025} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-03-04] (Google Inc.)
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-19] (Microsoft Corporation)
Task: {A860C6A5-C081-4512-A41B-3CDA091A9F23} - System32\Tasks\User_Feed_Synchronization-{FFEC623E-F341-4E38-8943-ABB2B7D24138} => C:\Windows\system32\msfeedssync.exe [2013-05-29] (Microsoft Corporation)
Task: {B15FE2B6-56A5-467A-83AD-9A5C39F49798} - \BrowserDefendert No Task File
Task: {CA11AF58-3534-4B3A-B808-9E78362DCECC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000UA => C:\Users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-24] (Google Inc.)
Task: {D0645CD6-D80F-4895-89A2-31762C52DF3B} - System32\Tasks\DSite => C:\Users\Judith\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File
Task: {D36A0565-494E-4C1B-A28D-24EBCC2C4439} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe No File
Task: {DB14B352-D4C4-4BEA-81ED-DC36F12E827B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000Core => C:\Users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-24] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000Core.job => C:\Users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000UA.job => C:\Users\Judith\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{FFEC623E-F341-4E38-8943-ABB2B7D24138}.job => C:\Windows\system32\msfeedssync.exe

==================== Faulty Device Manager Devices =============

Name: Microsoft-ISATAP-Adapter #6
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-07-17 15:37:59.555
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:59.226
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:58.844
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:58.504
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:58.177
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-17 15:37:57.840
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-30 16:54:35.531
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\msiltcfg.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-04 17:06:43.935
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-04 17:06:43.628
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-04 17:06:43.232
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 55%
Total physical RAM: 2045.31 MB
Available physical RAM: 902.63 MB
Total Pagefile: 4329.88 MB
Available Pagefile: 2887.54 MB
Total Virtual: 2047.88 MB
Available Virtual: 1887.75 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:99.88 GB) (Free:29.54 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive j: (Samsung Festplatte neu) (Fixed) (Total:931.51 GB) (Free:617.61 GB) NTFS
Drive m: (Daten) (Fixed) (Total:130.95 GB) (Free:4.27 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 00000080)
Partition 1: (Not Active) - (Size=47 MB) - (Type=DE)
Partition 2: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=133 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 932 GB) (Disk ID: 54349CA3)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---

schrauber 19.07.2013 13:57

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch probleme? :)

Youdid 19.07.2013 19:56
Der Eset scannt nicht durch. Er bleibt irgendwann einfach stehen.

schrauber 19.07.2013 20:14
Wie lange steht er schon?

Youdid 20.07.2013 10:19
Er stand über eine halbe Stunde auf dem gleichen Prozentsatz und der gleichen Datei. Ich versuche es gerade wieder. Er läuft schon 4 Stunden. Hängt aber wieder.

Ich habe es geschafft

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=3891b829d943494a8dbfe4c10ae1b6bd
# engine=14460
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-19 05:00:43
# local_time=2013-07-19 07:00:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1799 16775165 100 95 96577 239676533 89330 0
# compatibility_mode=5892 16776574 100 100 1232009 211785971 0 0
# scanned=102629
# found=0
# cleaned=0
# scan_time=4377
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=3891b829d943494a8dbfe4c10ae1b6bd
# engine=14460
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-19 09:53:07
# local_time=2013-07-19 11:53:07 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1799 16775165 100 95 114121 239694077 106874 0
# compatibility_mode=5892 16776574 100 100 1249553 211803515 0 0
# scanned=288534
# found=0
# cleaned=0
# scan_time=17498

Aber der Security Check funktioniert nicht.

Nachricht:
Unsupported Operation System! Aborting now!


FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-07-2013 02
Ran by Judith (administrator) on 20-07-2013 00:28:07
Running from C:\Users\Judith\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Andrea Electronics Corporation) C:\Windows\system32\aestsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(IDT, Inc.) C:\Windows\system32\STacSV.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(IDT, Inc.) C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
(ICQ) C:\Users\Judith\AppData\Roaming\ICQM\icq.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(SugarSync, Inc.) C:\Program Files\SugarSync\SugarSync.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Dropbox, Inc.) C:\Users\Judith\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Windows Net) C:\Users\Judith\AppData\Roaming\Windows Net Data\net.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Users\Judith\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Don HO don.h@free.fr) C:\Program Files\Notepad++\notepad++.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

Lsa: [Authentication Packages] msv1_0 relog_ap
2-06-08] (RealNetworks, Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [151952 2012-11-29] (Apple Inc.)
HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [49664 2008-01-19] (Microsoft Corporation)
HKCU\...\Run: [ICQ] - C:\Users\Judith\AppData\Roaming\ICQM\icq.exe [27598184 2013-04-10] (ICQ)
HKCU\...\Run: [COMPUTERBILD-Cloud] - C:\Program Files\COMPUTERBILD-Cloud\CGCClient.exe [1781840 2012-08-08] ()
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [SugarSync] - C:\Program Files\SugarSync\SugarSync.exe [12419424 2013-06-26] (SugarSync, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files\T-Online\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files\T-Online\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Judith\AppData\Local\Windows\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Judith\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Judith\AppData\Local\Windows\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Judith\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files\Internet Explorer\iexplore.exe"
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Bing
SearchScopes: HKCU - {752A9793-46C2-4927-9DCE-8FD9351F6B79} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ICQ Sparberater - {E2B5568A-B3BC-49D6-9BEA-4A549AA1E01E} - C:\Program Files\icq\Internet Explorer\icq.dll ()
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKCU -No Name - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -  No File
Toolbar: HKCU -No Name - {00000000-0000-0000-0000-000000000000} -  No File
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
Handler: msdaipp - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 20 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @real.com/nppl3260;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Judith\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Judith\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\foxsearch.src
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com
FF Extension: ICQ Sparberater - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\ciuvo-extension@icq.de
FF Extension: ReminderFox - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}
FF Extension: NoiaFoxoption - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\NoiaFoxoption@davidvincent.tld.xpi
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKCU\...\Firefox\Extensions: [{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}] C:\Users\Judith\AppData\Local\{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}
FF Extension: XULRunner - C:\Users\Judith\AppData\Local\{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}

Chrome:
=======
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0

========================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [411168 2007-02-16] (Acronis)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 DokanMounter; C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe [14848 2012-02-15] ()
S3 TDslMgrService; C:\Program Files\T-Online\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH)
S3 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [548864 2008-10-21] (Magix AG)

