Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Radio Canyon in der Symbolleiste obwohl deinstalliert (https://www.trojaner-board.de/159736-radio-canyon-symbolleiste-obwohl-deinstalliert.html)

antoenche 14.10.2014 23:17
Radio Canyon in der Symbolleiste obwohl deinstalliert
 
Hallo,
habe vor kurzem Windows 7 bekommen. Nach einiger Zeit und einigen Installationen oder/und Updates habe ich jetzt in der Symbolleiste "Radio Canyon". Habe keine Ahnung was das ist und habe es deshalb deinstalliert. Nur in der Symbolleiste wird es weiterhin angezeigt.

schrauber 15.10.2014 06:34
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


antoenche 15.10.2014 22:46
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-10-2014 02
Ran by Master (administrator) on MASTER-PC on 15-10-2014 23:40:48
Running from C:\Users\Master\Downloads
Loaded Profile: Master (Available profiles: Master)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\EXCEL.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
() C:\Program Files\mbot_de_160\mbot_de_160.exe
() C:\Users\Master\AppData\Local\mbot_de_160\upmbot_de_160.exe
() C:\Users\Master\AppData\Local\StormWatch\StormWatchApp.exe
(MyPCBackup.com) C:\Program Files\MyPC Backup\MyPC Backup.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Weather Protector LLC) C:\Users\Master\AppData\Local\StormWatch\StormWatch.exe
(Probit Software LTD) C:\Program Files\Easy Speed Check\easyspeedcheck.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1348904 2008-08-14] (Synaptics, Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432 2014-10-15] (AVAST Software)
HKLM\...\Run: [mbot_de_160] => C:\Program Files\mbot_de_160\mbot_de_160.exe [3977128 2014-10-15] ()
HKLM\...\RunOnce: [upmbot_de_160.exe] => C:\Users\Master\AppData\Local\mbot_de_160\upmbot_de_160.exe [3305384 2014-10-15] ()
HKU\S-1-5-21-3846624210-2732582974-119307283-1000\...\Run: [Easy Speed PC] => C:\Program Files\Probit Software\Easy Speed PC\ESPCLauncher.exe [148272 2013-03-18] (Probit Software LTD)
HKU\S-1-5-21-3846624210-2732582974-119307283-1000\...\Run: [EasySpeedCheck] => C:\Program Files\Easy Speed Check\easyspeedcheck.exe [194200 2014-05-12] (Probit Software LTD)
HKU\S-1-5-21-3846624210-2732582974-119307283-1000\...\RunOnce: [Easy Speed PC] => C:\Program Files\Probit Software\Easy Speed PC\EasySpeedPC.exe [21678384 2013-03-18] (Probit Software LTD)
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2014\TUAutoReactivator32.exe"
Startup: C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShortcutTarget: Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Startup: C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatch.lnk
ShortcutTarget: StormWatch.lnk -> C:\Users\Master\AppData\Local\StormWatch\StormWatch.exe (Weather Protector LLC)
Startup: C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatchApp.lnk
ShortcutTarget: StormWatchApp.lnk -> C:\Users\Master\AppData\Local\StormWatch\StormWatchApp.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1412853854&from=sof&uid=TOSHIBAXMK7559GSM_702ZT1GOTXX702ZT1GOT&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1412853854&from=sof&uid=TOSHIBAXMK7559GSM_702ZT1GOTXX702ZT1GOT&q={searchTerms}
BHO: videos_MediaPlayers_v1.2+ -> {11111111-1111-1111-1111-110611491169} -> C:\Program Files\videos_MediaPlayers_v1.2+\videos_MediaPlayers_v1.2+-bho.dll (enter)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default
FF Homepage: https://www.google.com/calendar/render?hl=de#g%7Cmonth-3+22845+22882+22862|hxxp://www.onlinefussballmanager.de/Manager-Login|hxxp://www.comunio.de/?no_mobile=1|https://www.facebook.com/|hxxp://www.gmx.net/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Radio Canyon - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com [2014-10-09]
FF Extension: Garmin Communicator - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-09-25]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-10-09]
FF Extension: Cliqz Beta - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\cliqz@cliqz.com.xpi [2014-10-02]
FF Extension: Tabs On Bottom - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\tabsonbottom@piro.sakura.ne.jp.xpi [2014-09-25]
FF Extension: Adblock Plus - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-25]
FF Extension: UITBAutoInstaller - C:\Program Files\Mozilla Firefox\distribution\bundles\{edd7fc99-d65c-4979-85c2-ddeed30c50c7} [2014-10-09]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-15]
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\cliqz@cliqz.com
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2014-10-09]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-15]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-15] (AVAST Software)
S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [36936 2014-10-13] (Just Develop It) <==== ATTENTION
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-10-15] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-10-15] (globalUpdate) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [1781048 2014-07-16] (TuneUp Software)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [528896 2014-10-09] (Fuyu LIMITED) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-10-15] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-10-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-10-15] (AVAST Software)
S0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-10-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-10-15] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-10-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-10-15] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-10-15] ()
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2014-02-10] (TuneUp Software)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-15 23:40 - 2014-10-15 23:41 - 00013916 _____ () C:\Users\Master\Downloads\FRST.txt
2014-10-15 23:40 - 2014-10-15 23:40 - 00000000 ____D () C:\FRST
2014-10-15 23:39 - 2014-10-15 23:39 - 01102848 _____ (Farbar) C:\Users\Master\Downloads\FRST.exe
2014-10-15 23:31 - 2014-10-15 23:36 - 00000892 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-10-15 23:31 - 2014-10-15 23:36 - 00000888 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-10-15 23:31 - 2014-10-15 23:31 - 01970576 _____ (enter) C:\Users\Master\AppData\Roaming\ZBHLAW.exe
2014-10-15 23:31 - 2014-10-15 23:31 - 01490320 _____ (enter) C:\Users\Master\AppData\Roaming\NBFXSDC.exe
2014-10-15 23:31 - 2014-10-15 23:31 - 00005182 _____ () C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-11.job
2014-10-15 23:31 - 2014-10-15 23:31 - 00004492 _____ () C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-4.job
2014-10-15 23:31 - 2014-10-15 23:31 - 00003472 _____ () C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-1.job
2014-10-15 23:31 - 2014-10-15 23:31 - 00002444 _____ () C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-5_user.job
2014-10-15 23:31 - 2014-10-15 23:31 - 00002444 _____ () C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-5.job
2014-10-15 23:31 - 2014-10-15 23:31 - 00002108 _____ () C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-2.job
2014-10-15 23:31 - 2014-10-15 23:31 - 00001344 _____ () C:\Windows\Tasks\NBFXSDC.job
2014-10-15 23:31 - 2014-10-15 23:31 - 00001342 _____ () C:\Windows\Tasks\ZBHLAW.job
2014-10-15 23:31 - 2014-10-15 23:31 - 00000000 ____D () C:\Users\Master\AppData\Roaming\VOPackage
2014-10-15 23:31 - 2014-10-15 23:31 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-10-15 23:30 - 2014-10-15 23:31 - 00000000 ____D () C:\Program Files\videos_MediaPlayers_v1.2+
2014-10-15 23:30 - 2014-10-15 23:30 - 00004492 _____ () C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-3.job
2014-10-15 23:29 - 2014-10-15 23:29 - 00001915 _____ () C:\Users\Master\Desktop\Sync Folder.lnk
2014-10-15 23:29 - 2014-10-15 23:29 - 00001271 _____ () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hilfe.lnk
2014-10-15 23:29 - 2014-10-15 23:29 - 00001271 _____ () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Speed PC.lnk
2014-10-15 23:29 - 2014-10-15 23:29 - 00001261 _____ () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall.lnk
2014-10-15 23:29 - 2014-10-15 23:29 - 00001256 _____ () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Speed PC on the Web.lnk
2014-10-15 23:29 - 2014-10-15 23:29 - 00001045 _____ () C:\Users\Master\Desktop\MyPC Backup.lnk
2014-10-15 23:29 - 2014-10-15 23:29 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
2014-10-15 23:29 - 2014-10-15 23:29 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-10-15 23:29 - 2014-10-15 23:29 - 00000000 ____D () C:\Users\Master\AppData\Local\Weather_Protector_LLC
2014-10-15 23:29 - 2014-10-15 23:29 - 00000000 ____D () C:\Program Files\Easy Speed Check
2014-10-15 23:28 - 2014-10-15 23:31 - 00000000 ____D () C:\Users\Master\AppData\Local\mbot_de_160
2014-10-15 23:28 - 2014-10-15 23:29 - 00000000 ____D () C:\Users\Master\AppData\Local\StormWatch
2014-10-15 23:28 - 2014-10-15 23:29 - 00000000 ____D () C:\Program Files\MyPC Backup
2014-10-15 23:28 - 2014-10-15 23:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY
2014-10-15 23:28 - 2014-10-15 23:28 - 00000000 ____D () C:\Program Files\Probit Software
2014-10-15 23:28 - 2014-10-15 23:28 - 00000000 ____D () C:\Program Files\mbot_de_160
2014-10-15 23:25 - 2014-10-15 23:25 - 01523056 _____ () C:\Users\Master\Downloads\Setup_v2_1.exe
2014-10-15 23:25 - 2014-10-15 23:25 - 01523040 _____ () C:\Users\Master\Downloads\Setup_v2_1(1).exe
2014-10-15 00:12 - 2014-10-15 00:12 - 00002119 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-10-15 00:12 - 2014-10-15 00:12 - 00000000 ____D () C:\Users\Master\AppData\Roaming\AVAST Software
2014-10-15 00:12 - 2014-10-15 00:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-10-15 00:11 - 2014-10-15 00:12 - 00414520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-10-15 00:11 - 2014-10-15 00:11 - 00779536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-10-15 00:11 - 2014-10-15 00:11 - 00414392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1413324729192
2014-10-15 00:11 - 2014-10-15 00:11 - 00276432 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-10-15 00:11 - 2014-10-15 00:11 - 00192352 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-10-15 00:11 - 2014-10-15 00:11 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-10-15 00:11 - 2014-10-15 00:11 - 00071944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-10-15 00:11 - 2014-10-15 00:11 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-10-15 00:11 - 2014-10-15 00:11 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-10-15 00:11 - 2014-10-15 00:11 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-10-15 00:11 - 2014-10-15 00:11 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-10-15 00:10 - 2014-10-15 00:10 - 00000000 ____D () C:\Program Files\AVAST Software
2014-10-15 00:09 - 2014-10-15 00:10 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-15 00:04 - 2014-10-15 00:06 - 91906368 _____ (AVAST Software) C:\Users\Master\Downloads\avast_free_antivirus_setup_9.0.2021.exe
2014-10-14 23:16 - 2014-10-14 23:16 - 00000165 ____H () C:\Users\Master\Documents\~$Vetragsverlängerung.xlsx
2014-10-14 22:49 - 2014-10-14 22:49 - 01227632 _____ () C:\Users\Master\Downloads\Player_Setup.exe
2014-10-13 01:20 - 2014-10-13 01:20 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-10-13 01:06 - 2014-10-13 01:24 - 00000000 ____D () C:\Users\Master\AppData\Local\fastplayer
2014-10-13 01:06 - 2014-10-13 01:06 - 00000000 ___HD () C:\Users\Public\Temp
2014-10-13 01:05 - 2014-10-13 01:05 - 00000000 ____D () C:\Users\Master\AppData\Local\Genesis_10122305
2014-10-13 01:04 - 2014-10-13 01:24 - 00000000 ____D () C:\Users\Master\AppData\Local\mbot_de_144
2014-10-13 01:04 - 2014-10-13 01:24 - 00000000 ____D () C:\Program Files\ver7NewPlayer
2014-10-13 01:04 - 2014-10-13 01:24 - 00000000 ____D () C:\Program Files\mbot_de_144
2014-10-13 01:04 - 2014-10-13 01:24 - 00000000 ____D () C:\Program Files\FastPlayer
2014-10-13 01:04 - 2014-10-13 01:04 - 00000000 ____D () C:\Program Files\XTRM Group
2014-10-13 01:03 - 2014-10-13 01:24 - 00000000 ____D () C:\Users\Master\AppData\Local\Genesis_10122303
2014-10-13 01:03 - 2014-10-13 01:24 - 00000000 ____D () C:\Program Files\PepperZip
2014-10-13 01:03 - 2014-10-13 01:03 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PepperZip
2014-10-12 15:49 - 2014-10-12 15:51 - 00010752 ___SH () C:\Users\Master\Documents\Thumbs.db
2014-10-09 13:24 - 2014-10-09 13:24 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-10-09 13:23 - 2014-10-09 13:23 - 01978007 _____ () C:\Users\Master\Desktop\mp3gain-win-full-1_2_5.exe
2014-10-09 13:23 - 2014-10-09 13:23 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3Gain
2014-10-09 13:23 - 2014-10-09 13:23 - 00000000 ____D () C:\Program Files\MP3Gain
2014-10-09 13:22 - 2014-10-09 13:22 - 00367456 _____ () C:\Users\Master\Downloads\SoftonicDownloader_fuer_mp3gain.exe
2014-10-09 13:14 - 2014-10-09 13:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3Gain
2014-10-09 13:12 - 2014-10-09 13:12 - 01125200 _____ () C:\Users\Master\Downloads\MP3Gain - CHIP-Installer.exe
2014-10-09 13:12 - 2014-07-16 10:24 - 00036152 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2014-10-09 13:12 - 2014-07-16 10:24 - 00025400 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2014-10-09 13:08 - 2014-10-15 23:30 - 00000000 ____D () C:\Program Files\globalUpdate
2014-10-09 13:08 - 2014-10-09 13:08 - 00000000 ____D () C:\Users\Master\AppData\Local\globalUpdate
2014-10-09 13:07 - 2014-07-16 10:24 - 00036664 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2014-10-09 13:06 - 2014-10-09 13:13 - 00000000 ____D () C:\Program Files\TuneUp Utilities 2014
2014-10-09 13:06 - 2014-10-09 13:06 - 00002155 _____ () C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2014-10-09 13:06 - 2014-10-09 13:06 - 00002147 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014.lnk
2014-10-09 13:06 - 2014-10-09 13:06 - 00002135 _____ () C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2014-10-09 13:06 - 2014-10-09 13:06 - 00000000 ____D () C:\Users\Master\AppData\Roaming\TuneUp Software
2014-10-09 13:06 - 2014-10-09 13:06 - 00000000 ____D () C:\Users\Master\AppData\Local\TuneUp Software
2014-10-09 13:06 - 2014-10-09 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-10-09 13:05 - 2014-10-09 13:07 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-10-09 13:04 - 2014-10-10 11:25 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-10-09 13:03 - 2014-10-09 13:03 - 00002272 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-10-09 13:03 - 2014-10-09 13:03 - 00001197 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-10-09 13:03 - 2014-10-09 13:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-10-09 13:03 - 2014-10-09 13:03 - 00000000 ____D () C:\Program Files\WEB.DE MailCheck
2014-10-09 13:02 - 2014-10-09 13:04 - 00000000 ____D () C:\Users\Master\AppData\Roaming\DVDVideoSoft
2014-10-09 13:02 - 2014-10-09 13:03 - 00000000 ____D () C:\Users\Master\AppData\Roaming\RHEng
2014-10-09 13:02 - 2014-10-09 13:03 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-10-09 13:02 - 2014-10-09 13:03 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-10-09 13:00 - 2014-10-09 13:01 - 31386984 _____ (DVDVideoSoft Ltd. ) C:\Users\Master\Downloads\FreeYouTubeToMP3Converter_3.12.46.923.exe
2014-10-02 22:10 - 2014-10-02 22:10 - 00000000 ____D () C:\Users\Master\AppData\Local\Frameworkx.com
2014-10-02 22:09 - 2014-10-02 22:09 - 00003069 _____ () C:\Users\Master\Desktop\Iconpfeile entfernen.lnk
2014-10-02 22:09 - 2014-10-02 22:09 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frameworkx
2014-10-02 22:09 - 2014-10-02 22:09 - 00000000 ____D () C:\Program Files\Frameworkx
2014-10-02 22:08 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\system32\dhRichClient3.dll
2014-10-02 22:08 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\system32\sqlite36_engine.dll
2014-10-02 22:07 - 2014-10-02 22:07 - 01101648 _____ () C:\Users\Master\Downloads\Vista Shortcut Manager - CHIP-Installer.exe
2014-10-02 20:29 - 2014-10-02 23:13 - 00000000 ____D () C:\ProgramData\tmp
2014-10-02 20:29 - 2014-10-02 23:13 - 00000000 ____D () C:\ProgramData\hps
2014-10-02 20:29 - 2014-10-02 20:29 - 00001084 _____ () C:\Users\Public\Desktop\dm-Fotowelt.lnk
2014-10-02 20:29 - 2014-10-02 20:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm-Fotowelt
2014-10-02 20:22 - 2014-10-02 20:22 - 00000000 ____D () C:\Program Files\dm
2014-10-02 20:21 - 2014-10-02 20:21 - 01627192 _____ () C:\Users\Master\Downloads\setup_dm_Fotowelt.exe
2014-10-02 00:47 - 2014-09-25 21:56 - 00245227 ____R () C:\Users\Master\Documents\Historie von Werner~backup-141002.logbook3
2014-09-30 19:51 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-28 18:47 - 2014-09-29 21:24 - 00000000 ____D () C:\Users\Master\Documents\Rezepte
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Weisheit
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Testament
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Sky
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Schützenverein
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Randolf
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\OneNote-Notizbücher
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Kontoauszüge
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\iMacros
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\HIT Energie
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Haenlein-Software
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\GDP
2014-09-28 18:47 - 2014-06-05 17:33 - 00000000 ____D () C:\Users\Master\Documents\Steuerfälle
2014-09-28 18:47 - 2012-02-14 21:34 - 00243961 _____ () C:\Users\Master\Documents\Car Glas.xps
2014-09-28 18:47 - 2011-09-28 22:17 - 00000454 _____ () C:\Users\Master\Documents\cc_20110928_221659.reg
2014-09-28 18:47 - 2011-09-28 22:16 - 00007316 _____ () C:\Users\Master\Documents\cc_20110928_221622.reg
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Garmin
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\DVDVideoSoft
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Blutdruck
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Atos-Klinik
2014-09-28 18:46 - 2014-07-03 12:08 - 00011907 _____ () C:\Users\Master\Documents\WM-Tip 2014.xlsx
2014-09-28 18:46 - 2013-06-03 12:07 - 00000000 ____D () C:\Users\Master\Documents\Ecki´s Fahrrad
2014-09-28 18:46 - 2012-04-24 01:48 - 22259528 _____ () C:\Users\Master\Documents\vlc-2.0.1-win32.exe
2014-09-28 18:46 - 2011-06-11 18:42 - 21022914 _____ () C:\Users\Master\Documents\vlc-1.1.10-win32.exe
2014-09-26 00:53 - 2014-09-26 00:53 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-09-26 00:06 - 2014-09-26 00:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-09-25 21:31 - 2014-09-25 21:31 - 00000000 ____D () C:\Program Files\Garmin GPS Plugin
2014-09-25 21:30 - 2014-09-25 21:33 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Garmin
2014-09-25 21:29 - 2014-09-25 21:29 - 18860616 _____ () C:\Users\Master\Downloads\CommunicatorPlugin_420.exe
2014-09-25 21:19 - 2014-10-02 21:55 - 00002138 _____ () C:\Users\Master\Desktop\Vetragsverlängerung.lnk
2014-09-25 21:18 - 2014-10-15 23:30 - 00024375 _____ () C:\Users\Master\Documents\Vetragsverlängerung.xlsx
2014-09-25 21:17 - 2014-10-02 00:47 - 00270025 _____ () C:\Users\Master\Documents\Historie von Werner.logbook3
2014-09-25 21:17 - 2014-08-18 08:44 - 00231548 ____R () C:\Users\Master\Documents\Historie von Werner~backup-140903.logbook3
2014-09-25 20:56 - 2014-10-13 01:24 - 00000000 ____D () C:\Users\Master\AppData\Roaming\vlc
2014-09-25 20:47 - 2014-09-25 20:47 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Macromedia
2014-09-25 20:47 - 2014-09-25 20:47 - 00000000 ____D () C:\Users\Master\AppData\Local\Macromedia
2014-09-25 20:46 - 2014-10-15 13:46 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-25 20:46 - 2014-09-25 20:46 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-25 20:46 - 2014-09-25 20:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-25 20:45 - 2014-09-25 20:45 - 00000000 ____D () C:\Windows\system32\Macromed
2014-09-25 20:36 - 2014-09-25 20:51 - 00000000 ____D () C:\Users\Master\Downloads\Programme
2014-09-25 20:22 - 2014-09-25 20:22 - 00002126 _____ () C:\Users\Master\Desktop\SportTracks 3.1.lnk
2014-09-25 20:22 - 2014-09-25 20:22 - 00000000 ____D () C:\Users\Master\AppData\Local\ZoneFiveSoftware
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\ZoneFiveSoftware
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zone Five Software
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\Program Files\Zone Five Software
2014-09-25 20:18 - 2014-09-25 20:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-09-25 18:04 - 2014-10-14 23:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-25 17:45 - 2014-09-25 17:45 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Mozilla
2014-09-25 17:45 - 2014-09-25 17:45 - 00000000 ____D () C:\Users\Master\AppData\Local\Mozilla
2014-09-25 17:44 - 2014-09-25 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-09-25 17:40 - 2014-09-25 17:40 - 00002703 _____ () C:\Users\Master\Desktop\Microsoft Office Excel 2007.lnk
2014-09-25 17:40 - 2014-09-25 17:40 - 00002697 _____ () C:\Users\Master\Desktop\Microsoft Office Word 2007.lnk
2014-09-24 11:24 - 2014-09-24 11:24 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-09-24 11:24 - 2014-09-24 11:24 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-09-24 10:57 - 2014-09-24 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-24 10:56 - 2014-09-24 10:56 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-09-24 10:42 - 2014-07-09 00:30 - 00419704 _____ () C:\Windows\system32\locale.nls
2014-09-24 10:27 - 2014-09-24 10:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-09-24 10:26 - 2009-02-27 03:42 - 00031640 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2014-09-24 10:25 - 2014-09-24 11:28 - 00000000 ____D () C:\Program Files\Microsoft Works
2014-09-24 10:24 - 2014-09-24 10:24 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio
2014-09-24 10:23 - 2014-09-24 10:23 - 00000000 ____D () C:\Windows\PCHEALTH
2014-09-24 10:20 - 2014-09-24 10:20 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2014-09-24 10:18 - 2014-09-27 15:17 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-09-24 10:18 - 2014-09-26 00:58 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-24 10:18 - 2014-09-24 10:18 - 00000000 ____D () C:\Users\Master\AppData\Local\Microsoft Help
2014-09-24 10:16 - 2014-09-24 10:16 - 00000000 __RHD () C:\MSOCache
2014-09-23 22:05 - 2014-09-23 19:28 - 00000000 ____D () C:\Windows\Panther
2014-09-23 21:18 - 2014-09-23 21:18 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-09-23 21:17 - 2014-09-25 20:46 - 00000000 ____D () C:\Users\Master\AppData\Local\Adobe
2014-09-23 21:17 - 2014-09-23 21:17 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00002117 _____ () C:\Users\Public\Desktop\Microsoft Security Essentials.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-09-23 21:13 - 2014-09-23 21:14 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-23 21:13 - 2014-09-23 21:13 - 00001895 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-09-23 21:13 - 2014-09-23 21:13 - 00001845 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-09-23 21:13 - 2014-09-23 21:13 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Canneverbe Limited
2014-09-23 21:13 - 2014-09-23 21:13 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-09-23 21:12 - 2014-10-15 23:12 - 01257730 _____ () C:\Windows\WindowsUpdate.log
2014-09-23 21:12 - 2014-09-23 21:12 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-23 21:12 - 2014-09-23 21:12 - 00001989 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-09-23 21:12 - 2014-09-23 21:12 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-09-23 21:12 - 2014-09-23 21:12 - 00000000 ____D () C:\Program Files\Adobe
2014-09-23 21:11 - 2014-09-24 10:10 - 00000000 ____D () C:\ProgramData\Adobe
2014-09-23 21:11 - 2014-09-23 21:11 - 00001024 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-09-23 21:11 - 2014-09-23 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-09-23 21:10 - 2014-10-14 23:25 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-09-23 21:10 - 2014-09-23 21:10 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-23 21:10 - 2014-09-23 21:10 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-23 21:10 - 2014-09-23 21:10 - 00000000 ____D () C:\Program Files\VideoLAN
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\Program Files\WinRAR
2014-09-23 21:08 - 2014-09-23 21:16 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-09-23 20:42 - 2014-09-23 20:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01007.Wdf
2014-09-23 20:42 - 2014-09-23 20:42 - 00000000 ____D () C:\Program Files\Synaptics
2014-09-23 20:41 - 2014-09-23 20:41 - 00000000 ____D () C:\Program Files\Intel
2014-09-23 20:36 - 2014-09-23 20:36 - 00000017 _____ () C:\Users\Master\AppData\Local\resmon.resmoncfg
2014-09-23 20:15 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-23 20:15 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-23 20:15 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-23 20:15 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-23 20:15 - 2014-08-18 23:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-23 20:15 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-23 20:15 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-23 20:15 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-23 20:15 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-23 20:15 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-23 20:15 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-23 20:15 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-23 20:15 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-23 20:15 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-23 20:15 - 2014-08-18 23:36 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-23 20:15 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-23 20:15 - 2014-08-18 23:30 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-23 20:15 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-23 20:15 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-23 20:15 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-23 20:15 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-23 20:15 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-23 20:15 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-23 20:15 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-23 20:15 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-23 20:15 - 2014-08-18 23:08 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-23 20:15 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-23 20:15 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-23 20:15 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-23 20:15 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-23 20:10 - 2014-09-24 10:23 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-09-23 20:07 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-23 20:05 - 2014-09-23 20:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-23 20:05 - 2014-08-29 13:01 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-23 20:02 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-09-23 20:02 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-09-23 20:02 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-09-23 20:02 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-09-23 19:55 - 2014-07-07 03:40 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-23 19:54 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-23 19:54 - 2014-08-23 02:44 - 02360832 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-23 19:54 - 2014-07-07 03:40 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-23 19:54 - 2014-07-07 03:40 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-09-23 19:54 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-09-23 19:54 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-09-23 19:54 - 2014-06-03 04:14 - 00102336 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-09-23 19:54 - 2014-06-03 04:13 - 01806336 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-09-23 19:53 - 2014-07-14 03:42 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-09-23 19:53 - 2014-07-14 03:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-09-23 19:53 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-23 19:53 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-09-23 19:53 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-09-23 19:53 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-09-23 19:53 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-09-23 19:53 - 2014-05-30 08:25 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-09-23 19:53 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-09-23 19:53 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-09-23 19:53 - 2014-03-26 04:13 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-09-23 19:53 - 2014-03-26 04:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-09-23 19:52 - 2014-09-22 08:41 - 00231568 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-23 19:52 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-09-23 19:52 - 2014-04-05 04:16 - 01310144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-09-23 19:52 - 2014-04-05 04:16 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-09-23 19:52 - 2014-04-05 04:16 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-09-23 19:50 - 2014-09-05 03:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-23 19:50 - 2014-09-05 03:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-23 19:50 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-23 19:45 - 2014-09-09 23:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-23 19:45 - 2014-06-25 03:37 - 12877312 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-09-23 19:45 - 2014-04-25 03:58 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-09-23 19:45 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-09-23 19:44 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-09-23 19:44 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-09-23 19:33 - 2014-09-23 19:33 - 00000000 __SHD () C:\Users\Master\AppData\Local\EmieUserList
2014-09-23 19:33 - 2014-09-23 19:33 - 00000000 __SHD () C:\Users\Master\AppData\Local\EmieSiteList
2014-09-23 19:30 - 2014-09-23 21:17 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Adobe
2014-09-23 19:30 - 2014-09-23 19:30 - 00001421 _____ () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-23 19:30 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-09-23 19:30 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-09-23 19:30 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-09-23 19:30 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-09-23 19:29 - 2014-09-24 11:44 - 00109392 _____ () C:\Users\Master\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-23 19:29 - 2014-09-23 19:29 - 00004887 _____ () C:\Windows\system32\WinToolkit_RunOnce_Log.log
2014-09-23 19:29 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-09-23 19:29 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-09-23 19:28 - 2014-10-13 01:25 - 00000000 ____D () C:\Users\Master
2014-09-23 19:28 - 2014-09-23 19:28 - 00000020 ___SH () C:\Users\Master\ntuser.ini
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Netzwerkumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Druckumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 __SHD () C:\Recovery
2014-09-23 19:28 - 2009-07-14 06:42 - 00000000 ___RD () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-23 19:28 - 2009-07-14 06:37 - 00000000 ___RD () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-15 19:00 - 2009-07-14 06:34 - 00032272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-15 19:00 - 2009-07-14 06:34 - 00032272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-14 23:15 - 2010-11-20 23:01 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-14 23:09 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-14 23:09 - 2009-07-14 06:39 - 00033668 _____ () C:\Windows\setupact.log
2014-10-14 22:50 - 2009-07-14 06:46 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-10-13 01:24 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-10-13 01:24 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-10-13 01:23 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-10-02 20:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-09-27 00:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-09-26 15:14 - 2010-11-20 23:48 - 00010712 _____ () C:\Windows\PFRO.log
2014-09-26 00:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2014-09-26 00:48 - 2009-07-14 04:04 - 00000478 _____ () C:\Windows\win.ini
2014-09-25 18:13 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-09-25 17:43 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-09-24 11:43 - 2009-07-14 06:33 - 00408816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-24 11:03 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-24 10:55 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-09-24 10:24 - 2011-04-12 03:39 - 00000000 ____D () C:\Windows\ShellNew
2014-09-24 10:24 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2014-09-23 22:05 - 2009-07-14 06:52 - 00032768 _____ () C:\Windows\system32\config\BCD-Template
2014-09-23 21:18 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-23 21:08 - 2011-04-12 03:39 - 00000000 ____D () C:\Windows\CSC
2014-09-23 21:08 - 2009-07-14 06:34 - 00002814 _____ () C:\Windows\DtcInstall.log
2014-09-23 20:21 - 2014-05-17 10:32 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-23 20:21 - 2011-04-12 03:39 - 00000000 ____D () C:\Program Files\Windows Journal
2014-09-23 19:28 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\restore
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\Recovery
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Windows NT

