| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: HomeTab, MPSigStub.exe und mpas-fe.exeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
07.07.2013, 07:52
| #1 |
 |  HomeTab, MPSigStub.exe und mpas-fe.exe Hallo zusammen, ich hatte vor kurzem auf einmal das Plug-in HomeTab für Firefox auf meinem Rechner. Nach dem ich es deinstalliert habe, bekomme ich nun immer nach dem Anmelden einen RunDLL-Dialog mit der folgenden Meldung: Problem beim Starten von C:\Program Files (x86)\HomeTab\TBUpdater.dll. Das angegebene Modul wurde nicht gefunden. Das eigentliche Problem besteht darin, dass die Meldung zwar zurecht angezeigt wird (schließlich existiert der Ordner HomeTab nicht mehr), ich aber keine Ahnung habe, wo ein entsprechender Autostart platziert sein soll, um ihn zu entfernen. Ich habe nämlich schon alles (Autostart-Menü, Registry, system.ini) abgesucht nach einer passenden Anwendung und nichts gefunden. Außerdem bekomme ich neuerdings auch immer bei der Anmeldung von G-Data InternetSecurity 2014 eine Meldung, dass eine Anwendung MPSigStub.exe im Ordner C:\Windows\System32\, die gestartet wurde von der Anwendung mpas-fe.exe im Ordner C:\Windows\SoftwareDistribution\Download\Install\ eine ausgehende Verbindung aufbauen will. Jedoch weiß ich nicht, was das genau für eine Anwendung sein soll. Wäre also auch schön zu wissen, was für eine Anwendung das genau ist. Vielen Dank für jede Hilfe unknownname |
|
07.07.2013, 08:06
| #2 |
| /// the machine /// TB-Ausbilder    | HomeTab, MPSigStub.exe und mpas-fe.exe hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
08.07.2013, 19:43
| #3 |
| | HomeTab, MPSigStub.exe und mpas-fe.exe Hallo schrauber,
__________________hier die FRST.txt: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013
Ran by unknownname (administrator) on 07-07-2013 09:54:35
Running from C:\Users\unknownname\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Ericsson AB) C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Password Manager\password_manager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(Secunia) C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe
(Dropbox, Inc.) C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe
() C:\Program Files (x86)\Coq\bin\coqide.exe
() C:\Program Files (x86)\Coq\bin\coqtop.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\XDesProc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\XDesProc.exe
(Microsoft Corporation) C:\PROGRAM FILES (X86)\MICROSOFT VISUAL STUDIO 11.0\COMMON7\IDE\COMMONEXTENSIONS\MICROSOFT\TESTWINDOW\vstest.discoveryengine.x86.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
(Microsoft Corporation) C:\Users\unknownname\Documents\amos\GraphalyzerPro\src\GraphalyzerPro\GraphalyzerPro\bin\Debug\GraphalyzerPro.vshost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\CommonExtensions\Microsoft\IntelliTrace\11.0.0\IntelliTrace.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [] [x]
HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [13519432 2013-04-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4 [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [PSQLLauncher] "C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" /startup [85864 2012-09-21] (Authentec Inc.)
HKLM\...\Run: [AcWin7Hlpr] C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63376 2012-09-07] (Lenovo)
HKLM\...\Run: [TpShocks] TpShocks.exe [228744 2012-09-20] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293232 2012-11-26] (Lenovo Group Limited)
HKLM\...\Run: [PasswordManager] C:\Program Files\Lenovo\Password Manager\password_manager.exe [1534888 2012-10-23] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
HKCU\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [PureSync] "C:\Program Files (x86)\PureSync\PureSyncTray.exe" [x]
HKCU\...\Run: [WinPatrol] C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe -expressboot [423144 2013-04-27] (BillP Studios)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [RotateImage] C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor [5998144 2012-09-24] (Lenovo Group Limited)
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [292088 2013-02-22] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [134616 2013-02-15] (Intel Corporation)
HKLM-x32\...\Run: [G Data AntiVirus Tray] C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444304 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe /show [52584 2013-03-14] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe /show [52584 2013-03-14] (Lenovo)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [245872 2013-02-28] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-02-28] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll ACGina
Startup: C:\ProgramData\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:newtab
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
HKCU SearchScopes: DefaultScope {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
SearchScopes: HKCU - {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: No Name - {ba696155-d96e-4281-b467-0367a0456474} - No File
BHO-x32: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files (x86)\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - No Name - {ba696155-d96e-4281-b467-0367a0456474} - No File
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default
FF Homepage: about:newtab
FF Keyword.URL: https://www.google.de/search?ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:de:official&client=firefox-a&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: adblockpopups - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
==================== Services (Whitelisted) =================
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1957840 2013-03-22] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635344 2013-02-25] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2555360 2013-06-21] (G Data Software AG)
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2012-09-24] (Lenovo.)
