Guten Morgen,
es hat etwas gedauert, aber hier nun die neuen Dateien: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 13.08.2014
Suchlauf-Zeit: 07:20:14
Logdatei: mbam.txt
Administrator: Ja
Version: 2.00.2.1012
Malware Datenbank: v2014.08.13.03
Rootkit Datenbank: v2014.08.04.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert
Betriebssystem: Windows 7
CPU: x64
Dateisystem: NTFS
Benutzer: axel
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 305822
Verstrichene Zeit: 10 Min, 38 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registrierungsschlüssel: 8
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [38df893d1f5c67cf8b705849c43e26da],
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [38df893d1f5c67cf8b705849c43e26da],
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, In Quarantäne, [6bacb70fe794a591e6ae5c8fab574eb2],
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT, In Quarantäne, [51c618ae54271224ae497371956d966a],
PUP.Optional.ConduitSearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CltMngSvc, In Quarantäne, [24f3a026017a989e75158b906f95a957],
PUP.Optional.BabylonToolBar.A, HKU\S-1-5-21-1092720162-2847117269-3509739149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BabylonToolbar, Löschen bei Neustart, [96818046abd0280e1d0e66bcb15305fb],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-1092720162-2847117269-3509739149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Löschen bei Neustart, [b85fd6f0dd9e25113a231d01010326da],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-1092720162-2847117269-3509739149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Löschen bei Neustart, [4ec9aa1cdd9e56e0409daa581ae9bf41],
Registrierungswerte: 2
PUP.Optional.NextLive.A, HKU\S-1-5-21-1092720162-2847117269-3509739149-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|NextLive, C:\Windows\SysWOW64\rundll32.exe "C:\Users\axel\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l, Löschen bei Neustart, [080f54725f1ccb6bef8875eaf80906fa]
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT|InstallDir, C:\PROGRA~2\SearchProtect, In Quarantäne, [51c618ae54271224ae497371956d966a]
Registrierungsdaten: 0
(No malicious items detected)
Ordner: 19
PUP.Optional.OpenCandy, C:\Users\axel\AppData\Roaming\OpenCandy, In Quarantäne, [e037f0d696e5bc7a3b18892c0ff35ba5],
PUP.Optional.OpenCandy, C:\Users\axel\AppData\Roaming\OpenCandy\134AE805546A4FF3B88D2FF4B6113F7F, In Quarantäne, [e037f0d696e5bc7a3b18892c0ff35ba5],
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE, In Quarantäne, [b1666165adce71c53f9e45701ce62cd4],
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3312806, In Quarantäne, [b1666165adce71c53f9e45701ce62cd4],
PUP.Optional.NextLive.A, C:\Users\axel\AppData\Roaming\newnext.me, In Quarantäne, [948380461467221449b5dcda3cc601ff],
PUP.Optional.NextLive.A, C:\Users\axel\AppData\Roaming\newnext.me\cache, In Quarantäne, [948380461467221449b5dcda3cc601ff],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.MindSpark.A, C:\Users\axel\AppData\LocalLow\TelevisionFanatic, In Quarantäne, [bf58a422dba0b1859faee0e66f93758b],
PUP.Optional.MindSpark.A, C:\Users\axel\AppData\LocalLow\TelevisionFanatic\bar, In Quarantäne, [bf58a422dba0b1859faee0e66f93758b],
PUP.Optional.MindSpark.A, C:\Users\axel\AppData\LocalLow\TelevisionFanatic\bar\Message, In Quarantäne, [bf58a422dba0b1859faee0e66f93758b],
PUP.Optional.MindSpark.A, C:\Users\axel\AppData\LocalLow\TelevisionFanatic\bar\Message\COMMON, In Quarantäne, [bf58a422dba0b1859faee0e66f93758b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect\Logs, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect\SearchProtect, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect\SearchProtect\Logs, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect\SearchProtect\rep, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect\UI, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect\UI\rep, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
Dateien: 52
PUP.Optional.NextLive.A, C:\Users\axel\AppData\Roaming\newnext.me\nengine.dll, In Quarantäne, [080f54725f1ccb6bef8875eaf80906fa],
PUP.Optional.Delta.A, C:\Users\axel\AppData\Roaming\OpenCandy\134AE805546A4FF3B88D2FF4B6113F7F\DeltaTB.exe, In Quarantäne, [a17613b394e7ca6c21370a08768b6799],