==================== Drivers (Whitelisted) ====================

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26080 2012-10-08] (Wondershare)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [299024 2012-04-09] (EldoS Corporation)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [95744 2012-02-15] (Windows (R) Win 7 DDK provider)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [16448 2007-08-01] (T-Systems Enterprise Services GmbH)
S3 dsltestSp5; C:\Windows\System32\Drivers\dsltestSp5.sys [26816 2007-09-12] (Printing Communications Assoc., Inc. (PCAUSA))
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2007-08-21] (Paragon Software Group)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-12-12] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-12-12] (RapidSolution Software AG)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2009-01-10] (Duplex Secure Ltd.)
R3 SSCBFS3; C:\Windows\System32\DRIVERS\sscbfs3.sys [295936 2013-01-30] (EldoS Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31360 2012-07-20] (The OpenVPN Project)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [35592 2012-11-15] (Anchorfree Inc.)
R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39048 2012-12-12] (RapidSolution Software AG)
R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [32768 2008-12-13] (Acronis)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [17792 2008-12-26] (Avnex)
R2 {2E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7}; C:\Program Files\Dell\MediaDirect\000.fcl [13560 2007-04-02] (Cyberlink Corp.)
S3 ActivHidSerMini; system32\DRIVERS\activhidsermini.sys [x]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S4 IpInIp; system32\DRIVERS\ipinip.sys [x]
S4 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S4 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 prmvmouse; system32\DRIVERS\activmouse.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-19 17:45 - 2013-07-19 17:45 - 00000000 ____D C:\Program Files\ESET
2013-07-19 17:45 - 2013-07-19 17:34 - 00891062 _____ C:\Users\Judith\Desktop\SecurityCheck.exe
2013-07-19 17:34 - 2013-07-19 17:34 - 00891062 _____ C:\Users\Judith\Downloads\SecurityCheck.exe
2013-07-19 17:33 - 2013-07-19 17:33 - 02347384 _____ (ESET) C:\Users\Judith\Downloads\esetsmartinstaller_enu (1).exe
2013-07-19 15:22 - 2013-07-19 15:22 - 02347384 _____ (ESET) C:\Users\Judith\Downloads\esetsmartinstaller_enu.exe
2013-07-19 13:26 - 2013-07-19 13:27 - 00022779 _____ C:\Users\Judith\Downloads\Addition.txt
2013-07-19 13:23 - 2013-07-19 13:23 - 00003328 _____ C:\Users\Judith\Desktop\JRT.txt
2013-07-19 12:03 - 2013-07-19 12:03 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Downloads\JRT.exe
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Desktop\JRT.exe
2013-07-19 11:50 - 2013-07-19 11:52 - 00011518 _____ C:\AdwCleaner[S2].txt
2013-07-19 11:50 - 2013-07-19 11:52 - 00000098 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 11:50 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Desktop\adwcleaner2305.exe
2013-07-19 11:18 - 2013-07-19 11:18 - 00030260 _____ C:\ComboFix.txt
2013-07-19 10:47 - 2013-07-19 10:45 - 05091168 ____R (Swearware) C:\Users\Judith\Desktop\ComboFix.exe
2013-07-19 10:47 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-19 10:47 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-19 10:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-19 10:46 - 2013-07-19 11:18 - 00000000 ____D C:\Qoobox
2013-07-19 10:45 - 2013-07-19 11:15 - 00000000 ____D C:\Windows\erdnt
2013-07-19 10:44 - 2013-07-19 10:45 - 05091168 ____R (Swearware) C:\Users\Judith\Downloads\ComboFix.exe
2013-07-18 19:58 - 2013-07-18 19:58 - 00000000 ____D C:\FRST
2013-07-18 19:56 - 2013-07-18 19:56 - 01218860 _____ (Farbar) C:\Users\Judith\Downloads\FRST.exe
2013-07-18 19:53 - 2013-07-18 19:53 - 00000000 ____D C:\Users\Judith\Qtrax
2013-07-18 19:48 - 2013-07-18 19:48 - 00793536 _____ C:\Users\Judith\Downloads\ZipOpenerSetup.exe
2013-07-18 17:13 - 2013-07-18 17:14 - 00033686 _____ C:\AdwCleaner[S1].txt
2013-07-18 17:12 - 2013-07-18 17:12 - 00033720 _____ C:\AdwCleaner[R1].txt
2013-07-18 17:11 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Downloads\adwcleaner2305.exe
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setupact.log
2013-07-17 12:22 - 2013-07-19 11:07 - 00005314 _____ C:\Windows\PFRO.log
2013-07-16 23:17 - 2013-07-18 16:41 - 00000830 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-07-16 23:16 - 2013-07-17 12:29 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Windows Net Data
2013-07-16 23:15 - 2013-06-27 07:14 - 00031816 _____ C:\Windows\Launcher.exe
2013-07-16 23:11 - 2013-07-16 23:11 - 00001920 _____ C:\Users\Public\Desktop\Free YouTube Download Manager.lnk
2013-07-16 23:04 - 2013-07-16 23:04 - 00000209 _____ C:\Users\Judith\Desktop\Amazon.url
2013-07-16 23:04 - 2013-07-16 23:04 - 00000000 ____D C:\Users\Judith\AppData\Local\Software Updater
2013-07-16 22:03 - 2013-07-16 22:06 - 00000000 ____D C:\Windows\system32\MRT
2013-07-16 20:10 - 2013-07-16 20:10 - 00283168 _____ C:\Users\Judith\Downloads\Setup (1).exe
2013-07-16 14:35 - 2013-07-16 14:35 - 00895488 _____ M:\Dokumente\Visitenkarten.doc
2013-07-13 03:25 - 2013-07-13 03:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2845142_WM64$
2013-07-13 03:25 - 2007-07-27 10:41 - 00016760 ____N (Microsoft Corporation) C:\Windows\system32\spmsg.dll
2013-07-12 16:40 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-12 16:39 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-12 16:39 - 2013-05-29 13:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 16:39 - 2013-05-29 13:30 - 00916480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 16:39 - 2013-05-29 13:30 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-12 16:39 - 2013-05-29 13:28 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 06016000 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 11111424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-12 16:39 - 2013-05-29 13:24 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-12 16:39 - 2013-05-29 11:47 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-12 16:39 - 2013-05-29 10:07 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-12 16:39 - 2013-05-29 10:06 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-12 16:39 - 2013-05-29 10:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-12 16:39 - 2013-05-29 10:04 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-12 16:39 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-12 16:39 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-12 16:39 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-12 16:39 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-12 16:39 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-12 16:39 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-12 16:38 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 21:53 - 2013-07-10 21:53 - 00024064 _____ M:\Dokumente\Windows Phone Store.doc
2013-07-10 21:51 - 2013-07-10 21:51 - 00000840 _____ C:\Users\Judith\Desktop\Wuala.lnk
2013-07-10 21:48 - 2013-07-19 11:58 - 00000000 ___RD C:\Users\Judith\Dropbox
2013-07-10 21:48 - 2013-07-10 21:48 - 00000992 _____ C:\Users\Judith\Desktop\Dropbox.lnk
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala OverlayIcons
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala CBFS
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 21:47 - 2013-07-10 21:45 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 21:47 - 2012-04-09 16:27 - 00299024 _____ (EldoS Corporation) C:\Windows\system32\Drivers\cbfs3.sys
2013-07-10 21:47 - 2012-04-09 16:27 - 00223760 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll
2013-07-10 21:47 - 2012-04-09 16:27 - 00158224 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 21:44 - 2013-07-10 21:44 - 00000000 ____D C:\Program Files\Dropbox
2013-07-10 21:43 - 2013-07-10 21:43 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-07-10 21:40 - 2013-07-19 11:58 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Dropbox
2013-07-10 21:39 - 2013-07-10 21:40 - 33578320 _____ (Dropbox, Inc.) C:\Users\Judith\Downloads\Dropbox 2.2.8.exe
2013-07-10 21:38 - 2013-07-10 21:38 - 00000594 _____ C:\Users\Judith\Desktop\Mein SugarSync.lnk
2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ____D M:\Dokumente\Mein SugarSync
2013-07-10 21:36 - 2013-07-10 21:38 - 00000000 ____D C:\Users\Judith\AppData\Local\SugarSync
2013-07-10 21:35 - 2013-07-10 21:35 - 00001692 _____ C:\Users\Public\Desktop\SugarSync.lnk
2013-07-10 21:35 - 2013-01-30 13:12 - 00225024 _____ (EldoS Corporation) C:\Windows\system32\SSCbFsNetRdr3.dll
2013-07-10 21:35 - 2013-01-30 13:12 - 00159488 _____ (EldoS Corporation) C:\Windows\system32\SSCbFsMntNtf3.dll
2013-07-10 21:33 - 2013-07-10 21:42 - 00000828 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Wuala
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Local\Wuala
2013-07-10 21:33 - 2013-01-30 13:11 - 00295936 _____ (EldoS Corporation) C:\Windows\system32\Drivers\sscbfs3.sys
2013-07-10 21:32 - 2013-07-10 21:35 - 00000000 ____D C:\Program Files\SugarSync
2013-07-10 21:29 - 2013-07-10 21:29 - 22964952 _____ C:\Users\Judith\Downloads\WualaSetup_04_13.exe
2013-07-10 21:27 - 2013-07-10 21:28 - 20911672 _____ (SugarSync, Inc.) C:\Users\Judith\Downloads\SugarSyncSetup_2.0.27.exe
2013-07-07 21:25 - 2013-07-07 21:25 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00001853 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\Program Files\Avira
2013-07-07 21:21 - 2013-06-20 14:48 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-07 21:21 - 2013-03-06 16:13 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-07 21:21 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-07-07 21:04 - 2013-07-07 21:06 - 104943936 _____ C:\Users\Judith\Downloads\avira3737_free_antivirus_de.exe
2013-07-01 18:20 - 2013-07-01 18:20 - 00005384 _____ C:\Users\Judith\Downloads\Mundharmonika+Noten.htm (7).html
2013-06-28 11:52 - 2013-06-28 11:52 - 00000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-06-28 11:50 - 2013-06-28 11:51 - 22937227 _____ C:\Users\Judith\Downloads\vlc-2.0.7-win32.exe
2013-06-24 18:21 - 2013-06-24 18:21 - 00024064 _____ M:\Dokumente\Schreib-ab homepage.doc
2013-06-24 17:53 - 2013-06-24 17:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 17:25 - 2013-06-24 17:25 - 00001038 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-24 12:29 - 2013-06-24 12:29 - 00017196 _____ C:\Users\Judith\.recently-used.xbel

