Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   AddOn 'RemoveTheAdApp' auf Chrome lässt sich nicht Löschen (https://www.trojaner-board.de/153334-addon-removetheadapp-chrome-laesst-loeschen.html)

Chrisi0104 02.05.2014 09:09
AddOn 'RemoveTheAdApp' auf Chrome lässt sich nicht Löschen
 
Hallo,
ich habe seit geraumer Zeit das Problem, dass sich diese 'RemoveTheAdApp' Erweiterung nicht mehr von meinem Laptop löschen lässt. Ständig springen irgendwelche Werbungsfenster auf, echt nervig. Bei den Erweiterungen selbst steht, dass sie durch 'Unternehmensrichtlinien installiert' sei.

Ich würde mich wahnsinnig über eure Hilfe freuen,
LG Chrisi0104

Bootsektor 02.05.2014 10:53
:hallo:

Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
  • Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
  • Bitte kein Crossposting ( posten in mehreren Foren).
  • Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
  • Poste die Logfiles direkt in deinen Thread in Code-Tags.
  • Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und bei einem Befall durch Malware immer der sicherste Weg. Adware lässt sich in den allermeisten Fällen problemlos entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Posten in Code Tags
Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke.
Dazu:
  • Klicke über dem Antwortfenster auf die Raute #, dann steht dort in eckigen Klammern [] CODE /CODE.
  • Zwischen den beiden code-Bausteinen fügst Du dann deine Logfiles ein. Also CODE Logfile /CODE
  • Wenn die Logs zu lang sein sollten, dann teile sie bitte auf und poste sie dann hier in Deinem Thread, notfalls in mehreren Antworten.

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Chrisi0104 02.05.2014 10:58
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by Chrisi (administrator) on CHRISIS-PC on 02-05-2014 10:14:19
Running from C:\Users\Chrisi\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe
(Uniblue Systems Ltd) C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(ASUS) C:\Windows\AsScrPro.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(CyberLink) C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
() C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(PC Drivers Headquarters) C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACESWD.EXE
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
() C:\Program Files (x86)\AVG Secure Search\vprot.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(asus) C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
(Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [CNAP3 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [228520 2012-06-14] (CANON INC.)
HKLM\...\Run: [ASUS WebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Boingo Wi-Fi] => C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-11] ()
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-04] (ASUS)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Secure Search\vprot.exe [2557976 2014-04-28] ()
HKU\.DEFAULT\...\RunOnce: [Del847210838] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del"
HKU\.DEFAULT\...\RunOnce: [Del1020404068] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del"
HKU\.DEFAULT\...\RunOnce: [Del1285189931] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del"
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [GoogleChromeAutoLaunch_6D9C14969CF754B6DCD021D8861E9586] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632 2014-02-02] (Google Inc.)
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [Driver Whiz] => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [3976560 2013-09-19] (PC Drivers Headquarters)
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59240 2012-02-23] (Apple Inc.)
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\RunOnce: [Application Restart #3] - C:\Users\Chrisi\AppData\Local\Pokki\Engine\pokki.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Chrisi\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\MountPoints2: G - G:\MMMTest.EXE
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355552 2014-04-08] (Conduit)
AppInit_DLLs:  C:\PROGRA~3\NETWOR~1\NETWOR~2.DLL => C:\ProgramData\Network Acceleration\NetworkAcceleration_x64.dll [4358656 2014-02-03] ()
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050912 2014-04-08] (Conduit)
AppInit_DLLs-x32:  c:\progra~3\networ~1\networ~1.dll => C:\ProgramData\Network Acceleration\NetworkAcceleration.dll [4116480 2014-02-03] ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=dfda36b3-7fc5-4fd6-a277-771a581e08cb&searchtype=ds&q={searchTerms}&installDate=25/04/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.qone8.com/?type=hp&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=dfda36b3-7fc5-4fd6-a277-771a581e08cb&searchtype=ds&q={searchTerms}&installDate=25/04/2013
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.searchgol.com/?affID=121562&tt=gc_&babsrc=HP_ss_Btisdt7&mntrId=40294E5D60632631
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=MSE&Tid=000314D3&OHP=http%3A%2F%2Fsearch.conduit.com%2F%3Fctid%3DCT3319434%26octid%3DEB%5FORIGINAL%5FCTID%26SearchSource%3D55%26CUI%3D%26UM%3D2%26UP%3DSP1183616C%2D3615%2D4502%2DBFC7%2D122F9CE89029%26SSPV%3D&OSP=http%3A%2F%2Fsearch.conduit.com%2FResults.aspx%3Fctid%3DCT3319434%26octid%3DEB%5FORIGINAL%5FCTID%26SearchSource%3D58%26CUI%3D%26UM%3D2%26UP%3DSP1183616C%2D3615%2D4502%2DBFC7%2D122F9CE89029%26q%3D%7BsearchTerms%7D%26SSPV%3D
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.qone8.com/?type=hp&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.gboxapp.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.qone8.com/?type=hp&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.gboxapp.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://start.qone8.com/?type=sc&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA
SearchScopes: HKLM - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.qone8.com/web/?type=ds&ts=1381948425&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA&q={searchTerms}
SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=dfda36b3-7fc5-4fd6-a277-771a581e08cb&searchtype=ds&q={searchTerms}&installDate=25/04/2013
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.qone8.com/web/?type=ds&ts=1381948425&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA&q={searchTerms}
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKLM-x32 - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.pur-esult.info/?l=1&q={searchTerms}&pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10039&barid={8372C22A-B61F-11E2-B4A5-20CF30D3113A}
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&q={searchTerms}&SSPV=
SearchScopes: HKCU - URL hxxp://www.searchgol.com/?q={searchTerms}&affID=121562&tt=gc_&babsrc=SP_ss_Btisdt7&mntrId=40294E5D60632631
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&q={searchTerms}&SSPV=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.pur-esult.info/?l=1&q={searchTerms}&pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&loc=skw&search={searchTerms}
BHO: SuruF anod Keep - {117F0D8D-4250-3DF8-37F0-E5120DC138B5} - C:\Program Files (x86)\SuruF anod Keep\f3EpFOPD.x64.dll ()
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Surf  anD  keeep - {5FCA52F6-7842-BC50-D29E-CCFE7549E48A} - C:\Program Files (x86)\Surf  anD  keeep\DNO8QHTu_U.x64.dll ()
BHO: surf and akeep - {62101AA5-681D-8123-349F-C230A41CD2A1} - C:\Program Files (x86)\surf and akeep\5WXF.x64.dll ()
BHO: SSearchh-NewTab - {90987232-7C83-B008-3486-FA7AE9307E95} - C:\Program Files (x86)\SSearchh-NewTab\e.x64.dll ()
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: SeAirch-NewaTaB - {BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39} - C:\Program Files (x86)\SeAirch-NewaTaB\1.x64.dll ()
BHO: SSearrch-NewTab - {EE572254-BA25-42BF-DE0F-DB01553CE121} - C:\Program Files (x86)\SSearrch-NewTab\RUdUY_Pt.x64.dll ()
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO: CeheapMee - {FEE29BFB-6C53-D842-0E75-ACB9B660DBC6} - C:\ProgramData\CeheapMee\YJC3N8RbIH.x64.dll ()
BHO-x32: SuruF anod Keep - {117F0D8D-4250-3DF8-37F0-E5120DC138B5} - C:\Program Files (x86)\SuruF anod Keep\f3EpFOPD.dll ()
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Surf  anD  keeep - {5FCA52F6-7842-BC50-D29E-CCFE7549E48A} - C:\Program Files (x86)\Surf  anD  keeep\DNO8QHTu_U.dll ()
BHO-x32: surf and akeep - {62101AA5-681D-8123-349F-C230A41CD2A1} - C:\Program Files (x86)\surf and akeep\5WXF.dll ()
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: SSearchh-NewTab - {90987232-7C83-B008-3486-FA7AE9307E95} - C:\Program Files (x86)\SSearchh-NewTab\e.dll ()
BHO-x32: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: SeAirch-NewaTaB - {BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39} - C:\Program Files (x86)\SeAirch-NewaTaB\1.dll ()
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: SSearrch-NewTab - {EE572254-BA25-42BF-DE0F-DB01553CE121} - C:\Program Files (x86)\SSearrch-NewTab\RUdUY_Pt.dll ()
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO-x32: CeheapMee - {FEE29BFB-6C53-D842-0E75-ACB9B660DBC6} - C:\ProgramData\CeheapMee\YJC3N8RbIH.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {1ACC87D6-CB2B-4CAF-9280-6549842407C9} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll (AVG Secure Search)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 213.33.99.70 80.120.17.70

FireFox:
========
FF ProfilePath: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default
FF user.js: detected! => C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\user.js
FF NetworkProxy: "type", 0
FF Homepage: hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&i=26&loc=skw
FF SelectedSearchEngine: MyStart Search
FF NewTab: hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&i=26&loc=skw
FF DefaultSearchEngine: MyStart Search
FF Keyword.URL: hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&i=26&loc=skw&search=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\\npsitesafety.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Chrisi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeploytk.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npnul32.dll (mozilla.org)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\ividi.xml
FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\SweetIM Search.xml
FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\WebSearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\qone8.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Plasmoo Search Engine - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\engine@plasmoo.com [2011-04-27]
FF Extension: Babylon - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\ffxtlbr@babylon.com [2012-01-16]
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\staged [2012-09-29]
FF Extension: DVDVideoSoftTB Toolbar - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2011-01-20]
FF Extension: Playboost Gamebar - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{A79D8B60-1FF0-47F0-8E79-8CDE1FECB0FD} [2011-05-22]
FF Extension: Free YouTube Download (Free Studio) Menu - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2013-06-03]
FF Extension: DealPly - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2012-01-16]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} [2013-11-08]
FF HKLM-x32\...\Firefox\Extensions: [OKitSpace@OKitSpace.es] - C:\Windows\system32\config\systemprofile\AppData\Roaming\okitSpace\Firefox
FF HKLM-x32\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://start.qone8.com/?type=sc&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA

Chrome:
=======
CHR HomePage: hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT
CHR StartupUrls: "hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&SSPV=", "hxxp://search.gboxapp.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll (AVG Technologies)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Unity Player) - C:\Users\Chrisi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Extension: (Extended Protection) - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml [2013-10-16]
CHR Extension: (RemoveTheAdApp) - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjfpnamnoijjcejdohcdjkbbkjcfpind [2014-02-13]
CHR Extension: (Google Wallet) - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
CHR HKCU\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [2011-12-19]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-05-28]
CHR HKLM-x32\...\Chrome\Extension: [cekcjpgehmohobmdiikfnopibipmgnml] - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ [2013-05-28]
CHR HKLM-x32\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [2011-12-19]
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-10-16]
CHR HKLM-x32\...\Chrome\Extension: [lbidgdoiglndbjlcnnifemecdhnpeabo] - C:\Users\Chrisi\AppData\Roaming\okitSpace\Chrome\OKitSpace.crx [2013-10-16]
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\18.1.0.443\avg.crx [2014-04-28]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 2384af53; C:\ProgramData\Network Acceleration\NetworkAccelerationSvc.dll [179536 2014-02-03] ()
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2470688 2014-04-08] (Conduit)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software)
R2 vToolbarUpdater18.1.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [1801240 2014-04-28] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-04-28] (AVG Technologies)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-07] ()
S3 usbio; C:\Windows\System32\Drivers\dsiarhwprog_x64.sys [51600 2007-02-08] (Thesycon GmbH, Germany)
S1 gkduysrp; \??\C:\Windows\system32\drivers\gkduysrp.sys [X]
U3 tmlwf;
U3 tmwfp;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-02 10:13 - 2014-05-02 10:14 - 00046225 _____ () C:\Users\Chrisi\Desktop\Addition.txt
2014-05-02 10:12 - 2014-05-02 10:14 - 00037982 _____ () C:\Users\Chrisi\Desktop\FRST.txt
2014-05-02 10:12 - 2014-05-02 10:14 - 00000000 ____D () C:\FRST
2014-05-02 10:11 - 2014-05-02 10:11 - 02062336 _____ (Farbar) C:\Users\Chrisi\Desktop\FRST64.exe
2014-04-30 06:34 - 2014-04-30 06:34 - 00276128 _____ () C:\Windows\Minidump\043014-76159-01.dmp
2014-04-29 07:50 - 2014-04-29 11:34 - 22004221 _____ () C:\Users\Chrisi\Documents\Böden in der Tierhaltuhng.pptx
2014-04-28 17:44 - 2014-04-28 17:44 - 00276128 _____ () C:\Windows\Minidump\042814-43789-01.dmp
2014-04-28 16:41 - 2014-04-28 16:41 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-23 09:24 - 2014-04-23 09:24 - 00000000 ____D () C:\ProgramData\CeheapMee
2014-04-22 21:48 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-22 21:48 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-22 21:48 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 21:48 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-22 21:48 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 21:48 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 21:48 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 21:48 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 21:48 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 21:48 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 21:48 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-22 21:48 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 21:48 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 21:48 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 21:48 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 21:48 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 21:48 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 21:48 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 21:48 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 21:48 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 21:48 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 21:48 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 21:48 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 21:48 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 21:48 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 21:48 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 21:48 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 21:48 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 21:48 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 21:48 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 21:48 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 21:48 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 21:48 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 21:48 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 21:48 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 21:48 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 21:48 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 21:48 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 21:48 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 21:48 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 21:48 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 21:48 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 21:48 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 21:48 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 21:48 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 21:48 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 21:48 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 21:48 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-22 20:04 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-22 20:04 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-22 20:04 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-22 20:04 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-22 20:04 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-22 20:04 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-22 20:04 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-22 20:04 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-22 20:04 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-22 20:04 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-22 20:04 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-22 20:04 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-22 19:40 - 2014-04-22 19:40 - 00000000 ____D () C:\Program Files (x86)\RemoveTheAdApp
2014-04-05 15:35 - 2014-04-05 15:35 - 00276072 _____ () C:\Windows\Minidump\040514-189962-01.dmp
2014-04-05 13:13 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-04-05 13:13 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-04-05 13:13 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-04-05 13:13 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-04-05 13:11 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-04-05 13:11 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-04-05 13:10 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-05 13:10 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

==================== One Month Modified Files and Folders =======

2014-05-02 10:14 - 2014-05-02 10:13 - 00046225 _____ () C:\Users\Chrisi\Desktop\Addition.txt
2014-05-02 10:14 - 2014-05-02 10:12 - 00037982 _____ () C:\Users\Chrisi\Desktop\FRST.txt
2014-05-02 10:14 - 2014-05-02 10:12 - 00000000 ____D () C:\FRST
2014-05-02 10:11 - 2014-05-02 10:11 - 02062336 _____ (Farbar) C:\Users\Chrisi\Desktop\FRST64.exe
2014-05-02 09:50 - 2013-05-13 11:25 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392.job
2014-05-02 09:31 - 2010-11-11 05:41 - 01773528 _____ () C:\Windows\WindowsUpdate.log
2014-05-02 09:21 - 2012-06-11 22:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-02 09:19 - 2012-01-16 20:48 - 00000000 ____D () C:\Program Files (x86)\DealPly
2014-05-02 09:18 - 2010-11-11 06:10 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-30 06:58 - 2009-08-04 11:51 - 00704972 _____ () C:\Windows\system32\perfh007.dat
2014-04-30 06:58 - 2009-08-04 11:51 - 00152520 _____ () C:\Windows\system32\perfc007.dat
2014-04-30 06:58 - 2009-07-14 07:13 - 01635912 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-30 06:44 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-30 06:44 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-30 06:38 - 2013-05-01 17:14 - 00003120 _____ () C:\Windows\System32\Tasks\Advanced System Protector_startup
2014-04-30 06:35 - 2013-06-03 09:33 - 00000342 _____ () C:\Windows\Tasks\dsmonitor.job
2014-04-30 06:35 - 2010-11-11 06:40 - 00000000 ____D () C:\Program Files\P4G
2014-04-30 06:34 - 2014-04-30 06:34 - 00276128 _____ () C:\Windows\Minidump\043014-76159-01.dmp
2014-04-30 06:34 - 2011-08-28 15:44 - 00000000 ____D () C:\Windows\Minidump
2014-04-30 06:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-30 06:34 - 2009-07-14 06:51 - 00081128 _____ () C:\Windows\setupact.log
2014-04-29 18:21 - 2012-06-11 22:42 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 18:21 - 2012-06-11 22:42 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 18:21 - 2011-06-25 17:49 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 11:46 - 2013-06-28 06:33 - 00000000 ____D () C:\Users\Chrisi\AppData\Local\AVG Secure Search
2014-04-29 11:34 - 2014-04-29 07:50 - 22004221 _____ () C:\Users\Chrisi\Documents\Böden in der Tierhaltuhng.pptx
2014-04-28 20:26 - 2010-11-11 06:42 - 00001615 _____ () C:\Windows\system32\ServiceFilter.ini
2014-04-28 17:44 - 2014-04-28 17:44 - 00276128 _____ () C:\Windows\Minidump\042814-43789-01.dmp
2014-04-28 16:41 - 2014-04-28 16:41 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-28 16:40 - 2013-06-28 06:33 - 00050464 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-04-28 16:40 - 2013-06-28 06:33 - 00000000 ____D () C:\Program Files (x86)\AVG Secure Search
2014-04-25 22:14 - 2011-05-03 15:16 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-04-25 14:24 - 2013-03-21 19:21 - 00000000 ____D () C:\Windows\rescache
2014-04-23 12:39 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-23 09:24 - 2014-04-23 09:24 - 00000000 ____D () C:\ProgramData\CeheapMee
2014-04-23 09:24 - 2013-11-21 11:22 - 00000000 ____D () C:\ProgramData\2f628f5734a24aae
2014-04-23 09:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 21:50 - 2010-12-25 11:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-22 21:47 - 2013-08-15 23:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-22 21:43 - 2011-08-07 17:24 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-22 20:18 - 2013-11-21 11:55 - 00000000 ____D () C:\ProgramData\SearCH-NewTaB
2014-04-22 20:18 - 2013-11-21 11:54 - 00000000 ____D () C:\ProgramData\sUrf  and Keeapp
2014-04-22 20:18 - 2013-11-21 11:22 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-04-22 20:18 - 2010-11-11 06:28 - 00283492 _____ () C:\Windows\PFRO.log
2014-04-22 20:07 - 2010-11-11 06:43 - 00000000 ____D () C:\Windows\SysWOW64\K_Series_ScreenSaver_EN dir
2014-04-22 20:01 - 2013-11-21 11:55 - 00000000 ____D () C:\Program Files (x86)\SearCH-NewTaB
2014-04-22 20:01 - 2013-11-21 11:54 - 00000000 ____D () C:\Program Files (x86)\sUrf  and Keeapp
2014-04-22 20:00 - 2013-11-21 11:22 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-04-22 19:58 - 2013-11-08 20:59 - 00000000 ____D () C:\Users\Chrisi\AppData\Roaming\BitTorrent
2014-04-22 19:58 - 2013-11-08 20:29 - 00000000 ____D () C:\Program Files (x86)\LimeWire
2014-04-22 19:56 - 2013-11-09 19:29 - 00000000 ____D () C:\ProgramData\eMule
2014-04-22 19:40 - 2014-04-22 19:40 - 00000000 ____D () C:\Program Files (x86)\RemoveTheAdApp
2014-04-22 19:40 - 2014-02-13 10:10 - 00000000 ____D () C:\ProgramData\RemoveTheAdApp
2014-04-22 19:39 - 2014-01-17 15:32 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-04-08 19:42 - 2009-07-14 06:45 - 00513160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-08 19:13 - 2010-12-25 09:17 - 01610192 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-08 19:11 - 2013-11-08 20:28 - 00000000 ____D () C:\Users\Chrisi\AppData\Roaming\okitspace
2014-04-08 19:10 - 2010-12-25 12:01 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-08 19:09 - 2010-12-25 11:57 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-08 19:08 - 2010-12-25 11:57 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-08 19:08 - 2010-12-25 11:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-06 12:24 - 2011-01-07 15:02 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-04-06 12:24 - 2011-01-07 15:02 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-04-05 15:35 - 2014-04-05 15:35 - 00276072 _____ () C:\Windows\Minidump\040514-189962-01.dmp
2014-04-05 15:32 - 2013-03-15 15:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-05 15:32 - 2010-12-24 18:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-04-05 15:25 - 2010-12-25 19:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