PUP.Optional.Conduit.A, C:\Users\axel\Downloads\Setup_brie.exe, In Quarantäne, [3addfec8c1babb7b33324411ba47768a],
PUP.Optional.Somoto, C:\Users\axel\Downloads\WinZip175_multi_downloader-62Ia5GOi.exe, In Quarantäne, [c7500db97407a5919c60a49e4eb6d52b],
PUP.Optional.ClientConnect, C:\Users\axel\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll, In Quarantäne, [6cabeed8156681b550d9e2c8a95803fd],
PUP.Optional.ClientConnect, C:\Users\axel\AppData\Local\Conduit\Community Alerts\Alert.dll, In Quarantäne, [879044825a2162d492972a80fc053ec2],
PUP.Optional.ClientConnect, C:\Users\axel\AppData\Local\Conduit\CT3312806\Fun_Media_Bar_V10AutoUpdateHelper.exe, In Quarantäne, [e3347a4cc8b386b028015f4b15ece818],
PUP.Optional.Conduit.A, C:\Users\axel\AppData\Local\Conduit\CT3312806\Fun_Media_Bar_V10ToolbarHelper.exe, In Quarantäne, [8a8de3e33744b2842be754ec0ff18a76],
PUP.Optional.NextLive.A, C:\Users\axel\AppData\Local\genienext\nengine.dll, In Quarantäne, [cb4cf5d1ceadd066413616495da4f50b],
PUP.Optional.Conduit, C:\Windows\System32\Tasks\BackgroundContainer Startup Task, In Quarantäne, [db3c6d59d1aac76f12e179afa75d34cc],
PUP.Optional.OpenCandy, C:\Users\axel\AppData\Roaming\OpenCandy\134AE805546A4FF3B88D2FF4B6113F7F\5404.ico, In Quarantäne, [e037f0d696e5bc7a3b18892c0ff35ba5],
PUP.Optional.OpenCandy, C:\Users\axel\AppData\Roaming\OpenCandy\134AE805546A4FF3B88D2FF4B6113F7F\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [e037f0d696e5bc7a3b18892c0ff35ba5],
PUP.Optional.OpenCandy, C:\Users\axel\AppData\Roaming\OpenCandy\134AE805546A4FF3B88D2FF4B6113F7F\OCBrowserHelper_1.0.5.112.dll, In Quarantäne, [e037f0d696e5bc7a3b18892c0ff35ba5],
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3312806\SetupIcon.ico, In Quarantäne, [b1666165adce71c53f9e45701ce62cd4],
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3312806\UninstallerUI.exe, In Quarantäne, [b1666165adce71c53f9e45701ce62cd4],
PUP.Optional.NextLive.A, C:\Users\axel\AppData\Roaming\newnext.me\nengine.cookie, In Quarantäne, [948380461467221449b5dcda3cc601ff],
PUP.Optional.NextLive.A, C:\Users\axel\AppData\Roaming\newnext.me\cache\spark.bin, In Quarantäne, [948380461467221449b5dcda3cc601ff],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\1.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\a.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\b.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\c.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\d.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\e.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\f.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\g.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\h.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\i.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\j.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\k.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\l.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\m.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\n.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\o.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\p.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\q.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\r.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\s.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\t.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\u.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\v.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\w.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\wlu.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\x.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\y.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.PriceGong.A, C:\Users\axel\AppData\LocalLow\PriceGong\Data\z.txt, In Quarantäne, [3add22a428539e98597dffb90ef458a8],
PUP.Optional.MindSpark.A, C:\Users\axel\AppData\LocalLow\TelevisionFanatic\bar\Message\COMMON\8_step1.gif, In Quarantäne, [bf58a422dba0b1859faee0e66f93758b],
PUP.Optional.MindSpark.A, C:\Users\axel\AppData\LocalLow\TelevisionFanatic\bar\Message\COMMON\index.htm, In Quarantäne, [bf58a422dba0b1859faee0e66f93758b],
PUP.Optional.MindSpark.A, C:\Users\axel\AppData\LocalLow\TelevisionFanatic\bar\Message\COMMON\rebut4b.htm, In Quarantäne, [bf58a422dba0b1859faee0e66f93758b],