==================== One Month Modified Files and Folders =======

2013-07-20 00:19 - 2012-11-28 17:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-20 00:11 - 2012-03-04 13:20 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-20 00:09 - 2012-11-24 15:33 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000UA.job
2013-07-19 23:33 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-19 23:33 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-19 21:11 - 2012-03-04 13:19 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-19 18:57 - 2006-11-02 14:52 - 01247723 _____ C:\Windows\WindowsUpdate.log
2013-07-19 17:45 - 2013-07-19 17:45 - 00000000 ____D C:\Program Files\ESET
2013-07-19 17:45 - 2008-12-10 20:45 - 00000000 ___RD C:\Users\Judith\Desktop
2013-07-19 17:40 - 2006-11-02 12:33 - 01560022 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-19 17:34 - 2013-07-19 17:45 - 00891062 _____ C:\Users\Judith\Desktop\SecurityCheck.exe
2013-07-19 17:34 - 2013-07-19 17:34 - 00891062 _____ C:\Users\Judith\Downloads\SecurityCheck.exe
2013-07-19 17:33 - 2013-07-19 17:33 - 02347384 _____ (ESET) C:\Users\Judith\Downloads\esetsmartinstaller_enu (1).exe
2013-07-19 17:33 - 2011-07-22 18:56 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Skype
2013-07-19 15:22 - 2013-07-19 15:22 - 02347384 _____ (ESET) C:\Users\Judith\Downloads\esetsmartinstaller_enu.exe
2013-07-19 13:27 - 2013-07-19 13:26 - 00022779 _____ C:\Users\Judith\Downloads\Addition.txt
2013-07-19 13:23 - 2013-07-19 13:23 - 00003328 _____ C:\Users\Judith\Desktop\JRT.txt
2013-07-19 12:03 - 2013-07-19 12:03 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Downloads\JRT.exe
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Desktop\JRT.exe
2013-07-19 11:59 - 2012-12-10 21:36 - 00000000 __SHD C:\Users\Judith\wc
2013-07-19 11:59 - 2012-12-10 21:35 - 00000000 ____D C:\Users\Judith\AppData\Roaming\COMPUTERBILD Cloud
2013-07-19 11:58 - 2013-07-10 21:48 - 00000000 ___RD C:\Users\Judith\Dropbox
2013-07-19 11:58 - 2013-07-10 21:40 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Dropbox
2013-07-19 11:53 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-19 11:52 - 2013-07-19 11:50 - 00011518 _____ C:\AdwCleaner[S2].txt
2013-07-19 11:52 - 2013-07-19 11:50 - 00000098 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 11:52 - 2010-05-25 18:16 - 00008524 _____ C:\Windows\bthservsdp.dat
2013-07-19 11:52 - 2006-11-02 15:01 - 00032606 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-19 11:18 - 2013-07-19 11:18 - 00030260 _____ C:\ComboFix.txt
2013-07-19 11:18 - 2013-07-19 10:46 - 00000000 ____D C:\Qoobox
2013-07-19 11:18 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2013-07-19 11:18 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-07-19 11:15 - 2013-07-19 10:45 - 00000000 ____D C:\Windows\erdnt
2013-07-19 11:09 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2013-07-19 11:07 - 2013-07-17 12:22 - 00005314 _____ C:\Windows\PFRO.log
2013-07-19 11:07 - 2006-11-02 12:22 - 59244544 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 45350912 _____ C:\Windows\system32\config\COMPON~2.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 24903680 _____ C:\Windows\system32\config\SYSTEM.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 00786432 _____ C:\Windows\system32\config\DEFAULT.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-07-19 11:04 - 2008-12-10 20:45 - 00000000 ____D C:\Users\Judith
2013-07-19 10:45 - 2013-07-19 10:47 - 05091168 ____R (Swearware) C:\Users\Judith\Desktop\ComboFix.exe
2013-07-19 10:45 - 2013-07-19 10:44 - 05091168 ____R (Swearware) C:\Users\Judith\Downloads\ComboFix.exe
2013-07-18 20:16 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-18 19:58 - 2013-07-18 19:58 - 00000000 ____D C:\FRST
2013-07-18 19:56 - 2013-07-18 19:56 - 01218860 _____ (Farbar) C:\Users\Judith\Downloads\FRST.exe
2013-07-18 19:53 - 2013-07-18 19:53 - 00000000 ____D C:\Users\Judith\Qtrax
2013-07-18 19:48 - 2013-07-18 19:48 - 00793536 _____ C:\Users\Judith\Downloads\ZipOpenerSetup.exe
2013-07-18 17:14 - 2013-07-18 17:13 - 00033686 _____ C:\AdwCleaner[S1].txt
2013-07-18 17:13 - 2008-12-13 19:22 - 00000000 ____D C:\ProgramData\ICQ
2013-07-18 17:13 - 2008-12-13 13:43 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-07-18 17:12 - 2013-07-18 17:12 - 00033720 _____ C:\AdwCleaner[R1].txt
2013-07-18 17:11 - 2013-07-19 11:50 - 00662345 _____ C:\Users\Judith\Desktop\adwcleaner2305.exe
2013-07-18 17:11 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Downloads\adwcleaner2305.exe
2013-07-18 16:41 - 2013-07-16 23:17 - 00000830 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-07-18 14:38 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setupact.log
2013-07-18 03:09 - 2012-11-24 15:33 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000Core.job
2013-07-17 14:02 - 2008-12-13 19:48 - 00000000 ____D M:\Dokumente\Sicherung
2013-07-17 13:57 - 2009-01-05 14:33 - 00027430 _____ C:\Users\Judith\AppData\Roaming\nvModes.001
2013-07-17 12:29 - 2013-07-16 23:16 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Windows Net Data
2013-07-17 12:06 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\ShellNew
2013-07-17 11:49 - 2011-11-22 19:00 - 00000000 ____D C:\Program Files\DsNET Corp
2013-07-16 23:16 - 2010-12-19 20:32 - 00000000 ___HD C:\Users\Judith\AppData\Local\Windows
2013-07-16 23:11 - 2013-07-16 23:11 - 00001920 _____ C:\Users\Public\Desktop\Free YouTube Download Manager.lnk
2013-07-16 23:10 - 2013-02-17 16:41 - 00000000 ____D C:\Program Files\Freetec