Files to move or delete:
====================
C:\Users\Chrisi\wlsetup-web.exe


Some content of TEMP:
====================
C:\Users\Chrisi\AppData\Local\Temp\32393-671455-limewire.exe
C:\Users\Chrisi\AppData\Local\Temp\a2zLyrics_1060-8102_v122.exe
C:\Users\Chrisi\AppData\Local\Temp\Ainstde.exe
C:\Users\Chrisi\AppData\Local\Temp\AMPing.exe
C:\Users\Chrisi\AppData\Local\Temp\AskSLib.dll
C:\Users\Chrisi\AppData\Local\Temp\atl80.dll
C:\Users\Chrisi\AppData\Local\Temp\AutoRun.exe
C:\Users\Chrisi\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Chrisi\AppData\Local\Temp\biclient.exe
C:\Users\Chrisi\AppData\Local\Temp\bitool.dll
C:\Users\Chrisi\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Chrisi\AppData\Local\Temp\bundlesweetimsetup.exe
C:\Users\Chrisi\AppData\Local\Temp\drm_dyndata_7380011.dll
C:\Users\Chrisi\AppData\Local\Temp\EAD415.exe
C:\Users\Chrisi\AppData\Local\Temp\EAD4F58.exe
C:\Users\Chrisi\AppData\Local\Temp\EAD86B0.exe
C:\Users\Chrisi\AppData\Local\Temp\EADC86C.exe
C:\Users\Chrisi\AppData\Local\Temp\eauninstall.exe
C:\Users\Chrisi\AppData\Local\Temp\EBUD76A.EXE
C:\Users\Chrisi\AppData\Local\Temp\EBUD9AB.DLL
C:\Users\Chrisi\AppData\Local\Temp\First15.exe
C:\Users\Chrisi\AppData\Local\Temp\GenericUninstall.exe
C:\Users\Chrisi\AppData\Local\Temp\installerdll.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll88319950.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll88421319.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll89448773.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll89449740.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll89474092.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll89500846.dll
C:\Users\Chrisi\AppData\Local\Temp\InstallManager_BAB_BAB.exe
C:\Users\Chrisi\AppData\Local\Temp\instloffer.exe
C:\Users\Chrisi\AppData\Local\Temp\mfc80.dll
C:\Users\Chrisi\AppData\Local\Temp\mfc80u.dll
C:\Users\Chrisi\AppData\Local\Temp\mfcm80.dll
C:\Users\Chrisi\AppData\Local\Temp\mfcm80u.dll
C:\Users\Chrisi\AppData\Local\Temp\mgsqlite3.dll
C:\Users\Chrisi\AppData\Local\Temp\msvcm80.dll
C:\Users\Chrisi\AppData\Local\Temp\msvcp80.dll
C:\Users\Chrisi\AppData\Local\Temp\msvcr80.dll
C:\Users\Chrisi\AppData\Local\Temp\NEW71C5.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\nseB2E3.exe
C:\Users\Chrisi\AppData\Local\Temp\nsfB68D.exe
C:\Users\Chrisi\AppData\Local\Temp\nsp71EC.exe
C:\Users\Chrisi\AppData\Local\Temp\nsp75E3.exe
C:\Users\Chrisi\AppData\Local\Temp\nspBB10.exe
C:\Users\Chrisi\AppData\Local\Temp\nsu6DC6.exe
C:\Users\Chrisi\AppData\Local\Temp\oct725D.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\oct74AB.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\oct8BA3.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\octED0F.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\oi_{FFAEBA27-728F-4A9A-BF0F-4C86497B234F}.exe
C:\Users\Chrisi\AppData\Local\Temp\rootsupd.exe
C:\Users\Chrisi\AppData\Local\Temp\scrubber.exe
C:\Users\Chrisi\AppData\Local\Temp\Setup.exe
C:\Users\Chrisi\AppData\Local\Temp\setup_fsu_cid.exe
C:\Users\Chrisi\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Chrisi\AppData\Local\Temp\smt_ar_dosearches.exe
C:\Users\Chrisi\AppData\Local\Temp\SPSetup.exe
C:\Users\Chrisi\AppData\Local\Temp\The Sims 2_uninst.exe
C:\Users\Chrisi\AppData\Local\Temp\TmDbg32.dll
C:\Users\Chrisi\AppData\Local\Temp\TmDbg64.dll
C:\Users\Chrisi\AppData\Local\Temp\uninst1.exe
C:\Users\Chrisi\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Chrisi\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Chrisi\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Chrisi\AppData\Local\Temp\VP6Install.exe
C:\Users\Chrisi\AppData\Local\Temp\VP6VFW.dll
C:\Users\Chrisi\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe
C:\Users\Chrisi\AppData\Local\Temp\WSSetup.exe
C:\Users\Chrisi\AppData\Local\Temp\ytd_bu10_setup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 12:38

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2014
Ran by Chrisi at 2014-05-02 10:13:21
Running from C:\Users\Chrisi\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 15.2.1 - Hewlett-Packard) Hidden
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Action Replay Code Manager (HKLM-x32\...\Action Replay Code Manager_is1) (Version:  - )
Action Replay DSi Code Manager (HKLM-x32\...\Action Replay DSi Code Manager_is1) (Version:  - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Advanced System Protector (HKLM-x32\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.10568 - Systweak Software) <==== ATTENTION
AI TouchMedia (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.3512 - CyberLink Corp.)
AI TouchMedia (x32 Version: 6.0.3512 - CyberLink Corp.) Hidden
Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version:  - Oberon Media)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft PhotoStudio 5.5 (HKLM-x32\...\{85309D89-7BE9-4094-BB17-24999C6118FC}) (Version:  - ArcSoft)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.10 - ASUS)
ASUS AP Bank (HKLM-x32\...\ASUS AP Bank_is1) (Version: 1.0.0.0 - ASUSTEK)
ASUS Data Security Manager (HKLM-x32\...\{FA2092C5-7979-412D-A962-6485274AE1EE}) (Version: 1.00.0014 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS)
ASUS MultiFrame (HKLM-x32\...\{9D48531D-2135-49FC-BC29-ACCDA5396A76}) (Version: 1.0.0021 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.40 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0008 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS)
ASUS Video Magic (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.4015 - CyberLink Corp.)
ASUS Video Magic (x32 Version: 6.0.4015 - CyberLink Corp.) Hidden
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus)
ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.)
ATI AVIVO64 Codecs (Version: 11.6.0.50811 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{FDB61EAE-7C1D-7EB6-E1EE-14528E3EB266}) (Version: 3.0.790.0 - ATI Technologies, Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0006 - ASUS)
AVG Security Toolbar (HKLM-x32\...\AVG Secure Search) (Version: 18.1.0.443 - AVG Technologies)
Boingo Wi-Fi (HKLM-x32\...\{B653A2EC-D816-4498-A4FD-651047AB9DC9}) (Version: 1.7.0048 - Boingo Wireless, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Inkjet Printer Driver Add-On Module (HKLM\...\CANONIJINBOXADDON100) (Version:  - )
Canon MP150 (HKLM\...\{CA9A3609-3ECC-4574-8824-A8161A71A603}) (Version:  - )
Canon MP450 (HKLM\...\{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD}) (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0811.2122.36462 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help English (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help French (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help German (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
ccc-utility64 (Version: 2010.0811.2122.36462 - ATI) Hidden
CeheapMee (HKLM-x32\...\{F6C44C71-2CFE-8176-3A4D-CBD0DCE5AEFA}) (Version:  - CheapMe)
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version:  - Oberon Media)
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.127.0.61 - Conexant)
ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.8 - ASUS)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink MediaShow Espresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 5.0.1606_25588 - CyberLink Corp.)
CyberLink MediaShow Espresso (x32 Version: 5.0.1606_25588 - CyberLink Corp.) Hidden
CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
CyberLink PhotoNow (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2609a - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 8.0.2609a - CyberLink Corp.) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3009.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3009.50 - CyberLink Corp.) Hidden
DealPly (HKCU\...\DealPly) (Version:  - ) <==== ATTENTION
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version:  - Microsoft)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.50.56 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Dream Day Wedding Married in Manhattan (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115233673}) (Version:  - Oberon Media)
Driver Whiz (HKLM-x32\...\{0B540DA4-41AE-4B79-BEAB-0F07E09669AB}) (Version: 8.1 - Driver Whiz)
DriverScanner (HKLM-x32\...\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1) (Version: 4.0.10.0 - Uniblue Systems Ltd)
EasyBits GO (HKCU\...\Game Organizer) (Version:  - EasyBits Media)
ETDWare PS/2-x64 7.0.5.11_WHQL (HKLM\...\Elantech) (Version: 7.0.5.11 - ELAN Microelectronics Corp.)
EZDownloader (HKLM-x32\...\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - EZDownloader)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.6 - ASUS)
FoxTab FLV Player (HKCU\...\FoxTab FLV Player) (Version:  - ) <==== ATTENTION
Free Audio CD Burner version 2.0.23.430 (HKLM-x32\...\Free Audio CD Burner_is1) (Version: 2.0.23.430 - DVDVideoSoft Ltd.)
Free Studio version 5.1.4 (HKLM-x32\...\Free Studio_is1) (Version:  - DVDVideoSoft Limited.)
Free Video to iPod Converter version 4.2.20.602 (HKLM-x32\...\Free Video to iPod Converter_is1) (Version:  - DVDVideoSoft Limited.)
Free YouTube to iPhone Converter version 2.12.2.430 (HKLM-x32\...\Free YouTube to iPhone Converter_is1) (Version: 2.12.2.430 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Game Park Console (HKLM-x32\...\{C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1) (Version: 6.2.0.2 - Oberon Media, Inc.)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 32.0.1700.107 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version:  - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
iCloud (HKLM\...\{8B485965-8EFE-464A-842F-CF8F18C3DFD7}) (Version: 1.1.0.40 - Apple Inc.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel)
iTunes (HKLM\...\{A535111D-95C8-487F-869E-CE4C239972D2}) (Version: 11.1.1.11 - Apple Inc.)
Java Auto Updater (x32 Version: 2.0.1.2 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 18 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216018FF}) (Version: 6.0.180 - Sun Microsystems, Inc.)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.17.1 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version:  - )
Microsoft Age of Empires Expansion (HKLM-x32\...\Age of Empires Expansion 1.0) (Version:  - )
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft IntelliPoint 8.0 (HKLM\...\{563F041C-DFDB-437B-A1E8-E141E0906076}) (Version: 8.0.225.0 - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.)
Mozilla Firefox (3.6.25) (HKLM-x32\...\Mozilla Firefox (3.6.25)) (Version: 3.6.25 (de) - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Nero Burning ROM (x32 Version: 12.5.5001 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero BurningROM 12 (HKLM-x32\...\{4AC7B4F3-1B75-4BA7-82C4-F9A22B430A3D}) (Version: 12.5.00900 - Nero AG)
Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20200 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Network Acceleration (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{2384af53}) (Version:  - PlanetCore) <==== ATTENTION
Origin (HKLM-x32\...\Origin) (Version: 8.2.6.475 - Electronic Arts, Inc.)
Photo Pos Pro (HKLM-x32\...\Photo Pos Pro) (Version: 1.82 - PowerOfSoftware Ltd.)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Piggly FREE (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-1173957}) (Version:  - Oberon Media)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung SPP-2040 Series (HKLM-x32\...\Samsung SPP-2040 Series) (Version:  - )
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.12.20.154 - Conduit) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Smileyville FREE (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117396510}) (Version:  - Oberon Media)
Spotify (HKCU\...\Spotify) (Version: 0.8.0.1035.g278cc85b - Spotify AB)
syncables desktop SE (HKLM-x32\...\{BBED4F90-7AE5-40BF-AFB7-1B495692F4AB}) (Version: 5.5.615.9518 - syncables)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.89 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities 2014) (Version: 14.0.1000.89 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.89 - TuneUp Software) Hidden
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
USB2.0 UVC VGA WebCam (HKLM\...\USB2.0 UVC VGA WebCam) (Version: 5.8.54000.207 - Sonix)
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Wildlife Park 2 - Diamant Edition v2.1 (HKLM-x32\...\Wildlife Park 2 - Diamant Edition_is1) (Version:  - Deep Silver)
Wildlife Park 2 Patch 2.00 (HKLM-x32\...\{804ED550-B39F-474D-AC6C-49C35511F14D}) (Version: 2.00 - Deep Silver)
Windows Live Anmelde-Assistent (HKLM-x32\...\{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}) (Version: 5.000.818.6 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 14.0.8052.1208 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8051.1204 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{8C1E2925-14F8-45AA-B999-1E2A74BF5607}) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.30.3 - ASUS)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.17 - ASUS)

==================== Restore Points  =========================

30-04-2014 04:46:30 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {07CFAB6D-AD2D-4F33-8CBA-2159C9D9EBA5} - System32\Tasks\dsmonitor => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe [2013-01-16] (Uniblue Systems Ltd)
Task: {17957954-02E4-4CD4-902A-593786D8E7EE} - System32\Tasks\DealPly => C:\Users\Chrisi\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-03-10] () <==== ATTENTION
Task: {1996944C-2B9D-4B4A-B0B2-EE2CFEDAF895} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: {20358F01-9835-42D6-A560-66CDBABA72B2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-11] (Google Inc.)
Task: {30100829-E315-434A-8DAF-F8A56D3C1BDF} - System32\Tasks\{D966A093-25AF-4F5C-B405-293CB50783B2} => C:\Program Files (x86)\Skype\\Phone\Skype.exe
Task: {3D78D475-DC4E-45E6-B6F7-F6BF9035CB0B} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-08-12] (ASUS)
Task: {3DFA37DD-EC98-4350-B3FF-3BA85E4239E7} - System32\Tasks\Driver Whiz-RTMScanRunOnce => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {448D442C-6479-459D-908E-1B061F6863FA} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS)
Task: {51833F6D-D31E-4A5E-BB8A-513600955B45} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-18] (ASUS)
Task: {51DD94A8-211B-49DD-8165-91E637C6950D} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [2010-06-09] (asus)
Task: {6106E81F-AD81-454F-8ACF-E9AA88B90149} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: {7CAE0B06-2142-43E2-845A-BDE11313A684} - System32\Tasks\Driver Whiz-RTMUpdater => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {80C0079A-4D5D-40B9-97BC-608B2DCF2E3A} - System32\Tasks\Driver Whiz-RTMScan => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {88B41851-B488-4123-90AB-D07E013E05F3} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-08-30] (TuneUp Software)
Task: {8B3427B0-CEB4-4F76-A148-63166870379C} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe [2011-12-19] (DealPly) <==== ATTENTION
Task: {A7141105-EF19-4843-A669-75F9D781477F} - System32\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-11] (Google Inc.)
Task: {B0052C91-18AF-4BC0-BBF8-5D4523F14E88} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {E0049FA9-9617-455F-81DC-D77FA8996288} - System32\Tasks\Driver Whiz-RTMRules => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {E4050643-0C31-48C4-A028-7F6B455F8ADE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {F77554FF-153A-430B-A868-4694F6D84EB0} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2013-02-04] (Systweak) <==== ATTENTION
Task: {F94A5F66-378C-4E12-B60A-965E7D8180B3} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\dsmonitor.job => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-02-14 17:03 - 2006-12-04 02:26 - 00022016 _____ () C:\Windows\System32\SPPB1l6.DLL
2014-02-03 20:58 - 2014-02-03 20:58 - 04358656 _____ () C:\ProgramData\Network Acceleration\NetworkAcceleration_x64.dll
2013-08-30 10:51 - 2013-08-30 10:51 - 00757048 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2014-04-28 16:41 - 2014-04-28 16:40 - 00159768 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe
2010-07-15 02:11 - 2010-07-15 02:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2010-11-11 06:43 - 2007-11-30 21:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
2008-10-01 09:02 - 2008-10-01 09:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2007-06-15 20:28 - 2007-06-15 20:28 - 00104960 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt64.dll
2007-06-02 02:52 - 2007-06-02 02:52 - 00159744 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
2010-03-16 03:48 - 2010-03-16 03:48 - 00148816 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\EcaremeDLL.dll
2010-11-11 06:20 - 2010-11-11 06:20 - 00030032 _____ () C:\Windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll
2010-11-11 06:20 - 2010-11-11 06:20 - 00931840 _____ () C:\Windows\assembly\GAC_64\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll
2010-03-16 03:48 - 2010-03-16 03:48 - 01754448 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
2013-09-19 10:00 - 2013-09-19 10:00 - 00684416 _____ () C:\Program Files (x86)\Driver Whiz\Driver Whiz\ThemePack.DriverWhiz.dll
2013-09-19 09:31 - 2013-09-19 09:31 - 00412064 _____ () C:\Program Files (x86)\Driver Whiz\Driver Whiz\Agent.Communication.XmlSerializers.dll
2010-11-11 05:53 - 2010-04-06 08:29 - 00244904 _____ () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2013-06-28 06:33 - 2014-04-28 16:40 - 02557976 _____ () C:\Program Files (x86)\AVG Secure Search\vprot.exe
2014-02-03 20:58 - 2014-02-03 20:58 - 04116480 _____ () C:\ProgramData\Network Acceleration\NetworkAcceleration.dll
2014-02-03 20:58 - 2014-02-03 20:58 - 00179536 _____ () C:\ProgramData\Network Acceleration\NetworkAccelerationSvc.dll
2014-04-28 16:41 - 2014-04-28 16:40 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\log4cplusU.dll
2013-02-07 10:02 - 2012-07-25 13:03 - 00886272 _____ () C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll
2013-02-07 10:02 - 2013-02-04 16:19 - 01730928 _____ () C:\Program Files (x86)\Advanced System Protector\aspsys.dll
2013-02-07 10:02 - 2012-07-25 13:03 - 00168448 _____ () C:\Program Files (x86)\Advanced System Protector\UNRAR.DLL
2009-11-12 21:01 - 2009-11-12 21:01 - 00873768 _____ () C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMediaLibrary.dll
2009-11-12 21:01 - 2009-11-12 21:01 - 00013096 _____ () C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvcPS.dll
2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-02-24 01:14 - 2010-02-24 01:14 - 00041472 _____ () C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll
2010-02-24 01:14 - 2010-02-24 01:14 - 00071680 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll
2010-02-24 01:11 - 2010-02-24 01:11 - 00076288 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll
2010-02-24 01:12 - 2010-02-24 01:12 - 00186880 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll
2010-02-24 01:14 - 2010-02-24 01:14 - 00050688 _____ () C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll
2007-06-15 20:28 - 2007-06-15 20:28 - 00147456 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
2007-06-02 03:08 - 2007-06-02 03:08 - 00143360 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
2014-02-08 18:53 - 2014-02-02 01:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-08 18:53 - 2014-02-02 01:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-08 18:53 - 2014-02-02 01:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-08 18:53 - 2014-02-02 01:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-08 18:53 - 2014-02-02 01:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
2014-02-08 18:53 - 2014-02-02 01:42 - 13616456 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:4CF61E54

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SRS Premium Sound.lnk => C:\Windows\pss\SRS Premium Sound.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Chrisi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk => C:\Windows\pss\LimeWire On Startup.lnk.Startup
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ADSMTray => C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
MSCONFIG\startupreg: Arabica => C:\Program Files (x86)\Arabica\Astart.exe
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe"
MSCONFIG\startupreg: ETDWare => %ProgramFiles%\Elantech\ETDCtrl.exe
MSCONFIG\startupreg: HPLJ Config => C:\Program Files (x86)\Hewlett-Packard\hp LaserJet 1150_1300\SetConfig.exe -c Direct -p USB -pn "" -n 0 -l  -sl 120000
MSCONFIG\startupreg: PCMAgent => "C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe"
MSCONFIG\startupreg: PlayMovie => "C:\Program Files (x86)\ASUS\AI TouchMedia\PlayMovie\PMVService.exe"
MSCONFIG\startupreg: Pokki => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RemoteControl9 => "C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe"
MSCONFIG\startupreg: SmartAudio => C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SweetIM => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
MSCONFIG\startupreg: UpdateLBPShortCut => "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
MSCONFIG\startupreg: UpdatePSTShortCut => "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
MSCONFIG\startupreg: Wireless Console 3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4134

Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4134

Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3042

Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3042

Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2013

Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2013

Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/30/2014 07:47:55 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 999


System errors:
=============
Error: (04/30/2014 06:34:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (04/30/2014 06:34:48 AM) (Source: BugCheck) (User: )
Description: 0x00000050 (0xfffff8a010425000, 0x0000000000000000, 0xfffff80002e6e664, 0x0000000000000000)C:\Windows\MEMORY.DMP043014-76159-01

Error: (04/30/2014 06:34:39 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Apple Mobile Device" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/30/2014 06:34:39 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device erreicht.