PUP.Optional.MindSpark.A, C:\Users\axel\AppData\LocalLow\TelevisionFanatic\bar\Message\COMMON\shield.png, In Quarantäne, [bf58a422dba0b1859faee0e66f93758b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
PUP.Optional.SearchProtect.A, C:\Users\axel\AppData\Local\SearchProtect\UI\rep\UIRepository.dat, In Quarantäne, [75a2378f5c1fdd59110f438838cab54b],
Physische Sektoren: 0
(No malicious items detected)
(end)
Code:
# AdwCleaner v3.304 - Bericht erstellt am 13/08/2014 um 08:16:57
# Aktualisiert 08/08/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium (64 bits)
# Benutzername : axel - AXEL-PC
# Gestartet von : C:\Users\axel\Desktop\adwcleaner_3.304.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\AVG Secure Search
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Conduit
Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar
Ordner Gelöscht : C:\Program Files (x86)\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\ICQ6Toolbar
Ordner Gelöscht : C:\Program Files (x86)\Fun_Media_Bar_V10
Ordner Gelöscht : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Windows\SysWOW64\SearchProtect
Ordner Gelöscht : C:\Users\axel\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\axel\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\axel\AppData\Local\genienext
Ordner Gelöscht : C:\Users\axel\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\axel\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\axel\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\axel\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\axel\AppData\LocalLow\TelevisionFanaticEI
Ordner Gelöscht : C:\Users\axel\AppData\LocalLow\Fun_Media_Bar_V10
Ordner Gelöscht : C:\Users\axel\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\axel\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\axel\Documents\Mobogenie
Datei Gelöscht : C:\Users\axel\daemonprocess.txt
Datei Gelöscht : C:\Users\axel\Desktop\eBay.lnk
***** [ Tasks ] *****
Task Gelöscht : BackgroundContainer Startup Task
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Mobogenie_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Mobogenie_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKCU\Software\5a28ad0e56fe844
Schlüssel Gelöscht : HKLM\SOFTWARE\5a28ad0e56fe844
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3312806
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{130A876E-28F8-41F2-911D-084E557B057A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A75BECDC-7CB5-482E-BECA-95D1C12B9EA1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{130A876E-28F8-41F2-911D-084E557B057A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{130A876E-28F8-41F2-911D-084E557B057A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A75BECDC-7CB5-482E-BECA-95D1C12B9EA1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{130A876E-28F8-41F2-911D-084E557B057A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A75BECDC-7CB5-482E-BECA-95D1C12B9EA1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A593528-2B3F-42DA-819A-151228C96060}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D1FFD07-915A-4D71-8E6B-AD92A4175805}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A5B9C0F5-5616-47CD-A95F-E43B488FACCF}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{130A876E-28F8-41F2-911D-084E557B057A}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{130A876E-28F8-41F2-911D-084E557B057A}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{130A876E-28F8-41F2-911D-084E557B057A}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{130A876E-28F8-41F2-911D-084E557B057A}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\Ciuvo
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\Tbccint_HKLM
Schlüssel Gelöscht : HKCU\Software\Fun_Media_Bar_V10
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BackgroundContainer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\TelevisionFanaticEI
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Fun_Media_Bar_V10
Schlüssel Gelöscht : HKLM\Software\AVG Secure Search
Schlüssel Gelöscht : HKLM\Software\AVG Security Toolbar
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\Software\Fun_Media_Bar_V10
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