Some content of TEMP:
====================
C:\Users\Master\AppData\Local\Temp\A~NSISu_.exe
C:\Users\Master\AppData\Local\Temp\BackupSetup.exe
C:\Users\Master\AppData\Local\Temp\sof_sweet-page.exe
C:\Users\Master\AppData\Local\Temp\vcredist_x86.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-06 21:39

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 15-10-2014 02
Ran by Master at 2014-10-15 23:42:45
Running from C:\Users\Master\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2021 - AVAST Software)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5067 - CDBurnerXP)
dm-Fotowelt (HKLM\...\dm-Fotowelt) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
Easy Speed Check (HKLM\...\Easy Speed Check) (Version: 1.1.2 - Probit Software LTD)
Easy Speed PC (HKLM\...\Easy Speed PC) (Version: 7.0.2 - Probit Software LTD)
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
Garmin Communicator Plugin (HKLM\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.6.0305.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0 (x86 de) (HKLM\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 32.0.2 - Mozilla)
MyBestOffersToday 014.160 (HKLM\...\mbot_de_160_is1) (Version:  - MYBESTOFFERSTODAY) <==== ATTENTION
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - JDi Backup Ltd) <==== ATTENTION
Remote Desktop Access (VuuPC) (HKLM\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION
SportTracks 3.1 (HKLM\...\{99895EF0-B290-4B21-B1FE-FB00E1B5D195}) (Version: 3.1.5349 - Zone Five Software)
StormWatch (HKCU\...\StormWatch) (Version: 1.0.1.27 - StormWatch)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 11.2.4.0 - Synaptics)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.340 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM\...\TuneUp Utilities) (Version: 14.0.1000.340 - TuneUp Software)
TuneUp Utilities 2014 (Version: 14.0.1000.340 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2889914) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{F3F83933-75FC-4B60-84F2-3F8FA63D042E}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
videos_MediaPlayers_v1.2+ (HKLM\...\videos_MediaPlayers_v1.2+) (Version: 1.35.9.29 - enter) <==== ATTENTION
Vista Shortcut Manager (HKLM\...\{47609E69-4C5E-48B1-A889-24C6B82B5C04}) (Version: 2.0 - Frameworkx)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WEB.DE MailCheck für Mozilla Firefox (HKLM\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 2.10.1.1735 - 1&1 Mail & Media GmbH)
WindowsMangerProtect20.0.0.722 (HKLM\...\WindowsMangerProtect) (Version: 20.0.0.722 - WindowsProtect LIMITED) <==== ATTENTION
WinRAR Archivierer (HKLM\...\WinRAR archiver) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

30-09-2014 18:00:11 Windows Update
01-10-2014 14:12:20 Windows Modules Installer
02-10-2014 20:09:13 Installed Vista Shortcut Manager
04-10-2014 10:42:34 Windows Update
05-10-2014 11:35:48 Windows Update
08-10-2014 21:55:42 Windows Update
12-10-2014 10:11:56 Windows Update
12-10-2014 23:03:35 Uniblue SpeedUpMyPC installation
12-10-2014 23:19:48 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
12-10-2014 23:22:24 Wiederherstellungsvorgang
12-10-2014 23:36:27 Windows Update
14-10-2014 22:10:24 avast! antivirus system restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {22C19426-2350-4A0F-BB32-65409080E7FB} - System32\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-1 => C:\Program Files\videos_MediaPlayers_v1.2+\videos_MediaPlayers_v1.2+-codedownloader.exe [2014-10-15] (enter) <==== ATTENTION
Task: {28542B6B-BDA6-4847-ADC9-2C6C89646E59} - System32\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-5 => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-5.exe [2014-10-15] (enter) <==== ATTENTION
Task: {3F390363-F333-43AF-A99C-2824335A9743} - System32\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-5_user => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-5.exe [2014-10-15] (enter) <==== ATTENTION
Task: {42135E99-4437-4244-9181-958A357ED606} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2014\OneClick.exe [2014-07-16] (TuneUp Software)
Task: {5A2F7D2C-B32C-4EDE-80ED-EFBFCA66291F} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe [2014-10-13] (MyPC Backup) <==== ATTENTION
Task: {5D5D7575-066D-4C3B-96C2-38441D6DCE2F} - System32\Tasks\NBFXSDC => C:\Users\Master\AppData\Roaming\NBFXSDC.exe [2014-10-15] (enter) <==== ATTENTION
Task: {6199D424-DB6D-4FE5-A9B3-9826E0254377} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-10-15] (AVAST Software)
Task: {79FFE267-0093-4219-9768-A4B00CD6E138} - System32\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-4 => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-4.exe [2014-10-15] (enter) <==== ATTENTION
Task: {817DA95D-0D27-42FE-86BC-66EE7247860E} - System32\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-3 => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-3.exe [2014-10-15] (enter) <==== ATTENTION
Task: {87A699AD-FF27-49F4-9ED6-B2FE40DF7899} - System32\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-2 => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-2.exe [2014-10-15] (enter) <==== ATTENTION
Task: {897F075C-A2C5-40B5-995B-01A0E81D2B82} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-09-12] (Adobe Systems Incorporated)
Task: {915CF7C9-6D15-49CD-8E55-F5C6E5FF80F6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-25] (Adobe Systems Incorporated)
Task: {9CA7DD0F-0422-4285-AB2D-4FD0BD9D0819} - System32\Tasks\ZBHLAW => C:\Users\Master\AppData\Roaming\ZBHLAW.exe [2014-10-15] (enter) <==== ATTENTION
Task: {A9E3E8C5-A4EB-4F9C-ABD7-A63CB07AB582} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-10-15] (globalUpdate) <==== ATTENTION
Task: {EF9C03FF-5AA5-4755-8970-4C8BFE5FD973} - System32\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-11 => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-11.exe [2014-10-15] (enter) <==== ATTENTION
Task: {FFE03F1A-BA05-497B-8C48-F089BFA728AB} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-10-15] (globalUpdate) <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-1.job => C:\Program Files\videos_MediaPlayers_v1.2+\videos_MediaPlayers_v1.2+-codedownloader.exe
Task: C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-11.job => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-11.exe
Task: C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-2.job => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-2.exe
Task: C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-3.job => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-3.exe
Task: C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-4.job => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-4.exe
Task: C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-5.job => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-5.exe
Task: C:\Windows\Tasks\8758898b-52e2-4941-a940-b9b7a3d244cb-5_user.job => C:\Program Files\videos_MediaPlayers_v1.2+\8758898b-52e2-4941-a940-b9b7a3d244cb-5.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\NBFXSDC.job => C:\Users\Master\AppData\Roaming\NBFXSDC.exe <==== ATTENTION
Task: C:\Windows\Tasks\ZBHLAW.job => C:\Users\Master\AppData\Roaming\ZBHLAW.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-07-16 10:24 - 2014-07-16 10:24 - 00585528 _____ () C:\Program Files\TuneUp Utilities 2014\avgreplibx.dll
2014-10-15 00:11 - 2014-10-15 00:11 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-10-15 00:11 - 2014-10-15 00:11 - 02787840 _____ () C:\Program Files\AVAST Software\Avast\defs\14062601\algo.dll
2014-10-15 22:55 - 2014-10-15 22:55 - 02874368 _____ () C:\Program Files\AVAST Software\Avast\defs\14101506\algo.dll
2014-10-15 00:11 - 2014-10-15 00:11 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-10-15 23:28 - 2014-10-15 11:08 - 03977128 _____ () C:\Program Files\mbot_de_160\mbot_de_160.exe
2014-10-15 23:28 - 2014-10-15 11:08 - 03305384 _____ () C:\Users\Master\AppData\Local\mbot_de_160\upmbot_de_160.exe
2014-09-29 16:38 - 2014-09-29 16:38 - 01147416 _____ () C:\Users\Master\AppData\Local\StormWatch\StormWatchApp.exe
2014-10-13 16:36 - 2014-10-13 16:36 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll
2014-10-13 16:31 - 2014-10-13 16:31 - 00904704 _____ () C:\Program Files\MyPC Backup\x86\System.Data.SQLite.dll
2014-10-15 23:29 - 2014-01-28 12:04 - 00279955 _____ () C:\Program Files\Easy Speed Check\libidn-11.dll
2014-10-15 23:29 - 2013-08-26 02:02 - 00131598 _____ () C:\Program Files\Easy Speed Check\zlib1.dll
2014-10-15 23:29 - 2014-01-28 12:04 - 00112142 _____ () C:\Program Files\Easy Speed Check\libgcc_s_dw2-1.dll
2014-10-15 23:29 - 2014-01-28 12:04 - 01000974 _____ () C:\Program Files\Easy Speed Check\libstdc++-6.dll
2014-09-25 18:05 - 2014-10-14 23:25 - 03649648 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-09-25 20:45 - 2014-09-25 20:45 - 16825520 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-3846624210-2732582974-119307283-500 - Administrator - Disabled)
Gast (S-1-5-21-3846624210-2732582974-119307283-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3846624210-2732582974-119307283-1002 - Limited - Enabled)
Master (S-1-5-21-3846624210-2732582974-119307283-1000 - Administrator - Enabled) => C:\Users\Master

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/15/2014 11:31:13 PM) (Source: MsiInstaller) (EventID: 11309) (User: Master-PC)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt.  System error 3.  Verify that the file exists and that you can access it.