Error: (04/30/2014 06:34:06 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎30.‎04.‎2014 um 06:32:33 unerwartet heruntergefahren.

Error: (04/30/2014 06:31:40 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (04/29/2014 00:49:22 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (04/29/2014 07:45:31 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (04/29/2014 07:44:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (04/28/2014 06:25:25 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


Microsoft Office Sessions:
=========================
Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4134

Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4134

Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3042

Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3042

Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2013

Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2013

Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/30/2014 07:47:55 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 999


==================== Memory info ===========================

Percentage of memory in use: 60%
Total physical RAM: 4020.51 MB
Available physical RAM: 1603.45 MB
Total Pagefile: 8039.2 MB
Available Pagefile: 4883.37 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:7.94 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:329.79 GB) (Free:265.58 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0237A506)
Partition 1: (Not Active) - (Size=20 GB) - (Type=1C)
Partition 2: (Active) - (Size=116 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=330 GB) - (Type=OF Extended)

==================== End Of Log ============================
Hoffe ich hab das richtige gepostet, danke für die schnelle Antwort!

LG Chrisi0104

Bootsektor 02.05.2014 22:54
Hallo Chrisi0104,

danke dir :)

Schritt 1
Bitte deinstalliere folgende Programme (falls vorhanden) :

Advanced System Protector
DealPly
FoxTab FLV Player
EZDownloader
Java(TM) 6 Update 18
Network Acceleration
Search Protect


Dazu gehe auf:
den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Programm auswählen --> entfernen


Schritt 2
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt 3
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad.
    Windows Vista und höher: mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language German aus.
  • Klicke auf Armaturenbrett und auf Jetzt aktualisieren, um die Datenbank zu updaten.
  • Klicke im Anschluss auf Suchlauf, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf jetzt starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Aktionen anwenden.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Wähle Exportieren auf Textdatei (.txt) und speichere die Datei als mbam.txt auf dem Desktop ab.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 4
Starte noch einmal FRST.
  • Setze den Haken bei addition.txt und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
  • Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

Chrisi0104 03.05.2014 07:35
Vielen lieben Danke, dass du dir dir Zeit nimmst und mir weiterhilfst (:

Code:
# AdwCleaner v3.205 - Bericht erstellt am 03/05/2014 um 07:43:25
# Aktualisiert 28/04/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Chrisi - CHRISIS-PC
# Gestartet von : C:\Users\Chrisi\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\Ask.com
Ordner Gelöscht : C:\Program Files (x86)\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\DealPly
Ordner Gelöscht : C:\Program Files (x86)\Search-NewTab
Ordner Gelöscht : C:\Program Files (x86)\SearchProtect
Ordner Gelöscht : C:\Program Files (x86)\Sk-Enhancer
Ordner Gelöscht : C:\Program Files (x86)\Uniblue
Ordner Gelöscht : C:\Program Files (x86)\WebSearch
Ordner Gelöscht : C:\Program Files (x86)\SeAirch-NewaTaB
Ordner Gelöscht : C:\Program Files (x86)\SSearchh-NewTab
Ordner Gelöscht : C:\Program Files (x86)\SSearrch-NewTab
Ordner Gelöscht : C:\Program Files (x86)\Surf  anD  keeep
Ordner Gelöscht : C:\Program Files (x86)\sUrf  and Keeapp
Ordner Gelöscht : C:\Program Files (x86)\surf and akeep
Ordner Gelöscht : C:\Program Files (x86)\SuruF anod Keep
Ordner Gelöscht : C:\Program Files (x86)\YoutubeAdblocker
Ordner Gelöscht : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Ordner Gelöscht : C:\Windows\SysWOW64\BitGuard
Ordner Gelöscht : C:\Windows\SysWOW64\SearchProtect
Ordner Gelöscht : C:\Users\Chrisi\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Chrisi\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Chrisi\AppData\Local\Temp\AskSearch
Ordner Gelöscht : C:\Users\Chrisi\AppData\Local\Temp\BabylonToolbar
Ordner Gelöscht : C:\Users\Chrisi\AppData\Local\Temp\eIntaller
Ordner Gelöscht : C:\Users\Chrisi\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Chrisi\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\Chrisi\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Chrisi\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\DealPly
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\file scout
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\okitspace
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Uniblue
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Conduit
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\CT2269050
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\engine@plasmoo.com
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\ffxtlbr@babylon.com
Ordner Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\helperbar@helperbar.com
Ordner Gelöscht : C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\.autoreg
Datei Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\bProtector_extensions.rdf
Datei Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\Babylon.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
Datei Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\ividi.xml
Datei Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\MyStart Search.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\qone8.xml
Datei Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\SweetIM Search.xml
Datei Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\WebSearch.xml
Datei Gelöscht : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\user.js
Datei Gelöscht : C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gelöscht : C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Datei Gelöscht : C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector_startup
Datei Gelöscht : C:\Windows\System32\Tasks\Dealply
Datei Gelöscht : C:\Windows\System32\Tasks\DealPlyUpdate
Datei Gelöscht : C:\Windows\Tasks\dsmonitor.job
Datei Gelöscht : C:\Windows\System32\Tasks\dsmonitor

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\Desktop\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\Desktop\Search.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox\Mozilla Firefox (Abgesicherter Modus).lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Chrisi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [OKitSpace@OKitSpace.es]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\lbidgdoiglndbjlcnnifemecdhnpeabo
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Schlüssel Gelöscht : HKCU\Software\Classes\*\shell\pokki
Schlüssel Gelöscht : HKCU\Software\Classes\Folder\shell\pokki
Schlüssel Gelöscht : HKCU\Software\Classes\pokki
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\conduit.com
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\and
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\OKitSpace.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\surf
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SEarch-NeWTaba.SEarch-NeWTaba
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SEarch-NeWTaba.SEarch-NeWTaba.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Seaarch-NiEwTab.Seaarch-NiEwTab
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Seaarch-NiEwTab.Seaarch-NiEwTab.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Sueaurch-NewTaB.Sueaurch-NewTaB
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Sueaurch-NewTaB.Sueaurch-NewTaB.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CheapMe.CheapMe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CheapMe.CheapMe.5.1
Schlüssel Gelöscht : HKCU\Software\5f6dcd0e73fbd42
Schlüssel Gelöscht : HKLM\SOFTWARE\5f6dcd0e73fbd42
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-5902107913
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_photoscape_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_photoscape_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{90A52F08-64AC-4DC6-9D7D-4516670275D3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{117F0D8D-4250-3DF8-37F0-E5120DC138B5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5FCA52F6-7842-BC50-D29E-CCFE7549E48A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{62101AA5-681D-8123-349F-C230A41CD2A1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{90987232-7C83-B008-3486-FA7AE9307E95}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE572254-BA25-42BF-DE0F-DB01553CE121}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FEE29BFB-6C53-D842-0E75-ACB9B660DBC6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{117F0D8D-4250-3DF8-37F0-E5120DC138B5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5FCA52F6-7842-BC50-D29E-CCFE7549E48A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{62101AA5-681D-8123-349F-C230A41CD2A1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{90987232-7C83-B008-3486-FA7AE9307E95}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE572254-BA25-42BF-DE0F-DB01553CE121}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FEE29BFB-6C53-D842-0E75-ACB9B660DBC6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{117F0D8D-4250-3DF8-37F0-E5120DC138B5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5FCA52F6-7842-BC50-D29E-CCFE7549E48A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{62101AA5-681D-8123-349F-C230A41CD2A1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{90987232-7C83-B008-3486-FA7AE9307E95}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE572254-BA25-42BF-DE0F-DB01553CE121}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{117F0D8D-4250-3DF8-37F0-E5120DC138B5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5FCA52F6-7842-BC50-D29E-CCFE7549E48A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{62101AA5-681D-8123-349F-C230A41CD2A1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{90987232-7C83-B008-3486-FA7AE9307E95}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE572254-BA25-42BF-DE0F-DB01553CE121}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{117F0D8D-4250-3DF8-37F0-E5120DC138B5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5FCA52F6-7842-BC50-D29E-CCFE7549E48A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{62101AA5-681D-8123-349F-C230A41CD2A1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{90987232-7C83-B008-3486-FA7AE9307E95}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EE572254-BA25-42BF-DE0F-DB01553CE121}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FEE29BFB-6C53-D842-0E75-ACB9B660DBC6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{117F0D8D-4250-3DF8-37F0-E5120DC138B5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5FCA52F6-7842-BC50-D29E-CCFE7549E48A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{62101AA5-681D-8123-349F-C230A41CD2A1}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{90987232-7C83-B008-3486-FA7AE9307E95}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE572254-BA25-42BF-DE0F-DB01553CE121}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{FEE29BFB-6C53-D842-0E75-ACB9B660DBC6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{117F0D8D-4250-3DF8-37F0-E5120DC138B5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5FCA52F6-7842-BC50-D29E-CCFE7549E48A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{62101AA5-681D-8123-349F-C230A41CD2A1}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{90987232-7C83-B008-3486-FA7AE9307E95}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE572254-BA25-42BF-DE0F-DB01553CE121}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FEE29BFB-6C53-D842-0E75-ACB9B660DBC6}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\SAFARI.EXE\shell\open\command
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\DataMngr
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\DealPly
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\InstalledThirdPartyPrograms
Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\smarttweak
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\Unitech LLC
Schlüssel Gelöscht : HKCU\Software\AppDataLow\SProtector
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Schlüssel Gelöscht : HKLM\Software\AVG Secure Search
Schlüssel Gelöscht : HKLM\Software\AVG Security Toolbar
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\DealPly
Schlüssel Gelöscht : HKLM\Software\qone8Software
Schlüssel Gelöscht : HKLM\Software\SoftwareUpdater
Schlüssel Gelöscht : HKLM\Software\SP Global
Schlüssel Gelöscht : HKLM\Software\SProtector
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\Unitech LLC
Schlüssel Gelöscht : HKLM\Software\Vittalia
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Speedchecker Limited

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [First Home Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [bProtectTabs]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v3.6.25 (de)

[ Datei : C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js ]

Zeile gelöscht : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Zeile gelöscht : user_pref("CT2269050.CTID", "CT2269050");
Zeile gelöscht : user_pref("CT2269050.CurrentServerDate", "19-5-2012");
Zeile gelöscht : user_pref("CT2269050.DialogsAlignMode", "LTR");
Zeile gelöscht : user_pref("CT2269050.DownloadReferralCookieData", "");
Zeile gelöscht : user_pref("CT2269050.EMailNotifierPollDate", "Fri May 18 2012 23:51:56 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.FirstServerDate", "30-1-2011");
Zeile gelöscht : user_pref("CT2269050.FirstTime", true);
Zeile gelöscht : user_pref("CT2269050.FirstTimeFF3", true);
Zeile gelöscht : user_pref("CT2269050.FirstTimeSettingsDone", true);
Zeile gelöscht : user_pref("CT2269050.FixPageNotFoundErrors", true);
Zeile gelöscht : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Zeile gelöscht : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Zeile gelöscht : user_pref("CT2269050.Initialize", true);
Zeile gelöscht : user_pref("CT2269050.InitializeCommonPrefs", true);
Zeile gelöscht : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
Zeile gelöscht : user_pref("CT2269050.InstallationType", "UnknownIntegration");
Zeile gelöscht : user_pref("CT2269050.InstalledDate", "Sun Jan 30 2011 07:57:33 GMT+0100");
Zeile gelöscht : user_pref("CT2269050.InvalidateCache", false);
Zeile gelöscht : user_pref("CT2269050.IsGrouping", false);
Zeile gelöscht : user_pref("CT2269050.IsMulticommunity", false);
Zeile gelöscht : user_pref("CT2269050.IsOpenThankYouPage", false);
Zeile gelöscht : user_pref("CT2269050.IsOpenUninstallPage", false);
Zeile gelöscht : user_pref("CT2269050.LanguagePackLastCheckTime", "Fri May 18 2012 23:52:01 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Zeile gelöscht : user_pref("CT2269050.LastLogin_2.7.2.0", "Fri May 18 2012 23:51:59 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.LatestVersion", "3.12.2.3");
Zeile gelöscht : user_pref("CT2269050.Locale", "en");
Zeile gelöscht : user_pref("CT2269050.LoginCache", 4);
Zeile gelöscht : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Zeile gelöscht : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Zeile gelöscht : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Zeile gelöscht : user_pref("CT2269050.RadioIsPodcast", false);
Zeile gelöscht : user_pref("CT2269050.RadioLastCheckTime", "Mon May 21 2012 06:46:11 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Zeile gelöscht : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Zeile gelöscht : user_pref("CT2269050.RadioMediaID", "12473383");
Zeile gelöscht : user_pref("CT2269050.RadioMediaType", "Media Player");
Zeile gelöscht : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
Zeile gelöscht : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
Zeile gelöscht : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
Zeile gelöscht : user_pref("CT2269050.SavedHomepage", "resource:/browserconfig.properties");
Zeile gelöscht : user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2269050&octid=EB_ORIGINAL_CTID&SearchSource=1");
Zeile gelöscht : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Zeile gelöscht : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabEnabled", true);
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Mon May 21 2012 06:46:11 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabUserEnabled", false);
Zeile gelöscht : user_pref("CT2269050.SettingsCheckIntervalMin", 120);
Zeile gelöscht : user_pref("CT2269050.SettingsLastCheckTime", "Fri May 18 2012 23:51:55 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.SettingsLastUpdate", "1326723880");
Zeile gelöscht : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Zeile gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Fri May 18 2012 23:51:55 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1331805997");
Zeile gelöscht : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Zeile gelöscht : user_pref("CT2269050.UserID", "UN30900994047077974");
Zeile gelöscht : user_pref("CT2269050.ValidationData_Search", 0);
Zeile gelöscht : user_pref("CT2269050.ValidationData_Toolbar", 2);
Zeile gelöscht : user_pref("CT2269050.WeatherNetwork", "");
Zeile gelöscht : user_pref("CT2269050.WeatherPollDate", "Fri May 18 2012 23:51:59 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.WeatherUnit", "C");
Zeile gelöscht : user_pref("CT2269050.alertChannelId", "666138");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D474549484C5952594B335E5356432C45333438334A414C546660576364676F6A5E4B766B6E5B445D4B4C504A6259646C787A2[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462B554A4D4B4749594D33535D4F432C45333439344A414C565B5E6C656E706C7164736D4D786D705D465F4D4E534D645B66705[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e.:2z527", "2423");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F7171742256227679664F6[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7174726E702174745B2[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e06cg5el8:", "6E6D6F6C6C727070746F");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737572727876767A75242F4B49474F42357D5D5C3D");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465F4D524B51645B66732[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5F56616F7C217D74747[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6B60496252505451675[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7174614A63525557526[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B51605762747C2473737[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465F4F4C5451645B66797[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A312833474745445159575B504B504B4D5E545553533A655A5D4A334C3C3B3A3951485367756363677575676B65527D7275624B645453515[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4F524F6259647927252[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474B4961586379226F742[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717154207477644D66575[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A786D2256227679664F6[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352C37502E4F4747315C5154412A4334313738483F4A635F5A6A645E625A4772676A5740594A474D4D5E55607971246E7778257[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465F504F5050645B66212[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707773202371215925797[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706B54207477644D66575[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7B21747C7821745A267[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A52404548564F58315C5154412A4335342F37483F4A68646B645D5E626462616D6971726B6C786A517C7174614A6355544F566[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6D7C55217578654E675[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7E6C6956227679664F6[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C574C2F48533E27403233433A45665B68505C5E406B6E4F38514343544B56776C79616D6F517C71547873634C6557566[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215642542D584D503D263F2D2E2E2E443B4635645E6669595C6062686F5C7363716F696467764F7A6F725F48614F50504F665D6[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b-0?3g>d", "6C6A71696B416C747A7372727B2049777D4C2522514E232A205627542C242E2A282E302C");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b-0?3g@6:5;", "");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A232E333E58604F6456604F6852645858635E604E376B7167617059");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484778213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b5ba==9cjag", "39673E6E426E43767A7848727947767C767C787D21");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6F6C6C7270707276737A74");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b9643g3/9e", "6A");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b<:222h64<", "393F352F3E");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b=+03eh8h8j?:", "4443");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b?b0d:8aj62<h", "6D");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Zeile gelöscht : user_pref("CT2269050.backendstorage.autocompletepro_enable", "31");
Zeile gelöscht : user_pref("CT2269050.backendstorage.autocompletepro_enable_auto", "31");
Zeile gelöscht : user_pref("CT2269050.backendstorage.cbcountry_000", "4154");
Zeile gelöscht : user_pref("CT2269050.backendstorage.cbfirsttime", "547565204A616E20313720323031322031363A30363A323620474D542B30313030");
Zeile gelöscht : user_pref("CT2269050.backendstorage.shoppingapp.gk.exipres", "576564204D617920323320323031322032333A35323A303220474D542B30323030");
Zeile gelöscht : user_pref("CT2269050.backendstorage.shoppingapp.gk.geolocation", "61757374726961");
Zeile gelöscht : user_pref("CT2269050.backendstorage.url_history", "687474703A2F2F666F72756D2E74686573696D73332E636F6D2F6A666F72756D2F666F72756D732F73686F772F31302E70616765");
Zeile gelöscht : user_pref("CT2269050.backendstorage.url_history_time", "31333236383133303730393735");
Zeile gelöscht : user_pref("CT2269050.backendstorage.youtube_user_first_login_date", "30312F33312F32303131");
Zeile gelöscht : user_pref("CT2269050.backendstorage.youtube_user_survey_visit", "4E4F545F56495349544544");
Zeile gelöscht : user_pref("CT2269050.backendstorage.youtubelang", "4445");
Zeile gelöscht : user_pref("CT2269050.clientLogIsEnabled", false);
Zeile gelöscht : user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Zeile gelöscht : user_pref("CT2269050.myStuffEnabled", true);
Zeile gelöscht : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Zeile gelöscht : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Zeile gelöscht : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Zeile gelöscht : user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Zeile gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_ext_msg_key_1d77ce88", "356x332");
Zeile gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://plasmoo.com/result.htm?q=");
Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2269050");
Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");
Zeile gelöscht : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2269050");
Zeile gelöscht : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&i=26&loc=skw");
Zeile gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Zeile gelöscht : user_pref("browser.search.defaultenginename", "MyStart Search");
Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "Plasmoo");
Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT&l=1&q=");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "MyStart Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine,S", "WebSearch");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?babsrc=HP_Prot");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.admin", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.babExt", "");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.babTrack", "affID=100482");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.bbDpng", 2);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.dfltSrch", true);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.hmpg", true);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.id", "4029c3a30000000000004e5d60632631");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15355");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?AF=100482&babsrc=adbartrp&mntrId=4029c3a30000000000004e5d60632631&q=");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.lastDP", 2);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1719:48:39");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "3.6");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.newTab", true);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.propectorlck", 137579464);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.smplGrp", "tzb");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1719:48:39");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=100482");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.hardId", "4029c3a30000000000004e5d60632631");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.id", "4029c3a30000000000004e5d60632631");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.instlDay", "15355");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.newTab", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1719:48:39");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Zeile gelöscht : user_pref("extensions.enabledItems", "{872b5b88-9db5-4310-bdd0-ac189557e5f5}:2.7.2.0,{ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.10,{A79D8B60-1FF0-47F0-8E79-8CDE1FECB0FD}:1.1.0,ffxtlbr@babylon.com:1.2.[...]
Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Zeile gelöscht : user_pref("id_playboostgamebar.searchengine", "Ask.com");
Zeile gelöscht : user_pref("id_playboostgamebar.storder_files.307f0fee5ebaa2debe8f90548e28a5f5", "%3C%3Fxml%20version%3D%221.0%22%20encoding%3D%22utf-8%22%3F%3E%0A%3CTOOLBAR%20height%3D%2228%22%3E%3C%21--%20serving%20[...]
Zeile gelöscht : user_pref("keyword.URL", "hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&i=26&loc=skw&search=");
Zeile gelöscht : user_pref("plasmoo.search.engine.prevkeywordurl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");
Zeile gelöscht : user_pref("plasmoo.search.engine.prevsearchdefaultenginename", "chrome://browser-region/locale/region.properties");
Zeile gelöscht : user_pref("plasmoo.search.engine.prevsearchdefaultthisenginename", "Search");
Zeile gelöscht : user_pref("plasmoo.search.engine.prevsearchdefaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}");
Zeile gelöscht : user_pref("plasmoo.search.engine.prevstartuphomepage", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13");
Zeile gelöscht : user_pref("plasmoo.search.engine.status", "INSTALLED");

-\\ Google Chrome v32.0.1700.107

[ Datei : C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://websearch.pur-esult.info/?l=1&q={searchTerms}&pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT
Gelöscht [Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&q={searchTerms}&SSPV=
Gelöscht [Startup_urls] : hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&SSPV=
Gelöscht [Startup_urls] : hxxp://search.gboxapp.com/
Gelöscht [Homepage] : hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT
Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gelöscht [Extension] : cekcjpgehmohobmdiikfnopibipmgnml
Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb
Gelöscht [Extension] : gaiilaahiahdejapggenmdmafpmbipje
Gelöscht [Extension] : ifohbjbgfchkkfhphahclmkpgejiplfo
Gelöscht [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof
Gelöscht [Extension] : zzzzzzzzzzzzzzzzoibponkmmpgpmjgl

*************************

AdwCleaner[R0].txt - [59849 octets] - [03/05/2014 07:42:40]
AdwCleaner[S0].txt - [53881 octets] - [03/05/2014 07:43:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [53942 octets] ##########
Das ist vom AdwCleaner.