R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [296808 2012-08-30] (AuthenTec, Inc)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2926672 2013-03-22] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [696808 2013-02-25] (G Data Software AG)
R2 GobiQDLService; C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe [312688 2011-11-25] (Sierra Wireless, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-02-15] (Intel Corporation)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [187760 2012-11-26] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-04-11] ()
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-06-02] ()
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
R2 WMCoreService; C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [x]
==================== Drivers (Whitelisted) ====================
R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-20] (DT Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-06-12] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-06-12] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62808 2013-06-03] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-06-25] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106648 2013-02-12] (G Data Software)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106648 2013-02-12] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-06-12] (G Data Software AG)
R3 LenovoRd; C:\Windows\System32\Drivers\LenovoRd.sys [118016 2009-05-11] (Lenovo)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11525872 2013-02-27] (Intel Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [284448 2013-02-28] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-04-18] (Secunia)
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-18] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [x]
S3 btwaudio; system32\drivers\btwaudio.sys [x]
S3 btwavdt; system32\drivers\btwavdt.sys [x]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [x]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST
2013-07-07 09:53 - 2013-07-07 09:53 - 01934636 ____A (Farbar) C:\Users\unknownname\Desktop\FRST64.exe
2013-07-07 08:04 - 2013-07-07 08:56 - 00000296 ____A C:\Users\unknownname\Desktop\problem.txt
2013-07-04 07:54 - 2013-07-04 07:54 - 00262292 ____A C:\Windows\msxml4-KB2758694-deu.LOG
2013-07-03 20:10 - 2013-07-03 20:10 - 00312232 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-07-03 20:10 - 2013-07-03 20:10 - 00189352 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-07-03 20:10 - 2013-07-03 20:10 - 00188840 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-07-03 20:10 - 2013-07-03 20:10 - 00108968 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-07-03 19:59 - 2013-07-03 19:59 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2013-07-02 20:55 - 2013-07-02 20:55 - 00000000 ____D C:\Users\unknownname\Documents\StreamTransport
2013-07-02 20:08 - 2013-07-02 20:52 - 693392091 ____A C:\Users\unknownname\Documents\Video "Der Nivea-Check" ARD Mediathek Das Erste_0.flv
2013-07-02 20:05 - 2013-07-02 20:05 - 00000000 ____D C:\Program Files (x86)\StreamTransport
2013-07-02 20:05 - 2009-10-27 19:31 - 03982240 ____A (Adobe Systems, Inc.) C:\Windows\SysWOW64\Flash10d.ocx
2013-07-02 20:04 - 2013-07-02 20:04 - 03331742 ____A ( ) C:\Users\unknownname\Downloads\streamtransport2171_setup.exe
2013-07-02 19:11 - 2013-07-02 19:50 - 00011218 ____A C:\Users\unknownname\Desktop\unterhalt.ods
2013-06-29 12:40 - 2013-06-29 12:40 - 01343192 ____A (Microsoft Corporation) C:\Users\unknownname\Downloads\VS2012.3.exe
2013-06-28 17:13 - 2013-06-28 17:13 - 00000010 ____A C:\Users\unknownname\Desktop\telefon.txt
2013-06-28 10:10 - 2013-06-28 10:10 - 00000017 ____A C:\Users\unknownname\AppData\Local\resmon.resmoncfg
2013-06-28 08:51 - 2013-06-28 08:52 - 00023688 ____A C:\AdwCleaner[S1].txt
2013-06-28 08:50 - 2013-06-28 08:51 - 00023215 ____A C:\AdwCleaner[R1].txt
2013-06-28 08:49 - 2013-06-28 08:49 - 00648201 ____A C:\Users\unknownname\Downloads\adwcleaner.exe
2013-06-26 14:53 - 2013-06-26 14:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-25 17:58 - 2013-06-25 18:00 - 173500560 ____A (Creative Amadeo GmbH ) C:\Users\unknownname\Downloads\ashampoo_home_designer_1.0.0_7591.exe
2013-06-25 17:58 - 2013-06-25 17:58 - 41085024 ____A (MAGIX AG) C:\Users\unknownname\Downloads\setup_pc_check_tuning.exe
2013-06-25 17:58 - 2013-06-25 17:58 - 06662897 ____A C:\Users\unknownname\Downloads\xsetup92.zip