Error: (10/15/2014 11:30:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.0.5397, Zeitstempel: 0x543924b1
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.0.5397, Zeitstempel: 0x5438ffbb
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x3cc
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (10/15/2014 00:10:27 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary uosyfkdy.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (10/15/2014 00:10:23 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
  Generatordaten werden gesammelt

Kontext:
  Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
  Generatorname: System Writer
  Generatorinstanz-ID: {0b166bc9-e28b-422b-a83d-4dca6273dbdf}

Error: (10/14/2014 11:53:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.0.5397, Zeitstempel: 0x543924b1
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.0.5397, Zeitstempel: 0x5438ffbb
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0xde0
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (10/14/2014 11:25:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 32.0.3.5379, Zeitstempel: 0x54224e6b
Name des fehlerhaften Moduls: mozalloc.dll, Version: 32.0.3.5379, Zeitstempel: 0x54221b67
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0x91c
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (10/14/2014 11:11:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/14/2014 10:56:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 32.0.3.5379, Zeitstempel: 0x54224e6b
Name des fehlerhaften Moduls: mozalloc.dll, Version: 32.0.3.5379, Zeitstempel: 0x54221b67
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0x29c
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (10/13/2014 03:42:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/13/2014 01:59:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 32.0.3.5379, Zeitstempel: 0x54224e6b
Name des fehlerhaften Moduls: mozalloc.dll, Version: 32.0.3.5379, Zeitstempel: 0x54221b67
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0xe84
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3


System errors:
=============
Error: (10/15/2014 01:37:44 AM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/15/2014 01:37:44 AM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/15/2014 01:37:43 AM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/15/2014 01:37:43 AM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/15/2014 01:37:43 AM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/14/2014 10:25:00 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 70. Der interne Fehlerstatus lautet: 105.

Error: (10/13/2014 06:26:49 PM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/13/2014 06:26:49 PM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/13/2014 06:26:49 PM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/13/2014 06:26:48 PM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Percentage of memory in use: 47%
Total physical RAM: 2940 MB
Available physical RAM: 1530.46 MB
Total Pagefile: 5878.29 MB
Available Pagefile: 4103.14 MB
Total Virtual: 2047.88 MB
Available Virtual: 1887.62 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:487.94 GB) (Free:399.69 GB) NTFS
Drive z: (Volume) (Fixed) (Total:210.35 GB) (Free:210.26 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 2BFB4DC8)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=487.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=210.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 16.10.2014 17:48
Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    MyBestOffersToday 014.160

    MyPC Backup

    Remote Desktop Access

    videos_MediaPlayers_v1.2+

    WindowsMangerProtect20.0.0.722 (HKLM\...\WindowsMangerProtect) (Version: 20.0.0.722 - WindowsProtect LIMITED) <==== ATTENTION


  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 





Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

antoenche 16.10.2014 22:17
Code:
ComboFix 14-10-15.01 - Master 16.10.2014  22:00:40.1.2 - x86
Microsoft Windows 7 Professional  6.1.7601.1.1252.49.1031.18.2940.1356 [GMT 2:00]
ausgeführt von:: c:\users\Master\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Microsoft Security Essentials *Disabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Microsoft Security Essentials *Disabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Easy Speed Check
c:\program files\Easy Speed Check\cwebpage.dll
c:\program files\Easy Speed Check\easyspeedcheck.exe
c:\program files\Easy Speed Check\esc.ico
c:\program files\Easy Speed Check\libcurl.dll
c:\program files\Easy Speed Check\libeay32.dll
c:\program files\Easy Speed Check\libgcc_s_dw2-1.dll
c:\program files\Easy Speed Check\libidn-11.dll
c:\program files\Easy Speed Check\libstdc++-6.dll
c:\program files\Easy Speed Check\ssleay32.dll
c:\program files\Easy Speed Check\uninstall.exe
c:\program files\Easy Speed Check\zlib1.dll
c:\program files\Probit Software\Easy Speed PC
c:\program files\Probit Software\Easy Speed PC\EasySpeedPC.chm
c:\program files\Probit Software\Easy Speed PC\EasySpeedPC.exe
c:\program files\Probit Software\Easy Speed PC\esp.ico
c:\program files\Probit Software\Easy Speed PC\ESPCGuard.exe
c:\program files\Probit Software\Easy Speed PC\ESPCLauncher.exe
c:\program files\Probit Software\Easy Speed PC\ESPCReminder.exe
c:\program files\Probit Software\Easy Speed PC\ESPCSchedule.exe
c:\program files\Probit Software\Easy Speed PC\ESPCSmartScan.exe
c:\program files\Probit Software\Easy Speed PC\file_id.diz
c:\program files\Probit Software\Easy Speed PC\German.ini
c:\program files\Probit Software\Easy Speed PC\HomePage.url
c:\program files\Probit Software\Easy Speed PC\scan.gif
c:\program files\Probit Software\Easy Speed PC\sqlite3.dll
c:\program files\Probit Software\Easy Speed PC\uninstall.exe
.
.
(((((((((((((((((((((((((((((((((((((((  Treiber/Dienste  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_globalUpdate
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-09-16 bis 2014-10-16  ))))))))))))))))))))))))))))))
.
.
2014-10-16 19:34 . 2014-10-16 19:34        --------        d-----w-        c:\program files\predm
2014-10-16 19:34 . 2014-10-16 19:34        --------        d-----w-        c:\programdata\IjLYSFdBpJ
2014-10-16 19:33 . 2014-10-16 19:34        --------        d-----w-        c:\programdata\CometArcade
2014-10-16 19:32 . 2014-10-16 19:32        --------        d-----w-        c:\program files\Web Security
2014-10-16 19:28 . 2014-10-16 19:28        --------        d-----w-        c:\program files\VS Revo Group
2014-10-15 21:40 . 2014-10-15 21:43        --------        d-----w-        C:\FRST
2014-10-15 21:28 . 2014-10-16 20:07        --------        d-----w-        c:\program files\Probit Software
2014-10-15 21:03 . 2014-09-08 16:24        8806800        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3F251278-E118-4A24-B4BF-364B1A895E30}\mpengine.dll
2014-10-14 22:11 . 2014-10-14 22:11        71944        ----a-w-        c:\windows\system32\drivers\aswStm.sys
2014-10-14 22:11 . 2014-10-14 22:11        779536        ----a-w-        c:\windows\system32\drivers\aswSnx.sys
2014-10-14 22:11 . 2014-10-14 22:11        192352        ----a-w-        c:\windows\system32\drivers\aswVmm.sys
2014-10-14 22:11 . 2014-10-14 22:12        414520        ----a-w-        c:\windows\system32\drivers\aswsp.sys
2014-10-14 22:11 . 2014-10-14 22:11        49944        ----a-w-        c:\windows\system32\drivers\aswRvrt.sys
2014-10-14 22:11 . 2014-10-14 22:11        67824        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys
2014-10-14 22:11 . 2014-10-14 22:11        24184        ----a-w-        c:\windows\system32\drivers\aswHwid.sys
2014-10-14 22:11 . 2014-10-14 22:11        81768        ----a-w-        c:\windows\system32\drivers\aswRdr2.sys
2014-10-14 22:11 . 2014-10-14 22:11        276432        ----a-w-        c:\windows\system32\aswBoot.exe
2014-10-14 22:11 . 2014-10-14 22:11        43152        ----a-w-        c:\windows\avastSS.scr
2014-10-14 22:10 . 2014-10-14 22:10        --------        d-----w-        c:\program files\AVAST Software
2014-10-14 22:09 . 2014-10-14 22:10        --------        d-----w-        c:\programdata\AVAST Software
2014-10-14 18:15 . 2014-09-08 16:24        8806800        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-10-12 23:06 . 2014-10-12 23:06        --------        d--h--w-        c:\users\Public\Temp
2014-10-12 23:04 . 2014-10-12 23:24        --------        d-----w-        c:\program files\FastPlayer
2014-10-12 23:04 . 2014-10-12 23:24        --------        d-----w-        c:\program files\mbot_de_144
2014-10-12 23:04 . 2014-10-12 23:04        --------        d-----w-        c:\program files\XTRM Group
2014-10-12 23:04 . 2014-10-12 23:24        --------        d-----w-        c:\program files\ver7NewPlayer
2014-10-12 23:03 . 2014-10-12 23:24        --------        d-----w-        c:\program files\PepperZip
2014-10-09 11:23 . 2014-10-09 11:23        --------        d-----w-        c:\program files\MP3Gain
2014-10-09 11:12 . 2014-07-16 08:24        25400        ----a-w-        c:\windows\system32\authuitu.dll
2014-10-09 11:12 . 2014-07-16 08:24        36152        ----a-w-        c:\windows\system32\uxtuneup.dll
2014-10-09 11:08 . 2014-10-15 21:30        --------        d-----w-        c:\program files\globalUpdate
2014-10-09 11:07 . 2014-07-16 08:24        36664        ----a-w-        c:\windows\system32\TURegOpt.exe
2014-10-09 11:06 . 2014-10-09 11:13        --------        d-----w-        c:\program files\TuneUp Utilities 2014
2014-10-09 11:05 . 2014-10-09 11:07        --------        d-----w-        c:\programdata\TuneUp Software
2014-10-09 11:04 . 2014-10-10 09:25        --------        d-sh--w-        c:\programdata\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-10-09 11:04 . 2014-10-09 11:04        --------        d--h--w-        c:\programdata\Common Files
2014-10-09 11:03 . 2014-10-09 11:03        --------        d-----w-        c:\program files\WEB.DE MailCheck
2014-10-09 11:02 . 2014-10-09 11:03        --------        d-----w-        c:\program files\DVDVideoSoft
2014-10-09 11:02 . 2014-10-09 11:03        --------        d-----w-        c:\program files\Common Files\DVDVideoSoft
2014-10-02 20:09 . 2014-10-02 20:09        --------        d-----w-        c:\program files\Frameworkx
2014-10-02 20:08 . 2011-03-25 18:42        338432        ----a-w-        c:\windows\system32\sqlite36_engine.dll
2014-10-02 20:08 . 2011-05-13 10:16        493056        ----a-w-        c:\windows\system32\dhRichClient3.dll
2014-10-02 18:29 . 2014-10-02 21:13        --------        d-----w-        c:\programdata\tmp
2014-10-02 18:29 . 2014-10-02 21:13        --------        d-----w-        c:\programdata\hps
2014-10-02 18:22 . 2014-10-02 18:22        --------        d-----w-        c:\program files\dm
2014-10-01 20:35 . 2014-09-10 14:30        908840        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BD257BB0-56F0-487C-ACDD-32D47C4BFE27}\gapaengine.dll
2014-09-30 17:51 . 2014-09-25 01:40        519680        ----a-w-        c:\windows\system32\qdvd.dll
2014-09-25 19:31 . 2014-09-25 19:31        --------        d-----w-        c:\program files\Garmin GPS Plugin
2014-09-25 18:46 . 2014-09-25 18:46        71344        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2014-09-25 18:46 . 2014-09-25 18:46        701104        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2014-09-25 18:45 . 2014-09-25 18:45        --------        d-----w-        c:\windows\system32\Macromed
2014-09-25 18:20 . 2014-09-25 18:20        --------        d-----w-        c:\program files\Zone Five Software
2014-09-25 18:20 . 2014-09-25 18:20        --------        d-----w-        c:\programdata\ZoneFiveSoftware
2014-09-25 15:44 . 2014-09-25 15:44        --------        d-----w-        c:\program files\Microsoft
2014-09-24 09:24 . 2014-09-24 09:24        --------        d-----w-        c:\users\Default\AppData\Local\Microsoft Help
2014-09-24 08:56 . 2014-09-24 08:56        --------        d-----w-        c:\program files\Microsoft Silverlight
2014-09-24 08:42 . 2014-07-09 01:29        6144        ----a-w-        c:\windows\system32\KBDYAK.DLL
2014-09-24 08:42 . 2014-07-09 01:29        6144        ----a-w-        c:\windows\system32\KBDBASH.DLL
2014-09-24 08:26 . 2009-02-27 01:42        31640        ----a-w-        c:\windows\system32\msonpmon.dll
2014-09-24 08:26 . 2006-10-26 17:56        33104        ----a-w-        c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2014-09-24 08:25 . 2014-09-24 09:28        --------        d-----w-        c:\program files\Microsoft Works
2014-09-24 08:23 . 2014-09-24 08:23        --------        d-----w-        c:\windows\PCHEALTH
2014-09-24 08:20 . 2014-09-24 08:20        --------        d-----w-        c:\program files\Microsoft Visual Studio 8
2014-09-24 08:18 . 2014-09-25 22:58        --------        d-----w-        c:\programdata\Microsoft Help
2014-09-24 08:16 . 2014-09-24 08:16        --------        d-----r-        C:\MSOCache
2014-09-23 20:05 . 2014-09-23 17:28        --------        d-----w-        c:\windows\Panther
2014-09-23 19:19 . 2014-09-10 14:30        908840        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-09-23 19:13 . 2014-09-23 19:14        --------        d-----w-        c:\program files\Microsoft Security Client
2014-09-23 19:13 . 2014-09-23 19:13        --------        d-----w-        c:\program files\CDBurnerXP
2014-09-23 19:12 . 2014-09-23 19:12        --------        d-----w-        c:\program files\Common Files\Adobe
2014-09-23 19:10 . 2014-09-23 19:10        --------        d-----w-        c:\program files\VideoLAN
2014-09-23 19:10 . 2014-10-16 20:09        --------        d-----w-        c:\program files\Mozilla Maintenance Service
2014-09-23 18:42 . 2014-09-23 18:42        --------        d-----w-        c:\program files\Synaptics
2014-09-23 18:41 . 2014-09-23 18:41        --------        d-----w-        c:\program files\Intel
2014-09-23 18:10 . 2014-09-23 18:10        --------        d-----w-        c:\windows\Migration
2014-09-23 18:09 . 2014-10-15 21:31        --------        d-sh--w-        c:\windows\Installer
2014-09-23 18:07 . 2014-06-27 01:45        2285056        ----a-w-        c:\windows\system32\msmpeg2vdec.dll
2014-09-23 18:05 . 2014-09-23 18:06        --------        d-----w-        c:\windows\system32\MRT
2014-09-23 18:02 . 2014-03-09 21:47        99480        ----a-w-        c:\windows\system32\infocardapi.dll
2014-09-23 18:02 . 2014-06-30 22:14        8856        ----a-w-        c:\windows\system32\icardres.dll
2014-09-23 18:02 . 2014-03-09 21:47        619672        ----a-w-        c:\windows\system32\icardagt.exe
2014-09-23 18:02 . 2014-06-06 06:16        35480        ----a-w-        c:\windows\system32\TsWpfWrp.exe
2014-09-23 17:55 . 2014-07-07 01:40        551424        ----a-w-        c:\windows\system32\kerberos.dll
2014-09-23 17:54 . 2014-07-07 01:40        247808        ----a-w-        c:\windows\system32\schannel.dll
2014-09-23 17:54 . 2014-07-07 01:40        1060864        ----a-w-        c:\windows\system32\lsasrv.dll
2014-09-23 17:54 . 2014-06-03 09:29        1221632        ----a-w-        c:\program files\Windows Journal\NBDoc.DLL
2014-09-23 17:54 . 2014-06-03 09:29        989184        ----a-w-        c:\program files\Windows Journal\JNTFiltr.dll
2014-09-23 17:54 . 2014-06-03 09:29        969216        ----a-w-        c:\program files\Windows Journal\JNWDRV.dll
2014-09-23 17:54 . 2014-06-03 09:29        936960        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2014-09-23 17:54 . 2014-08-23 00:44        2360832        ----a-w-        c:\windows\system32\win32k.sys
2014-09-23 17:54 . 2014-08-23 01:46        305152        ----a-w-        c:\windows\system32\gdi32.dll
2014-09-23 17:54 . 2014-06-03 09:29        2363392        ----a-w-        c:\windows\system32\msi.dll
2014-09-23 17:54 . 2014-06-03 02:13        1806336        ----a-w-        c:\windows\system32\authui.dll
2014-09-23 17:54 . 2014-06-03 09:29        337408        ----a-w-        c:\windows\system32\msihnd.dll
2014-09-23 17:54 . 2014-06-03 02:14        102336        ----a-w-        c:\windows\system32\consent.exe
2014-09-23 17:53 . 2014-07-14 01:42        654848        ----a-w-        c:\windows\system32\rpcrt4.dll
2014-09-23 17:53 . 2014-07-14 01:42        141312        ----a-w-        c:\windows\system32\rpchttp.dll
2014-09-23 17:53 . 2014-05-30 06:25        338944        ----a-w-        c:\windows\system32\drivers\afd.sys
2014-09-23 17:53 . 2014-03-26 14:27        1237504        ----a-w-        c:\windows\system32\msxml3.dll
2014-09-23 17:53 . 2014-03-26 14:25        2048        ----a-w-        c:\windows\system32\msxml3r.dll
2014-09-23 17:53 . 2014-03-26 02:13        1388544        ----a-w-        c:\windows\system32\msxml6.dll
2014-09-23 17:53 . 2014-03-26 02:10        2048        ----a-w-        c:\windows\system32\msxml6r.dll
2014-09-23 17:53 . 2014-06-24 02:59        1987584        ----a-w-        c:\windows\system32\d3d10warp.dll
2014-09-23 17:53 . 2014-06-06 09:44        509440        ----a-w-        c:\windows\system32\qedit.dll
2014-09-23 17:53 . 2014-06-16 01:44        730048        ----a-w-        c:\windows\system32\drivers\dxgkrnl.sys
2014-09-23 17:53 . 2014-06-16 01:44        219072        ----a-w-        c:\windows\system32\drivers\dxgmms1.sys
2014-09-23 17:53 . 2014-06-16 01:40        107520        ----a-w-        c:\windows\system32\cdd.dll
2014-09-23 17:52 . 2014-06-18 01:52        868864        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\tipskins.dll
2014-09-23 17:52 . 2014-06-18 01:52        399360        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\tabskb.dll
2014-09-23 17:52 . 2014-06-18 01:52        348672        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\tiptsf.dll
2014-09-23 17:52 . 2014-06-18 01:51        181760        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\TabTip.exe
2014-09-23 17:52 . 2014-06-18 01:51        646144        ----a-w-        c:\windows\system32\osk.exe
2014-09-23 17:52 . 2014-06-18 01:52        104448        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\TipBand.dll
2014-09-23 17:52 . 2014-06-18 01:50        544768        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\TipRes.dll
2014-09-23 17:52 . 2014-04-05 02:16        1310144        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2014-09-23 17:52 . 2014-04-05 02:16        240576        ----a-w-        c:\windows\system32\drivers\netio.sys
2014-09-23 17:52 . 2014-04-05 02:16        187840        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS
2014-09-23 17:52 . 2014-09-15 00:08        8806800        ------w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{B896FD8B-2F28-4E41-8765-92A544433693}\mpengine.dll
2014-09-23 17:52 . 2014-09-22 06:41        231568        ------w-        c:\windows\system32\MpSigStub.exe
2014-09-23 17:50 . 2014-08-01 11:35        793600        ----a-w-        c:\windows\system32\TSWorkspace.dll
2014-09-23 17:50 . 2014-09-05 01:52        445952        ----a-w-        c:\windows\system32\aepdu.dll
2014-09-23 17:50 . 2014-09-05 01:47        302592        ----a-w-        c:\windows\system32\aeinv.dll
2014-09-23 17:45 . 2014-04-25 01:58        626688        ----a-w-        c:\windows\system32\usp10.dll
2014-09-23 17:45 . 2014-09-09 21:49        2048        ----a-w-        c:\windows\system32\tzres.dll
2014-09-23 17:45 . 2011-04-09 05:56        123904        ----a-w-        c:\windows\system32\poqexec.exe
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-25 00:35 . 2014-07-25 00:35        875688        ----a-w-        c:\windows\system32\msvcr120_clr0400.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2014-09-23 13:26        323752        ----a-w-        c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{f794b26a-0d24-4538-9012-cd462b2071e4}]
2014-09-30 07:13        167936        ----a-w-        c:\program files\Web Security\websecurity.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-10-14 22:11        578240        ----a-w-        c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-11 137752]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-11 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-11 172568]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-08-14 1348904]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-08-22 974432]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-10-14 4085896]
.
c:\users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Mozilla Firefox.lnk - c:\program files\Mozilla Firefox\firefox.exe [2014-9-25 275568]
StormWatch.lnk - c:\users\Master\AppData\Local\StormWatch\StormWatch.exe /restart [2014-8-21 160936]
StormWatchApp.lnk - c:\users\Master\AppData\Local\StormWatch\StormWatchApp.exe [2014-9-29 1147416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 globalUpdatem;globalUpdate Update Service (globalUpdatem);c:\program files\globalUpdate\Update\GoogleUpdate.exe [2014-10-15 68608]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-08-18 108032]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2014-04-10 14848]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2014-04-10 24064]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2014-04-10 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2014-04-10 26880]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2014-10-14 779536]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2014-10-14 414520]
S1 MpKslf3c2557f;MpKslf3c2557f;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3F251278-E118-4A24-B4BF-364B1A895E30}\MpKslf3c2557f.sys [2014-10-16 39464]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2014-10-14 24184]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2014-10-14 67824]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2014-10-14 71944]
S2 TcfCQKREQ;TcfCQKREQ;c:\programdata\IjLYSFdBpJ\TcfCQKREQ.exe [2014-10-16 2318200]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [2014-07-16 1781048]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [2014-02-10 12320]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - ASWRVRT
*NewlyCreated* - ASWSP
*NewlyCreated* - WS2IFSL
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
Inhalt des "geplante Tasks" Ordners
.
2014-10-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-25 18:46]
.
2014-10-16 c:\windows\Tasks\globalUpdateUpdateTaskMachineCore.job
- c:\program files\globalUpdate\Update\GoogleUpdate.exe [2014-10-15 21:30]
.
2014-10-15 c:\windows\Tasks\globalUpdateUpdateTaskMachineUA.job
- c:\program files\globalUpdate\Update\GoogleUpdate.exe [2014-10-15 21:30]
.
2014-10-16 c:\windows\Tasks\NBFXSDC.job
- c:\users\Master\AppData\Roaming\NBFXSDC.exe [2014-10-15 21:31]
.
2014-10-16 c:\windows\Tasks\ZBHLAW.job
- c:\users\Master\AppData\Roaming\ZBHLAW.exe [2014-10-15 21:31]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
mStart Page = about:blank
IE: Free YouTube to MP3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/calendar/render?hl=de#g%7Cmonth-3+22845+22882+22862|hxxp://www.onlinefussballmanager.de/Manager-Login|hxxp://www.comunio.de/?no_mobile=1|https://www.facebook.com/|hxxp://www.gmx.net/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-Easy Speed PC - c:\program files\Probit Software\Easy Speed PC\ESPCLauncher.exe
HKCU-Run-EasySpeedCheck - c:\program files\Easy Speed Check\easyspeedcheck.exe
HKLM-Run-mbot_de_160 - (no file)
AddRemove-Easy Speed Check - c:\program files\Easy Speed Check\uninstall.exe
AddRemove-Easy Speed PC - c:\program files\Probit Software\Easy Speed PC\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\taskhost.exe
c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
c:\windows\system32\conhost.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\users\Master\AppData\Local\StormWatch\StormWatch.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\sppsvc.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-10-16  22:16:27 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-10-16 20:16
.
Vor Suchlauf: 6 Verzeichnis(se), 429.249.011.712 Bytes frei
Nach Suchlauf: 11 Verzeichnis(se), 429.049.761.792 Bytes frei
.
- - End Of File - - EB880B9B69E688511EB786A1FC7DCD68
A36C5E4F47E84449FF07ED3517B43A31
Diese Antennensymbol für Radio Canyon ist noch immer da. Einige Fehler sind verschwunden. Jedoch geht ab und zu, wenn ich mich z.B. einloggen will, plötzlich ein neuer Tab oder eine konplette neue Seite auf mit "Dies ist kein Chat" und Bilder nackter Frauen. (is jetzt net sooo schlimm ;-)
Irgendwas ist noch faul