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 03.05.2014
Suchlauf-Zeit: 08:27:14
Logdatei: MBAM.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.05.03.02
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Chrisi

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 315932
Verstrichene Zeit: 31 Min, 1 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 11
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\CLASSES\APPID\{685F23D9-FCFD-475C-B56A-362645945C5A}, In Quarantäne, [b846f85481faff37630626f951b15ea2],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{685F23D9-FCFD-475C-B56A-362645945C5A}, In Quarantäne, [b846f85481faff37630626f951b15ea2],
PUP.Optional.OfferBox.A, HKLM\SOFTWARE\CLASSES\OKitSpace, In Quarantäne, [d32bcf7de299ff37da9a39e83ac812ee],
PUP.Optional.OfferBox.A, HKLM\SOFTWARE\CLASSES\OKitSpace.1, In Quarantäne, [db234efe3c3fc86e2351bb6601016799],
PUP.Optional.OfferBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OKitSpace, In Quarantäne, [db234efe3c3fc86e2351bb6601016799],
PUP.Optional.OfferBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OKitSpace.1, In Quarantäne, [db234efe3c3fc86e2351bb6601016799],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F6C44C71-2CFE-8176-3A4D-CBD0DCE5AEFA}, In Quarantäne, [c9359ab25526d95d065ae1669e6303fd],
PUP.Optional.OKitSpace.A, HKLM\SOFTWARE\WOW6432NODE\OKitSpace, In Quarantäne, [23db2c20c7b4db5b18d85c316a98c33d],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM, In Quarantäne, [b5490b41a1da65d1dd74455e44bffe02],
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, In Quarantäne, [ca34cc80e19aba7cfc822584956e8b75],
PUP.Optional.Ividi.A, HKU\S-1-5-21-3918741511-1222942072-1058904510-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\iVIDI Plugin, In Quarantäne, [8777a0acc9b291a52a6cb7d51be7d32d],

Registrierungswerte: 2
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM|simapp_id, {8372C22A-B61F-11E2-B4A5-20CF30D3113A}, In Quarantäne, [b5490b41a1da65d1dd74455e44bffe02]
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, MYSTART, In Quarantäne, [ca34cc80e19aba7cfc822584956e8b75]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 7
PUP.OPtional.Dealply.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly, In Quarantäne, [20dea4a81962e650cbe6c7da32d104fc],
PUP.Optional.SearchNewTab, C:\ProgramData\SearCH-NewTaB, In Quarantäne, [926c6ddf3a4170c64ef44c1b60a256aa],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker, In Quarantäne, [8e7064e8f289dd5913930c5fff03916f],

Dateien: 113
PUP.Optional.MultiPlug.A, C:\ProgramData\CeheapMee\YJC3N8RbIH.dll, In Quarantäne, [54aa55f7bfbc1422055b2a1d738e1ee2],
PUP.Optional.MultiPlug.A, C:\ProgramData\CeheapMee\YJC3N8RbIH.exe, In Quarantäne, [c9359ab25526d95d065ae1669e6303fd],
PUP.Optional.MultiPlug.A, C:\ProgramData\CeheapMee\YJC3N8RbIH.x64.dll, In Quarantäne, [ffffae9ea9d2f83e124e2f1855ac8a76],
PUP.Optional.MultiPlug.A, C:\ProgramData\RemoveTheAdApp\oQ_XDj.exe, In Quarantäne, [a85650fc0d6ead899ec2dc6bdc258f71],
PUP.Optional.MultiPlug.A, C:\ProgramData\SeAirch-NewaTaB\ck.exe, In Quarantäne, [a45a3d0f3c3fad89d090ac9b8d743bc5],
PUP.Optional.MultiPlug.A, C:\ProgramData\SSearchh-NewTab\60.exe, In Quarantäne, [a6582d1f9edd0c2ab8a83d0ae21fef11],
PUP.Optional.MultiPlug.A, C:\ProgramData\SSearrch-NewTab\7nzPoMnfs.exe, In Quarantäne, [c836ba926516e84e7ae64700e021748c],
PUP.Optional.MultiPlug.A, C:\ProgramData\Surf  anD  keeep\YWPwWlMaxQE.exe, In Quarantäne, [f608d97382f9cc6a90d064e3669b28d8],
PUP.Optional.MultiPlug.A, C:\ProgramData\surf and akeep\9J1bN.exe, In Quarantäne, [1fdf83c9a1daec4a2b3506417b86b44c],
PUP.Optional.MultiPlug.A, C:\ProgramData\SuruF anod Keep\JYFBt_4gd.exe, In Quarantäne, [24da7dcf1269d75fadb3df68dd24f40c],
PUP.Optional.PerformerSoft.A, C:\Users\Chrisi\AppData\Local\Temp\91C6.tmp, In Quarantäne, [5aa4b795de9d63d305ba7e95fa0710f0],
PUP.Optional.SweetIM, C:\Users\Chrisi\AppData\Local\Temp\mgsqlite3.7z, In Quarantäne, [af4f8bc1710af343d2e5f6657391cf31],
PUP.Optional.SweetIM, C:\Users\Chrisi\AppData\Local\Temp\mgsqlite3.dll, In Quarantäne, [7d81d17b7407b284fbbc114ae02419e7],
PUP.Optional.Elex.A, C:\Users\Chrisi\AppData\Local\Temp\smt_ar_dosearches.exe, In Quarantäne, [ed117fcda5d680b6112782a1b24f55ab],
PUP.Optional.Somoto.A, C:\Users\Chrisi\AppData\Local\Temp\biclient.exe, In Quarantäne, [b648311b0f6c0a2c35b96ea6c43de51b],
PUP.Optional.Somoto, C:\Users\Chrisi\AppData\Local\Temp\bitool.dll, In Quarantäne, [b7473319b6c5b87ea24f2cd78280c040],
PUP.Optional.Bundler, C:\Users\Chrisi\AppData\Local\Temp\a2zLyrics_1060-8102_v122.exe, In Quarantäne, [ab5355f71a61d1654a7057dcb64bf30d],
PUP.Optional.Vittalia, C:\Users\Chrisi\AppData\Local\Temp\instloffer.exe, In Quarantäne, [32cc7ad299e2360016b8fa8418e9ed13],
PUP.Optional.FileScout.A, C:\Users\Chrisi\AppData\Local\Temp\setup_fsu_cid.exe, In Quarantäne, [7c828dbf0477aa8cc133a0649071b24e],
PUP.Optional.SweetIM, C:\Users\Chrisi\AppData\Local\Temp\bundlesweetimsetup.exe, In Quarantäne, [639b75d7542742f402b5c695857fc33d],
PUP.Optional.SearchProtect.A, C:\Users\Chrisi\AppData\Local\Temp\nseB2E3.exe, In Quarantäne, [de200c40562590a63b3f899d0cf5768a],
PUP.Optional.SearchProtect.A, C:\Users\Chrisi\AppData\Local\Temp\nsfB68D.exe, In Quarantäne, [7985321ad1aa2d09ceac0e186a9739c7],
PUP.Optional.SearchProtect.A, C:\Users\Chrisi\AppData\Local\Temp\nsoCF74.exe, In Quarantäne, [f7070f3d96e560d6572369bd56abb848],
PUP.Optional.Babylon.A, C:\Users\Chrisi\AppData\Local\Temp\AF0C.tmp, In Quarantäne, [a15d54f8700b10267fa431ed6b957f81],
PUP.Optional.Conduit.A, C:\Users\Chrisi\AppData\Local\Temp\SPSetup.exe, In Quarantäne, [639b0d3f2c4f0f279bceeb302cd5e51b],
PUP.Optional.SearchProtect.A, C:\Users\Chrisi\AppData\Local\Temp\nsp71EC.exe, In Quarantäne, [34caae9eaad1fb3badcda77f8e73966a],
PUP.Optional.SearchProtect.A, C:\Users\Chrisi\AppData\Local\Temp\nsp75E3.exe, In Quarantäne, [fb035defafccab8bfb7f8f97af529f61],
PUP.Optional.SearchProtect.A, C:\Users\Chrisi\AppData\Local\Temp\nspBB10.exe, In Quarantäne, [ba44f8545b202610d5a56abce61b2bd5],
PUP.Optional.Somoto.A, C:\Users\Chrisi\AppData\Local\Temp\nsu5709.tmp, In Quarantäne, [16e83319ec8f0036bb33b55fa25f3dc3],
PUP.Optional.SearchProtect.A, C:\Users\Chrisi\AppData\Local\Temp\nsu6DC6.exe, In Quarantäne, [dc22ff4d59223204403ac06648b911ef],
PUP.Optional.PerformerSoft.A, C:\Users\Chrisi\AppData\Local\Temp\6AC3.tmp, In Quarantäne, [d727ec600a7166d0d0ef080b53aec13f],
PUP.Optional.Babylon.A, C:\Users\Chrisi\AppData\Local\Temp\D58B26AB-BAB0-7891-805C-30983B2CF381\Latest\BExternal.dll, In Quarantäne, [14ea92ba46358bab3ba6ad75ee12f808],
PUP.Optional.Babylon.A, C:\Users\Chrisi\AppData\Local\Temp\D58B26AB-BAB0-7891-805C-30983B2CF381\Latest\ccp.exe, In Quarantäne, [f6085def3843bb7b83a08d916c9415eb],
PUP.Optional.Babylon.A, C:\Users\Chrisi\AppData\Local\Temp\D58B26AB-BAB0-7891-805C-30983B2CF381\Latest\CrxInstaller.dll, In Quarantäne, [d72749037ffc52e4fc34fb1b44bdbb45],
PUP.Optional.Delta, C:\Users\Chrisi\AppData\Local\Temp\D58B26AB-BAB0-7891-805C-30983B2CF381\Latest\MyBabylonTB.exe, In Quarantäne, [817d3d0f2d4e9a9c2cf10df93cc5bf41],
PUP.Optional.Babylon.A, C:\Users\Chrisi\AppData\Local\Temp\D58B26AB-BAB0-7891-805C-30983B2CF381\Latest\Setup.exe, In Quarantäne, [6e901339740724123c1cd549768a936d],
PUP.Optional.BabylonToolBar.A, C:\Users\Chrisi\AppData\Local\Temp\B0853324-BAB0-7891-9180-3B4058677D6A\MyBabylonTB.exe, In Quarantäne, [df1f1e2e2d4e65d1cfd48b89679ae51b],
Adware.Agent, C:\Users\Chrisi\AppData\Local\Temp\262509153.Uninstall\Uninstall.exe, In Quarantäne, [22dc76d62f4c69cd724a2554a45cc63a],
PUP.Optional.Dealply, C:\Users\Chrisi\AppData\Local\Temp\is1438683437\dealply.exe, In Quarantäne, [d628fe4e62199f9796641c3f9f65a957],
PUP.Optional.Babylon.A, C:\Users\Chrisi\AppData\Local\Temp\6F68399C-BAB0-7891-B987-E9F7E3CFE820\Latest\BExternal.dll, In Quarantäne, [a75779d3e3980b2bb0310022738d4cb4],
PUP.Optional.Babylon.A, C:\Users\Chrisi\AppData\Local\Temp\6F68399C-BAB0-7891-B987-E9F7E3CFE820\Latest\CrxInstaller.dum, In Quarantäne, [bc423e0e73081026dc54c74ffa07a25e],
PUP.Optional.Delta.A, C:\Users\Chrisi\AppData\Local\Temp\6F68399C-BAB0-7891-B987-E9F7E3CFE820\Latest\MyBabylonTB.exe, In Quarantäne, [cc327fcd017aa6903e9f1359fc053bc5],
PUP.Optional.Babylon.A, C:\Users\Chrisi\AppData\Local\Temp\6F68399C-BAB0-7891-B987-E9F7E3CFE820\Latest\Setup.exe, In Quarantäne, [50ae28247605d75f43ed6fb1798717e9],
PUP.Optional.SProtect.A, C:\Users\Chrisi\AppData\Local\Temp\{E4AACDA8-C5A6-4759-A5B2-8D843F49EF5E}\Addons\web_assistant_v2.exe, In Quarantäne, [9f5fe765a6d54de9a5db09f439c8cc34],
PUP.Optional.SProtect.A, C:\Users\Chrisi\AppData\Local\Temp\{E5DF44FB-06E8-408D-A266-4ECA3E3C660D}\Addons\web_assistant_v2.exe, In Quarantäne, [36c8d3796a111d19e59b33cad72a0cf4],
PUP.Optional.SProtect.A, C:\Users\Chrisi\AppData\Local\Temp\{6C554449-1900-4CFB-AE10-5122B7B666BF}\Addons\web_assistant_v2.exe, In Quarantäne, [01fd80cc0d6e38fe94ec3cc198698b75],
PUP.Optional.SProtect.A, C:\Users\Chrisi\AppData\Local\Temp\{7C291B25-D6A6-4EB1-AC5A-9E84A7CA39D3}\Addons\web_assistant_v2.exe, In Quarantäne, [50ae3e0e0b70fa3cc8b8d22b20e1926e],
PUP.Optional.BabSolution.A, C:\Users\Chrisi\AppData\Local\Temp\bus3475\BUSolution.dll, In Quarantäne, [2ad4ea62314a112509739673f809e41c],
PUP.Optional.Montiera, C:\Users\Chrisi\AppData\Local\Temp\nsh321E.tmp\ividi_1.8.23.0.exe, In Quarantäne, [8e70eb619dde1b1b682127ffb051e11f],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsa3863.exe, In Quarantäne, [29d529236d0ed4620f6b6eb8dd24b050],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsd7524.exe, In Quarantäne, [56a877d57605f93d522854d2fa07c23e],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsg19DB.exe, In Quarantäne, [8579212ba7d4ad8994e6ef37fb0619e7],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsg22EF.exe, In Quarantäne, [ea14c28abbc065d1cfab9a8c709126da],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsg5CE.exe, In Quarantäne, [7b831d2f5625e650adcd72b49e633dc3],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsh3FC1.exe, In Quarantäne, [43bb1834196280b6aecc1e08d9286799],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nshAA18.exe, In Quarantäne, [d22c1e2e39423ff78cee4ed8c23f55ab],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsp765B.exe, In Quarantäne, [29d5311b700b0630542656d08c757a86],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nss3FB2.exe, In Quarantäne, [8678024a8bf052e47dfd7babe12051af],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nss8394.exe, In Quarantäne, [3fbfd676bbc069cd99e15dc954adbf41],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nssA661.exe, In Quarantäne, [748a103cdd9ed2648cee36f0bd44ad53],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nswA43E.exe, In Quarantäne, [e91534186a11cb6b39416bbb1be61fe1],
PUP.Optional.Somoto, C:\Users\Chrisi\Downloads\FemaleandMaleSymbols_downloader_by_SchriftartenFontsde.exe, In Quarantäne, [aa5449033942db5b4d11da811be9649c],
PUP.Optional.ToolBarInstaller.A, C:\Users\Chrisi\Downloads\Harry_Potter_und_die_Heiligtümer_des_Todes,_Teil_ (1).exe, In Quarantäne, [16e889c3a5d62412eb3e4ef2be43b44c],
PUP.Optional.ToolBarInstaller.A, C:\Users\Chrisi\Downloads\Harry_Potter_und_die_Heiligtümer_des_Todes,_Teil_.exe, In Quarantäne, [e71789c3accf91a5bc6d56ead9280df3],
PUP.Optional.Bandoo, C:\Users\Chrisi\Downloads\iLividSetup.exe, In Quarantäne, [0fef93b98eedf0464a8341c549b8fb05],
PUP.Optional.VIT, C:\Users\Chrisi\Downloads\installer_limewire_5_5_16__Deutsch.exe, In Quarantäne, [45b967e58dee78be8151b85938c9ab55],
PUP.OPtional.Dealply.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\Uninstall DealPly.lnk, In Quarantäne, [20dea4a81962e650cbe6c7da32d104fc],
PUP.OPtional.Dealply.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly Help.lnk, In Quarantäne, [20dea4a81962e650cbe6c7da32d104fc],
PUP.OPtional.Dealply.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly.lnk, In Quarantäne, [20dea4a81962e650cbe6c7da32d104fc],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.settings, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bl, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\dm, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\00, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\01, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\02, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\03, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\10, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\11, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\12, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\13, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\20, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\21, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\22, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\23, In Quarantäne, [fe00e26a3645d363565392d5ae54ab55],
PUP.Optional.Conduit.A, C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: (      "startup_urls": [ "hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&SSPV=", "hxxp://search.gboxapp.com/" ],), Ersetzt,[3ec04903ee8d033356a7a5bfc24225db]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.admin", false);), Ersetzt,[68969daf2754979f3d1104605ca82cd4]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.aflt", "3");), Ersetzt,[f10de468e49758deaba3283c966e27d9]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.appId", "{685F23D9-FCFD-475C-B56A-362645945C5A}");), Ersetzt,[ac524a027ffce84eec62b1b30df7916f]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.autoRvrt", "false");), Ersetzt,[e11dd973c9b269cd61ed62020ff57090]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.dfltLng", "");), Ersetzt,[d628ee5e81fafa3cb995b7ad0afa7090]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.dfltSrch", true);), Ersetzt,[c13d50fcc0bbd165143a9dc75da730d0]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.dnsErr", true);), Ersetzt,[6d91ea623744a690c48a5014b64e7987]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.excTlbr", true);), Ersetzt,[b9455eee95e6b48298b68ed6729257a9]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.ffxUnstlRst", false);), Ersetzt,[9e60b9932556b3835af4e0847a8aec14]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.hmpg", true);), Ersetzt,[5f9f450785f62412044ae38127dd0000]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.hmpgUrl", "hxxp://search.ividi.org/?src=tbhp&id=4029c3a30000000000004e5d60632631&affilt=3");), Ersetzt,[e11d8ebe1368092d99b54024c2426c94]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.hpOld0", "");), Ersetzt,[f20ccc80f2891e185ef0ee763fc59967]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.id", "4029c3a30000000000004e5d60632631");), Ersetzt,[13eb2a227efd8bab68e6b8acba4a9c64]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.instlDay", "16017");), Ersetzt,[1ae4a8a4dd9e2b0b07470e56cb3923dd]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.instlRef", "");), Ersetzt,[cc32f755f18a79bd83cb1450ce3635cb]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.kw_url", "hxxp://search.ividi.org/?src=tbsp&id=4029c3a30000000000004e5d60632631&affilt=3&q=");), Ersetzt,[51adff4df685d75fbc92154ff80c639d]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.newTab", true);), Ersetzt,[59a54dff93e8ed49c7871153966e8e72]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.newTabUrl", "hxxp://search.ividi.org/?q={searchTerms}&src=tbnt&id=4029c3a30000000000004e5d60632631&affilt=3");), Ersetzt,[42bc61ebfe7d33034509a3c158ac6f91]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.prdct", "ividi");), Ersetzt,[b747e666e19a4de9123c382ca65ea759]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.prtnrId", "ividi");), Ersetzt,[718da6a6de9d082e222c9ec642c25ea2]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.rvrt", "false");), Ersetzt,[14eae5674f2ca195133b5c081be9f40c]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.smplGrp", "none");), Ersetzt,[659923295e1ddd595ef01d4774901ae6]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.srchPrvdr", "Search ");), Ersetzt,[33cb33192259f4427dd1e183ce369d63]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.tlbrId", "base");), Ersetzt,[02fc65e77b00280eb19d511310f458a8]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.tlbrSrchUrl", "hxxp://search.ividi.org/?src=tbsp&id=4029c3a30000000000004e5d60632631&affilt=3&q=");), Ersetzt,[6a94321af982f145da740e566c98b14f]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.vrsn", "1.8.23.0");), Ersetzt,[19e5d17b027990a6bb93154f907410f0]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.vrsnTs", "1.8.23.020:42:32");), Ersetzt,[ec129fad1f5c979f86c8f66efc0802fe]
PUP.Optional.IVidi.A, C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.ividi.vrsni", "1.8.23.0");), Ersetzt,[1ae4f85484f7270f2d21dd8726de5da3]