2013-06-25 17:57 - 2013-06-25 17:58 - 21099336 ____A (ashampoo GmbH & Co. KG ) C:\Users\unknownname\Downloads\ashampoo_music_studio_2009_3.50_6497.exe
2013-06-25 17:57 - 2013-06-25 17:57 - 16786448 ____A (Tobit.Software) C:\Users\unknownname\Downloads\radio-fx.exe
2013-06-25 17:56 - 2013-06-25 17:57 - 28724200 ____A (Ashampoo GmbH & Co. KG ) C:\Users\unknownname\Downloads\ashampoo_winoptimizer_9_9.04.31_13453.exe
2013-06-25 17:56 - 2013-06-25 17:57 - 18889898 ____A (Ultimate Systems, Inc. ) C:\Users\unknownname\Downloads\wscx2.exe
2013-06-25 16:29 - 2013-06-25 16:29 - 06244232 ____A C:\Users\unknownname\Downloads\FreeFileSync_5.16_Windows_Setup.exe
2013-06-25 16:29 - 2013-06-25 16:29 - 02211663 ____A ( ) C:\Users\unknownname\Downloads\streamwriter_setup_4.3.0.2.exe
2013-06-25 14:56 - 2013-06-27 16:33 - 00003515 ____A C:\Users\unknownname\Documents\test.csv
2013-06-25 14:32 - 2013-07-04 15:43 - 00003163 ____A C:\Users\unknownname\weka.log
2013-06-25 14:31 - 2013-06-12 21:43 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-25 13:35 - 2013-06-25 14:32 - 00000000 ____D C:\Program Files (x86)\Weka-3-6
2013-06-25 12:31 - 2013-06-25 12:32 - 52055220 ____A (Machine Learning Group, University of Waikato, Hamilton, NZ) C:\Users\unknownname\Downloads\weka-3-6-9jre.exe
2013-06-24 21:11 - 2013-06-24 21:11 - 00037810 ____A C:\Users\unknownname\Downloads\InputSimulator.0.1.0.0-bin.zip
2013-06-24 20:47 - 2013-06-24 20:47 - 00140125 ____A C:\Users\unknownname\Downloads\hosts.zip
2013-06-24 20:39 - 2013-06-24 20:39 - 00000000 ____D C:\Users\unknownname\AppData\Local\Secunia PSI
2013-06-24 20:38 - 2013-06-24 20:38 - 03270960 ____A (Secunia) C:\Users\Public\Downloads\PSISetup7009.exe
2013-06-24 20:38 - 2013-06-24 20:38 - 00000000 ____D C:\Program Files (x86)\Secunia
2013-06-24 20:18 - 2013-06-24 20:18 - 00000000 ____D C:\Users\unknownname\Downloads\wot_safe_surfing-20130515-fx
2013-06-24 20:17 - 2013-06-24 20:17 - 00000000 ____D C:\Program Files\WOT
2013-06-24 20:17 - 2013-06-24 20:17 - 00000000 ____D C:\Program Files (x86)\WOT
2013-06-24 16:35 - 2013-06-28 08:43 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-06-24 16:35 - 2013-06-24 16:35 - 00000000 ____D C:\ProgramData\Licenses
2013-06-24 16:22 - 2013-06-24 16:22 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\WinPatrol
2013-06-24 16:22 - 2013-06-24 16:22 - 00000000 ____D C:\Program Files (x86)\BillP Studios
2013-06-24 13:30 - 2013-06-24 13:30 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Malwarebytes
2013-06-24 13:30 - 2013-06-24 13:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-24 13:30 - 2013-06-24 13:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-24 13:30 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-24 13:29 - 2013-06-24 13:29 - 00448512 ____A (OldTimer Tools) C:\Users\Public\Downloads\TFC.exe
2013-06-24 13:27 - 2013-06-24 13:27 - 04095448 ____A (BrightFort LLC ) C:\Users\Public\Downloads\spywareblastersetup50.exe
2013-06-24 13:25 - 2013-06-24 13:25 - 02023424 ____A C:\Users\Public\Downloads\WOT-latest-all-x64_20120802.msi
2013-06-24 13:25 - 2013-06-24 13:25 - 00376576 ____A C:\Users\Public\Downloads\wot_safe_surfing-20130515-fx.zip
2013-06-24 13:24 - 2013-06-24 13:24 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\Public\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-06-24 13:24 - 2013-06-24 13:24 - 00906440 ____A (BillP Studios) C:\Users\Public\Downloads\wpsetup.exe
2013-06-21 17:58 - 2013-06-23 18:14 - 00000005 ____A C:\Users\unknownname\AppData\Roaming\WBPU-TTL.DAT
2013-06-20 13:28 - 2013-06-12 21:47 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-20 13:28 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-20 13:28 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-20 13:27 - 2013-06-20 13:28 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-19 15:58 - 2013-06-19 15:58 - 00000000 ____D C:\Users\unknownname\Downloads\email
2013-06-19 15:57 - 2013-06-19 15:57 - 00056285 ____A C:\Users\unknownname\Downloads\SfLib.zip
2013-06-12 20:53 - 2013-05-06 11:30 - 04832768 ____A C:\Users\Public\Documents\BlendWPFSDK_en.msi
2013-06-12 20:53 - 2013-05-03 17:39 - 46768128 ____A C:\Users\Public\Documents\ReSharperSetup.7.1.3000.2254.msi
2013-06-12 20:53 - 2013-05-01 20:13 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\Public\Documents\mbam-setup-1.75.0.1300.exe
2013-06-12 20:53 - 2013-04-29 22:10 - 00991848 ____A (Microsoft Corporation) C:\Users\Public\Documents\vs_langpack.exe
2013-06-12 20:53 - 2013-04-28 10:50 - 03012424 ____A C:\Users\Public\Documents\NUnit-2.6.2.msi