schrauber 17.10.2014 20:16
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

antoenche 18.10.2014 15:35
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 18.10.2014
Suchlauf-Zeit: 15:22:13
Logdatei: Maleware.txt
Administrator: Ja

Version: 2.00.3.1025
Malware Datenbank: v2014.10.18.04
Rootkit Datenbank: v2014.10.17.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Master

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 291798
Verstrichene Zeit: 18 Min, 49 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 3
PUP.Optional.CometArcade.A, C:\ProgramData\IjLYSFdBpJ\TcfCQKREQ.exe, 1948, Löschen bei Neustart, [0626ab6b4c3051e515e9eebfe8190ef2]
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormWatch.exe, 2740, Löschen bei Neustart, [6bc1cc4a94e8be780582be974db323dd]
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormWatchApp.exe, 724, Löschen bei Neustart, [9f8d3adc68148bab7116e66f817f24dc]

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 32
PUP.Optional.CometArcade.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TcfCQKREQ, In Quarantäne, [0626ab6b4c3051e515e9eebfe8190ef2],
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, In Quarantäne, [7bb1070ff884ed49912abde7a959857b],
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [a686f91dcfadeb4b5b2f5b49f21056aa],
PUP.Optional.StormWatch.A, HKU\S-1-5-21-3846624210-2732582974-119307283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\StormWatch, In Quarantäne, [ea42908692ea7fb7a1e6b89d51af8779],
PUP.Optional.CometArcade.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CometArcade, In Quarantäne, [72baae685725e6509ce4f234f60d47b9],
PUP.Optional.MBot.A, HKLM\SOFTWARE\MYBESTOFFERSTODAY, In Quarantäne, [e44870a67ffd0f27c1dc061d15ee7090],
PUP.Optional.WPM.A, HKLM\SOFTWARE\supWindowsMangerProtect, In Quarantäne, [55d79185c9b349eda4683157d232b947],
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\sweet-pageSoftware, In Quarantäne, [49e385914438cd697113f5874db745bb],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\GLOBALUPDATE\UPDATE, In Quarantäne, [f4388f8749337cba542f33f7956e867a],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, In Quarantäne, [7fad49cd621ac2745535f64fb15207f9],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, In Quarantäne, [68c4c353dba1fc3a27ecd1ba7c88e020],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, In Quarantäne, [41eb9086cab261d583912d5ed331cd33],
PUP.Optional.RadioCanyon.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Radio Canyon, In Quarantäne, [9d8f93835b21cf67a3dd99f56a9aff01],
PUP.Optional.StormWatchApp.A, HKU\S-1-5-21-3846624210-2732582974-119307283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\StormWatchApp, In Quarantäne, [d05cff170b711422bac4d14711f20ef2],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-3846624210-2732582974-119307283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag, In Quarantäne, [35f7af679ae2d660cf77d5b655af3ec2],
PUP.Optional.MultiIE.A, HKU\S-1-5-21-3846624210-2732582974-119307283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DynConIE, In Quarantäne, [d25ab0662656a78f8be3dda826de09f7],
PUP.Optional.VideosMediaPlayer.A, HKU\S-1-5-21-3846624210-2732582974-119307283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\videos_MediaPlayers_v1.2+, In Quarantäne, [b9736caa6d0ffc3a8405d24d0ef557a9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3846624210-2732582974-119307283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, In Quarantäne, [fc3027ef3943b4826ad76db1a0635ea2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3846624210-2732582974-119307283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\enter, In Quarantäne, [5dcf0a0c374524125f36b1d4ee16b947],
PUP.Optional.Softonic.A, HKU\S-1-5-21-3846624210-2732582974-119307283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, In Quarantäne, [a58775a1c6b6ba7c24e356ebf60db848],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, In Quarantäne, [131929ed532983b3d654d630778c22de],

Registrierungswerte: 1
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\GLOBALUPDATE\UPDATE|path, C:\Program Files\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [f4388f8749337cba542f33f7956e867a]

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 38
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch, Löschen bei Neustart, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\locales, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\plugin, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.CometArcade.A, C:\ProgramData\CometArcade, In Quarantäne, [72baae685725e6509ce4f234f60d47b9],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch, In Quarantäne, [85a71006c5b7e35371ba0a83996b0ff1],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\defaults, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\defaults\preferences, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\userCode, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\locale, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\locale\en-US, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\Download, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\Install, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\Offline, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\Offline\{1ED16709-8130-48FC-B153-DF55A9968B18}, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.CometArcade.A, C:\Users\Master\AppData\Local\CometArcade, In Quarantäne, [111b35e13c4086b07a23df2c30d34db3],
PUP.Optional.NewPlayer.A, C:\Program Files\ver7NewPlayer, In Quarantäne, [200c7a9c6814f93da8e03bd172916b95],
PUP.Optional.MBot.A, C:\Users\Master\AppData\Local\mbot_de_144, In Quarantäne, [5bd1c5514339ad899afae329758e728e],
PUP.Optional.MBot.A, C:\Users\Master\AppData\Local\mbot_de_144\mbot_de_144, In Quarantäne, [5bd1c5514339ad899afae329758e728e],
PUP.Optional.MBot.A, C:\Users\Master\AppData\Local\mbot_de_144\mbot_de_144\1.20, In Quarantäne, [5bd1c5514339ad899afae329758e728e],
PUP.Optional.MBot.A, C:\Program Files\mbot_de_144, In Quarantäne, [37f5b06694e8092d10856d9f05feb24e],
PUP.Optional.GenesisOffers, C:\Users\Master\AppData\Local\Genesis_10122303, In Quarantäne, [e646ea2c2e4e86b0bb9ec846996a5fa1],
PUP.Optional.GenesisOffers, C:\Users\Master\AppData\Local\Genesis_10122305, In Quarantäne, [b973c155d5a7e2547ddcce40de25c63a],
PUP.Optional.MySafeProxy.A, C:\Program Files\XTRM Group\MySafeProxy, In Quarantäne, [8aa20f07027a8aac016749cc4fb49070],
PUP.Optional.MySafeProxy.A, C:\Program Files\XTRM Group\MySafeProxy\Docs, In Quarantäne, [8aa20f07027a8aac016749cc4fb49070],
PUP.Optional.MySafeProxy.A, C:\Windows\System32\config\systemprofile\AppData\Local\XTRM Group Ltd\MySafeProxy, In Quarantäne, [200c5db9225a1a1c2a036da906fd8b75],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\Weather_Protector_LLC, In Quarantäne, [e14b878f3c40db5bac5c4ccb43c0f30d],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\Weather_Protector_LLC\StormWatch.exe_Url_0tsni1oh3k3ev1tbib55r2zokyx12rst, In Quarantäne, [e14b878f3c40db5bac5c4ccb43c0f30d],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\Weather_Protector_LLC\StormWatch.exe_Url_0tsni1oh3k3ev1tbib55r2zokyx12rst\1.5.0.0, In Quarantäne, [e14b878f3c40db5bac5c4ccb43c0f30d],

Dateien: 173
PUP.Optional.CometArcade.A, C:\ProgramData\IjLYSFdBpJ\TcfCQKREQ.exe, Löschen bei Neustart, [0626ab6b4c3051e515e9eebfe8190ef2],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormWatch.exe, Löschen bei Neustart, [6bc1cc4a94e8be780582be974db323dd],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormWatchApp.exe, Löschen bei Neustart, [9f8d3adc68148bab7116e66f817f24dc],
PUP.Optional.CometArcade.A, C:\ProgramData\IjLYSFdBpJ\dat\SZWRmaiCkZg.exe, Löschen bei Neustart, [6cc025f1eb9182b41ae42f7eaf52b947],
PUP.Optional.videosMediaPlayers.A, C:\Users\Master\AppData\Roaming\NBFXSDC.exe, In Quarantäne, [80ace135c0bc40f6d8d91540d33211ef],
PUP.Optional.videosMediaPlayers.A, C:\Users\Master\AppData\Roaming\ZBHLAW.exe, In Quarantäne, [69c3f125374561d5fab787ceb055da26],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\RHEng\259964C17D084B5C9DD01937B1179E2A\setup.exe, In Quarantäne, [db519581205cdb5bd6bcd7f313eeb749],
PUP.Optional.DomaIQ, C:\Users\Master\Downloads\Player_Setup.exe, In Quarantäne, [46e6fb1b413bfa3c739782d7db25b848],
PUP.Optional.DomaIQ, C:\Users\Master\Downloads\Setup_v2_1(1).exe, In Quarantäne, [f9333ed827552511e350ca8f99678977],
PUP.Optional.DomaIQ, C:\Users\Master\Downloads\Setup_v2_1.exe, In Quarantäne, [1f0d34e2423aaa8cad864c0deb150cf4],
PUP.Optional.Softonic, C:\Users\Master\Downloads\SoftonicDownloader_fuer_mp3gain.exe, In Quarantäne, [b37948ceb3c9d26426e7675518e912ee],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormUpdater.exe, In Quarantäne, [3feda76fe19b122459a53d91699828d8],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormWatchappuninstall.exe, In Quarantäne, [ea42908692ea7fb7a1e6b89d51af8779],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormWatchBrowser.exe, In Quarantäne, [66c64bcbd5a769cd2b5cdd78a060c43c],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatch.lnk, In Quarantäne, [71bb8c8af686e74f0bbfb465bf44b749],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormWatch.exe.config, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\ffmpegsumo.dll, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\ICSharpCode.SharpZipLib.dll, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\icudt.dll, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\libcef.dll, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormUpdater.exe.config, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\StormWatchApp.dat, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\uninstall.exe, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\locales\en-US.pak, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\StormWatch\plugin\npswf32.dll, In Quarantäne, [0e1eb75f047870c6d7f422f79a69cb35],
PUP.Optional.CometArcade.A, C:\ProgramData\CometArcade\app.dat, In Quarantäne, [72baae685725e6509ce4f234f60d47b9],
PUP.Optional.CometArcade.A, C:\ProgramData\CometArcade\CometArcade.ico, In Quarantäne, [72baae685725e6509ce4f234f60d47b9],
PUP.Optional.CometArcade.A, C:\ProgramData\CometArcade\data.dat, In Quarantäne, [72baae685725e6509ce4f234f60d47b9],
PUP.Optional.CometArcade.A, C:\ProgramData\CometArcade\Uninstall.exe, In Quarantäne, [72baae685725e6509ce4f234f60d47b9],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, In Quarantäne, [a58751c5522a95a113ac0d7bfe06946c],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, In Quarantäne, [05275eb81864ff378838068258ac5fa1],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, In Quarantäne, [6ebe9c7a5f1dff37b30e0781ef154ab6],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, In Quarantäne, [88a467af0478ae88576b7117b74de917],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatchApp.lnk, In Quarantäne, [dc50e432dd9fb18563c792fb5ca8669a],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch\Uninstall StormWatch.lnk, In Quarantäne, [85a71006c5b7e35371ba0a83996b0ff1],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch\StormWatch.lnk, In Quarantäne, [85a71006c5b7e35371ba0a83996b0ff1],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome.manifest, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\install.rdf, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\509eb9a60a973504e94c8d69e4d8b55d.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\5d402725ad5170d00a9760afedddbda3.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\a1a8f49a04aa8a99af02228796e3566e.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\ad3869eb25661ca668242a2279f2f986.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\background.html, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\browser.xul, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\c8a5fe7a7d85dcddc1f2ad90d4b44582.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\dialog.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\e716a46c0d1d79dfbc67a7a58212e699.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\options.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\options.xul, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\search_dialog.xul, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\9978c8904b2982db2984afa51d26990e.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\0bd8ad8b72510fb683fccb62c75b1119.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\1cd85cf37547d03739f8607f3c2c8422.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\1d3656524cc3f8aa6e262239578b1d1e.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\472a28d45a266b340f4bf32ae665f8f1.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\4764f9871ca6ea438a172401c0f9fc99.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\828e29fd642ab20f122933d34e0b4ef9.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\85501c25d5f5060a398e672d77c04dc1.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\972c51bcb1f62f90ef8afd7149e4b5d9.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\99ebf2eb3e2473786ca96616b4cf2575.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\a330dd48e9e767c2c6128f1cdee9eec2.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\ac0864b1986f5af00abd5b94dff2a83b.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\c2e2fbd319e2deeff757e415b1270728.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\f62ded9fdaeb52e1267e725dfa35f4d9.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\fe32b017344af448d4ed45529efafad2.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\fed6700b0ade30dd13e128c97849c0a8.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\09a27db00a66229f3d2b73e275e4e653.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\17cbda11247fac4116fb59dff1894e2f.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\3589ea52c2981a4d945a9af3c3db2a4f.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\42cb864a5481c5643648c9453e2c71d9.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\4eb60c4e90b738ff4405698ddee90cd0.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\57939f7c105740238d715b49b50a0f1e.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\9c80f7f1ab77dce15cc1d48e3708fd8a.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\a022b24793601392e3685b3df30ed9f6.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\a45d7be9d12dddaad26278ab6b229494.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\a6452b4296e254a9a4a867df3fd5f778.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\a6aa6caa7d88299c6a9e57b53a017b6e.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\c1217c0bb26c99ca781ad3b90af4cc3b.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\de06c8fafdef92053d055da228a6d24c.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\df6ba45b724cbc79a3d6a99e23d36fb0.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\e56a62a4269b1c9915ed5dbcaacdfe7b.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\e83db017c8d5b0d0bee97da2eb009fa0.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\f1f46cddc5016bf01491ab7c3459335b.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\f62c10852c2d04861c5b375b23388235.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\f6c6a3cf5c244608b43bfb5cf8fe34e1.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\fdfc8ed41970db62db20e8c06e718560.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\installer.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\defaults\preferences\prefs.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\manifest.xml, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins.json, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\1.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\102.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\104.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\13.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\14.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\16.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\17.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\177.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\180.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\182.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\183.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\192.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\195.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\207.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\21.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\22.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\220.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\221.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\223.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\226.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\234.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\246.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\262.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\263.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\268.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\273.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\275.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\28.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\281.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\300.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\4.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\47.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\64.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\7.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\72.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\78.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\9.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\91.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\93.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\98.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\userCode\background.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\userCode\extension.js, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\locale\en-US\translations.dtd, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button1.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button2.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button3.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button4.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button5.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\crossrider_statusbar.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon128.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon16.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon24.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon48.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\panelarrow-up.png, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\popup.html, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\skin.css, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\update.css, In Quarantäne, [9a92e333275579bd5e69c928e31fb947],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\goopdate.dll, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\psmachine.dll, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\psuser.dll, In Quarantäne, [131929ed532983b3d654d630778c22de],
PUP.Optional.CometArcade.A, C:\Users\Master\AppData\Local\CometArcade\data2.dat, In Quarantäne, [111b35e13c4086b07a23df2c30d34db3],
PUP.Optional.NewPlayer.A, C:\Program Files\ver7NewPlayer\180.dat, In Quarantäne, [200c7a9c6814f93da8e03bd172916b95],
PUP.Optional.NewPlayer.A, C:\Program Files\ver7NewPlayer\a.db, In Quarantäne, [200c7a9c6814f93da8e03bd172916b95],
PUP.Optional.NewPlayer.A, C:\Program Files\ver7NewPlayer\b.db, In Quarantäne, [200c7a9c6814f93da8e03bd172916b95],
PUP.Optional.NewPlayer.A, C:\Program Files\ver7NewPlayer\m4fJ180.bin, In Quarantäne, [200c7a9c6814f93da8e03bd172916b95],
PUP.Optional.MBot.A, C:\Users\Master\AppData\Local\mbot_de_144\upmbot_de_144.cyl, In Quarantäne, [5bd1c5514339ad899afae329758e728e],
PUP.Optional.MBot.A, C:\Users\Master\AppData\Local\mbot_de_144\user_profil.cyp, In Quarantäne, [5bd1c5514339ad899afae329758e728e],
PUP.Optional.MBot.A, C:\Users\Master\AppData\Local\mbot_de_144\mbot_de_144\1.20\cnf.cyl, In Quarantäne, [5bd1c5514339ad899afae329758e728e],
PUP.Optional.MBot.A, C:\Program Files\mbot_de_144\unins000.dat, In Quarantäne, [37f5b06694e8092d10856d9f05feb24e],
PUP.Optional.MBot.A, C:\Program Files\mbot_de_144\unins000.msg, In Quarantäne, [37f5b06694e8092d10856d9f05feb24e],
PUP.Optional.GenesisOffers, C:\Users\Master\AppData\Local\Genesis_10122303\genesis_10122303.gss, In Quarantäne, [e646ea2c2e4e86b0bb9ec846996a5fa1],
PUP.Optional.MySafeProxy.A, C:\Program Files\XTRM Group\MySafeProxy\Docs\EULA-MSP.rtf, In Quarantäne, [8aa20f07027a8aac016749cc4fb49070],
PUP.Optional.StormWatch.A, C:\Users\Master\AppData\Local\Weather_Protector_LLC\StormWatch.exe_Url_0tsni1oh3k3ev1tbib55r2zokyx12rst\1.5.0.0\user.config, In Quarantäne, [e14b878f3c40db5bac5c4ccb43c0f30d],
PUP.Optional.CrossRider.A, C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "14906af1a23cecb44f1200ff91d28c42");), Ersetzt,[db515db99be104327911481052b37090]

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
Hi,
nachdem ich den PC neu gestartet hatte, hatte ich plötzlich kein Modzilla mehr. Toxi speed war nun mein Browser.
Ich hab jetzt nen Wiederherstellungspunkt vor ca. 3 Wochen gewählt.
Jetzt ist zwar einiges weg, aber er läuft jetzt erstmal wieder.
Können wir mit der Überprüfung nochmal neu beginnen?

schrauber 19.10.2014 08:37
Warum macht man sowas? Alle Arbeit umsonst.....