Physische Sektoren: 0
(No malicious items detected)


(end)
Von Schritt 3 (:

Chrisi0104 03.05.2014 07:44
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2014
Ran by Chrisi at 2014-05-03 08:41:55
Running from C:\Users\Chrisi\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 15.2.1 - Hewlett-Packard) Hidden
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Action Replay Code Manager (HKLM-x32\...\Action Replay Code Manager_is1) (Version:  - )
Action Replay DSi Code Manager (HKLM-x32\...\Action Replay DSi Code Manager_is1) (Version:  - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
AI TouchMedia (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.3512 - CyberLink Corp.)
AI TouchMedia (x32 Version: 6.0.3512 - CyberLink Corp.) Hidden
Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version:  - Oberon Media)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft PhotoStudio 5.5 (HKLM-x32\...\{85309D89-7BE9-4094-BB17-24999C6118FC}) (Version:  - ArcSoft)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.10 - ASUS)
ASUS AP Bank (HKLM-x32\...\ASUS AP Bank_is1) (Version: 1.0.0.0 - ASUSTEK)
ASUS Data Security Manager (HKLM-x32\...\{FA2092C5-7979-412D-A962-6485274AE1EE}) (Version: 1.00.0014 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS)
ASUS MultiFrame (HKLM-x32\...\{9D48531D-2135-49FC-BC29-ACCDA5396A76}) (Version: 1.0.0021 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.40 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0008 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS)
ASUS Video Magic (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.4015 - CyberLink Corp.)
ASUS Video Magic (x32 Version: 6.0.4015 - CyberLink Corp.) Hidden
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus)
ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.)
ATI AVIVO64 Codecs (Version: 11.6.0.50811 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{FDB61EAE-7C1D-7EB6-E1EE-14528E3EB266}) (Version: 3.0.790.0 - ATI Technologies, Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0006 - ASUS)
Boingo Wi-Fi (HKLM-x32\...\{B653A2EC-D816-4498-A4FD-651047AB9DC9}) (Version: 1.7.0048 - Boingo Wireless, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Inkjet Printer Driver Add-On Module (HKLM\...\CANONIJINBOXADDON100) (Version:  - )
Canon MP150 (HKLM\...\{CA9A3609-3ECC-4574-8824-A8161A71A603}) (Version:  - )
Canon MP450 (HKLM\...\{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD}) (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0811.2122.36462 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help English (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help French (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help German (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
ccc-utility64 (Version: 2010.0811.2122.36462 - ATI) Hidden
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version:  - Oberon Media)
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.127.0.61 - Conexant)
ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.8 - ASUS)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink MediaShow Espresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 5.0.1606_25588 - CyberLink Corp.)
CyberLink MediaShow Espresso (x32 Version: 5.0.1606_25588 - CyberLink Corp.) Hidden
CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
CyberLink PhotoNow (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2609a - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 8.0.2609a - CyberLink Corp.) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3009.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3009.50 - CyberLink Corp.) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version:  - Microsoft)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.50.56 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Dream Day Wedding Married in Manhattan (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115233673}) (Version:  - Oberon Media)
Driver Whiz (HKLM-x32\...\{0B540DA4-41AE-4B79-BEAB-0F07E09669AB}) (Version: 8.1 - Driver Whiz)
EasyBits GO (HKCU\...\Game Organizer) (Version:  - EasyBits Media)
ETDWare PS/2-x64 7.0.5.11_WHQL (HKLM\...\Elantech) (Version: 7.0.5.11 - ELAN Microelectronics Corp.)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.6 - ASUS)
Free Audio CD Burner version 2.0.23.430 (HKLM-x32\...\Free Audio CD Burner_is1) (Version: 2.0.23.430 - DVDVideoSoft Ltd.)
Free Studio version 5.1.4 (HKLM-x32\...\Free Studio_is1) (Version:  - DVDVideoSoft Limited.)
Free Video to iPod Converter version 4.2.20.602 (HKLM-x32\...\Free Video to iPod Converter_is1) (Version:  - DVDVideoSoft Limited.)
Free YouTube to iPhone Converter version 2.12.2.430 (HKLM-x32\...\Free YouTube to iPhone Converter_is1) (Version: 2.12.2.430 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Game Park Console (HKLM-x32\...\{C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1) (Version: 6.2.0.2 - Oberon Media, Inc.)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 32.0.1700.107 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version:  - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
iCloud (HKLM\...\{8B485965-8EFE-464A-842F-CF8F18C3DFD7}) (Version: 1.1.0.40 - Apple Inc.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel)
iTunes (HKLM\...\{A535111D-95C8-487F-869E-CE4C239972D2}) (Version: 11.1.1.11 - Apple Inc.)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.17.1 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version:  - )
Microsoft Age of Empires Expansion (HKLM-x32\...\Age of Empires Expansion 1.0) (Version:  - )
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft IntelliPoint 8.0 (HKLM\...\{563F041C-DFDB-437B-A1E8-E141E0906076}) (Version: 8.0.225.0 - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.)
Mozilla Firefox (3.6.25) (HKLM-x32\...\Mozilla Firefox (3.6.25)) (Version: 3.6.25 (de) - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Nero Burning ROM (x32 Version: 12.5.5001 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero BurningROM 12 (HKLM-x32\...\{4AC7B4F3-1B75-4BA7-82C4-F9A22B430A3D}) (Version: 12.5.00900 - Nero AG)
Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20200 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Origin (HKLM-x32\...\Origin) (Version: 8.2.6.475 - Electronic Arts, Inc.)
Photo Pos Pro (HKLM-x32\...\Photo Pos Pro) (Version: 1.82 - PowerOfSoftware Ltd.)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Piggly FREE (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-1173957}) (Version:  - Oberon Media)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung SPP-2040 Series (HKLM-x32\...\Samsung SPP-2040 Series) (Version:  - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Smileyville FREE (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117396510}) (Version:  - Oberon Media)
Spotify (HKCU\...\Spotify) (Version: 0.8.0.1035.g278cc85b - Spotify AB)
syncables desktop SE (HKLM-x32\...\{BBED4F90-7AE5-40BF-AFB7-1B495692F4AB}) (Version: 5.5.615.9518 - syncables)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.89 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities 2014) (Version: 14.0.1000.89 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.89 - TuneUp Software) Hidden
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
USB2.0 UVC VGA WebCam (HKLM\...\USB2.0 UVC VGA WebCam) (Version: 5.8.54000.207 - Sonix)
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Wildlife Park 2 - Diamant Edition v2.1 (HKLM-x32\...\Wildlife Park 2 - Diamant Edition_is1) (Version:  - Deep Silver)
Wildlife Park 2 Patch 2.00 (HKLM-x32\...\{804ED550-B39F-474D-AC6C-49C35511F14D}) (Version: 2.00 - Deep Silver)
Windows Live Anmelde-Assistent (HKLM-x32\...\{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}) (Version: 5.000.818.6 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 14.0.8052.1208 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8051.1204 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{8C1E2925-14F8-45AA-B999-1E2A74BF5607}) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.30.3 - ASUS)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.17 - ASUS)

==================== Restore Points  =========================

03-05-2014 05:23:26 Windows Update
03-05-2014 05:29:20 Removed Java(TM) 6 Update 18

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {07CFAB6D-AD2D-4F33-8CBA-2159C9D9EBA5} - \dsmonitor No Task File <==== ATTENTION
Task: {17957954-02E4-4CD4-902A-593786D8E7EE} - \DealPly No Task File <==== ATTENTION
Task: {1996944C-2B9D-4B4A-B0B2-EE2CFEDAF895} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: {20358F01-9835-42D6-A560-66CDBABA72B2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-11] (Google Inc.)
Task: {30100829-E315-434A-8DAF-F8A56D3C1BDF} - System32\Tasks\{D966A093-25AF-4F5C-B405-293CB50783B2} => C:\Program Files (x86)\Skype\\Phone\Skype.exe
Task: {3D78D475-DC4E-45E6-B6F7-F6BF9035CB0B} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-08-12] (ASUS)
Task: {3DFA37DD-EC98-4350-B3FF-3BA85E4239E7} - System32\Tasks\Driver Whiz-RTMScanRunOnce => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {448D442C-6479-459D-908E-1B061F6863FA} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS)
Task: {51833F6D-D31E-4A5E-BB8A-513600955B45} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-18] (ASUS)
Task: {51DD94A8-211B-49DD-8165-91E637C6950D} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [2010-06-09] (asus)
Task: {6106E81F-AD81-454F-8ACF-E9AA88B90149} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: {7CAE0B06-2142-43E2-845A-BDE11313A684} - System32\Tasks\Driver Whiz-RTMUpdater => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {80C0079A-4D5D-40B9-97BC-608B2DCF2E3A} - System32\Tasks\Driver Whiz-RTMScan => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {88B41851-B488-4123-90AB-D07E013E05F3} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-08-30] (TuneUp Software)
Task: {8B3427B0-CEB4-4F76-A148-63166870379C} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {A7141105-EF19-4843-A669-75F9D781477F} - System32\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-11] (Google Inc.)
Task: {B0052C91-18AF-4BC0-BBF8-5D4523F14E88} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {E0049FA9-9617-455F-81DC-D77FA8996288} - System32\Tasks\Driver Whiz-RTMRules => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {E4050643-0C31-48C4-A028-7F6B455F8ADE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {F77554FF-153A-430B-A868-4694F6D84EB0} - \Advanced System Protector_startup No Task File <==== ATTENTION
Task: {F94A5F66-378C-4E12-B60A-965E7D8180B3} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-02-14 17:03 - 2006-12-04 02:26 - 00022016 _____ () C:\Windows\System32\SPPB1l6.DLL
2013-08-30 10:51 - 2013-08-30 10:51 - 00757048 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2007-06-15 20:28 - 2007-06-15 20:28 - 00104960 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt64.dll
2007-06-02 02:52 - 2007-06-02 02:52 - 00159744 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
2010-03-16 03:48 - 2010-03-16 03:48 - 00148816 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\EcaremeDLL.dll
2010-11-11 06:20 - 2010-11-11 06:20 - 00030032 _____ () C:\Windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll
2010-11-11 06:20 - 2010-11-11 06:20 - 00931840 _____ () C:\Windows\assembly\GAC_64\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll
2010-07-15 02:11 - 2010-07-15 02:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2008-10-01 09:02 - 2008-10-01 09:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2010-11-11 06:43 - 2007-11-30 21:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
2010-03-16 03:48 - 2010-03-16 03:48 - 01754448 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
2013-09-19 10:00 - 2013-09-19 10:00 - 00684416 _____ () C:\Program Files (x86)\Driver Whiz\Driver Whiz\ThemePack.DriverWhiz.dll
2013-09-19 09:31 - 2013-09-19 09:31 - 00412064 _____ () C:\Program Files (x86)\Driver Whiz\Driver Whiz\Agent.Communication.XmlSerializers.dll
2010-11-11 05:53 - 2010-04-06 08:29 - 00244904 _____ () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2007-06-15 20:28 - 2007-06-15 20:28 - 00147456 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
2007-06-02 03:08 - 2007-06-02 03:08 - 00143360 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
2009-11-12 21:01 - 2009-11-12 21:01 - 00873768 _____ () C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMediaLibrary.dll
2009-11-12 21:01 - 2009-11-12 21:01 - 00013096 _____ () C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvcPS.dll
2014-02-08 18:53 - 2014-02-02 01:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-08 18:53 - 2014-02-02 01:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-08 18:53 - 2014-02-02 01:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-08 18:53 - 2014-02-02 01:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-08 18:53 - 2014-02-02 01:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
2014-02-08 18:53 - 2014-02-02 01:42 - 13616456 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll
2010-02-24 01:14 - 2010-02-24 01:14 - 00041472 _____ () C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll
2010-02-24 01:14 - 2010-02-24 01:14 - 00071680 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll
2010-02-24 01:11 - 2010-02-24 01:11 - 00076288 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll
2010-02-24 01:12 - 2010-02-24 01:12 - 00186880 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll
2010-02-24 01:14 - 2010-02-24 01:14 - 00050688 _____ () C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:4CF61E54

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SRS Premium Sound.lnk => C:\Windows\pss\SRS Premium Sound.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Chrisi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk => C:\Windows\pss\LimeWire On Startup.lnk.Startup
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ADSMTray => C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
MSCONFIG\startupreg: Arabica => C:\Program Files (x86)\Arabica\Astart.exe
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe"
MSCONFIG\startupreg: ETDWare => %ProgramFiles%\Elantech\ETDCtrl.exe
MSCONFIG\startupreg: HPLJ Config => C:\Program Files (x86)\Hewlett-Packard\hp LaserJet 1150_1300\SetConfig.exe -c Direct -p USB -pn "" -n 0 -l  -sl 120000
MSCONFIG\startupreg: PCMAgent => "C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe"
MSCONFIG\startupreg: PlayMovie => "C:\Program Files (x86)\ASUS\AI TouchMedia\PlayMovie\PMVService.exe"
MSCONFIG\startupreg: Pokki => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RemoteControl9 => "C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe"
MSCONFIG\startupreg: SmartAudio => C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SweetIM => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
MSCONFIG\startupreg: UpdateLBPShortCut => "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
MSCONFIG\startupreg: UpdatePSTShortCut => "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
MSCONFIG\startupreg: Wireless Console 3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/03/2014 07:28:42 AM) (Source: Application Hang) (User: )
Description: Programm OneClick.exe, Version 14.0.1000.89 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 23b4

Startzeit: 01cf6607031a2a30

Endzeit: 683

Anwendungspfad: C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe

Berichts-ID: 148f62b5-d283-11e3-9955-20cf30d3113a

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40152895

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40152895

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/03/2014 07:22:38 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40151881

Error: (05/03/2014 07:22:38 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40151881

Error: (05/03/2014 07:22:38 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/03/2014 07:22:37 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40150882

Error: (05/03/2014 07:22:37 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40150882

Error: (05/03/2014 07:22:37 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (05/03/2014 08:29:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.1.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/03/2014 08:29:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (05/03/2014 07:45:40 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.1.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/03/2014 07:45:39 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (05/02/2014 03:47:39 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (04/30/2014 06:34:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (04/30/2014 06:34:48 AM) (Source: BugCheck) (User: )
Description: 0x00000050 (0xfffff8a010425000, 0x0000000000000000, 0xfffff80002e6e664, 0x0000000000000000)C:\Windows\MEMORY.DMP043014-76159-01

Error: (04/30/2014 06:34:39 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Apple Mobile Device" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/30/2014 06:34:39 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device erreicht.

Error: (04/30/2014 06:34:06 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎30.‎04.‎2014 um 06:32:33 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (05/03/2014 07:28:42 AM) (Source: Application Hang)(User: )
Description: OneClick.exe14.0.1000.8923b401cf6607031a2a30683C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe148f62b5-d283-11e3-9955-20cf30d3113a

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40152895

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40152895

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/03/2014 07:22:38 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40151881

Error: (05/03/2014 07:22:38 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40151881

Error: (05/03/2014 07:22:38 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/03/2014 07:22:37 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40150882

Error: (05/03/2014 07:22:37 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40150882

Error: (05/03/2014 07:22:37 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second


==================== Memory info ===========================

Percentage of memory in use: 52%
Total physical RAM: 4020.51 MB
Available physical RAM: 1890.53 MB
Total Pagefile: 8039.2 MB
Available Pagefile: 5288.88 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:4.71 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:329.79 GB) (Free:269.5 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0237A506)
Partition 1: (Not Active) - (Size=20 GB) - (Type=1C)
Partition 2: (Active) - (Size=116 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=330 GB) - (Type=OF Extended)

==================== End Of Log ============================
Addition von Schritt 4 (:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by Chrisi (administrator) on CHRISIS-PC on 03-05-2014 08:40:58
Running from C:\Users\Chrisi\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe
() C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(PC Drivers Headquarters) C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACESWD.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(asus) C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [CNAP3 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [228520 2012-06-14] (CANON INC.)
HKLM\...\Run: [ASUS WebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Boingo Wi-Fi] => C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-11] ()
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-04] (ASUS)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKU\.DEFAULT\...\RunOnce: [Del847210838] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del"
HKU\.DEFAULT\...\RunOnce: [Del1020404068] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del"
HKU\.DEFAULT\...\RunOnce: [Del1285189931] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del"
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [GoogleChromeAutoLaunch_6D9C14969CF754B6DCD021D8861E9586] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632 2014-02-02] (Google Inc.)
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [Driver Whiz] => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [3976560 2013-09-19] (PC Drivers Headquarters)
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59240 2012-02-23] (Apple Inc.)
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\RunOnce: [Application Restart #3] - C:\Users\Chrisi\AppData\Local\Pokki\Engine\pokki.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Chrisi\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\MountPoints2: G - G:\MMMTest.EXE
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKLM-x32 - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKCU - URL hxxp://www.searchgol.com/?q={searchTerms}&affID=121562&tt=gc_&babsrc=SP_ss_Btisdt7&mntrId=40294E5D60632631
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {1ACC87D6-CB2B-4CAF-9280-6549842407C9} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 213.33.99.70 80.120.17.70

FireFox:
========
FF ProfilePath: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Chrisi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeploytk.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npnul32.dll (mozilla.org)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\staged [2012-09-29]
FF Extension: Playboost Gamebar - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{A79D8B60-1FF0-47F0-8E79-8CDE1FECB0FD} [2011-05-22]
FF HKLM-x32\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKLM-x32\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]
FF HKCU\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06]