2013-06-12 20:42 - 2013-06-12 20:42 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-12 20:42 - 2013-06-12 20:42 - 00000000 ____D C:\Program Files\iTunes
2013-06-12 20:42 - 2013-06-12 20:42 - 00000000 ____D C:\Program Files\iPod
2013-06-12 20:42 - 2013-06-12 20:42 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-12 20:18 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 20:18 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 20:17 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 20:17 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 20:17 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 20:17 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 20:17 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 20:17 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 20:17 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 20:17 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 20:17 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 20:17 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 19:38 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 19:38 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 19:38 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 19:38 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 19:38 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 19:38 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 19:38 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 19:38 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 19:38 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 19:38 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 19:38 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 19:38 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 19:38 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 19:38 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 19:38 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 19:38 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 19:38 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 19:38 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 19:38 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 14:21 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 14:21 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 14:21 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-12 14:18 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 14:18 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 14:18 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 14:18 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 14:17 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 14:17 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 14:17 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 14:17 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 14:17 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 14:17 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 14:17 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 14:17 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 14:17 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 14:17 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 14:17 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 14:17 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 07:40 - 2013-06-12 07:41 - 00019223 ____A C:\Users\unknownname\Downloads\AMOS SS13 Gruppe 5.ods
2013-06-09 19:53 - 2013-06-09 19:53 - 08247888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110ud.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 08177224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110d.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 04456520 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110u.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 04421192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00164424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\atl110.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00111696 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfcm110d.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00110672 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfcm110ud.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00083024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfcm110u.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00083016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfcm110.