2013-07-16 23:08 - 2013-02-17 16:39 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-16 23:04 - 2013-07-16 23:04 - 00000209 _____ C:\Users\Judith\Desktop\Amazon.url
2013-07-16 23:04 - 2013-07-16 23:04 - 00000000 ____D C:\Users\Judith\AppData\Local\Software Updater
2013-07-16 22:06 - 2013-07-16 22:03 - 00000000 ____D C:\Windows\system32\MRT
2013-07-16 20:10 - 2013-07-16 20:10 - 00283168 _____ C:\Users\Judith\Downloads\Setup (1).exe
2013-07-16 14:35 - 2013-07-16 14:35 - 00895488 _____ M:\Dokumente\Visitenkarten.doc
2013-07-16 12:14 - 2008-12-13 12:30 - 00002637 _____ C:\Users\Judith\Desktop\Microsoft Office Word 2003.lnk
2013-07-14 20:33 - 2012-01-20 19:03 - 00000000 ____D M:\Dokumente\Handys N97 Galaxy Ace
2013-07-13 04:07 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-13 03:51 - 2006-11-02 14:47 - 00532888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 03:48 - 2008-12-13 12:40 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 03:47 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-13 03:25 - 2013-07-13 03:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2845142_WM64$
2013-07-13 03:02 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 09:31 - 2008-12-13 12:53 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Mozilla
2013-07-10 21:53 - 2013-07-10 21:53 - 00024064 _____ M:\Dokumente\Windows Phone Store.doc
2013-07-10 21:51 - 2013-07-10 21:51 - 00000840 _____ C:\Users\Judith\Desktop\Wuala.lnk
2013-07-10 21:48 - 2013-07-10 21:48 - 00000992 _____ C:\Users\Judith\Desktop\Dropbox.lnk
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala OverlayIcons
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala CBFS
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 21:45 - 2013-07-10 21:47 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 21:45 - 2012-06-30 12:00 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-07-10 21:45 - 2011-12-22 15:59 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-07-10 21:44 - 2013-07-10 21:44 - 00000000 ____D C:\Program Files\Dropbox
2013-07-10 21:43 - 2013-07-10 21:43 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-07-10 21:42 - 2013-07-10 21:33 - 00000828 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-10 21:40 - 2013-07-10 21:39 - 33578320 _____ (Dropbox, Inc.) C:\Users\Judith\Downloads\Dropbox 2.2.8.exe
2013-07-10 21:40 - 2010-02-17 17:02 - 00039424 _____ M:\Dokumente\mailaccounts community Free sms accounts.doc
2013-07-10 21:38 - 2013-07-10 21:38 - 00000594 _____ C:\Users\Judith\Desktop\Mein SugarSync.lnk
2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ____D M:\Dokumente\Mein SugarSync
2013-07-10 21:38 - 2013-07-10 21:36 - 00000000 ____D C:\Users\Judith\AppData\Local\SugarSync
2013-07-10 21:35 - 2013-07-10 21:35 - 00001692 _____ C:\Users\Public\Desktop\SugarSync.lnk
2013-07-10 21:35 - 2013-07-10 21:32 - 00000000 ____D C:\Program Files\SugarSync
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Wuala
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Local\Wuala
2013-07-10 21:29 - 2013-07-10 21:29 - 22964952 _____ C:\Users\Judith\Downloads\WualaSetup_04_13.exe
2013-07-10 21:28 - 2013-07-10 21:27 - 20911672 _____ (SugarSync, Inc.) C:\Users\Judith\Downloads\SugarSyncSetup_2.0.27.exe
2013-07-07 21:25 - 2013-07-07 21:25 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00001853 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\Program Files\Avira
2013-07-07 21:06 - 2013-07-07 21:04 - 104943936 _____ C:\Users\Judith\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 17:47 - 2012-08-30 13:55 - 00000000 ____D C:\Users\Judith\AppData\Roaming\vlc
2013-07-06 15:41 - 2010-01-15 17:53 - 00000000 ____D C:\Users\Judith\AppData\Roaming\dvdcss
2013-07-01 19:15 - 2008-12-13 16:17 - 00000000 ____D M:\Dokumente\Allerlei
2013-07-01 18:46 - 2012-04-27 17:53 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-01 18:20 - 2013-07-01 18:20 - 00005384 _____ C:\Users\Judith\Downloads\Mundharmonika+Noten.htm (7).html
2013-06-28 15:16 - 2008-12-13 18:22 - 00074752 _____ C:\Users\Judith\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-28 11:52 - 2013-06-28 11:52 - 00000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-06-28 11:51 - 2013-06-28 11:50 - 22937227 _____ C:\Users\Judith\Downloads\vlc-2.0.7-win32.exe
2013-06-27 14:47 - 2013-04-01 16:03 - 00000000 ____D M:\Dokumente\Flug USA Herbst 2013
2013-06-27 07:14 - 2013-07-16 23:15 - 00031816 _____ C:\Windows\Launcher.exe
2013-06-24 18:23 - 2011-03-28 18:58 - 00000000 ____D C:\Users\Judith\AppData\Roaming\DVDVideoSoft
2013-06-24 18:21 - 2013-06-24 18:21 - 00024064 _____ M:\Dokumente\Schreib-ab homepage.doc
2013-06-24 17:53 - 2013-06-24 17:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 17:26 - 2008-12-13 13:43 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-06-24 17:25 - 2013-06-24 17:25 - 00001038 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-24 17:14 - 2012-10-13 13:42 - 70431848 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Judith\Downloads\FreeStudio.exe
2013-06-24 12:30 - 2010-08-09 12:10 - 00000000 ____D C:\Users\Judith\.gimp-2.6
2013-06-24 12:29 - 2013-06-24 12:29 - 00017196 _____ C:\Users\Judith\.recently-used.xbel
2013-06-24 00:37 - 2006-11-02 12:24 - 75733144 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-06-21 17:38 - 2009-11-29 19:37 - 00000000 ____D M:\Dokumente\Steuerfälle
2013-06-20 14:48 - 2013-07-07 21:21 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2010-03-20 12:10 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-20 00:02