Chrome:
=======
CHR HomePage: hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT
CHR StartupUrls: "hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&SSPV=", "hxxp://search.gboxapp.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Unity Player) - C:\Users\Chrisi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Extension: (RemoveTheAdApp) - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjfpnamnoijjcejdohcdjkbbkjcfpind [2014-02-13]
CHR Extension: (Google Wallet) - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-05-28]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software)
S2 vToolbarUpdater18.1.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-04-28] (AVG Technologies)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-03] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-07] ()
S3 usbio; C:\Windows\System32\Drivers\dsiarhwprog_x64.sys [51600 2007-02-08] (Thesycon GmbH, Germany)
S1 gkduysrp; \??\C:\Windows\system32\drivers\gkduysrp.sys [X]
U3 tmlwf;
U3 tmwfp;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-03 08:40 - 2014-05-03 08:41 - 00025980 _____ () C:\Users\Chrisi\Desktop\FRST.txt
2014-05-03 08:27 - 2014-05-03 08:27 - 00022802 _____ () C:\Malwarebytes Anti Malware.txt
2014-05-03 07:54 - 2014-05-03 08:32 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-03 07:54 - 2014-05-03 07:54 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-03 07:54 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-03 07:54 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-03 07:54 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-03 07:52 - 2014-05-03 07:53 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Chrisi\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-03 07:43 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-03 07:40 - 2014-05-03 07:43 - 00000000 ____D () C:\AdwCleaner
2014-05-03 07:38 - 2014-05-03 07:38 - 01310621 _____ () C:\Users\Chrisi\Desktop\adwcleaner.exe
2014-05-03 07:25 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-03 07:25 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-03 07:25 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-03 07:25 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-02 10:12 - 2014-05-03 08:40 - 00000000 ____D () C:\FRST
2014-05-02 10:11 - 2014-05-02 10:11 - 02062336 _____ (Farbar) C:\Users\Chrisi\Desktop\FRST64.exe
2014-04-30 06:34 - 2014-04-30 06:34 - 00276128 _____ () C:\Windows\Minidump\043014-76159-01.dmp
2014-04-29 07:50 - 2014-04-29 11:34 - 22004221 _____ () C:\Users\Chrisi\Documents\Böden in der Tierhaltuhng.pptx
2014-04-28 17:44 - 2014-04-28 17:44 - 00276128 _____ () C:\Windows\Minidump\042814-43789-01.dmp
2014-04-28 16:41 - 2014-04-28 16:41 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-23 09:24 - 2014-05-03 08:27 - 00000000 ____D () C:\ProgramData\CeheapMee
2014-04-22 21:48 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 21:48 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 21:48 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 21:48 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 21:48 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 21:48 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 21:48 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 21:48 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 21:48 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 21:48 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 21:48 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 21:48 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 21:48 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 21:48 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 21:48 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 21:48 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 21:48 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 21:48 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 21:48 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 21:48 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 21:48 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 21:48 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 21:48 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 21:48 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 21:48 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 21:48 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 21:48 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 21:48 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 21:48 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 21:48 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 21:48 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 21:48 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 21:48 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 21:48 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 21:48 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 21:48 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 21:48 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 21:48 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 21:48 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 21:48 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 21:48 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 21:48 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 21:48 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 21:48 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-22 20:04 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-22 20:04 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-22 20:04 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-22 20:04 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-22 20:04 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-22 20:04 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-22 20:04 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-22 20:04 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-22 20:04 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-22 20:04 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-22 20:04 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-22 20:04 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-22 19:40 - 2014-04-22 19:40 - 00000000 ____D () C:\Program Files (x86)\RemoveTheAdApp
2014-04-05 15:35 - 2014-04-05 15:35 - 00276072 _____ () C:\Windows\Minidump\040514-189962-01.dmp
2014-04-05 13:13 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-04-05 13:13 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-04-05 13:13 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-04-05 13:13 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-04-05 13:11 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-04-05 13:11 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-04-05 13:10 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-05 13:10 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

==================== One Month Modified Files and Folders =======

2014-05-03 08:41 - 2014-05-03 08:40 - 00025980 _____ () C:\Users\Chrisi\Desktop\FRST.txt
2014-05-03 08:40 - 2014-05-02 10:12 - 00000000 ____D () C:\FRST
2014-05-03 08:38 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-03 08:38 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-03 08:35 - 2010-11-11 05:41 - 01841037 _____ () C:\Windows\WindowsUpdate.log
2014-05-03 08:32 - 2014-05-03 07:54 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-03 08:30 - 2010-11-11 06:42 - 00001641 _____ () C:\Windows\system32\ServiceFilter.ini
2014-05-03 08:30 - 2010-11-11 06:40 - 00000000 ____D () C:\Program Files\P4G
2014-05-03 08:29 - 2010-11-11 06:28 - 00309510 _____ () C:\Windows\PFRO.log
2014-05-03 08:29 - 2010-11-11 06:10 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-03 08:29 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-03 08:29 - 2009-07-14 06:51 - 00081240 _____ () C:\Windows\setupact.log
2014-05-03 08:27 - 2014-05-03 08:27 - 00022802 _____ () C:\Malwarebytes Anti Malware.txt
2014-05-03 08:27 - 2014-04-23 09:24 - 00000000 ____D () C:\ProgramData\CeheapMee
2014-05-03 08:27 - 2014-02-13 10:10 - 00000000 ____D () C:\ProgramData\RemoveTheAdApp
2014-05-03 08:27 - 2013-11-21 11:32 - 00000000 ____D () C:\ProgramData\SSearchh-NewTab
2014-05-03 08:27 - 2013-11-21 11:31 - 00000000 ____D () C:\ProgramData\surf and akeep
2014-05-03 08:27 - 2013-11-21 11:28 - 00000000 ____D () C:\ProgramData\SSearrch-NewTab
2014-05-03 08:27 - 2013-11-21 11:27 - 00000000 ____D () C:\ProgramData\Surf  anD  keeep
2014-05-03 08:27 - 2013-11-21 11:23 - 00000000 ____D () C:\ProgramData\SeAirch-NewaTaB
2014-05-03 08:27 - 2013-11-21 11:22 - 00000000 ____D () C:\ProgramData\SuruF anod Keep
2014-05-03 08:27 - 2013-09-15 18:26 - 00000000 ____D () C:\ProgramData\BitGuard
2014-05-03 08:21 - 2012-06-11 22:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-03 07:54 - 2014-05-03 07:54 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-03 07:53 - 2014-05-03 07:52 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Chrisi\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-03 07:50 - 2013-05-13 11:25 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392.job
2014-05-03 07:46 - 2013-08-22 15:50 - 00001360 _____ () C:\Users\Chrisi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-05-03 07:46 - 2013-08-22 15:50 - 00001313 _____ () C:\Users\Chrisi\Desktop\Search.lnk
2014-05-03 07:43 - 2014-05-03 07:40 - 00000000 ____D () C:\AdwCleaner
2014-05-03 07:43 - 2013-04-22 19:26 - 00000999 _____ () C:\Users\Chrisi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-03 07:43 - 2011-01-06 11:19 - 00001055 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-03 07:43 - 2011-01-06 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
2014-05-03 07:43 - 2011-01-06 11:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-03 07:43 - 2010-12-24 18:28 - 00001156 _____ () C:\Users\Chrisi\Desktop\Internet Explorer.lnk
2014-05-03 07:43 - 2010-11-11 06:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-03 07:38 - 2014-05-03 07:38 - 01310621 _____ () C:\Users\Chrisi\Desktop\adwcleaner.exe
2014-05-02 10:11 - 2014-05-02 10:11 - 02062336 _____ (Farbar) C:\Users\Chrisi\Desktop\FRST64.exe
2014-04-30 06:58 - 2009-08-04 11:51 - 00704972 _____ () C:\Windows\system32\perfh007.dat
2014-04-30 06:58 - 2009-08-04 11:51 - 00152520 _____ () C:\Windows\system32\perfc007.dat
2014-04-30 06:58 - 2009-07-14 07:13 - 01635912 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-30 06:34 - 2014-04-30 06:34 - 00276128 _____ () C:\Windows\Minidump\043014-76159-01.dmp
2014-04-30 06:34 - 2011-08-28 15:44 - 00000000 ____D () C:\Windows\Minidump
2014-04-29 18:21 - 2012-06-11 22:42 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 18:21 - 2012-06-11 22:42 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 18:21 - 2011-06-25 17:49 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 16:01 - 2014-05-03 07:25 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-03 07:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-03 07:25 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-03 07:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:34 - 2014-04-29 07:50 - 22004221 _____ () C:\Users\Chrisi\Documents\Böden in der Tierhaltuhng.pptx
2014-04-28 17:44 - 2014-04-28 17:44 - 00276128 _____ () C:\Windows\Minidump\042814-43789-01.dmp
2014-04-28 16:41 - 2014-04-28 16:41 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-28 16:40 - 2013-06-28 06:33 - 00050464 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-04-25 22:14 - 2011-05-03 15:16 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-04-25 14:24 - 2013-03-21 19:21 - 00000000 ____D () C:\Windows\rescache
2014-04-23 12:39 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-23 09:24 - 2013-11-21 11:22 - 00000000 ____D () C:\ProgramData\2f628f5734a24aae
2014-04-23 09:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 21:50 - 2010-12-25 11:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-22 21:47 - 2013-08-15 23:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-22 21:43 - 2011-08-07 17:24 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-22 20:18 - 2013-11-21 11:54 - 00000000 ____D () C:\ProgramData\sUrf  and Keeapp
2014-04-22 20:07 - 2010-11-11 06:43 - 00000000 ____D () C:\Windows\SysWOW64\K_Series_ScreenSaver_EN dir
2014-04-22 19:58 - 2013-11-08 20:59 - 00000000 ____D () C:\Users\Chrisi\AppData\Roaming\BitTorrent
2014-04-22 19:58 - 2013-11-08 20:29 - 00000000 ____D () C:\Program Files (x86)\LimeWire
2014-04-22 19:56 - 2013-11-09 19:29 - 00000000 ____D () C:\ProgramData\eMule
2014-04-22 19:40 - 2014-04-22 19:40 - 00000000 ____D () C:\Program Files (x86)\RemoveTheAdApp
2014-04-08 19:42 - 2009-07-14 06:45 - 00513160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-08 19:13 - 2010-12-25 09:17 - 01610192 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-08 19:10 - 2010-12-25 12:01 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-08 19:09 - 2010-12-25 11:57 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-08 19:08 - 2010-12-25 11:57 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-08 19:08 - 2010-12-25 11:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-06 12:24 - 2011-01-07 15:02 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-04-06 12:24 - 2011-01-07 15:02 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-04-05 15:35 - 2014-04-05 15:35 - 00276072 _____ () C:\Windows\Minidump\040514-189962-01.dmp
2014-04-05 15:32 - 2013-03-15 15:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-05 15:32 - 2010-12-24 18:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-04-05 15:25 - 2010-12-25 19:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-04-03 09:51 - 2014-05-03 07:54 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-05-03 07:54 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-05-03 07:54 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Files to move or delete:
====================
C:\Users\Chrisi\wlsetup-web.exe


Some content of TEMP:
====================
C:\Users\Chrisi\AppData\Local\Temp\32393-671455-limewire.exe
C:\Users\Chrisi\AppData\Local\Temp\Ainstde.exe
C:\Users\Chrisi\AppData\Local\Temp\AMPing.exe
C:\Users\Chrisi\AppData\Local\Temp\AskSLib.dll
C:\Users\Chrisi\AppData\Local\Temp\atl80.dll
C:\Users\Chrisi\AppData\Local\Temp\AutoRun.exe
C:\Users\Chrisi\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Chrisi\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Chrisi\AppData\Local\Temp\drm_dyndata_7380011.dll
C:\Users\Chrisi\AppData\Local\Temp\EAD415.exe
C:\Users\Chrisi\AppData\Local\Temp\EAD4F58.exe
C:\Users\Chrisi\AppData\Local\Temp\EAD86B0.exe
C:\Users\Chrisi\AppData\Local\Temp\EADC86C.exe
C:\Users\Chrisi\AppData\Local\Temp\eauninstall.exe
C:\Users\Chrisi\AppData\Local\Temp\EBUD76A.EXE
C:\Users\Chrisi\AppData\Local\Temp\EBUD9AB.DLL
C:\Users\Chrisi\AppData\Local\Temp\First15.exe
C:\Users\Chrisi\AppData\Local\Temp\GenericUninstall.exe
C:\Users\Chrisi\AppData\Local\Temp\installerdll.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll88319950.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll88421319.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll89448773.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll89449740.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll89474092.dll
C:\Users\Chrisi\AppData\Local\Temp\installerdll89500846.dll
C:\Users\Chrisi\AppData\Local\Temp\InstallManager_BAB_BAB.exe
C:\Users\Chrisi\AppData\Local\Temp\mfc80.dll
C:\Users\Chrisi\AppData\Local\Temp\mfc80u.dll
C:\Users\Chrisi\AppData\Local\Temp\mfcm80.dll
C:\Users\Chrisi\AppData\Local\Temp\mfcm80u.dll
C:\Users\Chrisi\AppData\Local\Temp\msvcm80.dll
C:\Users\Chrisi\AppData\Local\Temp\msvcp80.dll
C:\Users\Chrisi\AppData\Local\Temp\msvcr80.dll
C:\Users\Chrisi\AppData\Local\Temp\NEW71C5.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\oct725D.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\oct74AB.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\oct8BA3.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\octED0F.tmp.exe
C:\Users\Chrisi\AppData\Local\Temp\oi_{FFAEBA27-728F-4A9A-BF0F-4C86497B234F}.exe
C:\Users\Chrisi\AppData\Local\Temp\Quarantine.exe
C:\Users\Chrisi\AppData\Local\Temp\rootsupd.exe
C:\Users\Chrisi\AppData\Local\Temp\scrubber.exe
C:\Users\Chrisi\AppData\Local\Temp\Setup.exe
C:\Users\Chrisi\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Chrisi\AppData\Local\Temp\The Sims 2_uninst.exe
C:\Users\Chrisi\AppData\Local\Temp\TmDbg32.dll
C:\Users\Chrisi\AppData\Local\Temp\TmDbg64.dll
C:\Users\Chrisi\AppData\Local\Temp\uninst1.exe
C:\Users\Chrisi\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Chrisi\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Chrisi\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Chrisi\AppData\Local\Temp\VP6Install.exe
C:\Users\Chrisi\AppData\Local\Temp\VP6VFW.dll
C:\Users\Chrisi\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe
C:\Users\Chrisi\AppData\Local\Temp\WSSetup.exe
C:\Users\Chrisi\AppData\Local\Temp\ytd_bu10_setup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 12:38

==================== End Of Log ============================
--- --- ---


FRST von Schritt 4 (:

Grüße,
Christina

Bootsektor 03.05.2014 21:52
Hallo Christina,

wie schauts denn nach diesen Schritten aus?

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
Task: {07CFAB6D-AD2D-4F33-8CBA-2159C9D9EBA5} - \dsmonitor No Task File <==== ATTENTION
Task: {17957954-02E4-4CD4-902A-593786D8E7EE} - \DealPly No Task File <==== ATTENTION
Task: {8B3427B0-CEB4-4F76-A148-63166870379C} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {F77554FF-153A-430B-A868-4694F6D84EB0} - \Advanced System Protector_startup No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:4CF61E54
MSCONFIG\startupreg: SweetIM => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKCU - URL hxxp://www.searchgol.com/?q={searchTerms}&affID=121562&tt=gc_&babsrc=SP_ss_Btisdt7&mntrId=40294E5D60632631
FF HKLM-x32\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\Program Files (x86)\RemoveTheAdApp
C:\ProgramData\SSearchh-NewTab
C:\ProgramData\CeheapMee
C:\ProgramData\SSearchh-NewTab
C:\ProgramData\surf and akeep
C:\ProgramData\SSearrch-NewTab
C:\ProgramData\Surf  anD  keeep
C:\ProgramData\SeAirch-NewaTaB
C:\ProgramData\SuruF anod Keep
C:\ProgramData\RemoveTheAdApp
cmd: dir C:\ProgramData\2f628f5734a24aae /s
C:\Users\Chrisi\AppData\Local\Temp\*.exe
C:\Users\Chrisi\AppData\Local\Temp\*.dll

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Schritt 2
Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern :kaffee:

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt 3
Starte noch einmal FRST.
  • Setze den Haken bei addition.txt und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
  • Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

Chrisi0104 04.05.2014 18:32
Fixlog:


Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-05-2014
Ran by Chrisi at 2014-05-04 09:48:47 Run:1
Running from C:\Users\Chrisi\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {07CFAB6D-AD2D-4F33-8CBA-2159C9D9EBA5} - \dsmonitor No Task File <==== ATTENTION
Task: {17957954-02E4-4CD4-902A-593786D8E7EE} - \DealPly No Task File <==== ATTENTION
Task: {8B3427B0-CEB4-4F76-A148-63166870379C} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {F77554FF-153A-430B-A868-4694F6D84EB0} - \Advanced System Protector_startup No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:4CF61E54
MSCONFIG\startupreg: SweetIM => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKCU - URL hxxp://www.searchgol.com/?q={searchTerms}&affID=121562&tt=gc_&babsrc=SP_ss_Btisdt7&mntrId=40294E5D60632631
FF HKLM-x32\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKLM-x32\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
FF HKCU\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\Program Files (x86)\RemoveTheAdApp
C:\ProgramData\SSearchh-NewTab
C:\ProgramData\CeheapMee
C:\ProgramData\SSearchh-NewTab
C:\ProgramData\surf and akeep
C:\ProgramData\SSearrch-NewTab
C:\ProgramData\Surf  anD  keeep
C:\ProgramData\SeAirch-NewaTaB
C:\ProgramData\SuruF anod Keep
C:\ProgramData\RemoveTheAdApp
cmd: dir C:\ProgramData\2f628f5734a24aae /s
C:\Users\Chrisi\AppData\Local\Temp\*.exe
C:\Users\Chrisi\AppData\Local\Temp\*.dll
       
*****************

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{07CFAB6D-AD2D-4F33-8CBA-2159C9D9EBA5} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{07CFAB6D-AD2D-4F33-8CBA-2159C9D9EBA5} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\dsmonitor => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{17957954-02E4-4CD4-902A-593786D8E7EE} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{17957954-02E4-4CD4-902A-593786D8E7EE} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPly => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8B3427B0-CEB4-4F76-A148-63166870379C} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8B3427B0-CEB4-4F76-A148-63166870379C} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPlyUpdate => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F77554FF-153A-430B-A868-4694F6D84EB0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F77554FF-153A-430B-A868-4694F6D84EB0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Advanced System Protector_startup => Key deleted successfully.
C:\ProgramData\Temp => ":4CF61E54" ADS removed successfully.
"C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe" => File/Directory not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\URL => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\e_ed@jlbulxy.co.uk => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\iy.3u@eyvyxiayou.co.uk => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\5otii.7eioe@oarduxrsydmioy.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\bxorueo-5euo@eyoa-gsdyo.org => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\rbsx-oojv@acpwzz.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\uuao.hfi@e-ytsa.co.uk => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ift@hfzfav.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\xwdscxp-8@rbpuaadzvnfx.org => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\o7-2zuhqa@j-upoovpj.co.uk => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\iy.3u@eyvyxiayou.co.uk => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\e_ed@jlbulxy.co.uk => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\5otii.7eioe@oarduxrsydmioy.net => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\bxorueo-5euo@eyoa-gsdyo.org => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\rbsx-oojv@acpwzz.net => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\uuao.hfi@e-ytsa.co.uk => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\ift@hfzfav.net => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\xwdscxp-8@rbpuaadzvnfx.org => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\o7-2zuhqa@j-upoovpj.co.uk => Value deleted successfully.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
C:\Program Files (x86)\RemoveTheAdApp => Moved successfully.
C:\ProgramData\SSearchh-NewTab => Moved successfully.
C:\ProgramData\CeheapMee => Moved successfully.
"C:\ProgramData\SSearchh-NewTab" => File/Directory not found.
C:\ProgramData\surf and akeep => Moved successfully.
C:\ProgramData\SSearrch-NewTab => Moved successfully.
C:\ProgramData\Surf  anD  keeep => Moved successfully.
C:\ProgramData\SeAirch-NewaTaB => Moved successfully.
C:\ProgramData\SuruF anod Keep => Moved successfully.
C:\ProgramData\RemoveTheAdApp => Moved successfully.