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00074832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110fra.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00074832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110deu.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00073808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110esn.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00072784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110ita.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00070736 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110rus.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00065104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110enu.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00053840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110jpn.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00053328 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110kor.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00046160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110cht.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00046160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110chs.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 10932304 ____A (Microsoft Corporation) C:\Windows\System32\mfc110ud.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 10860616 ____A (Microsoft Corporation) C:\Windows\System32\mfc110d.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 05619784 ____A (Microsoft Corporation) C:\Windows\System32\mfc110u.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 05592648 ____A (Microsoft Corporation) C:\Windows\System32\mfc110.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00192584 ____A (Microsoft Corporation) C:\Windows\System32\atl110.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00120912 ____A (Microsoft Corporation) C:\Windows\System32\mfcm110d.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00119376 ____A (Microsoft Corporation) C:\Windows\System32\mfcm110ud.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00090192 ____A (Microsoft Corporation) C:\Windows\System32\mfcm110u.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00090184 ____A (Microsoft Corporation) C:\Windows\System32\mfcm110.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00074832 ____A (Microsoft Corporation) C:\Windows\System32\mfc110fra.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00074832 ____A (Microsoft Corporation) C:\Windows\System32\mfc110deu.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00073808 ____A (Microsoft Corporation) C:\Windows\System32\mfc110esn.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00072784 ____A (Microsoft Corporation) C:\Windows\System32\mfc110ita.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00070736 ____A (Microsoft Corporation) C:\Windows\System32\mfc110rus.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00065104 ____A (Microsoft Corporation) C:\Windows\System32\mfc110enu.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00053840 ____A (Microsoft Corporation) C:\Windows\System32\mfc110jpn.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00053328 ____A (Microsoft Corporation) C:\Windows\System32\mfc110kor.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00046160 ____A (Microsoft Corporation) C:\Windows\System32\mfc110cht.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00046160 ____A (Microsoft Corporation) C:\Windows\System32\mfc110chs.dll
2013-06-08 11:39 - 2013-06-08 11:38 - 00023950 ____A C:\Users\Public\Documents\ex6.v
2013-06-07 22:13 - 2013-06-07 22:13 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\DAEMON Tools Lite
2013-06-07 10:11 - 2013-06-07 10:11 - 00000000 ____D C:\Users\unknownname\Documents\Bluetooth-Exchange-Ordner
2013-06-07 09:51 - 2013-06-07 14:10 - 00001243 ____A C:\Users\unknownname\Desktop\petition.txt
==================== One Month Modified Files and Folders =======
2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST
2013-07-07 09:53 - 2013-07-07 09:53 - 01934636 ____A (Farbar) C:\Users\unknownname\Desktop\FRST64.exe
2013-07-07 09:47 - 2009-07-14 06:51 - 00072468 ____A C:\Windows\setupact.log
2013-07-07 09:02 - 2012-12-17 21:03 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-07 08:56 - 2013-07-07 08:04 - 00000296 ____A C:\Users\unknownname\Desktop\problem.txt
2013-07-07 08:04 - 2013-04-24 13:58 - 00000000 ___RD C:\Users\unknownname\Dropbox