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---

Results of screen317's Security Check version 0.99.70
Windows Vista Service Pack 2 x86 (UAC is enabled)
Internet Explorer 8 Out of date!
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
CCleaner
River Past Video Cleaner Pro
Java 7 Update 25
Adobe Flash Player 11.7.700.224
Adobe Reader 9 Adobe Reader out of Date!
Mozilla Firefox 21.0 Firefox out of Date!
Google Chrome 28.0.1500.71
Google Chrome 28.0.1500.72
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-07-2013 02
Ran by Judith (administrator) on 20-07-2013 11:17:41
Running from C:\Users\Judith\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Andrea Electronics Corporation) C:\Windows\system32\aestsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(IDT, Inc.) C:\Windows\system32\STacSV.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
(IDT, Inc.) C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(ICQ) C:\Users\Judith\AppData\Roaming\ICQM\icq.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(SugarSync, Inc.) C:\Program Files\SugarSync\SugarSync.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Dropbox, Inc.) C:\Users\Judith\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Windows Net) C:\Users\Judith\AppData\Roaming\Windows Net Data\net.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Mail\WinMail.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Judith\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

Lsa: [Authentication Packages] msv1_0 relog_ap
ted)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [151952 2012-11-29] (Apple Inc.)
HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [49664 2008-01-19] (Microsoft Corporation)
HKCU\...\Run: [ICQ] - C:\Users\Judith\AppData\Roaming\ICQM\icq.exe [27598184 2013-04-10] (ICQ)
HKCU\...\Run: [COMPUTERBILD-Cloud] - C:\Program Files\COMPUTERBILD-Cloud\CGCClient.exe [1781840 2012-08-08] ()
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [SugarSync] - C:\Program Files\SugarSync\SugarSync.exe [12419424 2013-06-26] (SugarSync, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files\T-Online\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files\T-Online\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Judith\AppData\Local\Windows\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Judith\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Judith\AppData\Local\Windows\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Judith\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files\Internet Explorer\iexplore.exe"
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - {752A9793-46C2-4927-9DCE-8FD9351F6B79} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ICQ Sparberater - {E2B5568A-B3BC-49D6-9BEA-4A549AA1E01E} - C:\Program Files\icq\Internet Explorer\icq.dll ()
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKCU -No Name - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -  No File
Toolbar: HKCU -No Name - {00000000-0000-0000-0000-000000000000} -  No File
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
Handler: msdaipp - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 20 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @real.com/nppl3260;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=15.0.4.53 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Judith\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Judith\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Judith\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\foxsearch.src
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com
FF Extension: ICQ Sparberater - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\ciuvo-extension@icq.de
FF Extension: ReminderFox - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}
FF Extension: NoiaFoxoption - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\NoiaFoxoption@davidvincent.tld.xpi
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi
FF Extension: No Name - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\pi8ce2ez.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKCU\...\Firefox\Extensions: [{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}] C:\Users\Judith\AppData\Local\{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}
FF Extension: XULRunner - C:\Users\Judith\AppData\Local\{E6CF7BE8-F072-4CC8-AA98-DD0D516AFE46}

Chrome:
=======
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Judith\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0

========================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [411168 2007-02-16] (Acronis)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 DokanMounter; C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe [14848 2012-02-15] ()
S3 TDslMgrService; C:\Program Files\T-Online\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH)
S3 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [548864 2008-10-21] (Magix AG)