***** [ Browser ] *****
-\\ Internet Explorer v9.0.8112.16476
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
*************************
AdwCleaner[R0].txt - [13122 octets] - [13/08/2014 08:14:08]
AdwCleaner[S0].txt - [12460 octets] - [13/08/2014 08:16:57]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12521 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by axel on 13.08.2014 at 8:27:36,46
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1092720162-2847117269-3509739149-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4A30EFD2-2C0D-4F02-8D94-1FEBBD5FD3B2}
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.08.2014 at 8:34:54,75
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2014
Ran by axel (administrator) on AXEL-PC on 13-08-2014 08:42:05
Running from C:\Users\axel\Desktop
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(1&1 Mail & Media GmbH) C:\Users\axel\AppData\Local\WEB.DE Application {sync-000021}\webde_onlinespeicher.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe
() C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero 2014\Nero BackItUp\NBAgent.exe
(1und1 Mail und Media GmbH) C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero 2014\Nero BackItUp\NBService\NBService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10144288 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [2703752 2010-03-25] (ELAN Microelectronics Corp.)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [NBAgent] => C:\Program Files (x86)\Nero\Nero 2014\Nero BackItUp\NBAgent.exe [2441552 2013-11-11] (Nero AG)
HKLM-x32\...\Run: [MailCheck IE Broker] => C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe [1810496 2014-04-24] (1und1 Mail und Media GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1092720162-2847117269-3509739149-1001\...\Run: [WEB.DE Application {sync-000021}] => C:\Users\axel\AppData\Local\WEB.DE Application {sync-000021}\webde_onlinespeicher.exe [873472 2013-08-27] (1&1 Mail & Media GmbH)
HKU\S-1-5-21-1092720162-2847117269-3509739149-1001\...\Run: [HP ENVY 4500 series (NET)] => C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe [3421216 2013-08-13] (Hewlett-Packard Co.)
HKU\S-1-5-21-1092720162-2847117269-3509739149-1001\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe [473352 2013-12-18] ()
HKU\S-1-5-21-1092720162-2847117269-3509739149-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-11-25] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe ()
Startup: C:\Users\axel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {79F3C4F4-3352-4679-B7D7-3A1113DB3CC1} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {BE12C62F-1542-4DA6-B56E-5C5704B8FF75} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {C7649EE0-FB8D-4B09-B00B-94D4239C9C9D} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7ADFA_deDE459
SearchScopes: HKCU - {D2B2354B-894B-4B66-A4B6-61CD4BDCFB55} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
BHO: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: WEB.DE MailCheck BHO -> {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} -> C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: WEB.DE MailCheck BHO -> {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} -> C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
Chrome:
=======
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-08-07] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-05-21] (Hewlett-Packard Company)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NBService; C:\Program Files (x86)\Nero\Nero 2014\Nero BackItUp\NBService\NBService.exe [267600 2013-11-11] (Nero AG)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-01] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-11] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-12-18] (Audials AG)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2010-12-08] (Windows (R) 2003 DDK 3790 provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-13 08:40 - 2014-08-13 08:41 - 00000000 ____D () C:\Users\axel\Desktop\FRST-OlderVersion
2014-08-13 08:34 - 2014-08-13 08:34 - 00000959 _____ () C:\Users\axel\Desktop\JRT.txt
2014-08-13 08:27 - 2014-08-13 08:27 - 00000000 ____D () C:\Windows\ERUNT
2014-08-13 08:26 - 2014-08-13 08:26 - 01016261 _____ (Thisisu) C:\Users\axel\Desktop\Junkware Removal Tool JRT.exe