2013-07-07 08:04 - 2013-04-24 13:53 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Dropbox
2013-07-07 08:03 - 2012-12-18 02:33 - 01736871 ____A C:\Windows\WindowsUpdate.log
2013-07-07 07:58 - 2009-07-14 06:45 - 00021808 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-07 07:58 - 2009-07-14 06:45 - 00021808 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-07 07:50 - 2012-12-17 22:54 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-07 07:50 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-06 21:08 - 2013-04-23 08:51 - 00000000 ____D C:\Users\unknownname\Downloads\semprog
2013-07-05 14:34 - 2013-03-25 21:02 - 00000000 ____D C:\Users\unknownname\Documents\amos
2013-07-04 15:43 - 2013-06-25 14:32 - 00003163 ____A C:\Users\unknownname\weka.log
2013-07-04 13:48 - 2013-05-23 21:07 - 00000000 ____D C:\Users\unknownname\Downloads\datamining
2013-07-04 08:01 - 2012-12-18 02:33 - 00000000 ____D C:\users\unknownname
2013-07-04 07:54 - 2013-07-04 07:54 - 00262292 ____A C:\Windows\msxml4-KB2758694-deu.LOG
2013-07-03 20:10 - 2013-07-03 20:10 - 00312232 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-07-03 20:10 - 2013-07-03 20:10 - 00189352 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-07-03 20:10 - 2013-07-03 20:10 - 00188840 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-07-03 20:10 - 2013-07-03 20:10 - 00108968 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-07-03 20:10 - 2013-02-03 11:59 - 01093032 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-07-03 20:10 - 2013-02-03 11:59 - 00972712 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-07-03 20:09 - 2013-02-27 12:44 - 00000000 ____D C:\Program Files\Java
2013-07-03 19:59 - 2013-07-03 19:59 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2013-07-03 08:31 - 2013-03-20 21:47 - 00000000 ____D C:\Users\unknownname\Documents\Visual Studio 2012
2013-07-02 20:57 - 2013-05-04 11:27 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\vlc
2013-07-02 20:55 - 2013-07-02 20:55 - 00000000 ____D C:\Users\unknownname\Documents\StreamTransport
2013-07-02 20:54 - 2013-02-14 16:27 - 00000000 ____D C:\ProgramData\NCH Software
2013-07-02 20:54 - 2013-02-14 16:26 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\NCH Software
2013-07-02 20:52 - 2013-07-02 20:08 - 693392091 ____A C:\Users\unknownname\Documents\Video "Der Nivea-Check" ARD Mediathek Das Erste_0.flv
2013-07-02 20:05 - 2013-07-02 20:05 - 00000000 ____D C:\Program Files (x86)\StreamTransport
2013-07-02 20:04 - 2013-07-02 20:04 - 03331742 ____A ( ) C:\Users\unknownname\Downloads\streamtransport2171_setup.exe
2013-07-02 19:50 - 2013-07-02 19:11 - 00011218 ____A C:\Users\unknownname\Desktop\unterhalt.ods
2013-07-02 08:51 - 2013-04-23 09:04 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\gtk-2.0
2013-06-29 13:25 - 2013-03-20 21:04 - 00000000 ____D C:\ProgramData\Package Cache
2013-06-29 12:49 - 2013-03-20 21:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0
2013-06-29 12:40 - 2013-06-29 12:40 - 01343192 ____A (Microsoft Corporation) C:\Users\unknownname\Downloads\VS2012.3.exe
2013-06-28 17:13 - 2013-06-28 17:13 - 00000010 ____A C:\Users\unknownname\Desktop\telefon.txt
2013-06-28 10:10 - 2013-06-28 10:10 - 00000017 ____A C:\Users\unknownname\AppData\Local\resmon.resmoncfg
2013-06-28 08:52 - 2013-06-28 08:51 - 00023688 ____A C:\AdwCleaner[S1].txt
2013-06-28 08:51 - 2013-06-28 08:50 - 00023215 ____A C:\AdwCleaner[R1].txt
2013-06-28 08:49 - 2013-06-28 08:49 - 00648201 ____A C:\Users\unknownname\Downloads\adwcleaner.exe
2013-06-28 08:43 - 2013-06-24 16:35 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-06-27 16:33 - 2013-06-25 14:56 - 00003515 ____A C:\Users\unknownname\Documents\test.csv
2013-06-27 08:55 - 2013-03-13 18:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-27 07:14 - 2013-06-02 22:08 - 00031816 ____A C:\Windows\Launcher.exe
2013-06-26 21:49 - 2013-04-19 14:27 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Skype
2013-06-26 21:15 - 2013-04-19 14:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-26 21:15 - 2013-04-19 14:27 - 00000000 ____D C:\ProgramData\Skype
2013-06-26 14:53 - 2013-06-26 14:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-25 20:23 - 2012-12-17 23:10 - 00064856 ____A (G Data Software AG) C:\Windows\System32\Drivers\gdwfpcd64.sys
2013-06-25 18:00 - 2013-06-25 17:58 - 173500560 ____A (Creative Amadeo GmbH ) C:\Users\unknownname\Downloads\ashampoo_home_designer_1.0.0_7591.exe