==================== Drivers (Whitelisted) ====================

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26080 2012-10-08] (Wondershare)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [299024 2012-04-09] (EldoS Corporation)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [95744 2012-02-15] (Windows (R) Win 7 DDK provider)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [16448 2007-08-01] (T-Systems Enterprise Services GmbH)
S3 dsltestSp5; C:\Windows\System32\Drivers\dsltestSp5.sys [26816 2007-09-12] (Printing Communications Assoc., Inc. (PCAUSA))
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2007-08-21] (Paragon Software Group)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-12-12] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-12-12] (RapidSolution Software AG)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2009-01-10] (Duplex Secure Ltd.)
R3 SSCBFS3; C:\Windows\System32\DRIVERS\sscbfs3.sys [295936 2013-01-30] (EldoS Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31360 2012-07-20] (The OpenVPN Project)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [35592 2012-11-15] (Anchorfree Inc.)
R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39048 2012-12-12] (RapidSolution Software AG)
R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [32768 2008-12-13] (Acronis)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [17792 2008-12-26] (Avnex)
R2 {2E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7}; C:\Program Files\Dell\MediaDirect\000.fcl [13560 2007-04-02] (Cyberlink Corp.)
S3 ActivHidSerMini; system32\DRIVERS\activhidsermini.sys [x]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S4 IpInIp; system32\DRIVERS\ipinip.sys [x]
S4 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S4 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 prmvmouse; system32\DRIVERS\activmouse.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-19 17:45 - 2013-07-19 17:45 - 00000000 ____D C:\Program Files\ESET
2013-07-19 17:45 - 2013-07-19 17:34 - 00891062 _____ C:\Users\Judith\Desktop\SecurityCheck.exe
2013-07-19 17:34 - 2013-07-19 17:34 - 00891062 _____ C:\Users\Judith\Downloads\SecurityCheck.exe
2013-07-19 17:33 - 2013-07-19 17:33 - 02347384 _____ (ESET) C:\Users\Judith\Downloads\esetsmartinstaller_enu (1).exe
2013-07-19 15:22 - 2013-07-19 15:22 - 02347384 _____ (ESET) C:\Users\Judith\Downloads\esetsmartinstaller_enu.exe
2013-07-19 13:26 - 2013-07-19 13:27 - 00022779 _____ C:\Users\Judith\Downloads\Addition.txt
2013-07-19 13:23 - 2013-07-19 13:23 - 00003328 _____ C:\Users\Judith\Desktop\JRT.txt
2013-07-19 12:03 - 2013-07-19 12:03 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Downloads\JRT.exe
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Desktop\JRT.exe
2013-07-19 11:50 - 2013-07-19 11:52 - 00011518 _____ C:\AdwCleaner[S2].txt
2013-07-19 11:50 - 2013-07-19 11:52 - 00000098 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 11:50 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Desktop\adwcleaner2305.exe
2013-07-19 11:18 - 2013-07-19 11:18 - 00030260 _____ C:\ComboFix.txt
2013-07-19 10:47 - 2013-07-19 10:45 - 05091168 ____R (Swearware) C:\Users\Judith\Desktop\ComboFix.exe
2013-07-19 10:47 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-19 10:47 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-19 10:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-19 10:47 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-19 10:46 - 2013-07-19 11:18 - 00000000 ____D C:\Qoobox
2013-07-19 10:45 - 2013-07-19 11:15 - 00000000 ____D C:\Windows\erdnt
2013-07-19 10:44 - 2013-07-19 10:45 - 05091168 ____R (Swearware) C:\Users\Judith\Downloads\ComboFix.exe
2013-07-18 19:58 - 2013-07-18 19:58 - 00000000 ____D C:\FRST
2013-07-18 19:56 - 2013-07-18 19:56 - 01218860 _____ (Farbar) C:\Users\Judith\Downloads\FRST.exe
2013-07-18 19:53 - 2013-07-18 19:53 - 00000000 ____D C:\Users\Judith\Qtrax
2013-07-18 19:48 - 2013-07-18 19:48 - 00793536 _____ C:\Users\Judith\Downloads\ZipOpenerSetup.exe
2013-07-18 17:13 - 2013-07-18 17:14 - 00033686 _____ C:\AdwCleaner[S1].txt
2013-07-18 17:12 - 2013-07-18 17:12 - 00033720 _____ C:\AdwCleaner[R1].txt
2013-07-18 17:11 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Downloads\adwcleaner2305.exe
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setupact.log
2013-07-17 12:22 - 2013-07-19 11:07 - 00005314 _____ C:\Windows\PFRO.log
2013-07-16 23:17 - 2013-07-18 16:41 - 00000830 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-07-16 23:16 - 2013-07-17 12:29 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Windows Net Data
2013-07-16 23:15 - 2013-06-27 07:14 - 00031816 _____ C:\Windows\Launcher.exe
2013-07-16 23:11 - 2013-07-16 23:11 - 00001920 _____ C:\Users\Public\Desktop\Free YouTube Download Manager.lnk
2013-07-16 23:04 - 2013-07-16 23:04 - 00000209 _____ C:\Users\Judith\Desktop\Amazon.url
2013-07-16 23:04 - 2013-07-16 23:04 - 00000000 ____D C:\Users\Judith\AppData\Local\Software Updater
2013-07-16 22:03 - 2013-07-16 22:06 - 00000000 ____D C:\Windows\system32\MRT
2013-07-16 20:10 - 2013-07-16 20:10 - 00283168 _____ C:\Users\Judith\Downloads\Setup (1).exe
2013-07-16 14:35 - 2013-07-16 14:35 - 00895488 _____ M:\Dokumente\Visitenkarten.doc
2013-07-13 03:25 - 2013-07-13 03:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2845142_WM64$
2013-07-13 03:25 - 2007-07-27 10:41 - 00016760 ____N (Microsoft Corporation) C:\Windows\system32\spmsg.dll
2013-07-12 16:40 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-12 16:39 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-12 16:39 - 2013-05-29 13:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 16:39 - 2013-05-29 13:30 - 00916480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 16:39 - 2013-05-29 13:30 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-12 16:39 - 2013-05-29 13:28 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 06016000 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-07-12 16:39 - 2013-05-29 13:26 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-12 16:39 - 2013-05-29 13:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 11111424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-12 16:39 - 2013-05-29 13:24 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-12 16:39 - 2013-05-29 13:24 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-12 16:39 - 2013-05-29 11:47 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-12 16:39 - 2013-05-29 10:07 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-12 16:39 - 2013-05-29 10:06 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-12 16:39 - 2013-05-29 10:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-12 16:39 - 2013-05-29 10:04 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-12 16:39 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-12 16:39 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-12 16:39 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-12 16:39 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-12 16:39 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-12 16:39 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-12 16:39 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-12 16:38 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 21:53 - 2013-07-10 21:53 - 00024064 _____ M:\Dokumente\Windows Phone Store.doc
2013-07-10 21:51 - 2013-07-10 21:51 - 00000840 _____ C:\Users\Judith\Desktop\Wuala.lnk
2013-07-10 21:48 - 2013-07-20 11:01 - 00000000 ___RD C:\Users\Judith\Dropbox
2013-07-10 21:48 - 2013-07-10 21:48 - 00000992 _____ C:\Users\Judith\Desktop\Dropbox.lnk
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala OverlayIcons
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala CBFS
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 21:47 - 2013-07-10 21:45 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 21:47 - 2012-04-09 16:27 - 00299024 _____ (EldoS Corporation) C:\Windows\system32\Drivers\cbfs3.sys
2013-07-10 21:47 - 2012-04-09 16:27 - 00223760 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll
2013-07-10 21:47 - 2012-04-09 16:27 - 00158224 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 21:44 - 2013-07-10 21:44 - 00000000 ____D C:\Program Files\Dropbox
2013-07-10 21:43 - 2013-07-10 21:43 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-07-10 21:40 - 2013-07-20 11:01 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Dropbox
2013-07-10 21:39 - 2013-07-10 21:40 - 33578320 _____ (Dropbox, Inc.) C:\Users\Judith\Downloads\Dropbox 2.2.8.exe
2013-07-10 21:38 - 2013-07-10 21:38 - 00000594 _____ C:\Users\Judith\Desktop\Mein SugarSync.lnk
2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ____D M:\Dokumente\Mein SugarSync
2013-07-10 21:36 - 2013-07-10 21:38 - 00000000 ____D C:\Users\Judith\AppData\Local\SugarSync
2013-07-10 21:35 - 2013-07-10 21:35 - 00001692 _____ C:\Users\Public\Desktop\SugarSync.lnk
2013-07-10 21:35 - 2013-01-30 13:12 - 00225024 _____ (EldoS Corporation) C:\Windows\system32\SSCbFsNetRdr3.dll
2013-07-10 21:35 - 2013-01-30 13:12 - 00159488 _____ (EldoS Corporation) C:\Windows\system32\SSCbFsMntNtf3.dll
2013-07-10 21:33 - 2013-07-10 21:42 - 00000828 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Wuala
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Local\Wuala
2013-07-10 21:33 - 2013-01-30 13:11 - 00295936 _____ (EldoS Corporation) C:\Windows\system32\Drivers\sscbfs3.sys
2013-07-10 21:32 - 2013-07-10 21:35 - 00000000 ____D C:\Program Files\SugarSync
2013-07-10 21:29 - 2013-07-10 21:29 - 22964952 _____ C:\Users\Judith\Downloads\WualaSetup_04_13.exe
2013-07-10 21:27 - 2013-07-10 21:28 - 20911672 _____ (SugarSync, Inc.) C:\Users\Judith\Downloads\SugarSyncSetup_2.0.27.exe
2013-07-07 21:25 - 2013-07-07 21:25 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00001853 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\Program Files\Avira
2013-07-07 21:21 - 2013-06-20 14:48 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-07 21:21 - 2013-03-06 16:13 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-07 21:21 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-07-07 21:04 - 2013-07-07 21:06 - 104943936 _____ C:\Users\Judith\Downloads\avira3737_free_antivirus_de.exe
2013-07-01 18:20 - 2013-07-01 18:20 - 00005384 _____ C:\Users\Judith\Downloads\Mundharmonika+Noten.htm (7).html
2013-06-28 11:52 - 2013-06-28 11:52 - 00000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-06-28 11:50 - 2013-06-28 11:51 - 22937227 _____ C:\Users\Judith\Downloads\vlc-2.0.7-win32.exe
2013-06-24 18:21 - 2013-06-24 18:21 - 00024064 _____ M:\Dokumente\Schreib-ab homepage.doc
2013-06-24 17:53 - 2013-06-24 17:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 17:25 - 2013-06-24 17:25 - 00001038 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-24 12:29 - 2013-06-24 12:29 - 00017196 _____ C:\Users\Judith\.recently-used.xbel