2014-08-13 08:12 - 2014-08-13 08:12 - 01366203 _____ () C:\Users\axel\Desktop\adwcleaner_3.304.exe
2014-08-13 07:53 - 2014-08-13 08:17 - 00000000 ____D () C:\AdwCleaner
2014-08-13 07:49 - 2014-08-13 07:49 - 00012613 _____ () C:\Users\axel\Desktop\mbam.txt
2014-08-13 07:18 - 2014-08-13 08:22 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-13 07:18 - 2014-08-13 07:18 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-13 07:18 - 2014-08-13 07:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-13 07:18 - 2014-08-13 07:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-13 07:18 - 2014-08-13 07:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-13 07:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-13 07:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-13 07:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-13 05:39 - 2014-08-07 03:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 05:39 - 2014-08-07 03:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-12 07:17 - 2014-08-12 07:17 - 00018650 _____ () C:\ComboFix.txt
2014-08-12 06:48 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-12 06:48 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-12 06:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-12 06:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-12 06:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-12 06:48 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-12 06:48 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-12 06:48 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-12 06:47 - 2014-08-12 07:18 - 00000000 ____D () C:\Qoobox
2014-08-12 06:47 - 2014-08-12 07:14 - 00000000 ____D () C:\Windows\erdnt
2014-08-12 06:45 - 2014-08-12 06:45 - 05568206 ____R (Swearware) C:\Users\axel\Desktop\ComboFix.exe
2014-08-10 20:44 - 2014-08-10 20:46 - 00035344 _____ () C:\Users\axel\Desktop\Addition.txt
2014-08-10 20:42 - 2014-08-13 08:42 - 00016619 _____ () C:\Users\axel\Desktop\FRST.txt
2014-08-10 20:42 - 2014-08-13 08:42 - 00000000 ____D () C:\FRST
2014-08-10 20:38 - 2014-08-10 20:38 - 00000000 _____ () C:\Users\axel\defogger_reenable
2014-08-10 20:25 - 2014-08-13 08:40 - 02100224 _____ (Farbar) C:\Users\axel\Desktop\FRST64.exe
2014-08-10 20:14 - 2014-08-10 20:14 - 00000242 _____ () C:\Users\axel\Desktop\defogger_enable.log
2014-08-10 20:13 - 2014-08-10 20:13 - 00050477 _____ () C:\Users\axel\Desktop\Defogger.exe
2014-08-10 20:00 - 2014-08-10 20:39 - 00000470 _____ () C:\Users\axel\Desktop\defogger_disable.log
2014-08-07 08:50 - 2014-08-07 08:55 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-07 08:50 - 2014-08-07 08:55 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-06 10:32 - 2014-08-06 10:32 - 00004715 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-08-06 10:32 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-06 10:32 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-06 10:32 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-06 10:32 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-13 08:42 - 2014-08-10 20:42 - 00016619 _____ () C:\Users\axel\Desktop\FRST.txt
2014-08-13 08:42 - 2014-08-10 20:42 - 00000000 ____D () C:\FRST
2014-08-13 08:41 - 2014-08-13 08:40 - 00000000 ____D () C:\Users\axel\Desktop\FRST-OlderVersion
2014-08-13 08:40 - 2014-08-10 20:25 - 02100224 _____ (Farbar) C:\Users\axel\Desktop\FRST64.exe
2014-08-13 08:34 - 2014-08-13 08:34 - 00000959 _____ () C:\Users\axel\Desktop\JRT.txt
2014-08-13 08:27 - 2014-08-13 08:27 - 00000000 ____D () C:\Windows\ERUNT
2014-08-13 08:27 - 2009-07-14 06:45 - 00013936 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-13 08:27 - 2009-07-14 06:45 - 00013936 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-13 08:26 - 2014-08-13 08:26 - 01016261 _____ (Thisisu) C:\Users\axel\Desktop\Junkware Removal Tool JRT.exe
2014-08-13 08:22 - 2014-08-13 07:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-13 08:18 - 2011-11-25 16:11 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-13 08:18 - 2010-08-09 09:05 - 00873976 _____ () C:\Windows\PFRO.log
2014-08-13 08:18 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-13 08:18 - 2009-07-14 06:51 - 00132806 _____ () C:\Windows\setupact.log