2013-06-25 17:58 - 2013-06-25 17:58 - 41085024 ____A (MAGIX AG) C:\Users\unknownname\Downloads\setup_pc_check_tuning.exe
2013-06-25 17:58 - 2013-06-25 17:58 - 06662897 ____A C:\Users\unknownname\Downloads\xsetup92.zip
2013-06-25 17:58 - 2013-06-25 17:57 - 21099336 ____A (ashampoo GmbH & Co. KG ) C:\Users\unknownname\Downloads\ashampoo_music_studio_2009_3.50_6497.exe
2013-06-25 17:57 - 2013-06-25 17:57 - 16786448 ____A (Tobit.Software) C:\Users\unknownname\Downloads\radio-fx.exe
2013-06-25 17:57 - 2013-06-25 17:56 - 28724200 ____A (Ashampoo GmbH & Co. KG ) C:\Users\unknownname\Downloads\ashampoo_winoptimizer_9_9.04.31_13453.exe
2013-06-25 17:57 - 2013-06-25 17:56 - 18889898 ____A (Ultimate Systems, Inc. ) C:\Users\unknownname\Downloads\wscx2.exe
2013-06-25 16:29 - 2013-06-25 16:29 - 06244232 ____A C:\Users\unknownname\Downloads\FreeFileSync_5.16_Windows_Setup.exe
2013-06-25 16:29 - 2013-06-25 16:29 - 02211663 ____A ( ) C:\Users\unknownname\Downloads\streamwriter_setup_4.3.0.2.exe
2013-06-25 14:32 - 2013-06-25 13:35 - 00000000 ____D C:\Program Files (x86)\Weka-3-6
2013-06-25 14:31 - 2013-03-06 17:38 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-25 12:32 - 2013-06-25 12:31 - 52055220 ____A (Machine Learning Group, University of Waikato, Hamilton, NZ) C:\Users\unknownname\Downloads\weka-3-6-9jre.exe
2013-06-24 21:11 - 2013-06-24 21:11 - 00037810 ____A C:\Users\unknownname\Downloads\InputSimulator.0.1.0.0-bin.zip
2013-06-24 20:47 - 2013-06-24 20:47 - 00140125 ____A C:\Users\unknownname\Downloads\hosts.zip
2013-06-24 20:39 - 2013-06-24 20:39 - 00000000 ____D C:\Users\unknownname\AppData\Local\Secunia PSI
2013-06-24 20:38 - 2013-06-24 20:38 - 03270960 ____A (Secunia) C:\Users\Public\Downloads\PSISetup7009.exe
2013-06-24 20:38 - 2013-06-24 20:38 - 00000000 ____D C:\Program Files (x86)\Secunia
2013-06-24 20:18 - 2013-06-24 20:18 - 00000000 ____D C:\Users\unknownname\Downloads\wot_safe_surfing-20130515-fx
2013-06-24 20:17 - 2013-06-24 20:17 - 00000000 ____D C:\Program Files\WOT
2013-06-24 20:17 - 2013-06-24 20:17 - 00000000 ____D C:\Program Files (x86)\WOT
2013-06-24 16:55 - 2010-11-21 05:47 - 00449912 ____A C:\Windows\PFRO.log
2013-06-24 16:35 - 2013-06-24 16:35 - 00000000 ____D C:\ProgramData\Licenses
2013-06-24 16:22 - 2013-06-24 16:22 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\WinPatrol
2013-06-24 16:22 - 2013-06-24 16:22 - 00000000 ____D C:\Program Files (x86)\BillP Studios
2013-06-24 13:30 - 2013-06-24 13:30 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Malwarebytes
2013-06-24 13:30 - 2013-06-24 13:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-24 13:30 - 2013-06-24 13:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-24 13:29 - 2013-06-24 13:29 - 00448512 ____A (OldTimer Tools) C:\Users\Public\Downloads\TFC.exe
2013-06-24 13:27 - 2013-06-24 13:27 - 04095448 ____A (BrightFort LLC ) C:\Users\Public\Downloads\spywareblastersetup50.exe
2013-06-24 13:25 - 2013-06-24 13:25 - 02023424 ____A C:\Users\Public\Downloads\WOT-latest-all-x64_20120802.msi
2013-06-24 13:25 - 2013-06-24 13:25 - 00376576 ____A C:\Users\Public\Downloads\wot_safe_surfing-20130515-fx.zip
2013-06-24 13:24 - 2013-06-24 13:24 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\Public\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-06-24 13:24 - 2013-06-24 13:24 - 00906440 ____A (BillP Studios) C:\Users\Public\Downloads\wpsetup.exe
2013-06-23 21:34 - 2013-03-29 12:08 - 00000000 ____D C:\Users\unknownname\Documents\Krypto
2013-06-23 18:14 - 2013-06-21 17:58 - 00000005 ____A C:\Users\unknownname\AppData\Roaming\WBPU-TTL.DAT
2013-06-20 13:28 - 2013-06-20 13:27 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-19 15:58 - 2013-06-19 15:58 - 00000000 ____D C:\Users\unknownname\Downloads\email
2013-06-19 15:57 - 2013-06-19 15:57 - 00056285 ____A C:\Users\unknownname\Downloads\SfLib.zip
2013-06-14 20:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-12 21:48 - 2012-12-21 15:14 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-12 21:48 - 2012-12-21 15:14 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-12 21:47 - 2013-06-20 13:28 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-12 21:43 - 2013-06-25 14:31 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-12 21:43 - 2013-06-20 13:28 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-12 21:43 - 2013-06-20 13:28 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-12 20:42 - 2013-06-12 20:42 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-12 20:42 - 2013-06-12 20:42 - 00000000 ____D C:\Program Files\iTunes