Frische FRST Logs inklusive Addition.txt bitte.

antoenche 19.10.2014 15:18
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-10-2014 01
Ran by Master (administrator) on MASTER-PC on 19-10-2014 16:13:10
Running from C:\Users\Master\Downloads
Loaded Profile: Master (Available profiles: Master)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1348904 2008-08-14] (Synaptics, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
Startup: C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShortcutTarget: Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?gws_rd=ssl
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default
FF Homepage: https://www.google.com/calendar/render?hl=de#g%7Cmonth-3+22817+22853+22841|hxxp://www.onlinefussballmanager.de/game|https://www.comunio.de/team_news.phtml|https://www.facebook.com/|https://navigator.gmx.net/navigator/show?sid=35e411c43785020005e8e611f9b9145cb44204ff3c7b63566e6722c8504c9d6affc8e7d4441fdbce77e525c72610a072#home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-09-25]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-10-09]
FF Extension: Cliqz Beta - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\cliqz@cliqz.com.xpi [2014-10-02]
FF Extension: Tabs On Bottom - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\tabsonbottom@piro.sakura.ne.jp.xpi [2014-09-25]
FF Extension: Adblock Plus - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-25]
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\cliqz@cliqz.com

Chrome:
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-19 16:11 - 2014-10-19 16:11 - 01103360 _____ (Farbar) C:\Users\Master\Downloads\FRST.exe
2014-10-18 16:37 - 2014-10-10 03:44 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-18 16:37 - 2014-10-10 03:44 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-18 16:37 - 2014-10-10 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-18 16:37 - 2014-09-29 02:43 - 02387968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-18 16:36 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-18 16:36 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-18 16:36 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-18 16:36 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-18 16:36 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-18 16:36 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-18 16:36 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-18 16:36 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-18 16:36 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-18 16:36 - 2014-09-19 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-18 16:36 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-18 16:36 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-18 16:36 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-18 16:36 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-18 16:36 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-18 16:36 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-18 16:36 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-18 16:36 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-18 16:36 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-18 16:36 - 2014-09-19 02:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-18 16:36 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-18 16:36 - 2014-09-19 02:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-18 16:36 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-18 16:36 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-18 16:36 - 2014-09-19 02:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-18 16:36 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-18 16:36 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-18 16:36 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-18 16:36 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-18 16:36 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-18 16:36 - 2014-09-04 07:06 - 00373248 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-18 16:34 - 2014-08-29 03:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-18 16:34 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-18 16:34 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-18 16:34 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-18 16:33 - 2014-09-11 06:06 - 01062400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-10-18 16:33 - 2014-09-05 03:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00525824 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-18 16:33 - 2014-07-16 04:56 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-18 16:33 - 2014-07-16 04:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-18 16:33 - 2014-07-16 04:16 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-18 16:32 - 2014-09-18 03:47 - 00102336 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-10-18 16:32 - 2014-09-18 03:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-18 16:32 - 2014-09-18 03:43 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-10-18 16:32 - 2014-09-18 03:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-10-18 16:30 - 2014-09-13 03:47 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-18 16:29 - 2014-10-18 16:29 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-18 15:43 - 2014-10-18 15:43 - 00053784 _____ () C:\Users\Master\Documents\Maleware.txt
2014-10-18 15:18 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-10-18 15:18 - 2014-10-18 15:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-18 15:13 - 2014-10-18 15:13 - 00000000 ____D () C:\Users\Master\AppData\Local\speed browser
2014-10-18 15:13 - 2014-10-18 15:13 - 00000000 ____D () C:\Program Files\speed browser
2014-10-16 22:16 - 2014-10-16 22:16 - 00022152 _____ () C:\ComboFix.txt
2014-10-16 21:52 - 2014-10-16 22:16 - 00000000 ____D () C:\Qoobox
2014-10-16 21:37 - 2014-10-16 21:37 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Probit Software
2014-10-16 21:37 - 2014-10-16 21:37 - 00000000 ____D () C:\ProgramData\TEMP
2014-10-16 21:34 - 2014-10-18 16:18 - 00000000 ____D () C:\ProgramData\IjLYSFdBpJ
2014-10-16 21:34 - 2014-10-16 21:34 - 00000000 ____D () C:\Program Files\predm
2014-10-16 21:32 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\Web Security
2014-10-16 21:28 - 2014-10-16 21:28 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-10-15 23:42 - 2014-10-15 23:43 - 00026437 _____ () C:\Users\Master\Downloads\Addition.txt
2014-10-15 23:40 - 2014-10-19 16:13 - 00007685 _____ () C:\Users\Master\Downloads\FRST.txt
2014-10-15 23:40 - 2014-10-19 16:13 - 00000000 ____D () C:\FRST
2014-10-15 23:28 - 2014-10-16 22:07 - 00000000 ____D () C:\Program Files\Probit Software
2014-10-15 00:12 - 2014-10-15 00:12 - 00000000 ____D () C:\Users\Master\AppData\Roaming\AVAST Software
2014-10-15 00:10 - 2014-10-15 00:10 - 00000000 ____D () C:\Program Files\AVAST Software
2014-10-15 00:09 - 2014-10-15 00:10 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-15 00:04 - 2014-10-15 00:06 - 91906368 _____ (AVAST Software) C:\Users\Master\Downloads\avast_free_antivirus_setup_9.0.2021.exe
2014-10-13 01:20 - 2014-10-13 01:20 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-10-13 01:06 - 2014-10-13 01:24 - 00000000 ____D () C:\Users\Master\AppData\Local\fastplayer
2014-10-13 01:06 - 2014-10-13 01:06 - 00000000 ___HD () C:\Users\Public\Temp
2014-10-13 01:04 - 2014-10-18 15:41 - 00000000 ____D () C:\Program Files\XTRM Group
2014-10-13 01:04 - 2014-10-13 01:24 - 00000000 ____D () C:\Program Files\FastPlayer
2014-10-13 01:03 - 2014-10-13 01:24 - 00000000 ____D () C:\Program Files\PepperZip
2014-10-13 01:03 - 2014-10-13 01:03 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PepperZip
2014-10-12 15:49 - 2014-10-12 15:51 - 00010752 ___SH () C:\Users\Master\Documents\Thumbs.db
2014-10-09 13:23 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\MP3Gain
2014-10-09 13:23 - 2014-10-09 13:23 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3Gain
2014-10-09 13:08 - 2014-10-18 15:41 - 00000000 ____D () C:\Program Files\globalUpdate
2014-10-09 13:08 - 2014-10-09 13:08 - 00000000 ____D () C:\Users\Master\AppData\Local\globalUpdate
2014-10-09 13:06 - 2014-10-18 16:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-10-09 13:06 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\TuneUp Utilities 2014
2014-10-09 13:06 - 2014-10-09 13:06 - 00000000 ____D () C:\Users\Master\AppData\Roaming\TuneUp Software
2014-10-09 13:06 - 2014-10-09 13:06 - 00000000 ____D () C:\Users\Master\AppData\Local\TuneUp Software
2014-10-09 13:05 - 2014-10-09 13:07 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-10-09 13:04 - 2014-10-10 11:25 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-10-09 13:02 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-10-09 13:02 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-10-09 13:02 - 2014-10-18 16:17 - 00000000 ____D () C:\Users\Master\AppData\Roaming\DVDVideoSoft
2014-10-02 22:10 - 2014-10-02 22:10 - 00000000 ____D () C:\Users\Master\AppData\Local\Frameworkx.com
2014-10-02 22:09 - 2014-10-02 22:09 - 00003069 _____ () C:\Users\Master\Desktop\Iconpfeile entfernen.lnk
2014-10-02 22:09 - 2014-10-02 22:09 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frameworkx
2014-10-02 22:09 - 2014-10-02 22:09 - 00000000 ____D () C:\Program Files\Frameworkx
2014-10-02 22:08 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\system32\dhRichClient3.dll
2014-10-02 22:08 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\system32\sqlite36_engine.dll
2014-10-02 22:07 - 2014-10-02 22:07 - 01101648 _____ () C:\Users\Master\Downloads\Vista Shortcut Manager - CHIP-Installer.exe
2014-10-02 20:29 - 2014-10-02 23:13 - 00000000 ____D () C:\ProgramData\tmp
2014-10-02 20:29 - 2014-10-02 23:13 - 00000000 ____D () C:\ProgramData\hps
2014-10-02 20:29 - 2014-10-02 20:29 - 00001084 _____ () C:\Users\Public\Desktop\dm-Fotowelt.lnk
2014-10-02 20:29 - 2014-10-02 20:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm-Fotowelt
2014-10-02 20:22 - 2014-10-02 20:22 - 00000000 ____D () C:\Program Files\dm
2014-10-02 20:21 - 2014-10-02 20:21 - 01627192 _____ () C:\Users\Master\Downloads\setup_dm_Fotowelt.exe
2014-10-02 00:47 - 2014-09-25 21:56 - 00245227 ____R () C:\Users\Master\Documents\Historie von Werner~backup-141002.logbook3
2014-09-30 19:51 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-28 18:47 - 2014-09-29 21:24 - 00000000 ____D () C:\Users\Master\Documents\Rezepte
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Weisheit
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Testament
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Sky
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Schützenverein
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Randolf
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\OneNote-Notizbücher
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Kontoauszüge
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\iMacros
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\HIT Energie
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Haenlein-Software
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\GDP
2014-09-28 18:47 - 2014-06-05 17:33 - 00000000 ____D () C:\Users\Master\Documents\Steuerfälle
2014-09-28 18:47 - 2012-02-14 21:34 - 00243961 _____ () C:\Users\Master\Documents\Car Glas.xps
2014-09-28 18:47 - 2011-09-28 22:17 - 00000454 _____ () C:\Users\Master\Documents\cc_20110928_221659.reg
2014-09-28 18:47 - 2011-09-28 22:16 - 00007316 _____ () C:\Users\Master\Documents\cc_20110928_221622.reg
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Garmin
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\DVDVideoSoft
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Blutdruck
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Atos-Klinik
2014-09-28 18:46 - 2014-07-03 12:08 - 00011907 _____ () C:\Users\Master\Documents\WM-Tip 2014.xlsx
2014-09-28 18:46 - 2013-06-03 12:07 - 00000000 ____D () C:\Users\Master\Documents\Ecki´s Fahrrad
2014-09-28 18:46 - 2012-04-24 01:48 - 22259528 _____ () C:\Users\Master\Documents\vlc-2.0.1-win32.exe
2014-09-28 18:46 - 2011-06-11 18:42 - 21022914 _____ () C:\Users\Master\Documents\vlc-1.1.10-win32.exe
2014-09-26 00:53 - 2014-09-26 00:53 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-09-26 00:06 - 2014-09-26 00:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-09-25 21:31 - 2014-09-25 21:31 - 00000000 ____D () C:\Program Files\Garmin GPS Plugin
2014-09-25 21:30 - 2014-09-25 21:33 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Garmin
2014-09-25 21:29 - 2014-09-25 21:29 - 18860616 _____ () C:\Users\Master\Downloads\CommunicatorPlugin_420.exe
2014-09-25 21:19 - 2014-10-02 21:55 - 00002138 _____ () C:\Users\Master\Desktop\Vetragsverlängerung.lnk
2014-09-25 21:18 - 2014-10-18 16:03 - 00024667 _____ () C:\Users\Master\Documents\Vetragsverlängerung.xlsx
2014-09-25 21:17 - 2014-10-02 00:47 - 00270025 _____ () C:\Users\Master\Documents\Historie von Werner.logbook3
2014-09-25 21:17 - 2014-08-18 08:44 - 00231548 ____R () C:\Users\Master\Documents\Historie von Werner~backup-140903.logbook3
2014-09-25 20:56 - 2014-10-18 16:18 - 00000000 ____D () C:\Users\Master\AppData\Roaming\vlc
2014-09-25 20:47 - 2014-09-25 20:47 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Macromedia
2014-09-25 20:47 - 2014-09-25 20:47 - 00000000 ____D () C:\Users\Master\AppData\Local\Macromedia
2014-09-25 20:46 - 2014-10-18 16:46 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-25 20:46 - 2014-09-25 20:46 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-25 20:46 - 2014-09-25 20:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-25 20:45 - 2014-09-25 20:45 - 00000000 ____D () C:\Windows\system32\Macromed
2014-09-25 20:36 - 2014-09-25 20:51 - 00000000 ____D () C:\Users\Master\Downloads\Programme
2014-09-25 20:22 - 2014-09-25 20:22 - 00002126 _____ () C:\Users\Master\Desktop\SportTracks 3.1.lnk
2014-09-25 20:22 - 2014-09-25 20:22 - 00000000 ____D () C:\Users\Master\AppData\Local\ZoneFiveSoftware
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\ZoneFiveSoftware
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zone Five Software
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\Program Files\Zone Five Software
2014-09-25 20:18 - 2014-09-25 20:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-09-25 18:04 - 2014-10-18 16:29 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-25 17:45 - 2014-09-25 17:45 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Mozilla
2014-09-25 17:45 - 2014-09-25 17:45 - 00000000 ____D () C:\Users\Master\AppData\Local\Mozilla
2014-09-25 17:44 - 2014-09-25 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-09-25 17:40 - 2014-09-25 17:40 - 00002703 _____ () C:\Users\Master\Desktop\Microsoft Office Excel 2007.lnk
2014-09-25 17:40 - 2014-09-25 17:40 - 00002697 _____ () C:\Users\Master\Desktop\Microsoft Office Word 2007.lnk
2014-09-24 11:24 - 2014-09-24 11:24 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-09-24 11:24 - 2014-09-24 11:24 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-09-24 10:57 - 2014-09-24 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-24 10:56 - 2014-09-24 10:56 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-09-24 10:42 - 2014-07-09 00:30 - 00419704 _____ () C:\Windows\system32\locale.nls
2014-09-24 10:27 - 2014-09-24 10:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-09-24 10:26 - 2009-02-27 03:42 - 00031640 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2014-09-24 10:25 - 2014-09-24 11:28 - 00000000 ____D () C:\Program Files\Microsoft Works
2014-09-24 10:24 - 2014-09-24 10:24 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio
2014-09-24 10:23 - 2014-09-24 10:23 - 00000000 ____D () C:\Windows\PCHEALTH
2014-09-24 10:20 - 2014-09-24 10:20 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2014-09-24 10:18 - 2014-10-18 17:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-24 10:18 - 2014-09-27 15:17 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-09-24 10:18 - 2014-09-24 10:18 - 00000000 ____D () C:\Users\Master\AppData\Local\Microsoft Help
2014-09-24 10:16 - 2014-09-24 10:16 - 00000000 __RHD () C:\MSOCache
2014-09-23 22:05 - 2014-09-23 19:28 - 00000000 ____D () C:\Windows\Panther
2014-09-23 21:18 - 2014-09-23 21:18 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-09-23 21:17 - 2014-09-25 20:46 - 00000000 ____D () C:\Users\Master\AppData\Local\Adobe
2014-09-23 21:17 - 2014-09-23 21:17 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00002117 _____ () C:\Users\Public\Desktop\Microsoft Security Essentials.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-09-23 21:13 - 2014-09-23 21:14 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-23 21:13 - 2014-09-23 21:13 - 00001895 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-09-23 21:13 - 2014-09-23 21:13 - 00001845 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-09-23 21:13 - 2014-09-23 21:13 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Canneverbe Limited
2014-09-23 21:13 - 2014-09-23 21:13 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-09-23 21:12 - 2014-10-19 14:07 - 01477297 _____ () C:\Windows\WindowsUpdate.log
2014-09-23 21:12 - 2014-09-23 21:12 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-23 21:12 - 2014-09-23 21:12 - 00001989 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-09-23 21:12 - 2014-09-23 21:12 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-09-23 21:12 - 2014-09-23 21:12 - 00000000 ____D () C:\Program Files\Adobe
2014-09-23 21:11 - 2014-09-24 10:10 - 00000000 ____D () C:\ProgramData\Adobe
2014-09-23 21:11 - 2014-09-23 21:11 - 00001024 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-09-23 21:11 - 2014-09-23 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-09-23 21:10 - 2014-10-18 16:29 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-23 21:10 - 2014-10-18 16:29 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-09-23 21:10 - 2014-09-23 21:10 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-23 21:10 - 2014-09-23 21:10 - 00000000 ____D () C:\Program Files\VideoLAN
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\Program Files\WinRAR
2014-09-23 21:08 - 2014-09-23 21:16 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-09-23 20:42 - 2014-09-23 20:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01007.Wdf
2014-09-23 20:42 - 2014-09-23 20:42 - 00000000 ____D () C:\Program Files\Synaptics
2014-09-23 20:41 - 2014-09-23 20:41 - 00000000 ____D () C:\Program Files\Intel
2014-09-23 20:36 - 2014-09-23 20:36 - 00000017 _____ () C:\Users\Master\AppData\Local\resmon.resmoncfg
2014-09-23 20:10 - 2014-09-24 10:23 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-09-23 20:07 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-23 20:05 - 2014-10-18 17:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-23 20:05 - 2014-10-18 16:57 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-23 20:02 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-09-23 20:02 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-09-23 20:02 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-09-23 20:02 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-09-23 19:55 - 2014-07-07 03:40 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-23 19:54 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-23 19:54 - 2014-07-07 03:40 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-09-23 19:53 - 2014-07-14 03:42 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-09-23 19:53 - 2014-07-14 03:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-09-23 19:53 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-23 19:53 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-09-23 19:53 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-09-23 19:53 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-09-23 19:53 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-09-23 19:53 - 2014-05-30 08:25 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-09-23 19:53 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-09-23 19:53 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-09-23 19:53 - 2014-03-26 04:13 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-09-23 19:53 - 2014-03-26 04:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-09-23 19:52 - 2014-09-22 08:41 - 00231568 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-23 19:52 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-09-23 19:52 - 2014-04-05 04:16 - 01310144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-09-23 19:52 - 2014-04-05 04:16 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-09-23 19:52 - 2014-04-05 04:16 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-09-23 19:50 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-23 19:45 - 2014-09-09 23:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-23 19:45 - 2014-06-25 03:37 - 12877312 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-09-23 19:45 - 2014-04-25 03:58 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-09-23 19:45 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-09-23 19:44 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-09-23 19:33 - 2014-09-23 19:33 - 00000000 __SHD () C:\Users\Master\AppData\Local\EmieUserList
2014-09-23 19:33 - 2014-09-23 19:33 - 00000000 __SHD () C:\Users\Master\AppData\Local\EmieSiteList
2014-09-23 19:30 - 2014-09-23 21:17 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Adobe
2014-09-23 19:30 - 2014-09-23 19:30 - 00001421 _____ () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-23 19:30 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-09-23 19:30 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-09-23 19:30 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-09-23 19:30 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-09-23 19:29 - 2014-09-24 11:44 - 00109392 _____ () C:\Users\Master\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-23 19:29 - 2014-09-23 19:29 - 00004887 _____ () C:\Windows\system32\WinToolkit_RunOnce_Log.log
2014-09-23 19:29 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-09-23 19:29 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-09-23 19:28 - 2014-10-18 16:22 - 00000000 ____D () C:\Users\Master
2014-09-23 19:28 - 2014-09-23 19:28 - 00000020 ___SH () C:\Users\Master\ntuser.ini
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Netzwerkumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Druckumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 ____D () C:\Recovery
2014-09-23 19:28 - 2009-07-14 06:42 - 00000000 ___RD () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-23 19:28 - 2009-07-14 06:37 - 00000000 ___RD () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-19 16:08 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-10-19 14:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-19 14:15 - 2009-07-14 06:34 - 00032272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-19 14:15 - 2009-07-14 06:34 - 00032272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-19 14:08 - 2010-11-20 23:01 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-19 14:02 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-19 14:02 - 2009-07-14 06:39 - 00033446 _____ () C:\Windows\setupact.log
2014-10-18 17:11 - 2009-07-14 06:33 - 00408816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 17:09 - 2014-05-17 10:32 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-18 16:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-10-18 16:19 - 2011-04-12 03:39 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-10-18 16:19 - 2009-07-14 04:37 - 00000000 __RSD () C:\Windows\Media
2014-10-18 16:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-10-18 16:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2014-10-18 16:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-10-18 16:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-10-18 16:13 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-10-16 22:09 - 2009-07-14 04:03 - 48758784 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 12058624 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-09-27 00:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-09-26 15:14 - 2010-11-20 23:48 - 00010712 _____ () C:\Windows\PFRO.log
2014-09-26 00:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2014-09-26 00:48 - 2009-07-14 04:04 - 00000478 _____ () C:\Windows\win.ini
2014-09-25 17:43 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-09-24 10:24 - 2011-04-12 03:39 - 00000000 ____D () C:\Windows\ShellNew
2014-09-24 10:24 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2014-09-23 22:05 - 2009-07-14 06:52 - 00032768 _____ () C:\Windows\system32\config\BCD-Template
2014-09-23 21:18 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-23 21:08 - 2011-04-12 03:39 - 00000000 ____D () C:\Windows\CSC
2014-09-23 21:08 - 2009-07-14 06:34 - 00002814 _____ () C:\Windows\DtcInstall.log
2014-09-23 20:21 - 2011-04-12 03:39 - 00000000 ____D () C:\Program Files\Windows Journal
2014-09-23 19:31 - 2009-07-14 06:46 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-09-23 19:28 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\restore
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\Recovery
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Windows NT