2014-08-13 08:17 - 2014-08-13 07:53 - 00000000 ____D () C:\AdwCleaner
2014-08-13 08:17 - 2011-05-30 20:15 - 00000000 ____D () C:\Users\axel
2014-08-13 08:17 - 2010-08-09 08:16 - 01275129 _____ () C:\Windows\WindowsUpdate.log
2014-08-13 08:12 - 2014-08-13 08:12 - 01366203 _____ () C:\Users\axel\Desktop\adwcleaner_3.304.exe
2014-08-13 08:04 - 2011-11-25 16:11 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-13 07:49 - 2014-08-13 07:49 - 00012613 _____ () C:\Users\axel\Desktop\mbam.txt
2014-08-13 07:49 - 2012-04-02 11:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-13 07:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-08-13 07:18 - 2014-08-13 07:18 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-13 07:18 - 2014-08-13 07:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-13 07:18 - 2014-08-13 07:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-13 07:18 - 2014-08-13 07:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-13 05:45 - 2013-08-18 20:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 05:45 - 2012-02-12 12:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-13 05:44 - 2011-06-06 11:04 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 05:43 - 2014-07-10 16:55 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-12 07:18 - 2014-08-12 06:47 - 00000000 ____D () C:\Qoobox
2014-08-12 07:17 - 2014-08-12 07:17 - 00018650 _____ () C:\ComboFix.txt
2014-08-12 07:14 - 2014-08-12 06:47 - 00000000 ____D () C:\Windows\erdnt
2014-08-12 07:05 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-08-12 06:54 - 2011-05-30 20:26 - 00000000 ____D () C:\ProgramData\Temp
2014-08-12 06:45 - 2014-08-12 06:45 - 05568206 ____R (Swearware) C:\Users\axel\Desktop\ComboFix.exe
2014-08-11 17:46 - 2013-11-24 18:13 - 00050976 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-08-10 20:50 - 2014-01-26 13:07 - 00000000 ____D () C:\Program Files (x86)\StarMoney 9.0 S-Edition
2014-08-10 20:46 - 2014-08-10 20:44 - 00035344 _____ () C:\Users\axel\Desktop\Addition.txt
2014-08-10 20:39 - 2014-08-10 20:00 - 00000470 _____ () C:\Users\axel\Desktop\defogger_disable.log
2014-08-10 20:38 - 2014-08-10 20:38 - 00000000 _____ () C:\Users\axel\defogger_reenable
2014-08-10 20:14 - 2014-08-10 20:14 - 00000242 _____ () C:\Users\axel\Desktop\defogger_enable.log
2014-08-10 20:13 - 2014-08-10 20:13 - 00050477 _____ () C:\Users\axel\Desktop\Defogger.exe
2014-08-07 08:55 - 2014-08-07 08:50 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-07 08:55 - 2014-08-07 08:50 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-07 08:55 - 2013-12-30 14:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-07 08:55 - 2013-02-23 09:33 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-07 08:50 - 2013-02-23 09:33 - 00000000 ____D () C:\ProgramData\Avira
2014-08-07 03:52 - 2014-08-13 05:39 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:46 - 2014-08-13 05:39 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-06 10:33 - 2013-11-08 19:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-06 10:32 - 2014-08-06 10:32 - 00004715 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-08-06 10:32 - 2013-07-07 14:18 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-02 14:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-29 11:49 - 2013-03-13 07:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-29 11:49 - 2013-03-13 07:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-29 11:48 - 2013-03-13 07:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-25 12:55 - 2014-08-06 10:32 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-25 12:49 - 2014-08-06 10:32 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-25 12:49 - 2014-08-06 10:32 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-25 12:49 - 2014-08-06 10:32 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-20 16:40 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
Files to move or delete:
====================
C:\Users\axel\HP-Drucker_EN4500_1180.exe
Some content of TEMP:
====================
C:\Users\axel\AppData\Local\Temp\avgnt.exe
C:\Users\axel\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-07 11:00
==================== End Of Log ============================
--- --- --- |
So funktioniert es:
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