==================== One Month Modified Files and Folders =======

2013-07-20 11:11 - 2012-03-04 13:20 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-20 11:09 - 2012-11-24 15:33 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000UA.job
2013-07-20 11:06 - 2006-11-02 14:52 - 01261000 _____ C:\Windows\WindowsUpdate.log
2013-07-20 11:03 - 2006-11-02 12:33 - 01560022 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-20 11:02 - 2012-12-10 21:36 - 00000000 __SHD C:\Users\Judith\wc
2013-07-20 11:02 - 2012-12-10 21:35 - 00000000 ____D C:\Users\Judith\AppData\Roaming\COMPUTERBILD Cloud
2013-07-20 11:01 - 2013-07-10 21:48 - 00000000 ___RD C:\Users\Judith\Dropbox
2013-07-20 11:01 - 2013-07-10 21:40 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Dropbox
2013-07-20 10:58 - 2012-03-04 13:19 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-20 10:56 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-20 10:56 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-20 10:56 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-20 00:39 - 2006-11-02 15:01 - 00032606 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-20 00:38 - 2010-05-25 18:16 - 00008524 _____ C:\Windows\bthservsdp.dat
2013-07-20 00:19 - 2012-11-28 17:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-19 17:45 - 2013-07-19 17:45 - 00000000 ____D C:\Program Files\ESET
2013-07-19 17:45 - 2008-12-10 20:45 - 00000000 ___RD C:\Users\Judith\Desktop
2013-07-19 17:34 - 2013-07-19 17:45 - 00891062 _____ C:\Users\Judith\Desktop\SecurityCheck.exe
2013-07-19 17:34 - 2013-07-19 17:34 - 00891062 _____ C:\Users\Judith\Downloads\SecurityCheck.exe
2013-07-19 17:33 - 2013-07-19 17:33 - 02347384 _____ (ESET) C:\Users\Judith\Downloads\esetsmartinstaller_enu (1).exe
2013-07-19 17:33 - 2011-07-22 18:56 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Skype
2013-07-19 15:22 - 2013-07-19 15:22 - 02347384 _____ (ESET) C:\Users\Judith\Downloads\esetsmartinstaller_enu.exe
2013-07-19 13:27 - 2013-07-19 13:26 - 00022779 _____ C:\Users\Judith\Downloads\Addition.txt
2013-07-19 13:23 - 2013-07-19 13:23 - 00003328 _____ C:\Users\Judith\Desktop\JRT.txt
2013-07-19 12:03 - 2013-07-19 12:03 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Downloads\JRT.exe
2013-07-19 12:02 - 2013-07-19 12:02 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Judith\Desktop\JRT.exe
2013-07-19 11:52 - 2013-07-19 11:50 - 00011518 _____ C:\AdwCleaner[S2].txt
2013-07-19 11:52 - 2013-07-19 11:50 - 00000098 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 11:18 - 2013-07-19 11:18 - 00030260 _____ C:\ComboFix.txt
2013-07-19 11:18 - 2013-07-19 10:46 - 00000000 ____D C:\Qoobox
2013-07-19 11:18 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2013-07-19 11:18 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-07-19 11:15 - 2013-07-19 10:45 - 00000000 ____D C:\Windows\erdnt
2013-07-19 11:09 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2013-07-19 11:07 - 2013-07-17 12:22 - 00005314 _____ C:\Windows\PFRO.log
2013-07-19 11:07 - 2006-11-02 12:22 - 59244544 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 45350912 _____ C:\Windows\system32\config\COMPON~2.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 24903680 _____ C:\Windows\system32\config\SYSTEM.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 00786432 _____ C:\Windows\system32\config\DEFAULT.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-07-19 11:07 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-07-19 11:04 - 2008-12-10 20:45 - 00000000 ____D C:\Users\Judith
2013-07-19 10:45 - 2013-07-19 10:47 - 05091168 ____R (Swearware) C:\Users\Judith\Desktop\ComboFix.exe
2013-07-19 10:45 - 2013-07-19 10:44 - 05091168 ____R (Swearware) C:\Users\Judith\Downloads\ComboFix.exe
2013-07-18 20:16 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-18 19:58 - 2013-07-18 19:58 - 00000000 ____D C:\FRST
2013-07-18 19:56 - 2013-07-18 19:56 - 01218860 _____ (Farbar) C:\Users\Judith\Downloads\FRST.exe
2013-07-18 19:53 - 2013-07-18 19:53 - 00000000 ____D C:\Users\Judith\Qtrax
2013-07-18 19:48 - 2013-07-18 19:48 - 00793536 _____ C:\Users\Judith\Downloads\ZipOpenerSetup.exe
2013-07-18 17:14 - 2013-07-18 17:13 - 00033686 _____ C:\AdwCleaner[S1].txt
2013-07-18 17:13 - 2008-12-13 19:22 - 00000000 ____D C:\ProgramData\ICQ
2013-07-18 17:13 - 2008-12-13 13:43 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-07-18 17:12 - 2013-07-18 17:12 - 00033720 _____ C:\AdwCleaner[R1].txt
2013-07-18 17:11 - 2013-07-19 11:50 - 00662345 _____ C:\Users\Judith\Desktop\adwcleaner2305.exe
2013-07-18 17:11 - 2013-07-18 17:11 - 00662345 _____ C:\Users\Judith\Downloads\adwcleaner2305.exe
2013-07-18 16:41 - 2013-07-16 23:17 - 00000830 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-07-18 14:38 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-07-18 13:19 - 2013-07-18 13:19 - 00000000 _____ C:\Windows\setupact.log
2013-07-18 03:09 - 2012-11-24 15:33 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3758001449-3176424044-3867666295-1000Core.job
2013-07-17 14:02 - 2008-12-13 19:48 - 00000000 ____D M:\Dokumente\Sicherung
2013-07-17 13:57 - 2009-01-05 14:33 - 00027430 _____ C:\Users\Judith\AppData\Roaming\nvModes.001
2013-07-17 12:29 - 2013-07-16 23:16 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Windows Net Data
2013-07-17 12:06 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\ShellNew
2013-07-17 11:49 - 2011-11-22 19:00 - 00000000 ____D C:\Program Files\DsNET Corp
2013-07-16 23:16 - 2010-12-19 20:32 - 00000000 ___HD C:\Users\Judith\AppData\Local\Windows
2013-07-16 23:11 - 2013-07-16 23:11 - 00001920 _____ C:\Users\Public\Desktop\Free YouTube Download Manager.lnk
2013-07-16 23:10 - 2013-02-17 16:41 - 00000000 ____D C:\Program Files\Freetec
2013-07-16 23:08 - 2013-02-17 16:39 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-16 23:04 - 2013-07-16 23:04 - 00000209 _____ C:\Users\Judith\Desktop\Amazon.url