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-16 00:35

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 18-10-2014 01
Ran by Master at 2014-10-19 16:17:40
Running from C:\Users\Master\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5067 - CDBurnerXP)
Cliqz (HKLM\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.22 - Cliqz.com)
dm-Fotowelt (HKLM\...\dm-Fotowelt) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
Garmin Communicator Plugin (HKLM\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.6.0305.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0 (x86 de) (HKLM\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla)
SportTracks 3.1 (HKLM\...\{99895EF0-B290-4B21-B1FE-FB00E1B5D195}) (Version: 3.1.5349 - Zone Five Software)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 11.2.4.0 - Synaptics)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2899475) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{23AE87D8-AB2F-4539-935C-442BC976F469}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Vista Shortcut Manager (HKLM\...\{47609E69-4C5E-48B1-A889-24C6B82B5C04}) (Version: 2.0 - Frameworkx)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinRAR Archivierer (HKLM\...\WinRAR archiver) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

12-10-2014 10:11:56 Windows Update
12-10-2014 23:03:35 Uniblue SpeedUpMyPC installation
12-10-2014 23:19:48 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
12-10-2014 23:22:24 Wiederherstellungsvorgang
12-10-2014 23:36:27 Windows Update
14-10-2014 22:10:24 avast! antivirus system restore point
16-10-2014 19:29:57 Revo Uninstaller's restore point - MyBestOffersToday 014.160
16-10-2014 19:36:00 Revo Uninstaller's restore point - MyPC Backup
16-10-2014 19:40:12 Revo Uninstaller's restore point - Remote Desktop Access (VuuPC)
16-10-2014 19:43:03 Revo Uninstaller's restore point - videos_MediaPlayers_v1.2+
16-10-2014 19:44:46 Revo Uninstaller's restore point - videos_MediaPlayers_v1.2+
16-10-2014 19:47:14 Revo Uninstaller's restore point - WindowsMangerProtect20.0.0.722
16-10-2014 21:24:20 Windows Update
16-10-2014 21:28:37 Windows Update
18-10-2014 14:10:51 Wiederherstellungsvorgang
18-10-2014 14:40:19 Windows Update
18-10-2014 14:53:57 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {915CF7C9-6D15-49CD-8E55-F5C6E5FF80F6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-25] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-09-25 18:05 - 2014-10-11 14:53 - 03649648 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-09-25 20:45 - 2014-09-25 20:45 - 16825520 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-3846624210-2732582974-119307283-500 - Administrator - Disabled)
Gast (S-1-5-21-3846624210-2732582974-119307283-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3846624210-2732582974-119307283-1002 - Limited - Enabled)
Master (S-1-5-21-3846624210-2732582974-119307283-1000 - Administrator - Enabled) => C:\Users\Master

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/19/2014 02:04:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2014 05:13:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2014 04:23:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2014 04:06:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2014 03:19:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.1.711, Zeitstempel: 0x542b53ec
Name des fehlerhaften Moduls: QtCore4.dll, Version: 4.8.4.0, Zeitstempel: 0x51352df8
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00042016
ID des fehlerhaften Prozesses: 0xd50
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (10/18/2014 02:19:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/17/2014 03:27:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.0.5397, Zeitstempel: 0x543924b1
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.0.5397, Zeitstempel: 0x5438ffbb
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x15d8
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (10/17/2014 03:08:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/17/2014 05:38:14 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/17/2014 05:35:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (10/18/2014 04:27:19 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (10/18/2014 04:22:45 PM) (Source: Microsoft Antimalware) (EventID: 2004) (User: )
Description: Beim Laden der Signaturen wurde von %60 ein Fehler festgestellt. Es wird versucht, einen als gültig bekannten Signatursatz wiederherzustellen.

        Versuchte Signaturen: %24

        Fehlercode: 0x80070002

        Fehlerbeschreibung: Das System kann die angegebene Datei nicht finden.

        Signaturversion: 0.0.0.0;0.0.0.0

        Modulversion: %600

Error: (10/17/2014 04:03:30 PM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/17/2014 04:03:29 PM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/17/2014 04:03:29 PM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/17/2014 04:03:29 PM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/17/2014 04:03:28 PM) (Source: cdrom) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.

Error: (10/17/2014 05:40:27 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für Windows 7 (KB2952664)

Error: (10/16/2014 11:09:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TcfCQKREQ" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (10/16/2014 11:09:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst TcfCQKREQ erreicht.


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Percentage of memory in use: 45%
Total physical RAM: 2940 MB
Available physical RAM: 1599.14 MB
Total Pagefile: 5878.29 MB
Available Pagefile: 4325.83 MB
Total Virtual: 2047.88 MB
Available Virtual: 1915.61 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:487.94 GB) (Free:398.84 GB) NTFS
Drive z: (Volume) (Fixed) (Total:210.35 GB) (Free:210 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 2BFB4DC8)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=487.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=210.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 20.10.2014 10:48
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

antoenche 20.10.2014 19:18
Code:
# AdwCleaner v4.000 - Bericht erstellt am 20/10/2014 um 19:51:56
# DB v2014-10-19.11
# Aktualisiert 12/10/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (32 bits)
# Benutzername : Master - MASTER-PC
# Gestartet von : C:\Users\Master\Downloads\AdwCleaner_4.000.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files\globalUpdate
Ordner Gelöscht : C:\Users\Master\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Program Files\PepperZip
Ordner Gelöscht : C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PepperZip
Ordner Gelöscht : C:\Program Files\predm
Ordner Gelöscht : C:\Program Files\Probit Software
Ordner Gelöscht : C:\Users\Master\AppData\Roaming\Probit Software
Ordner Gelöscht : C:\Program Files\XTRM Group
Ordner Gelöscht : C:\Program Files\FastPlayer
Ordner Gelöscht : C:\Users\Master\AppData\Local\FastPlayer
Datei Gelöscht : C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\11-suche.xml

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Mozilla Firefox v33.0 (x86 de)


*************************

AdwCleaner[R0].txt - [1598 octets] - [20/10/2014 19:43:45]
AdwCleaner[S0].txt - [1511 octets] - [20/10/2014 19:51:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1571 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.3 (10.14.2014:1)
OS: Windows 7 Professional x86
Ran by Master on 20.10.2014 at 20:08:30,99
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Master\AppData\Roaming\mozilla\firefox\profiles\uxptut28.default\minidumps [15 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.10.2014 at 20:10:13,29
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-10-2014
Ran by Master (administrator) on MASTER-PC on 20-10-2014 20:14:44
Running from C:\Users\Master\Downloads
Loaded Profile: Master (Available profiles: Master)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1348904 2008-08-14] (Synaptics, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
Startup: C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShortcutTarget: Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?gws_rd=ssl
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default
FF Homepage: https://www.google.com/calendar/render?hl=de#g%7Cmonth-3+22817+22853+22841|hxxp://www.onlinefussballmanager.de/game|https://www.comunio.de/team_news.phtml|https://www.facebook.com/|https://navigator.gmx.net/navigator/show?sid=35e411c43785020005e8e611f9b9145cb44204ff3c7b63566e6722c8504c9d6affc8e7d4441fdbce77e525c72610a072#home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-09-25]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-10-09]
FF Extension: Cliqz Beta - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\cliqz@cliqz.com.xpi [2014-10-02]
FF Extension: Tabs On Bottom - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\tabsonbottom@piro.sakura.ne.jp.xpi [2014-09-25]
FF Extension: Adblock Plus - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-25]
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\cliqz@cliqz.com

Chrome:
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-20 20:14 - 2014-10-20 20:14 - 00000000 ____D () C:\Users\Master\Downloads\FRST-OlderVersion
2014-10-20 20:10 - 2014-10-20 20:10 - 00000759 _____ () C:\Users\Master\Desktop\JRT.txt
2014-10-20 20:08 - 2014-10-20 20:08 - 00000000 ____D () C:\Windows\ERUNT
2014-10-20 20:07 - 2014-10-20 20:08 - 01705698 _____ (Thisisu) C:\Users\Master\Downloads\JRT.exe
2014-10-20 19:43 - 2014-10-20 19:51 - 00000000 ____D () C:\AdwCleaner
2014-10-20 19:43 - 2014-10-20 19:43 - 01976320 _____ () C:\Users\Master\Downloads\AdwCleaner_4.000.exe
2014-10-19 16:11 - 2014-10-20 20:14 - 01102848 _____ (Farbar) C:\Users\Master\Downloads\FRST.exe
2014-10-18 16:37 - 2014-10-10 03:44 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-18 16:37 - 2014-10-10 03:44 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-18 16:37 - 2014-10-10 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-18 16:37 - 2014-09-29 02:43 - 02387968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-18 16:36 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-18 16:36 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-18 16:36 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-18 16:36 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-18 16:36 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-18 16:36 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-18 16:36 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-18 16:36 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-18 16:36 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-18 16:36 - 2014-09-19 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-18 16:36 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-18 16:36 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-18 16:36 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-18 16:36 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-18 16:36 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-18 16:36 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-18 16:36 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-18 16:36 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-18 16:36 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-18 16:36 - 2014-09-19 02:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-18 16:36 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-18 16:36 - 2014-09-19 02:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-18 16:36 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-18 16:36 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-18 16:36 - 2014-09-19 02:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-18 16:36 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-18 16:36 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-18 16:36 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-18 16:36 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-18 16:36 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-18 16:36 - 2014-09-04 07:06 - 00373248 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-18 16:34 - 2014-08-29 03:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-18 16:34 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-18 16:34 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-18 16:34 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-18 16:33 - 2014-09-11 06:06 - 01062400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-10-18 16:33 - 2014-09-05 03:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00525824 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-18 16:33 - 2014-07-16 04:56 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-18 16:33 - 2014-07-16 04:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-18 16:33 - 2014-07-16 04:16 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-18 16:32 - 2014-09-18 03:47 - 00102336 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-10-18 16:32 - 2014-09-18 03:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-18 16:32 - 2014-09-18 03:43 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-10-18 16:32 - 2014-09-18 03:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-10-18 16:30 - 2014-09-13 03:47 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-18 16:29 - 2014-10-18 16:29 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-18 15:43 - 2014-10-18 15:43 - 00053784 _____ () C:\Users\Master\Documents\Maleware.txt
2014-10-18 15:18 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-10-18 15:18 - 2014-10-18 15:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-18 15:13 - 2014-10-18 15:13 - 00000000 ____D () C:\Users\Master\AppData\Local\speed browser
2014-10-18 15:13 - 2014-10-18 15:13 - 00000000 ____D () C:\Program Files\speed browser
2014-10-16 22:16 - 2014-10-16 22:16 - 00022152 _____ () C:\ComboFix.txt
2014-10-16 21:52 - 2014-10-16 22:16 - 00000000 ____D () C:\Qoobox
2014-10-16 21:37 - 2014-10-16 21:37 - 00000000 ____D () C:\ProgramData\TEMP
2014-10-16 21:34 - 2014-10-18 16:18 - 00000000 ____D () C:\ProgramData\IjLYSFdBpJ
2014-10-16 21:32 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\Web Security
2014-10-16 21:28 - 2014-10-16 21:28 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-10-15 23:42 - 2014-10-19 16:18 - 00017989 _____ () C:\Users\Master\Downloads\Addition.txt
2014-10-15 23:40 - 2014-10-20 20:14 - 00007303 _____ () C:\Users\Master\Downloads\FRST.txt
2014-10-15 23:40 - 2014-10-20 20:14 - 00000000 ____D () C:\FRST
2014-10-15 00:12 - 2014-10-15 00:12 - 00000000 ____D () C:\Users\Master\AppData\Roaming\AVAST Software
2014-10-15 00:10 - 2014-10-15 00:10 - 00000000 ____D () C:\Program Files\AVAST Software
2014-10-15 00:09 - 2014-10-15 00:10 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-15 00:04 - 2014-10-15 00:06 - 91906368 _____ (AVAST Software) C:\Users\Master\Downloads\avast_free_antivirus_setup_9.0.2021.exe
2014-10-13 01:20 - 2014-10-13 01:20 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-10-13 01:06 - 2014-10-13 01:06 - 00000000 ___HD () C:\Users\Public\Temp
2014-10-12 15:49 - 2014-10-12 15:51 - 00010752 ___SH () C:\Users\Master\Documents\Thumbs.db
2014-10-09 13:23 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\MP3Gain
2014-10-09 13:23 - 2014-10-09 13:23 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3Gain
2014-10-09 13:06 - 2014-10-18 16:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-10-09 13:06 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\TuneUp Utilities 2014
2014-10-09 13:06 - 2014-10-09 13:06 - 00000000 ____D () C:\Users\Master\AppData\Roaming\TuneUp Software
2014-10-09 13:06 - 2014-10-09 13:06 - 00000000 ____D () C:\Users\Master\AppData\Local\TuneUp Software
2014-10-09 13:05 - 2014-10-09 13:07 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-10-09 13:04 - 2014-10-10 11:25 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-10-09 13:02 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-10-09 13:02 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-10-09 13:02 - 2014-10-18 16:17 - 00000000 ____D () C:\Users\Master\AppData\Roaming\DVDVideoSoft
2014-10-02 22:10 - 2014-10-02 22:10 - 00000000 ____D () C:\Users\Master\AppData\Local\Frameworkx.com
2014-10-02 22:09 - 2014-10-02 22:09 - 00003069 _____ () C:\Users\Master\Desktop\Iconpfeile entfernen.lnk
2014-10-02 22:09 - 2014-10-02 22:09 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frameworkx
2014-10-02 22:09 - 2014-10-02 22:09 - 00000000 ____D () C:\Program Files\Frameworkx
2014-10-02 22:08 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\system32\dhRichClient3.dll
2014-10-02 22:08 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\system32\sqlite36_engine.dll
2014-10-02 22:07 - 2014-10-02 22:07 - 01101648 _____ () C:\Users\Master\Downloads\Vista Shortcut Manager - CHIP-Installer.exe
2014-10-02 20:29 - 2014-10-02 23:13 - 00000000 ____D () C:\ProgramData\tmp
2014-10-02 20:29 - 2014-10-02 23:13 - 00000000 ____D () C:\ProgramData\hps
2014-10-02 20:29 - 2014-10-02 20:29 - 00001084 _____ () C:\Users\Public\Desktop\dm-Fotowelt.lnk
2014-10-02 20:29 - 2014-10-02 20:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm-Fotowelt
2014-10-02 20:22 - 2014-10-02 20:22 - 00000000 ____D () C:\Program Files\dm
2014-10-02 20:21 - 2014-10-02 20:21 - 01627192 _____ () C:\Users\Master\Downloads\setup_dm_Fotowelt.exe
2014-10-02 00:47 - 2014-09-25 21:56 - 00245227 ____R () C:\Users\Master\Documents\Historie von Werner~backup-141002.logbook3
2014-09-30 19:51 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-28 18:47 - 2014-09-29 21:24 - 00000000 ____D () C:\Users\Master\Documents\Rezepte
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Weisheit
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Testament
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Sky
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Schützenverein
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Randolf
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\OneNote-Notizbücher
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Kontoauszüge
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\iMacros
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\HIT Energie
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Haenlein-Software
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\GDP
2014-09-28 18:47 - 2014-06-05 17:33 - 00000000 ____D () C:\Users\Master\Documents\Steuerfälle
2014-09-28 18:47 - 2012-02-14 21:34 - 00243961 _____ () C:\Users\Master\Documents\Car Glas.xps
2014-09-28 18:47 - 2011-09-28 22:17 - 00000454 _____ () C:\Users\Master\Documents\cc_20110928_221659.reg
2014-09-28 18:47 - 2011-09-28 22:16 - 00007316 _____ () C:\Users\Master\Documents\cc_20110928_221622.reg
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Garmin
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\DVDVideoSoft
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Blutdruck
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Atos-Klinik
2014-09-28 18:46 - 2014-07-03 12:08 - 00011907 _____ () C:\Users\Master\Documents\WM-Tip 2014.xlsx
2014-09-28 18:46 - 2013-06-03 12:07 - 00000000 ____D () C:\Users\Master\Documents\Ecki´s Fahrrad
2014-09-28 18:46 - 2012-04-24 01:48 - 22259528 _____ () C:\Users\Master\Documents\vlc-2.0.1-win32.exe
2014-09-28 18:46 - 2011-06-11 18:42 - 21022914 _____ () C:\Users\Master\Documents\vlc-1.1.10-win32.exe
2014-09-26 00:53 - 2014-09-26 00:53 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-09-26 00:06 - 2014-09-26 00:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-09-25 21:31 - 2014-09-25 21:31 - 00000000 ____D () C:\Program Files\Garmin GPS Plugin
2014-09-25 21:30 - 2014-09-25 21:33 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Garmin
2014-09-25 21:29 - 2014-09-25 21:29 - 18860616 _____ () C:\Users\Master\Downloads\CommunicatorPlugin_420.exe
2014-09-25 21:19 - 2014-10-02 21:55 - 00002138 _____ () C:\Users\Master\Desktop\Vetragsverlängerung.lnk
2014-09-25 21:18 - 2014-10-19 20:39 - 00024673 _____ () C:\Users\Master\Documents\Vetragsverlängerung.xlsx
2014-09-25 21:17 - 2014-10-02 00:47 - 00270025 _____ () C:\Users\Master\Documents\Historie von Werner.logbook3
2014-09-25 21:17 - 2014-08-18 08:44 - 00231548 ____R () C:\Users\Master\Documents\Historie von Werner~backup-140903.logbook3
2014-09-25 20:56 - 2014-10-18 16:18 - 00000000 ____D () C:\Users\Master\AppData\Roaming\vlc
2014-09-25 20:47 - 2014-09-25 20:47 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Macromedia
2014-09-25 20:47 - 2014-09-25 20:47 - 00000000 ____D () C:\Users\Master\AppData\Local\Macromedia
2014-09-25 20:46 - 2014-10-20 19:46 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-25 20:46 - 2014-09-25 20:46 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-25 20:46 - 2014-09-25 20:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-25 20:45 - 2014-09-25 20:45 - 00000000 ____D () C:\Windows\system32\Macromed
2014-09-25 20:36 - 2014-09-25 20:51 - 00000000 ____D () C:\Users\Master\Downloads\Programme
2014-09-25 20:22 - 2014-09-25 20:22 - 00002126 _____ () C:\Users\Master\Desktop\SportTracks 3.1.lnk
2014-09-25 20:22 - 2014-09-25 20:22 - 00000000 ____D () C:\Users\Master\AppData\Local\ZoneFiveSoftware
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\ZoneFiveSoftware
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zone Five Software
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\Program Files\Zone Five Software
2014-09-25 20:18 - 2014-09-25 20:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-09-25 18:04 - 2014-10-18 16:29 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-25 17:45 - 2014-09-25 17:45 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Mozilla
2014-09-25 17:45 - 2014-09-25 17:45 - 00000000 ____D () C:\Users\Master\AppData\Local\Mozilla
2014-09-25 17:44 - 2014-09-25 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-09-25 17:40 - 2014-09-25 17:40 - 00002703 _____ () C:\Users\Master\Desktop\Microsoft Office Excel 2007.lnk
2014-09-25 17:40 - 2014-09-25 17:40 - 00002697 _____ () C:\Users\Master\Desktop\Microsoft Office Word 2007.lnk
2014-09-24 11:24 - 2014-09-24 11:24 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-09-24 11:24 - 2014-09-24 11:24 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-09-24 10:57 - 2014-09-24 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-24 10:56 - 2014-09-24 10:56 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-09-24 10:42 - 2014-07-09 00:30 - 00419704 _____ () C:\Windows\system32\locale.nls
2014-09-24 10:27 - 2014-09-24 10:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-09-24 10:26 - 2009-02-27 03:42 - 00031640 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2014-09-24 10:25 - 2014-09-24 11:28 - 00000000 ____D () C:\Program Files\Microsoft Works
2014-09-24 10:24 - 2014-09-24 10:24 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio
2014-09-24 10:23 - 2014-09-24 10:23 - 00000000 ____D () C:\Windows\PCHEALTH
2014-09-24 10:20 - 2014-09-24 10:20 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2014-09-24 10:18 - 2014-10-18 17:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-24 10:18 - 2014-09-27 15:17 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-09-24 10:18 - 2014-09-24 10:18 - 00000000 ____D () C:\Users\Master\AppData\Local\Microsoft Help
2014-09-24 10:16 - 2014-09-24 10:16 - 00000000 __RHD () C:\MSOCache
2014-09-23 22:05 - 2014-09-23 19:28 - 00000000 ____D () C:\Windows\Panther
2014-09-23 21:18 - 2014-09-23 21:18 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-09-23 21:17 - 2014-09-25 20:46 - 00000000 ____D () C:\Users\Master\AppData\Local\Adobe
2014-09-23 21:17 - 2014-09-23 21:17 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00002117 _____ () C:\Users\Public\Desktop\Microsoft Security Essentials.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-09-23 21:13 - 2014-09-23 21:14 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-23 21:13 - 2014-09-23 21:13 - 00001895 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-09-23 21:13 - 2014-09-23 21:13 - 00001845 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-09-23 21:13 - 2014-09-23 21:13 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Canneverbe Limited
2014-09-23 21:13 - 2014-09-23 21:13 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-09-23 21:12 - 2014-10-20 19:57 - 01535937 _____ () C:\Windows\WindowsUpdate.log
2014-09-23 21:12 - 2014-09-23 21:12 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-23 21:12 - 2014-09-23 21:12 - 00001989 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-09-23 21:12 - 2014-09-23 21:12 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-09-23 21:12 - 2014-09-23 21:12 - 00000000 ____D () C:\Program Files\Adobe
2014-09-23 21:11 - 2014-09-24 10:10 - 00000000 ____D () C:\ProgramData\Adobe
2014-09-23 21:11 - 2014-09-23 21:11 - 00001024 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-09-23 21:11 - 2014-09-23 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-09-23 21:10 - 2014-10-18 16:29 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-23 21:10 - 2014-10-18 16:29 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-09-23 21:10 - 2014-09-23 21:10 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-23 21:10 - 2014-09-23 21:10 - 00000000 ____D () C:\Program Files\VideoLAN
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\Program Files\WinRAR
2014-09-23 21:08 - 2014-09-23 21:16 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-09-23 20:42 - 2014-09-23 20:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01007.Wdf
2014-09-23 20:42 - 2014-09-23 20:42 - 00000000 ____D () C:\Program Files\Synaptics
2014-09-23 20:41 - 2014-09-23 20:41 - 00000000 ____D () C:\Program Files\Intel
2014-09-23 20:36 - 2014-09-23 20:36 - 00000017 _____ () C:\Users\Master\AppData\Local\resmon.resmoncfg
2014-09-23 20:10 - 2014-09-24 10:23 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-09-23 20:07 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-23 20:05 - 2014-10-18 17:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-23 20:05 - 2014-10-18 16:57 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-23 20:02 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-09-23 20:02 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-09-23 20:02 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-09-23 20:02 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-09-23 19:55 - 2014-07-07 03:40 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-23 19:54 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-23 19:54 - 2014-07-07 03:40 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-09-23 19:53 - 2014-07-14 03:42 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-09-23 19:53 - 2014-07-14 03:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-09-23 19:53 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-23 19:53 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-09-23 19:53 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-09-23 19:53 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-09-23 19:53 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-09-23 19:53 - 2014-05-30 08:25 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-09-23 19:53 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-09-23 19:53 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-09-23 19:53 - 2014-03-26 04:13 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-09-23 19:53 - 2014-03-26 04:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-09-23 19:52 - 2014-09-22 08:41 - 00231568 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-23 19:52 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-09-23 19:52 - 2014-04-05 04:16 - 01310144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-09-23 19:52 - 2014-04-05 04:16 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-09-23 19:52 - 2014-04-05 04:16 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-09-23 19:50 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-23 19:45 - 2014-09-09 23:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-23 19:45 - 2014-06-25 03:37 - 12877312 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-09-23 19:45 - 2014-04-25 03:58 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-09-23 19:45 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-09-23 19:44 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-09-23 19:33 - 2014-09-23 19:33 - 00000000 __SHD () C:\Users\Master\AppData\Local\EmieUserList
2014-09-23 19:33 - 2014-09-23 19:33 - 00000000 __SHD () C:\Users\Master\AppData\Local\EmieSiteList
2014-09-23 19:30 - 2014-09-23 21:17 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Adobe
2014-09-23 19:30 - 2014-09-23 19:30 - 00001421 _____ () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-23 19:30 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-09-23 19:30 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-09-23 19:30 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-09-23 19:30 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-09-23 19:29 - 2014-09-24 11:44 - 00109392 _____ () C:\Users\Master\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-23 19:29 - 2014-09-23 19:29 - 00004887 _____ () C:\Windows\system32\WinToolkit_RunOnce_Log.log
2014-09-23 19:29 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-09-23 19:29 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-09-23 19:28 - 2014-10-18 16:22 - 00000000 ____D () C:\Users\Master
2014-09-23 19:28 - 2014-09-23 19:28 - 00000020 ___SH () C:\Users\Master\ntuser.ini
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Netzwerkumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Druckumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 ____D () C:\Recovery
2014-09-23 19:28 - 2009-07-14 06:42 - 00000000 ___RD () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-23 19:28 - 2009-07-14 06:37 - 00000000 ___RD () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-20 20:01 - 2009-07-14 06:34 - 00032272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-20 20:01 - 2009-07-14 06:34 - 00032272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-20 19:58 - 2010-11-20 23:01 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-20 19:53 - 2010-11-20 23:48 - 00011030 _____ () C:\Windows\PFRO.log
2014-10-20 19:53 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-20 19:53 - 2009-07-14 06:39 - 00033558 _____ () C:\Windows\setupact.log
2014-10-19 16:08 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-10-19 14:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-18 17:11 - 2009-07-14 06:33 - 00408816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 17:09 - 2014-05-17 10:32 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-18 16:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-10-18 16:19 - 2011-04-12 03:39 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-10-18 16:19 - 2009-07-14 04:37 - 00000000 __RSD () C:\Windows\Media
2014-10-18 16:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-10-18 16:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2014-10-18 16:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-10-18 16:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-10-18 16:13 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-10-16 22:09 - 2009-07-14 04:03 - 48758784 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 12058624 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-09-27 00:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-09-26 00:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2014-09-26 00:48 - 2009-07-14 04:04 - 00000478 _____ () C:\Windows\win.ini
2014-09-25 17:43 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-09-24 10:24 - 2011-04-12 03:39 - 00000000 ____D () C:\Windows\ShellNew
2014-09-24 10:24 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2014-09-23 22:05 - 2009-07-14 06:52 - 00032768 _____ () C:\Windows\system32\config\BCD-Template
2014-09-23 21:18 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-23 21:08 - 2011-04-12 03:39 - 00000000 ____D () C:\Windows\CSC
2014-09-23 21:08 - 2009-07-14 06:34 - 00002814 _____ () C:\Windows\DtcInstall.log
2014-09-23 20:21 - 2011-04-12 03:39 - 00000000 ____D () C:\Program Files\Windows Journal
2014-09-23 19:31 - 2009-07-14 06:46 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-09-23 19:28 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\restore
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\Recovery
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Windows NT