=========  dir C:\ProgramData\2f628f5734a24aae /s =========

 Datentr�ger in Laufwerk C: ist OS
 Volumeseriennummer: 4029-C3A3

 Verzeichnis von C:\ProgramData\2f628f5734a24aae

23.04.2014  09:24    <DIR>          .
23.04.2014  09:24    <DIR>          ..
23.04.2014  09:24              510 2a0b23fa8d6e74d486038a07a4bcc3e8.ini
23.04.2014  09:24              497 8c84dcdc46445dd686038a07a4bcc3e8.ini
13.02.2014  10:10              832 c639ec01ae8d99a986038a07a4bcc3e8.ini
22.04.2014  19:40            24.404 {0E2E068B-E266-EAA6-DED1-C74744249D22}
22.04.2014  20:00              852 {4820778D-AB0D-6D18-C316-52A6A0E1D507}
22.04.2014  20:00            31.098 {4820778D-AB0D-6D18-C316-52A6A0E1D507}.old
22.04.2014  20:01              854 {A35CA8FF-CB7D-8361-1CB9-83219CD11C78}
22.04.2014  20:01            31.246 {A35CA8FF-CB7D-8361-1CB9-83219CD11C78}.old
22.04.2014  20:01              854 {C670DCAE-E392-AA32-6F42-143C7FC4BDFD}
22.04.2014  20:01            31.202 {C670DCAE-E392-AA32-6F42-143C7FC4BDFD}.old
              10 Datei(en),        122.349 Bytes

    Anzahl der angezeigten Dateien:
              10 Datei(en),        122.349 Bytes
              2 Verzeichnis(se),  4.921.393.152 Bytes frei

========= End of CMD: =========

C:\Users\Chrisi\AppData\Local\Temp\*.exe => Moved successfully.
C:\Users\Chrisi\AppData\Local\Temp\*.dll => Moved successfully.


The system needed a reboot.

==== End of Fixlog ====
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f828c20d5853484b9a059d5cf3cefdd3
# engine=18126
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-04 12:45:00
# local_time=2014-05-04 02:45:00 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5892 16777213 88 94 2230614 50047600 0 0
# scanned=304545
# found=27
# cleaned=0
# scan_time=17089
sh=CC60F4497EE2328E43E89474C412D75A90BE2E1B ft=1 fh=c71c0011692cd549 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SeAirch-NewaTaB\1.dll.vir"
sh=4C1A736DBF800B83580265A6C6AE2EBD13E0B3CC ft=1 fh=c71c0011b8eb39ed vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SeAirch-NewaTaB\1.x64.dll.vir"
sh=CC60F4497EE2328E43E89474C412D75A90BE2E1B ft=1 fh=c71c0011692cd549 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SSearchh-NewTab\e.dll.vir"
sh=4C1A736DBF800B83580265A6C6AE2EBD13E0B3CC ft=1 fh=c71c0011b8eb39ed vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SSearchh-NewTab\e.x64.dll.vir"
sh=CC60F4497EE2328E43E89474C412D75A90BE2E1B ft=1 fh=c71c0011692cd549 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SSearrch-NewTab\RUdUY_Pt.dll.vir"
sh=4C1A736DBF800B83580265A6C6AE2EBD13E0B3CC ft=1 fh=c71c0011b8eb39ed vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SSearrch-NewTab\RUdUY_Pt.x64.dll.vir"
sh=CC60F4497EE2328E43E89474C412D75A90BE2E1B ft=1 fh=c71c0011692cd549 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Surf  anD  keeep\DNO8QHTu_U.dll.vir"
sh=4C1A736DBF800B83580265A6C6AE2EBD13E0B3CC ft=1 fh=c71c0011b8eb39ed vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Surf  anD  keeep\DNO8QHTu_U.x64.dll.vir"
sh=CC60F4497EE2328E43E89474C412D75A90BE2E1B ft=1 fh=c71c0011692cd549 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\surf and akeep\5WXF.dll.vir"
sh=4C1A736DBF800B83580265A6C6AE2EBD13E0B3CC ft=1 fh=c71c0011b8eb39ed vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\surf and akeep\5WXF.x64.dll.vir"
sh=CC60F4497EE2328E43E89474C412D75A90BE2E1B ft=1 fh=c71c0011692cd549 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SuruF anod Keep\f3EpFOPD.dll.vir"
sh=4C1A736DBF800B83580265A6C6AE2EBD13E0B3CC ft=1 fh=c71c0011b8eb39ed vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SuruF anod Keep\f3EpFOPD.x64.dll.vir"
sh=4A66D225A931F85DE8B2D883473BCAD3DA97B222 ft=1 fh=edfe128122e4c9ee vn="Variante von Win32/TrojanDownloader.Agent.AFD Trojaner" ac=I fn="C:\Users\Chrisi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MBE8UEO2\agent2[1].exe"
sh=1761DEC1D292493209C752E9E60DF4194EDF07C9 ft=1 fh=69a1cb780a91249e vn="Variante von Win32/AdWare.MultiPlug.Q Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Local\Temp\{6C554449-1900-4CFB-AE10-5122B7B666BF}\Addons\newtab_setup.exe"
sh=D0ED3419172B9109AF4F4B0808551EC87EE4B1B2 ft=1 fh=d64ccab4ec8ae833 vn="Variante von Win32/AdWare.MultiPlug.Q Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Local\Temp\{7C291B25-D6A6-4EB1-AC5A-9E84A7CA39D3}\Addons\newtab_setup.exe"
sh=8162234FD90E07FE5A2BA13C4D7972210379614A ft=1 fh=919df97c942441e8 vn="Variante von Win32/AdWare.MultiPlug.Q Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Local\Temp\{E4AACDA8-C5A6-4759-A5B2-8D843F49EF5E}\Addons\newtab_setup.exe"
sh=B6C31F54E8B62878107AADC9D12A02ECE69221C5 ft=1 fh=2d7fe9644cfd84b4 vn="Variante von Win32/AdWare.MultiPlug.Q Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Local\Temp\{E4AACDA8-C5A6-4759-A5B2-8D843F49EF5E}\Addons\ytab_setup.exe"
sh=73BA0C0921CF662ED2666E7670B2739F0AF70942 ft=1 fh=14bb2e820a91249e vn="Variante von Win32/AdWare.MultiPlug.Q Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Local\Temp\{E5DF44FB-06E8-408D-A266-4ECA3E3C660D}\Addons\newtab_setup.exe"
sh=CB7859C4B3CFF02F617BC48136C7420601856DE5 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\5otii.7eioe@oarduxrsydmioy.net\content\bg.js"
sh=A4F17C92BB2139404B51A6425720FB0FB6DB6E79 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\bxorueo-5euo@eyoa-gsdyo.org\content\bg.js"
sh=3463D0A08F72446F8E5B2744D7BC435724A3B7C1 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\e_ed@jlbulxy.co.uk\content\bg.js"
sh=202E704FA83A501BA2B7168BB15C9AE76443DD98 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\ift@hfzfav.net\content\bg.js"
sh=3604674BCB50E06E713F8BB0DFDAE9E103517F1B ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\iy.3u@eyvyxiayou.co.uk\content\bg.js"
sh=7541CF36BA81CA794381868ADFD372DC5A7B51BB ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\o7-2zuhqa@j-upoovpj.co.uk\content\bg.js"
sh=8F70EE641F9F4BDE745F5E7D8E31689B71FBE9C3 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\rbsx-oojv@acpwzz.net\content\bg.js"
sh=90386EE926884A940FBEF433E46E81AB37567BDF ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\uuao.hfi@e-ytsa.co.uk\content\bg.js"
sh=5C5EE406D4F46A148F82B776398877B47C85DC38 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\xwdscxp-8@rbpuaadzvnfx.org\content\bg.js"
Addition:

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2014
Ran by Chrisi at 2014-05-04 19:31:10
Running from C:\Users\Chrisi\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 15.2.1 - Hewlett-Packard) Hidden
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Action Replay Code Manager (HKLM-x32\...\Action Replay Code Manager_is1) (Version:  - )
Action Replay DSi Code Manager (HKLM-x32\...\Action Replay DSi Code Manager_is1) (Version:  - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
AI TouchMedia (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.3512 - CyberLink Corp.)
AI TouchMedia (x32 Version: 6.0.3512 - CyberLink Corp.) Hidden
Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version:  - Oberon Media)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft PhotoStudio 5.5 (HKLM-x32\...\{85309D89-7BE9-4094-BB17-24999C6118FC}) (Version:  - ArcSoft)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.10 - ASUS)
ASUS AP Bank (HKLM-x32\...\ASUS AP Bank_is1) (Version: 1.0.0.0 - ASUSTEK)
ASUS Data Security Manager (HKLM-x32\...\{FA2092C5-7979-412D-A962-6485274AE1EE}) (Version: 1.00.0014 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS)
ASUS MultiFrame (HKLM-x32\...\{9D48531D-2135-49FC-BC29-ACCDA5396A76}) (Version: 1.0.0021 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.40 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0008 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS)
ASUS Video Magic (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.4015 - CyberLink Corp.)
ASUS Video Magic (x32 Version: 6.0.4015 - CyberLink Corp.) Hidden
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus)
ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.)
ATI AVIVO64 Codecs (Version: 11.6.0.50811 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{FDB61EAE-7C1D-7EB6-E1EE-14528E3EB266}) (Version: 3.0.790.0 - ATI Technologies, Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0006 - ASUS)
Boingo Wi-Fi (HKLM-x32\...\{B653A2EC-D816-4498-A4FD-651047AB9DC9}) (Version: 1.7.0048 - Boingo Wireless, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Inkjet Printer Driver Add-On Module (HKLM\...\CANONIJINBOXADDON100) (Version:  - )
Canon MP150 (HKLM\...\{CA9A3609-3ECC-4574-8824-A8161A71A603}) (Version:  - )
Canon MP450 (HKLM\...\{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD}) (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0811.2122.36462 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help English (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help French (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help German (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0811.2122.36462 - ATI) Hidden
ccc-utility64 (Version: 2010.0811.2122.36462 - ATI) Hidden
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version:  - Oberon Media)
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.127.0.61 - Conexant)
ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.8 - ASUS)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink MediaShow Espresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 5.0.1606_25588 - CyberLink Corp.)
CyberLink MediaShow Espresso (x32 Version: 5.0.1606_25588 - CyberLink Corp.) Hidden
CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
CyberLink PhotoNow (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2609a - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 8.0.2609a - CyberLink Corp.) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3009.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3009.50 - CyberLink Corp.) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version:  - Microsoft)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.50.56 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Dream Day Wedding Married in Manhattan (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115233673}) (Version:  - Oberon Media)
Driver Whiz (HKLM-x32\...\{0B540DA4-41AE-4B79-BEAB-0F07E09669AB}) (Version: 8.1 - Driver Whiz)
EasyBits GO (HKCU\...\Game Organizer) (Version:  - EasyBits Media)
ETDWare PS/2-x64 7.0.5.11_WHQL (HKLM\...\Elantech) (Version: 7.0.5.11 - ELAN Microelectronics Corp.)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.6 - ASUS)
Free Audio CD Burner version 2.0.23.430 (HKLM-x32\...\Free Audio CD Burner_is1) (Version: 2.0.23.430 - DVDVideoSoft Ltd.)
Free Studio version 5.1.4 (HKLM-x32\...\Free Studio_is1) (Version:  - DVDVideoSoft Limited.)
Free Video to iPod Converter version 4.2.20.602 (HKLM-x32\...\Free Video to iPod Converter_is1) (Version:  - DVDVideoSoft Limited.)
Free YouTube to iPhone Converter version 2.12.2.430 (HKLM-x32\...\Free YouTube to iPhone Converter_is1) (Version: 2.12.2.430 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Game Park Console (HKLM-x32\...\{C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1) (Version: 6.2.0.2 - Oberon Media, Inc.)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version:  - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
iCloud (HKLM\...\{8B485965-8EFE-464A-842F-CF8F18C3DFD7}) (Version: 1.1.0.40 - Apple Inc.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel)
iTunes (HKLM\...\{A535111D-95C8-487F-869E-CE4C239972D2}) (Version: 11.1.1.11 - Apple Inc.)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.17.1 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version:  - )
Microsoft Age of Empires Expansion (HKLM-x32\...\Age of Empires Expansion 1.0) (Version:  - )
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft IntelliPoint 8.0 (HKLM\...\{563F041C-DFDB-437B-A1E8-E141E0906076}) (Version: 8.0.225.0 - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.)
Mozilla Firefox (3.6.25) (HKLM-x32\...\Mozilla Firefox (3.6.25)) (Version: 3.6.25 (de) - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Nero Burning ROM (x32 Version: 12.5.5001 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero BurningROM 12 (HKLM-x32\...\{4AC7B4F3-1B75-4BA7-82C4-F9A22B430A3D}) (Version: 12.5.00900 - Nero AG)
Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20200 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Origin (HKLM-x32\...\Origin) (Version: 8.2.6.475 - Electronic Arts, Inc.)
Photo Pos Pro (HKLM-x32\...\Photo Pos Pro) (Version: 1.82 - PowerOfSoftware Ltd.)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Piggly FREE (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-1173957}) (Version:  - Oberon Media)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung SPP-2040 Series (HKLM-x32\...\Samsung SPP-2040 Series) (Version:  - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Smileyville FREE (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117396510}) (Version:  - Oberon Media)
Spotify (HKCU\...\Spotify) (Version: 0.8.0.1035.g278cc85b - Spotify AB)
syncables desktop SE (HKLM-x32\...\{BBED4F90-7AE5-40BF-AFB7-1B495692F4AB}) (Version: 5.5.615.9518 - syncables)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.89 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities 2014) (Version: 14.0.1000.89 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.89 - TuneUp Software) Hidden
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
USB2.0 UVC VGA WebCam (HKLM\...\USB2.0 UVC VGA WebCam) (Version: 5.8.54000.207 - Sonix)
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Wildlife Park 2 - Diamant Edition v2.1 (HKLM-x32\...\Wildlife Park 2 - Diamant Edition_is1) (Version:  - Deep Silver)
Wildlife Park 2 Patch 2.00 (HKLM-x32\...\{804ED550-B39F-474D-AC6C-49C35511F14D}) (Version: 2.00 - Deep Silver)
Windows Live Anmelde-Assistent (HKLM-x32\...\{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}) (Version: 5.000.818.6 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 14.0.8052.1208 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8051.1204 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{8C1E2925-14F8-45AA-B999-1E2A74BF5607}) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.30.3 - ASUS)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.17 - ASUS)

==================== Restore Points  =========================

04-05-2014 13:30:24 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1996944C-2B9D-4B4A-B0B2-EE2CFEDAF895} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: {20358F01-9835-42D6-A560-66CDBABA72B2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-11] (Google Inc.)
Task: {30100829-E315-434A-8DAF-F8A56D3C1BDF} - System32\Tasks\{D966A093-25AF-4F5C-B405-293CB50783B2} => C:\Program Files (x86)\Skype\\Phone\Skype.exe
Task: {3D78D475-DC4E-45E6-B6F7-F6BF9035CB0B} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-08-12] (ASUS)
Task: {3DFA37DD-EC98-4350-B3FF-3BA85E4239E7} - System32\Tasks\Driver Whiz-RTMScanRunOnce => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {448D442C-6479-459D-908E-1B061F6863FA} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS)
Task: {51833F6D-D31E-4A5E-BB8A-513600955B45} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-18] (ASUS)
Task: {51DD94A8-211B-49DD-8165-91E637C6950D} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [2010-06-09] (asus)
Task: {6106E81F-AD81-454F-8ACF-E9AA88B90149} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: {7CAE0B06-2142-43E2-845A-BDE11313A684} - System32\Tasks\Driver Whiz-RTMUpdater => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {80C0079A-4D5D-40B9-97BC-608B2DCF2E3A} - System32\Tasks\Driver Whiz-RTMScan => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {88B41851-B488-4123-90AB-D07E013E05F3} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-08-30] (TuneUp Software)
Task: {A7141105-EF19-4843-A669-75F9D781477F} - System32\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-11] (Google Inc.)
Task: {B0052C91-18AF-4BC0-BBF8-5D4523F14E88} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {E0049FA9-9617-455F-81DC-D77FA8996288} - System32\Tasks\Driver Whiz-RTMRules => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters)
Task: {E4050643-0C31-48C4-A028-7F6B455F8ADE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {F94A5F66-378C-4E12-B60A-965E7D8180B3} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-02-14 17:03 - 2006-12-04 02:26 - 00022016 _____ () C:\Windows\System32\SPPB1l6.DLL
2013-08-30 10:51 - 2013-08-30 10:51 - 00757048 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2007-06-15 20:28 - 2007-06-15 20:28 - 00104960 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt64.dll
2007-06-02 02:52 - 2007-06-02 02:52 - 00159744 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
2010-03-16 03:48 - 2010-03-16 03:48 - 00148816 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\EcaremeDLL.dll
2010-11-11 06:20 - 2010-11-11 06:20 - 00030032 _____ () C:\Windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll
2010-11-11 06:20 - 2010-11-11 06:20 - 00931840 _____ () C:\Windows\assembly\GAC_64\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll
2010-07-15 02:11 - 2010-07-15 02:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2008-10-01 09:02 - 2008-10-01 09:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2010-11-11 06:43 - 2007-11-30 21:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
2010-03-16 03:48 - 2010-03-16 03:48 - 01754448 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
2013-09-19 10:00 - 2013-09-19 10:00 - 00684416 _____ () C:\Program Files (x86)\Driver Whiz\Driver Whiz\ThemePack.DriverWhiz.dll
2013-09-19 09:31 - 2013-09-19 09:31 - 00412064 _____ () C:\Program Files (x86)\Driver Whiz\Driver Whiz\Agent.Communication.XmlSerializers.dll
2010-11-11 05:53 - 2010-04-06 08:29 - 00244904 _____ () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2010-11-11 06:43 - 2009-07-28 04:11 - 00289336 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdt.exe
2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2007-06-15 20:28 - 2007-06-15 20:28 - 00147456 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
2007-06-02 03:08 - 2007-06-02 03:08 - 00143360 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
2009-11-12 21:01 - 2009-11-12 21:01 - 00873768 _____ () C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMediaLibrary.dll
2009-11-12 21:01 - 2009-11-12 21:01 - 00013096 _____ () C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvcPS.dll
2010-02-24 01:14 - 2010-02-24 01:14 - 00041472 _____ () C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll
2010-02-24 01:14 - 2010-02-24 01:14 - 00071680 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll
2010-02-24 01:11 - 2010-02-24 01:11 - 00076288 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll
2010-02-24 01:12 - 2010-02-24 01:12 - 00186880 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll
2010-02-24 01:14 - 2010-02-24 01:14 - 00050688 _____ () C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll
2014-02-08 18:53 - 2014-02-02 01:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-08 18:53 - 2014-02-02 01:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-08 18:53 - 2014-02-02 01:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-08 18:53 - 2014-02-02 01:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-08 18:53 - 2014-02-02 01:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SRS Premium Sound.lnk => C:\Windows\pss\SRS Premium Sound.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Chrisi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk => C:\Windows\pss\LimeWire On Startup.lnk.Startup
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ADSMTray => C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
MSCONFIG\startupreg: Arabica => C:\Program Files (x86)\Arabica\Astart.exe
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe"
MSCONFIG\startupreg: ETDWare => %ProgramFiles%\Elantech\ETDCtrl.exe
MSCONFIG\startupreg: HPLJ Config => C:\Program Files (x86)\Hewlett-Packard\hp LaserJet 1150_1300\SetConfig.exe -c Direct -p USB -pn "" -n 0 -l  -sl 120000
MSCONFIG\startupreg: PCMAgent => "C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe"
MSCONFIG\startupreg: PlayMovie => "C:\Program Files (x86)\ASUS\AI TouchMedia\PlayMovie\PMVService.exe"
MSCONFIG\startupreg: Pokki => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RemoteControl9 => "C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe"
MSCONFIG\startupreg: SmartAudio => C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SweetIM => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
MSCONFIG\startupreg: UpdateLBPShortCut => "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
MSCONFIG\startupreg: UpdatePSTShortCut => "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
MSCONFIG\startupreg: Wireless Console 3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/04/2014 07:27:41 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/04/2014 07:26:27 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/04/2014 09:56:39 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/04/2014 09:56:36 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/04/2014 09:56:26 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/04/2014 00:33:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/03/2014 11:41:26 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/03/2014 07:28:42 AM) (Source: Application Hang) (User: )
Description: Programm OneClick.exe, Version 14.0.1000.89 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 23b4

Startzeit: 01cf6607031a2a30

Endzeit: 683

Anwendungspfad: C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe

Berichts-ID: 148f62b5-d283-11e3-9955-20cf30d3113a

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40152895

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40152895


System errors:
=============
Error: (05/04/2014 10:04:47 AM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/04/2014 09:50:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Client Virtualization Handler" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (05/04/2014 09:50:47 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Client Virtualization Handler erreicht.