2013-07-16 23:04 - 2013-07-16 23:04 - 00000000 ____D C:\Users\Judith\AppData\Local\Software Updater
2013-07-16 22:06 - 2013-07-16 22:03 - 00000000 ____D C:\Windows\system32\MRT
2013-07-16 20:10 - 2013-07-16 20:10 - 00283168 _____ C:\Users\Judith\Downloads\Setup (1).exe
2013-07-16 14:35 - 2013-07-16 14:35 - 00895488 _____ M:\Dokumente\Visitenkarten.doc
2013-07-16 12:14 - 2008-12-13 12:30 - 00002637 _____ C:\Users\Judith\Desktop\Microsoft Office Word 2003.lnk
2013-07-14 20:33 - 2012-01-20 19:03 - 00000000 ____D M:\Dokumente\Handys N97 Galaxy Ace
2013-07-13 04:07 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-13 03:51 - 2006-11-02 14:47 - 00532888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 03:48 - 2008-12-13 12:40 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 03:47 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-13 03:25 - 2013-07-13 03:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2845142_WM64$
2013-07-13 03:02 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 09:31 - 2008-12-13 12:53 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Mozilla
2013-07-10 21:53 - 2013-07-10 21:53 - 00024064 _____ M:\Dokumente\Windows Phone Store.doc
2013-07-10 21:51 - 2013-07-10 21:51 - 00000840 _____ C:\Users\Judith\Desktop\Wuala.lnk
2013-07-10 21:48 - 2013-07-10 21:48 - 00000992 _____ C:\Users\Judith\Desktop\Dropbox.lnk
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala OverlayIcons
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Wuala CBFS
2013-07-10 21:47 - 2013-07-10 21:47 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-10 21:45 - 2013-07-10 21:47 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-10 21:45 - 2013-07-10 21:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-10 21:45 - 2012-06-30 12:00 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-07-10 21:45 - 2011-12-22 15:59 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-07-10 21:44 - 2013-07-10 21:44 - 00000000 ____D C:\Program Files\Dropbox
2013-07-10 21:43 - 2013-07-10 21:43 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-07-10 21:42 - 2013-07-10 21:33 - 00000828 _____ C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-10 21:40 - 2013-07-10 21:39 - 33578320 _____ (Dropbox, Inc.) C:\Users\Judith\Downloads\Dropbox 2.2.8.exe
2013-07-10 21:40 - 2010-02-17 17:02 - 00039424 _____ M:\Dokumente\mailaccounts community Free sms accounts.doc
2013-07-10 21:38 - 2013-07-10 21:38 - 00000594 _____ C:\Users\Judith\Desktop\Mein SugarSync.lnk
2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ____D M:\Dokumente\Mein SugarSync
2013-07-10 21:38 - 2013-07-10 21:36 - 00000000 ____D C:\Users\Judith\AppData\Local\SugarSync
2013-07-10 21:35 - 2013-07-10 21:35 - 00001692 _____ C:\Users\Public\Desktop\SugarSync.lnk
2013-07-10 21:35 - 2013-07-10 21:32 - 00000000 ____D C:\Program Files\SugarSync
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Wuala
2013-07-10 21:33 - 2013-07-10 21:33 - 00000000 ____D C:\Users\Judith\AppData\Local\Wuala
2013-07-10 21:29 - 2013-07-10 21:29 - 22964952 _____ C:\Users\Judith\Downloads\WualaSetup_04_13.exe
2013-07-10 21:28 - 2013-07-10 21:27 - 20911672 _____ (SugarSync, Inc.) C:\Users\Judith\Downloads\SugarSyncSetup_2.0.27.exe
2013-07-07 21:25 - 2013-07-07 21:25 - 00000000 ____D C:\Users\Judith\AppData\Roaming\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00001853 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 21:21 - 2013-07-07 21:21 - 00000000 ____D C:\Program Files\Avira
2013-07-07 21:06 - 2013-07-07 21:04 - 104943936 _____ C:\Users\Judith\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 17:47 - 2012-08-30 13:55 - 00000000 ____D C:\Users\Judith\AppData\Roaming\vlc
2013-07-06 15:41 - 2010-01-15 17:53 - 00000000 ____D C:\Users\Judith\AppData\Roaming\dvdcss
2013-07-01 19:15 - 2008-12-13 16:17 - 00000000 ____D M:\Dokumente\Allerlei
2013-07-01 18:46 - 2012-04-27 17:53 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-01 18:20 - 2013-07-01 18:20 - 00005384 _____ C:\Users\Judith\Downloads\Mundharmonika+Noten.htm (7).html
2013-06-28 15:16 - 2008-12-13 18:22 - 00074752 _____ C:\Users\Judith\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-28 11:52 - 2013-06-28 11:52 - 00000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-06-28 11:51 - 2013-06-28 11:50 - 22937227 _____ C:\Users\Judith\Downloads\vlc-2.0.7-win32.exe
2013-06-27 14:47 - 2013-04-01 16:03 - 00000000 ____D M:\Dokumente\Flug USA Herbst 2013
2013-06-27 07:14 - 2013-07-16 23:15 - 00031816 _____ C:\Windows\Launcher.exe
2013-06-24 18:23 - 2011-03-28 18:58 - 00000000 ____D C:\Users\Judith\AppData\Roaming\DVDVideoSoft
2013-06-24 18:21 - 2013-06-24 18:21 - 00024064 _____ M:\Dokumente\Schreib-ab homepage.doc
2013-06-24 17:53 - 2013-06-24 17:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 17:26 - 2008-12-13 13:43 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-06-24 17:25 - 2013-06-24 17:25 - 00001038 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-24 17:14 - 2012-10-13 13:42 - 70431848 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Judith\Downloads\FreeStudio.exe
2013-06-24 12:30 - 2010-08-09 12:10 - 00000000 ____D C:\Users\Judith\.gimp-2.6
2013-06-24 12:29 - 2013-06-24 12:29 - 00017196 _____ C:\Users\Judith\.recently-used.xbel
2013-06-24 00:37 - 2006-11-02 12:24 - 75733144 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-06-21 17:38 - 2009-11-29 19:37 - 00000000 ____D M:\Dokumente\Steuerfälle
2013-06-20 14:48 - 2013-07-07 21:21 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2010-03-20 12:10 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-20 11:10

==================== End Of Log ============================
--- --- ---

--- --- ---


Alle Zeitangaben in WEZ +1. Es ist jetzt 21:34 Uhr.
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19