Some content of TEMP:
====================
C:\Users\Master\AppData\Local\temp\Quarantine.exe
C:\Users\Master\AppData\Local\temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-16 00:35

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 20-10-2014
Ran by Master at 2014-10-20 20:18:03
Running from C:\Users\Master\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5067 - CDBurnerXP)
Cliqz (HKLM\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.22 - Cliqz.com)
dm-Fotowelt (HKLM\...\dm-Fotowelt) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
Garmin Communicator Plugin (HKLM\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0 (x86 de) (HKLM\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla)
SportTracks 3.1 (HKLM\...\{99895EF0-B290-4B21-B1FE-FB00E1B5D195}) (Version: 3.1.5349 - Zone Five Software)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 11.2.4.0 - Synaptics)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Vista Shortcut Manager (HKLM\...\{47609E69-4C5E-48B1-A889-24C6B82B5C04}) (Version: 2.0 - Frameworkx)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinRAR Archivierer (HKLM\...\WinRAR archiver) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

12-10-2014 10:11:56 Windows Update
12-10-2014 23:03:35 Uniblue SpeedUpMyPC installation
12-10-2014 23:19:48 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
12-10-2014 23:22:24 Wiederherstellungsvorgang
12-10-2014 23:36:27 Windows Update
14-10-2014 22:10:24 avast! antivirus system restore point
16-10-2014 19:29:57 Revo Uninstaller's restore point - MyBestOffersToday 014.160
16-10-2014 19:36:00 Revo Uninstaller's restore point - MyPC Backup
16-10-2014 19:40:12 Revo Uninstaller's restore point - Remote Desktop Access (VuuPC)
16-10-2014 19:43:03 Revo Uninstaller's restore point - videos_MediaPlayers_v1.2+
16-10-2014 19:44:46 Revo Uninstaller's restore point - videos_MediaPlayers_v1.2+
16-10-2014 19:47:14 Revo Uninstaller's restore point - WindowsMangerProtect20.0.0.722
16-10-2014 21:24:20 Windows Update
16-10-2014 21:28:37 Windows Update
18-10-2014 14:10:51 Wiederherstellungsvorgang
18-10-2014 14:40:19 Windows Update
18-10-2014 14:53:57 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {915CF7C9-6D15-49CD-8E55-F5C6E5FF80F6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-25] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-09-23 21:09 - 2006-09-16 22:19 - 00126976 _____ () C:\Program Files\WinRAR\rarext.dll
2014-09-25 18:05 - 2014-10-11 14:53 - 03649648 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-3846624210-2732582974-119307283-500 - Administrator - Disabled)
Gast (S-1-5-21-3846624210-2732582974-119307283-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3846624210-2732582974-119307283-1002 - Limited - Enabled)
Master (S-1-5-21-3846624210-2732582974-119307283-1000 - Administrator - Enabled) => C:\Users\Master

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Percentage of memory in use: 34%
Total physical RAM: 2940 MB
Available physical RAM: 1918.69 MB
Total Pagefile: 5878.29 MB
Available Pagefile: 4751.86 MB
Total Virtual: 2047.88 MB
Available Virtual: 1907.53 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:487.94 GB) (Free:397.94 GB) NTFS
Drive z: (Volume) (Fixed) (Total:210.35 GB) (Free:210 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 2BFB4DC8)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=487.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=210.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 21.10.2014 17:44

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

antoenche 21.10.2014 21:44
Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 20-10-2014
Ran by Master at 2014-10-20 20:18:03
Running from C:\Users\Master\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5067 - CDBurnerXP)
Cliqz (HKLM\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.22 - Cliqz.com)
dm-Fotowelt (HKLM\...\dm-Fotowelt) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
Garmin Communicator Plugin (HKLM\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0 (x86 de) (HKLM\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla)
SportTracks 3.1 (HKLM\...\{99895EF0-B290-4B21-B1FE-FB00E1B5D195}) (Version: 3.1.5349 - Zone Five Software)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 11.2.4.0 - Synaptics)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Vista Shortcut Manager (HKLM\...\{47609E69-4C5E-48B1-A889-24C6B82B5C04}) (Version: 2.0 - Frameworkx)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinRAR Archivierer (HKLM\...\WinRAR archiver) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

12-10-2014 10:11:56 Windows Update
12-10-2014 23:03:35 Uniblue SpeedUpMyPC installation
12-10-2014 23:19:48 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
12-10-2014 23:22:24 Wiederherstellungsvorgang
12-10-2014 23:36:27 Windows Update
14-10-2014 22:10:24 avast! antivirus system restore point
16-10-2014 19:29:57 Revo Uninstaller's restore point - MyBestOffersToday 014.160
16-10-2014 19:36:00 Revo Uninstaller's restore point - MyPC Backup
16-10-2014 19:40:12 Revo Uninstaller's restore point - Remote Desktop Access (VuuPC)
16-10-2014 19:43:03 Revo Uninstaller's restore point - videos_MediaPlayers_v1.2+
16-10-2014 19:44:46 Revo Uninstaller's restore point - videos_MediaPlayers_v1.2+
16-10-2014 19:47:14 Revo Uninstaller's restore point - WindowsMangerProtect20.0.0.722
16-10-2014 21:24:20 Windows Update
16-10-2014 21:28:37 Windows Update
18-10-2014 14:10:51 Wiederherstellungsvorgang
18-10-2014 14:40:19 Windows Update
18-10-2014 14:53:57 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {915CF7C9-6D15-49CD-8E55-F5C6E5FF80F6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-25] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-09-23 21:09 - 2006-09-16 22:19 - 00126976 _____ () C:\Program Files\WinRAR\rarext.dll
2014-09-25 18:05 - 2014-10-11 14:53 - 03649648 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-3846624210-2732582974-119307283-500 - Administrator - Disabled)
Gast (S-1-5-21-3846624210-2732582974-119307283-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3846624210-2732582974-119307283-1002 - Limited - Enabled)
Master (S-1-5-21-3846624210-2732582974-119307283-1000 - Administrator - Enabled) => C:\Users\Master

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Percentage of memory in use: 34%
Total physical RAM: 2940 MB
Available physical RAM: 1918.69 MB
Total Pagefile: 5878.29 MB
Available Pagefile: 4751.86 MB
Total Virtual: 2047.88 MB
Available Virtual: 1907.53 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:487.94 GB) (Free:397.94 GB) NTFS
Drive z: (Volume) (Fixed) (Total:210.35 GB) (Free:210 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 2BFB4DC8)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=487.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=210.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Beim Start von Security Check bekomme ich folgende Meldung
UNSUPPORTED OPERATING SYSTEM! ABORTED!

Hab nen Neustart gemacht. Danach gings.