Error: (05/04/2014 09:50:00 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.1.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/04/2014 09:49:54 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (05/04/2014 09:37:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.1.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/04/2014 09:37:48 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (05/03/2014 08:29:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.1.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/03/2014 08:29:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (05/03/2014 07:45:40 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.1.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office Sessions:
=========================
Error: (05/04/2014 07:27:41 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/04/2014 07:26:27 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Chrisi\Desktop\esetsmartinstaller_deu.exe

Error: (05/04/2014 09:56:39 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Chrisi\Desktop\esetsmartinstaller_deu.exe

Error: (05/04/2014 09:56:36 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Chrisi\Desktop\esetsmartinstaller_deu.exe

Error: (05/04/2014 09:56:26 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Chrisi\Desktop\esetsmartinstaller_deu.exe

Error: (05/04/2014 00:33:55 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/03/2014 11:41:26 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/03/2014 07:28:42 AM) (Source: Application Hang)(User: )
Description: OneClick.exe14.0.1000.8923b401cf6607031a2a30683C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe148f62b5-d283-11e3-9955-20cf30d3113a

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40152895

Error: (05/03/2014 07:22:39 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40152895


==================== Memory info ===========================

Percentage of memory in use: 54%
Total physical RAM: 4020.51 MB
Available physical RAM: 1816.34 MB
Total Pagefile: 8039.2 MB
Available Pagefile: 5395.86 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:4.94 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:329.79 GB) (Free:269.5 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0237A506)
Partition 1: (Not Active) - (Size=20 GB) - (Type=1C)
Partition 2: (Active) - (Size=116 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=330 GB) - (Type=OF Extended)

==================== End Of Log ============================

Bootsektor 04.05.2014 22:14
Mir fehlt noch das aktuelle FRST-log. Bitte poste mir das noch :)

Chrisi0104 05.05.2014 08:49
Ich habs eigentlich eh gepostet, keine Ahnung was da passiert ist :wtf:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by Chrisi (administrator) on CHRISIS-PC on 04-05-2014 19:30:34
Running from C:\Users\Chrisi\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
(ASUS) C:\Windows\AsScrPro.exe
() C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(PC Drivers Headquarters) C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(CyberLink) C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACESWD.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(asus) C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdt.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [CNAP3 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [228520 2012-06-14] (CANON INC.)
HKLM\...\Run: [ASUS WebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Boingo Wi-Fi] => C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-11] ()
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-04] (ASUS)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKU\.DEFAULT\...\RunOnce: [Del847210838] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del"
HKU\.DEFAULT\...\RunOnce: [Del1020404068] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del"
HKU\.DEFAULT\...\RunOnce: [Del1285189931] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del"
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [GoogleChromeAutoLaunch_6D9C14969CF754B6DCD021D8861E9586] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632 2014-02-02] (Google Inc.)
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [Driver Whiz] => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [3976560 2013-09-19] (PC Drivers Headquarters)
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59240 2012-02-23] (Apple Inc.)
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\RunOnce: [Application Restart #3] - C:\Users\Chrisi\AppData\Local\Pokki\Engine\pokki.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Chrisi\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\MountPoints2: G - G:\MMMTest.EXE

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKLM-x32 - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {1ACC87D6-CB2B-4CAF-9280-6549842407C9} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 213.33.99.70 80.120.17.70

FireFox:
========
FF ProfilePath: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Chrisi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeploytk.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npnul32.dll (mozilla.org)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\staged [2012-09-29]
FF Extension: Playboost Gamebar - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{A79D8B60-1FF0-47F0-8E79-8CDE1FECB0FD} [2011-05-22]

Chrome:
=======
CHR HomePage: hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT
CHR StartupUrls: "hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&SSPV=", "hxxp://search.gboxapp.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Unity Player) - C:\Users\Chrisi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Extension: (Google Wallet) - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-05-28]

==================== Services (Whitelisted) =================

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software)
S2 vToolbarUpdater18.1.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-04-28] (AVG Technologies)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-04] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-07] ()
S3 usbio; C:\Windows\System32\Drivers\dsiarhwprog_x64.sys [51600 2007-02-08] (Thesycon GmbH, Germany)
S1 gkduysrp; \??\C:\Windows\system32\drivers\gkduysrp.sys [X]
U3 tmlwf;
U3 tmwfp;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-04 09:56 - 2014-05-04 09:56 - 02347384 _____ (ESET) C:\Users\Chrisi\Desktop\esetsmartinstaller_deu.exe
2014-05-03 08:41 - 2014-05-03 08:42 - 00044268 _____ () C:\Users\Chrisi\Desktop\Addition.txt
2014-05-03 08:40 - 2014-05-04 19:30 - 00020559 _____ () C:\Users\Chrisi\Desktop\FRST.txt
2014-05-03 08:27 - 2014-05-03 08:27 - 00022802 _____ () C:\Malwarebytes Anti Malware.txt
2014-05-03 07:54 - 2014-05-04 18:47 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-03 07:54 - 2014-05-03 07:54 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-03 07:54 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-03 07:54 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-03 07:54 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-03 07:52 - 2014-05-03 07:53 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Chrisi\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-03 07:43 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-03 07:40 - 2014-05-03 07:43 - 00000000 ____D () C:\AdwCleaner
2014-05-03 07:38 - 2014-05-03 07:38 - 01310621 _____ () C:\Users\Chrisi\Desktop\adwcleaner.exe
2014-05-03 07:25 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-03 07:25 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-03 07:25 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-03 07:25 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-02 10:12 - 2014-05-04 19:30 - 00000000 ____D () C:\FRST
2014-05-02 10:11 - 2014-05-02 10:11 - 02062336 _____ (Farbar) C:\Users\Chrisi\Desktop\FRST64.exe
2014-04-30 06:34 - 2014-04-30 06:34 - 00276128 _____ () C:\Windows\Minidump\043014-76159-01.dmp
2014-04-29 07:50 - 2014-04-29 11:34 - 22004221 _____ () C:\Users\Chrisi\Documents\Böden in der Tierhaltuhng.pptx
2014-04-28 17:44 - 2014-04-28 17:44 - 00276128 _____ () C:\Windows\Minidump\042814-43789-01.dmp
2014-04-28 16:41 - 2014-04-28 16:41 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-22 21:48 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 21:48 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 21:48 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 21:48 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 21:48 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 21:48 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 21:48 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 21:48 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 21:48 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 21:48 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 21:48 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 21:48 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 21:48 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 21:48 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 21:48 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 21:48 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 21:48 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 21:48 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 21:48 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 21:48 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 21:48 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 21:48 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 21:48 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 21:48 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 21:48 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 21:48 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 21:48 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 21:48 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 21:48 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 21:48 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 21:48 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 21:48 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 21:48 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 21:48 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 21:48 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 21:48 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 21:48 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 21:48 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 21:48 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 21:48 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 21:48 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 21:48 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 21:48 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 21:48 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-22 20:04 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-22 20:04 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-22 20:04 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-22 20:04 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-22 20:04 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-22 20:04 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-22 20:04 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-22 20:04 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-22 20:04 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-22 20:04 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-22 20:04 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-22 20:04 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-22 20:04 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-05 15:35 - 2014-04-05 15:35 - 00276072 _____ () C:\Windows\Minidump\040514-189962-01.dmp
2014-04-05 13:13 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-04-05 13:13 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-04-05 13:13 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-04-05 13:13 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-04-05 13:11 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-04-05 13:11 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-04-05 13:10 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-05 13:10 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

==================== One Month Modified Files and Folders =======

2014-05-04 19:30 - 2014-05-03 08:40 - 00020559 _____ () C:\Users\Chrisi\Desktop\FRST.txt
2014-05-04 19:30 - 2014-05-02 10:12 - 00000000 ____D () C:\FRST
2014-05-04 19:21 - 2012-06-11 22:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-04 19:07 - 2010-11-11 05:41 - 02006999 _____ () C:\Windows\WindowsUpdate.log
2014-05-04 18:59 - 2013-05-13 11:25 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392.job
2014-05-04 18:47 - 2014-05-03 07:54 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-04 09:59 - 2010-11-11 06:10 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-04 09:58 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-04 09:58 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-04 09:56 - 2014-05-04 09:56 - 02347384 _____ (ESET) C:\Users\Chrisi\Desktop\esetsmartinstaller_deu.exe
2014-05-04 09:54 - 2013-05-13 11:25 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392
2014-05-04 09:54 - 2010-11-11 06:10 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-04 09:51 - 2010-11-11 06:40 - 00000000 ____D () C:\Program Files\P4G
2014-05-04 09:50 - 2014-02-13 10:10 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-05-04 09:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-04 09:49 - 2009-07-14 06:51 - 00081352 _____ () C:\Windows\setupact.log
2014-05-04 09:48 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-05-03 08:42 - 2014-05-03 08:41 - 00044268 _____ () C:\Users\Chrisi\Desktop\Addition.txt
2014-05-03 08:30 - 2010-11-11 06:42 - 00001641 _____ () C:\Windows\system32\ServiceFilter.ini
2014-05-03 08:29 - 2010-11-11 06:28 - 00309510 _____ () C:\Windows\PFRO.log
2014-05-03 08:27 - 2014-05-03 08:27 - 00022802 _____ () C:\Malwarebytes Anti Malware.txt
2014-05-03 08:27 - 2013-09-15 18:26 - 00000000 ____D () C:\ProgramData\BitGuard
2014-05-03 07:54 - 2014-05-03 07:54 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-03 07:54 - 2014-05-03 07:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-03 07:53 - 2014-05-03 07:52 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Chrisi\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-03 07:46 - 2013-08-22 15:50 - 00001360 _____ () C:\Users\Chrisi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-05-03 07:46 - 2013-08-22 15:50 - 00001313 _____ () C:\Users\Chrisi\Desktop\Search.lnk
2014-05-03 07:43 - 2014-05-03 07:40 - 00000000 ____D () C:\AdwCleaner
2014-05-03 07:43 - 2013-04-22 19:26 - 00000999 _____ () C:\Users\Chrisi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-03 07:43 - 2011-01-06 11:19 - 00001055 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-03 07:43 - 2011-01-06 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
2014-05-03 07:43 - 2011-01-06 11:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-03 07:43 - 2010-12-24 18:28 - 00001156 _____ () C:\Users\Chrisi\Desktop\Internet Explorer.lnk
2014-05-03 07:43 - 2010-11-11 06:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-03 07:38 - 2014-05-03 07:38 - 01310621 _____ () C:\Users\Chrisi\Desktop\adwcleaner.exe
2014-05-02 10:11 - 2014-05-02 10:11 - 02062336 _____ (Farbar) C:\Users\Chrisi\Desktop\FRST64.exe
2014-04-30 06:58 - 2009-08-04 11:51 - 00704972 _____ () C:\Windows\system32\perfh007.dat
2014-04-30 06:58 - 2009-08-04 11:51 - 00152520 _____ () C:\Windows\system32\perfc007.dat
2014-04-30 06:58 - 2009-07-14 07:13 - 01635912 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-30 06:34 - 2014-04-30 06:34 - 00276128 _____ () C:\Windows\Minidump\043014-76159-01.dmp
2014-04-30 06:34 - 2011-08-28 15:44 - 00000000 ____D () C:\Windows\Minidump
2014-04-29 18:21 - 2012-06-11 22:42 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 18:21 - 2012-06-11 22:42 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 18:21 - 2011-06-25 17:49 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 16:01 - 2014-05-03 07:25 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-03 07:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-03 07:25 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-03 07:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:34 - 2014-04-29 07:50 - 22004221 _____ () C:\Users\Chrisi\Documents\Böden in der Tierhaltuhng.pptx
2014-04-28 17:44 - 2014-04-28 17:44 - 00276128 _____ () C:\Windows\Minidump\042814-43789-01.dmp
2014-04-28 16:41 - 2014-04-28 16:41 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-28 16:40 - 2013-06-28 06:33 - 00050464 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-04-25 22:14 - 2011-05-03 15:16 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-04-25 14:24 - 2013-03-21 19:21 - 00000000 ____D () C:\Windows\rescache
2014-04-23 12:39 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-23 09:24 - 2013-11-21 11:22 - 00000000 ____D () C:\ProgramData\2f628f5734a24aae
2014-04-23 09:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 21:50 - 2010-12-25 11:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-22 21:47 - 2013-08-15 23:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-22 21:43 - 2011-08-07 17:24 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-22 20:18 - 2013-11-21 11:54 - 00000000 ____D () C:\ProgramData\sUrf  and Keeapp
2014-04-22 20:07 - 2010-11-11 06:43 - 00000000 ____D () C:\Windows\SysWOW64\K_Series_ScreenSaver_EN dir
2014-04-22 19:58 - 2013-11-08 20:59 - 00000000 ____D () C:\Users\Chrisi\AppData\Roaming\BitTorrent
2014-04-22 19:58 - 2013-11-08 20:29 - 00000000 ____D () C:\Program Files (x86)\LimeWire
2014-04-22 19:56 - 2013-11-09 19:29 - 00000000 ____D () C:\ProgramData\eMule
2014-04-08 19:42 - 2009-07-14 06:45 - 00513160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-08 19:13 - 2010-12-25 09:17 - 01610192 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-08 19:10 - 2010-12-25 12:01 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-08 19:09 - 2010-12-25 11:57 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-08 19:08 - 2010-12-25 11:57 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-08 19:08 - 2010-12-25 11:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-06 12:24 - 2011-01-07 15:02 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-04-06 12:24 - 2011-01-07 15:02 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-04-05 15:35 - 2014-04-05 15:35 - 00276072 _____ () C:\Windows\Minidump\040514-189962-01.dmp
2014-04-05 15:32 - 2013-03-15 15:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-05 15:32 - 2010-12-24 18:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-04-05 15:25 - 2010-12-25 19:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

Files to move or delete:
====================
C:\Users\Chrisi\wlsetup-web.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 12:38

==================== End Of Log ============================
--- --- ---

Bootsektor 05.05.2014 10:24
Hallo Christina,

sehr gut, danke :)

Du hast da noch pur-esult und conduit im chrome-browser.

Schritt 1
In deinem Chrome Browser ist websearch.pur-esult als Startseite eingetragen
Stelle nach dieser Anleitung deine Startseite neu ein.

Schritt 2
  • Gehe in deinem Chrome Browser auf Einstellungen (das ist das Symbol rechts neben der Adresszeile im Browser was aus drei horizontalen Linien besteht)
  • Klicke dort auf Einstellungen
  • Gehe zu dem Punkt Beim Start
  • Gehe auf bestimmte Seite oder Seiten öffnen
  • entferne hier conduit.com und gboxapp.com (falls vorhanden), lösche es und lege eine andere Startseite fest (normal ist hier google.com eingetragen)

Schritt 3

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\5otii.7eioe@oarduxrsydmioy.net\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\bxorueo-5euo@eyoa-gsdyo.org\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\e_ed@jlbulxy.co.uk\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\ift@hfzfav.net\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\iy.3u@eyvyxiayou.co.uk\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\o7-2zuhqa@j-upoovpj.co.uk\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\rbsx-oojv@acpwzz.net\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\uuao.hfi@e-ytsa.co.uk\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\xwdscxp-8@rbpuaadzvnfx.org\

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



OK
So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber.
Abschließend räumen wir noch etwas auf, führen Updates durch und dann bekommst du noch etwas Lesestoff von mir.


Schritt 1
Falls Du Malwarebytes-Antimalware und den ESET-Onlinescan nicht mehr benötigst, kannst Du beide Programme einfach über die Programmdeinstallation deinstallieren.
Ich empfehle Dir aber zumindest Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen.

Schritt 2
Downloade dir bitte delfix auf deinen Desktop.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
  • DelFix entfernt u. a. alle verwendeten Programme und löscht sich abschließend selbst.
Falls nach Delfix noch Programme aus unserer Bereinigung vorhanden sein sollten, kannst du diese nun bedenkenlos löschen.

Updates / Programme aktualisieren

Schritt 1
Dein Firefox ist wirklich übelst alt :)
  • Mozilla Firefox
    Lade dir bitte von hier den aktuellen Firefox herunter.

  • Adobe Reader
Deinstalliere Deinen Reader und lade Dir die neueste Version von hier herunter. Schaue, ob sich noch etwas mit installieren möchte und entferne den Haken gegebenenfalls.
  • Internet Explorer
Im Internetexplorer ist eine Sicherheitslücke entdeckt worden, diese Lücke betrifft die Explorerversionen 6 - 11 und alle Betriebssysteme. Microsoft rät dazu, den Internetexplorer momentan nicht zu verwenden und auf einen alternativen Browser auszuweichen (Firefox, Chrome, Opera)

Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems.

Aktualität des Systems
Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.
  • Bitte überprüfe, ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Java
Du hattest eine veraltete Java-Version auf dem Rechner die wir in einem der vorherigen Schritte deinstalliert haben, denn Java ist eine große Sicherheitslücke auf deinem System, es werden immer wieder neue Schwachstellen entdeckt, die ausgenutzt werden um Rechner zu infizieren.

Falls du Java doch unbedingt benötigst, dann
  • Downloade dir bitte die neueste Java-Version von hier
  • Speichere die jxpiinstall.exe
  • Schließe alle laufenden Programme. Speziell deinen Browser.
  • Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 55 ) herunter laden.
  • Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.
und sorge dafür, dass Java automatisch updated.
Dazu:
  • öffne Java
  • klicke auf den Reiter Update
  • klicke auf: Benachrichtung ausgeben: Vor dem Download setze den Haken bei Automatisch nach Updates suchen
  • klicke auf Erweitert
  • ändere das Intervall mindestens auf wöchentlich
und schalte das Browser-Plugin aus.
Hier findest du eine Anleitung dazu.

Antivirensoftware
  • Gehe sicher immer eine Antiviren Software installiert zu haben und halte diese unbedingt aktuell.

Zusätzlicher Schutz
  • MalwareBytes Anti-Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On-Demand Scantool welches viele aktuelle Malware erkennt und auch entfernt.
    Aktualisiere das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf einen Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Systemleistung
Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu TFC
Halte dich fern von jeglichen Registry Cleanern.
Diese schaden deinem System mehr als dass sie es schneller machen.

Verhaltensregeln zum sichereren Surfen
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
  • Achte besonders bei der Installation von Programmen darauf, ob sich weitere Software mitinstallieren möchte, wähle wo immer es geht die benutzerdefinierte Installation und wähle alles ab, was nichts mit dem Programm zu tun hat, welches du dir installieren möchtest.

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind.

Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun.

Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun.

Chrisi0104 05.05.2014 10:39
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-05-2014
Ran by Chrisi at 2014-05-05 11:34:53 Run:2
Running from C:\Users\Chrisi\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\5otii.7eioe@oarduxrsydmioy.net\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\bxorueo-5euo@eyoa-gsdyo.org\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\e_ed@jlbulxy.co.uk\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\ift@hfzfav.net\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\iy.3u@eyvyxiayou.co.uk\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\o7-2zuhqa@j-upoovpj.co.uk\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\rbsx-oojv@acpwzz.net\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\uuao.hfi@e-ytsa.co.uk\
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\xwdscxp-8@rbpuaadzvnfx.org\
       
*****************

C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\5otii.7eioe@oarduxrsydmioy.net => Moved successfully.
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\bxorueo-5euo@eyoa-gsdyo.org => Moved successfully.
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\e_ed@jlbulxy.co.uk => Moved successfully.
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\ift@hfzfav.net => Moved successfully.
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\iy.3u@eyvyxiayou.co.uk => Moved successfully.
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\o7-2zuhqa@j-upoovpj.co.uk => Moved successfully.
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\rbsx-oojv@acpwzz.net => Moved successfully.
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\uuao.hfi@e-ytsa.co.uk => Moved successfully.
C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions\staged\xwdscxp-8@rbpuaadzvnfx.org => Moved successfully.

==== End of Fixlog ====

Bootsektor 05.05.2014 10:45
Sehr gut :) dann weiter.

Chrisi0104 05.05.2014 10:56
Nochmals vielen, vielen Dank für die tolle Hilfe!

Die nervigen Werbungen sind endlich weg, und ich werde alles dafür tun,
dass das in Zukunft auch so bleibt :)

Bootsektor 05.05.2014 19:11
Hallo Christina,

gern geschehen, alles Gute für dich. :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 06:37 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131