Code:
Results of screen317's Security Check version 0.99.89 
 Windows 7 Service Pack 1 x86 (UAC is disabled!) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Microsoft Security Essentials 
avast! Antivirus               
 Antivirus up to date!  (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
 Adobe Flash Player        15.0.0.189 
 Adobe Reader XI 
 Mozilla Firefox (33.0)
````````Process Check: objlist.exe by Laurent```````` 
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
 AVAST Software Avast AvastSvc.exe 
 AVAST Software Avast avastui.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````

schrauber 22.10.2014 18:14
Log von ESET, das neue FRST Log (nicht Addition) und Antwort auf meine Frage fehlt :)

antoenche 22.10.2014 19:30
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-10-2014
Ran by Master (administrator) on MASTER-PC on 22-10-2014 20:26:41
Running from C:\Users\Master\Downloads
Loaded Profile: Master (Available profiles: Master)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1348904 2008-08-14] (Synaptics, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-10-20] (AVAST Software)
Startup: C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShortcutTarget: Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?gws_rd=ssl
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default
FF Homepage: https://www.google.com/calendar/render?hl=de#g%7Cmonth-3+22817+22853+22841|hxxp://www.onlinefussballmanager.de/game|https://www.comunio.de/team_news.phtml|https://www.facebook.com/|https://navigator.gmx.net/navigator/show?sid=35e411c43785020005e8e611f9b9145cb44204ff3c7b63566e6722c8504c9d6affc8e7d4441fdbce77e525c72610a072#home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-09-25]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-10-09]
FF Extension: Cliqz Beta - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\cliqz@cliqz.com.xpi [2014-10-02]
FF Extension: Tabs On Bottom - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\tabsonbottom@piro.sakura.ne.jp.xpi [2014-09-25]
FF Extension: Adblock Plus - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-25]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-15]
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Master\AppData\Roaming\Mozilla\Firefox\Profiles\uxptut28.default\extensions\cliqz@cliqz.com
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-15]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-20] (AVAST Software)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-10-20] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-10-20] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-10-20] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-10-20] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-10-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-10-20] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-10-20] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-10-20] ()
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-22 20:26 - 2014-10-22 20:26 - 00000000 ____D () C:\Users\Master\Downloads\FRST-OlderVersion
2014-10-21 21:33 - 2014-10-21 21:33 - 00854448 _____ () C:\Users\Master\Downloads\SecurityCheck.exe
2014-10-21 20:28 - 2014-10-21 20:28 - 02347384 _____ (ESET) C:\Users\Master\Downloads\esetsmartinstaller_deu.exe
2014-10-20 20:25 - 2014-10-20 20:25 - 00414520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-10-20 20:25 - 2014-10-20 20:25 - 00002119 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-10-20 20:25 - 2014-10-20 20:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-10-20 20:25 - 2014-10-20 20:24 - 00779536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-10-20 20:25 - 2014-10-20 20:24 - 00192352 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-10-20 20:25 - 2014-10-20 20:24 - 00071944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-10-20 20:25 - 2014-10-20 20:24 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-10-20 20:24 - 2014-10-20 20:24 - 00276432 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-10-20 20:24 - 2014-10-20 20:24 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-10-20 20:24 - 2014-10-20 20:24 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-10-20 20:24 - 2014-10-20 20:24 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-10-20 20:24 - 2014-10-20 20:24 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-10-20 20:10 - 2014-10-20 20:10 - 00000759 _____ () C:\Users\Master\Desktop\JRT.txt
2014-10-20 20:08 - 2014-10-20 20:08 - 00000000 ____D () C:\Windows\ERUNT
2014-10-20 20:07 - 2014-10-20 20:08 - 01705698 _____ (Thisisu) C:\Users\Master\Downloads\JRT.exe
2014-10-20 19:43 - 2014-10-20 19:51 - 00000000 ____D () C:\AdwCleaner
2014-10-20 19:43 - 2014-10-20 19:43 - 01976320 _____ () C:\Users\Master\Downloads\AdwCleaner_4.000.exe
2014-10-19 16:11 - 2014-10-22 20:26 - 01102336 _____ (Farbar) C:\Users\Master\Downloads\FRST.exe
2014-10-18 16:37 - 2014-10-10 03:44 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-18 16:37 - 2014-10-10 03:44 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-18 16:37 - 2014-10-10 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-18 16:37 - 2014-09-29 02:43 - 02387968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-18 16:36 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-18 16:36 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-18 16:36 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-18 16:36 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-18 16:36 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-18 16:36 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-18 16:36 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-18 16:36 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-18 16:36 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-18 16:36 - 2014-09-19 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-18 16:36 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-18 16:36 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-18 16:36 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-18 16:36 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-18 16:36 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-18 16:36 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-18 16:36 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-18 16:36 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-18 16:36 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-18 16:36 - 2014-09-19 02:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-18 16:36 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-18 16:36 - 2014-09-19 02:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-18 16:36 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-18 16:36 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-18 16:36 - 2014-09-19 02:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-18 16:36 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-18 16:36 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-18 16:36 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-18 16:36 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-18 16:36 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-18 16:36 - 2014-09-04 07:06 - 00373248 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-18 16:34 - 2014-08-29 03:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-18 16:34 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-18 16:34 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-18 16:34 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-18 16:33 - 2014-09-11 06:06 - 01062400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-10-18 16:33 - 2014-09-05 03:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00525824 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-18 16:33 - 2014-07-16 04:56 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-10-18 16:33 - 2014-07-16 04:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-18 16:33 - 2014-07-16 04:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-18 16:33 - 2014-07-16 04:16 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-18 16:32 - 2014-09-18 03:47 - 00102336 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-10-18 16:32 - 2014-09-18 03:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-18 16:32 - 2014-09-18 03:43 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-10-18 16:32 - 2014-09-18 03:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-10-18 16:30 - 2014-09-13 03:47 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-18 16:29 - 2014-10-18 16:29 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-18 15:43 - 2014-10-18 15:43 - 00053784 _____ () C:\Users\Master\Documents\Maleware.txt
2014-10-18 15:18 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-10-18 15:18 - 2014-10-18 15:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-18 15:13 - 2014-10-18 15:13 - 00000000 ____D () C:\Users\Master\AppData\Local\speed browser
2014-10-18 15:13 - 2014-10-18 15:13 - 00000000 ____D () C:\Program Files\speed browser
2014-10-16 22:16 - 2014-10-16 22:16 - 00022152 _____ () C:\ComboFix.txt
2014-10-16 21:52 - 2014-10-16 22:16 - 00000000 ____D () C:\Qoobox
2014-10-16 21:37 - 2014-10-16 21:37 - 00000000 ____D () C:\ProgramData\TEMP
2014-10-16 21:34 - 2014-10-18 16:18 - 00000000 ____D () C:\ProgramData\IjLYSFdBpJ
2014-10-16 21:32 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\Web Security
2014-10-16 21:28 - 2014-10-16 21:28 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-10-15 23:42 - 2014-10-20 20:18 - 00009606 _____ () C:\Users\Master\Downloads\Addition.txt
2014-10-15 23:40 - 2014-10-22 20:26 - 00009418 _____ () C:\Users\Master\Downloads\FRST.txt
2014-10-15 23:40 - 2014-10-22 20:26 - 00000000 ____D () C:\FRST
2014-10-15 00:12 - 2014-10-15 00:12 - 00000000 ____D () C:\Users\Master\AppData\Roaming\AVAST Software
2014-10-15 00:10 - 2014-10-15 00:10 - 00000000 ____D () C:\Program Files\AVAST Software
2014-10-15 00:09 - 2014-10-15 00:10 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-15 00:04 - 2014-10-15 00:06 - 91906368 _____ (AVAST Software) C:\Users\Master\Downloads\avast_free_antivirus_setup_9.0.2021.exe
2014-10-13 01:20 - 2014-10-13 01:20 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-10-13 01:06 - 2014-10-13 01:06 - 00000000 ___HD () C:\Users\Public\Temp
2014-10-12 15:49 - 2014-10-12 15:51 - 00010752 ___SH () C:\Users\Master\Documents\Thumbs.db
2014-10-09 13:23 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\MP3Gain
2014-10-09 13:23 - 2014-10-09 13:23 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3Gain
2014-10-09 13:06 - 2014-10-18 16:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-10-09 13:06 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\TuneUp Utilities 2014
2014-10-09 13:06 - 2014-10-09 13:06 - 00000000 ____D () C:\Users\Master\AppData\Roaming\TuneUp Software
2014-10-09 13:06 - 2014-10-09 13:06 - 00000000 ____D () C:\Users\Master\AppData\Local\TuneUp Software
2014-10-09 13:05 - 2014-10-09 13:07 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-10-09 13:04 - 2014-10-10 11:25 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-10-09 13:02 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-10-09 13:02 - 2014-10-18 16:18 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-10-09 13:02 - 2014-10-18 16:17 - 00000000 ____D () C:\Users\Master\AppData\Roaming\DVDVideoSoft
2014-10-02 22:10 - 2014-10-02 22:10 - 00000000 ____D () C:\Users\Master\AppData\Local\Frameworkx.com
2014-10-02 22:09 - 2014-10-02 22:09 - 00003069 _____ () C:\Users\Master\Desktop\Iconpfeile entfernen.lnk
2014-10-02 22:09 - 2014-10-02 22:09 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frameworkx
2014-10-02 22:09 - 2014-10-02 22:09 - 00000000 ____D () C:\Program Files\Frameworkx
2014-10-02 22:08 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\system32\dhRichClient3.dll
2014-10-02 22:08 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\system32\sqlite36_engine.dll
2014-10-02 22:07 - 2014-10-02 22:07 - 01101648 _____ () C:\Users\Master\Downloads\Vista Shortcut Manager - CHIP-Installer.exe
2014-10-02 20:29 - 2014-10-02 23:13 - 00000000 ____D () C:\ProgramData\tmp
2014-10-02 20:29 - 2014-10-02 23:13 - 00000000 ____D () C:\ProgramData\hps
2014-10-02 20:29 - 2014-10-02 20:29 - 00001084 _____ () C:\Users\Public\Desktop\dm-Fotowelt.lnk
2014-10-02 20:29 - 2014-10-02 20:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm-Fotowelt
2014-10-02 20:22 - 2014-10-02 20:22 - 00000000 ____D () C:\Program Files\dm
2014-10-02 00:47 - 2014-09-25 21:56 - 00245227 ____R () C:\Users\Master\Documents\Historie von Werner~backup-141002.logbook3
2014-09-30 19:51 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-28 18:47 - 2014-09-29 21:24 - 00000000 ____D () C:\Users\Master\Documents\Rezepte
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Weisheit
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Testament
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Sky
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Schützenverein
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Randolf
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\OneNote-Notizbücher
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Kontoauszüge
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\iMacros
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\HIT Energie
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\Haenlein-Software
2014-09-28 18:47 - 2014-09-28 18:47 - 00000000 ____D () C:\Users\Master\Documents\GDP
2014-09-28 18:47 - 2014-06-05 17:33 - 00000000 ____D () C:\Users\Master\Documents\Steuerfälle
2014-09-28 18:47 - 2012-02-14 21:34 - 00243961 _____ () C:\Users\Master\Documents\Car Glas.xps
2014-09-28 18:47 - 2011-09-28 22:17 - 00000454 _____ () C:\Users\Master\Documents\cc_20110928_221659.reg
2014-09-28 18:47 - 2011-09-28 22:16 - 00007316 _____ () C:\Users\Master\Documents\cc_20110928_221622.reg
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Garmin
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\DVDVideoSoft
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Blutdruck
2014-09-28 18:46 - 2014-09-28 18:46 - 00000000 ____D () C:\Users\Master\Documents\Atos-Klinik
2014-09-28 18:46 - 2014-07-03 12:08 - 00011907 _____ () C:\Users\Master\Documents\WM-Tip 2014.xlsx
2014-09-28 18:46 - 2013-06-03 12:07 - 00000000 ____D () C:\Users\Master\Documents\Ecki´s Fahrrad
2014-09-28 18:46 - 2012-04-24 01:48 - 22259528 _____ () C:\Users\Master\Documents\vlc-2.0.1-win32.exe
2014-09-28 18:46 - 2011-06-11 18:42 - 21022914 _____ () C:\Users\Master\Documents\vlc-1.1.10-win32.exe
2014-09-26 00:53 - 2014-09-26 00:53 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-09-26 00:06 - 2014-09-26 00:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-09-25 21:31 - 2014-09-25 21:31 - 00000000 ____D () C:\Program Files\Garmin GPS Plugin
2014-09-25 21:30 - 2014-09-25 21:33 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Garmin
2014-09-25 21:29 - 2014-09-25 21:29 - 18860616 _____ () C:\Users\Master\Downloads\CommunicatorPlugin_420.exe
2014-09-25 21:19 - 2014-10-02 21:55 - 00002138 _____ () C:\Users\Master\Desktop\Vetragsverlängerung.lnk
2014-09-25 21:18 - 2014-10-22 00:59 - 00024771 _____ () C:\Users\Master\Documents\Vetragsverlängerung.xlsx
2014-09-25 21:17 - 2014-10-02 00:47 - 00270025 _____ () C:\Users\Master\Documents\Historie von Werner.logbook3
2014-09-25 21:17 - 2014-08-18 08:44 - 00231548 ____R () C:\Users\Master\Documents\Historie von Werner~backup-140903.logbook3
2014-09-25 20:56 - 2014-10-18 16:18 - 00000000 ____D () C:\Users\Master\AppData\Roaming\vlc
2014-09-25 20:47 - 2014-09-25 20:47 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Macromedia
2014-09-25 20:47 - 2014-09-25 20:47 - 00000000 ____D () C:\Users\Master\AppData\Local\Macromedia
2014-09-25 20:46 - 2014-10-22 18:46 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-25 20:46 - 2014-10-20 20:57 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-25 20:46 - 2014-10-20 20:57 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-25 20:45 - 2014-09-25 20:45 - 00000000 ____D () C:\Windows\system32\Macromed
2014-09-25 20:36 - 2014-10-20 20:20 - 00000000 ____D () C:\Users\Master\Downloads\Programme
2014-09-25 20:22 - 2014-09-25 20:22 - 00002126 _____ () C:\Users\Master\Desktop\SportTracks 3.1.lnk
2014-09-25 20:22 - 2014-09-25 20:22 - 00000000 ____D () C:\Users\Master\AppData\Local\ZoneFiveSoftware
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\ZoneFiveSoftware
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zone Five Software
2014-09-25 20:20 - 2014-09-25 20:20 - 00000000 ____D () C:\Program Files\Zone Five Software
2014-09-25 20:18 - 2014-09-25 20:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-09-25 18:04 - 2014-10-18 16:29 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-25 17:45 - 2014-09-25 17:45 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Mozilla
2014-09-25 17:45 - 2014-09-25 17:45 - 00000000 ____D () C:\Users\Master\AppData\Local\Mozilla
2014-09-25 17:44 - 2014-09-25 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-09-25 17:40 - 2014-09-25 17:40 - 00002703 _____ () C:\Users\Master\Desktop\Microsoft Office Excel 2007.lnk
2014-09-25 17:40 - 2014-09-25 17:40 - 00002697 _____ () C:\Users\Master\Desktop\Microsoft Office Word 2007.lnk
2014-09-24 11:24 - 2014-09-24 11:24 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-09-24 11:24 - 2014-09-24 11:24 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-09-24 10:57 - 2014-09-24 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-24 10:56 - 2014-09-24 10:56 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-09-24 10:42 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-09-24 10:42 - 2014-07-09 00:30 - 00419704 _____ () C:\Windows\system32\locale.nls
2014-09-24 10:27 - 2014-09-24 10:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-09-24 10:26 - 2009-02-27 03:42 - 00031640 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2014-09-24 10:25 - 2014-09-24 11:28 - 00000000 ____D () C:\Program Files\Microsoft Works
2014-09-24 10:24 - 2014-09-24 10:24 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio
2014-09-24 10:23 - 2014-09-24 10:23 - 00000000 ____D () C:\Windows\PCHEALTH
2014-09-24 10:20 - 2014-09-24 10:20 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2014-09-24 10:18 - 2014-10-18 17:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-24 10:18 - 2014-09-27 15:17 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-09-24 10:18 - 2014-09-24 10:18 - 00000000 ____D () C:\Users\Master\AppData\Local\Microsoft Help
2014-09-24 10:16 - 2014-09-24 10:16 - 00000000 __RHD () C:\MSOCache
2014-09-23 22:05 - 2014-09-23 19:28 - 00000000 ____D () C:\Windows\Panther
2014-09-23 21:18 - 2014-09-23 21:18 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-09-23 21:17 - 2014-09-25 20:46 - 00000000 ____D () C:\Users\Master\AppData\Local\Adobe
2014-09-23 21:17 - 2014-09-23 21:17 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00002117 _____ () C:\Users\Public\Desktop\Microsoft Security Essentials.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-23 21:14 - 2014-09-23 21:14 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-09-23 21:13 - 2014-09-23 21:14 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-23 21:13 - 2014-09-23 21:13 - 00001895 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-09-23 21:13 - 2014-09-23 21:13 - 00001845 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-09-23 21:13 - 2014-09-23 21:13 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Canneverbe Limited
2014-09-23 21:13 - 2014-09-23 21:13 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-09-23 21:12 - 2014-10-22 18:18 - 01645315 _____ () C:\Windows\WindowsUpdate.log
2014-09-23 21:12 - 2014-09-23 21:12 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-23 21:12 - 2014-09-23 21:12 - 00001989 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-09-23 21:12 - 2014-09-23 21:12 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-09-23 21:12 - 2014-09-23 21:12 - 00000000 ____D () C:\Program Files\Adobe
2014-09-23 21:11 - 2014-09-24 10:10 - 00000000 ____D () C:\ProgramData\Adobe
2014-09-23 21:11 - 2014-09-23 21:11 - 00001024 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-09-23 21:11 - 2014-09-23 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-09-23 21:10 - 2014-10-18 16:29 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-23 21:10 - 2014-10-18 16:29 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-09-23 21:10 - 2014-09-23 21:10 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-23 21:10 - 2014-09-23 21:10 - 00000000 ____D () C:\Program Files\VideoLAN
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-23 21:09 - 2014-09-23 21:09 - 00000000 ____D () C:\Program Files\WinRAR
2014-09-23 21:08 - 2014-09-23 21:16 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-09-23 20:42 - 2014-09-23 20:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01007.Wdf
2014-09-23 20:42 - 2014-09-23 20:42 - 00000000 ____D () C:\Program Files\Synaptics
2014-09-23 20:41 - 2014-09-23 20:41 - 00000000 ____D () C:\Program Files\Intel
2014-09-23 20:36 - 2014-09-23 20:36 - 00000017 _____ () C:\Users\Master\AppData\Local\resmon.resmoncfg
2014-09-23 20:10 - 2014-09-24 10:23 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-09-23 20:07 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-23 20:05 - 2014-10-18 17:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-23 20:05 - 2014-10-18 16:57 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-23 20:02 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-09-23 20:02 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-09-23 20:02 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-09-23 20:02 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-09-23 19:55 - 2014-07-07 03:40 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-23 19:54 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-23 19:54 - 2014-07-07 03:40 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-09-23 19:53 - 2014-07-14 03:42 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-09-23 19:53 - 2014-07-14 03:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-09-23 19:53 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-23 19:53 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-09-23 19:53 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-09-23 19:53 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-09-23 19:53 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-09-23 19:53 - 2014-05-30 08:25 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-09-23 19:53 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-09-23 19:53 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-09-23 19:53 - 2014-03-26 04:13 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-09-23 19:53 - 2014-03-26 04:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-09-23 19:52 - 2014-09-22 08:41 - 00231568 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-23 19:52 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-09-23 19:52 - 2014-04-05 04:16 - 01310144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-09-23 19:52 - 2014-04-05 04:16 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-09-23 19:52 - 2014-04-05 04:16 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-09-23 19:50 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-23 19:45 - 2014-09-09 23:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-23 19:45 - 2014-06-25 03:37 - 12877312 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-09-23 19:45 - 2014-04-25 03:58 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-09-23 19:45 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-09-23 19:44 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-09-23 19:33 - 2014-09-23 19:33 - 00000000 __SHD () C:\Users\Master\AppData\Local\EmieUserList
2014-09-23 19:33 - 2014-09-23 19:33 - 00000000 __SHD () C:\Users\Master\AppData\Local\EmieSiteList
2014-09-23 19:30 - 2014-09-23 21:17 - 00000000 ____D () C:\Users\Master\AppData\Roaming\Adobe
2014-09-23 19:30 - 2014-09-23 19:30 - 00001421 _____ () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-23 19:30 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-09-23 19:30 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-09-23 19:30 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-09-23 19:30 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-09-23 19:30 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-09-23 19:29 - 2014-09-24 11:44 - 00109392 _____ () C:\Users\Master\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-23 19:29 - 2014-09-23 19:29 - 00004887 _____ () C:\Windows\system32\WinToolkit_RunOnce_Log.log
2014-09-23 19:29 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-09-23 19:29 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-09-23 19:28 - 2014-10-18 16:22 - 00000000 ____D () C:\Users\Master
2014-09-23 19:28 - 2014-09-23 19:28 - 00000020 ___SH () C:\Users\Master\ntuser.ini
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Netzwerkumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Druckumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Master\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-09-23 19:28 - 2014-09-23 19:28 - 00000000 ____D () C:\Recovery
2014-09-23 19:28 - 2009-07-14 06:42 - 00000000 ___RD () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-23 19:28 - 2009-07-14 06:37 - 00000000 ___RD () C:\Users\Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-22 14:24 - 2009-07-14 06:34 - 00032272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-22 14:24 - 2009-07-14 06:34 - 00032272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-22 14:17 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-22 14:17 - 2009-07-14 06:39 - 00033670 _____ () C:\Windows\setupact.log
2014-10-21 22:42 - 2010-11-20 23:01 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-20 19:53 - 2010-11-20 23:48 - 00011030 _____ () C:\Windows\PFRO.log
2014-10-19 16:08 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-10-19 14:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-18 17:11 - 2009-07-14 06:33 - 00408816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 17:09 - 2014-05-17 10:32 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-18 16:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-10-18 16:19 - 2011-04-12 03:39 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-10-18 16:19 - 2009-07-14 04:37 - 00000000 __RSD () C:\Windows\Media
2014-10-18 16:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-10-18 16:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2014-10-18 16:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-10-18 16:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-10-18 16:13 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-10-16 22:09 - 2009-07-14 04:03 - 48758784 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 12058624 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-10-16 22:09 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-09-27 00:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-09-26 00:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2014-09-26 00:48 - 2009-07-14 04:04 - 00000478 _____ () C:\Windows\win.ini
2014-09-25 17:43 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-09-24 10:24 - 2011-04-12 03:39 - 00000000 ____D () C:\Windows\ShellNew
2014-09-24 10:24 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2014-09-23 22:05 - 2009-07-14 06:52 - 00032768 _____ () C:\Windows\system32\config\BCD-Template
2014-09-23 21:18 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-23 21:08 - 2011-04-12 03:39 - 00000000 ____D () C:\Windows\CSC
2014-09-23 21:08 - 2009-07-14 06:34 - 00002814 _____ () C:\Windows\DtcInstall.log
2014-09-23 20:21 - 2011-04-12 03:39 - 00000000 ____D () C:\Program Files\Windows Journal
2014-09-23 19:31 - 2009-07-14 06:46 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-09-23 19:28 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\restore
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\Recovery
2014-09-23 19:28 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Windows NT

Some content of TEMP:
====================
C:\Users\Master\AppData\Local\temp\Quarantine.exe
C:\Users\Master\AppData\Local\temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-16 00:35

==================== End Of Log ============================
--- --- ---

--- --- ---


Läuft alles einwandfrei wieder.
Vielen Dank für deine Mühe.


Alle Zeitangaben in WEZ +1. Es ist jetzt 04:17 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19