2013-06-12 20:42 - 2013-06-12 20:42 - 00000000 ____D C:\Program Files\iPod
2013-06-12 20:42 - 2013-06-12 20:42 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-12 20:42 - 2012-12-17 23:02 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-12 20:30 - 2012-12-17 23:00 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-06-12 20:30 - 2012-12-17 23:00 - 00000000 ____D C:\Windows\System32\NV
2013-06-12 20:30 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\System32\WinBioPlugIns
2013-06-12 20:24 - 2013-05-29 13:32 - 00000000 ____D C:\Users\unknownname\AppData\Local\Apple Computer
2013-06-12 20:23 - 2013-05-29 13:33 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-06-12 20:23 - 2012-12-17 23:08 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Apple Computer
2013-06-12 20:23 - 2012-12-17 22:54 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-06-12 20:14 - 2013-02-15 15:07 - 01594892 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-12 20:14 - 2010-11-21 08:50 - 00699666 ____A C:\Windows\System32\perfh007.dat
2013-06-12 20:14 - 2010-11-21 08:50 - 00149774 ____A C:\Windows\System32\perfc007.dat
2013-06-12 20:14 - 2009-07-14 07:13 - 01594892 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-12 20:09 - 2012-12-17 23:10 - 00130392 ____A (G Data Software AG) C:\Windows\System32\Drivers\MiniIcpt.sys
2013-06-12 20:09 - 2012-12-17 23:10 - 00065368 ____A (G Data Software AG) C:\Windows\System32\Drivers\HookCentre.sys
2013-06-12 20:09 - 2012-12-17 23:10 - 00060248 ____A (G Data Software AG) C:\Windows\System32\Drivers\GDBehave.sys
2013-06-12 19:39 - 2012-12-17 22:45 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 15:02 - 2012-12-17 21:03 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 15:02 - 2012-12-17 21:03 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 07:41 - 2013-06-12 07:40 - 00019223 ____A C:\Users\unknownname\Downloads\AMOS SS13 Gruppe 5.ods
2013-06-09 19:53 - 2013-06-09 19:53 - 08247888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110ud.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 08177224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110d.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 04456520 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110u.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 04421192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00164424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\atl110.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00111696 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfcm110d.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00110672 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfcm110ud.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00083024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfcm110u.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00083016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfcm110.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00074832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110fra.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00074832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110deu.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00073808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110esn.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00072784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110ita.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00070736 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110rus.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00065104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110enu.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00053840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110jpn.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00053328 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110kor.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00046160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110cht.dll
2013-06-09 19:53 - 2013-06-09 19:53 - 00046160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc110chs.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 10932304 ____A (Microsoft Corporation) C:\Windows\System32\mfc110ud.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 10860616 ____A (Microsoft Corporation) C:\Windows\System32\mfc110d.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 05619784 ____A (Microsoft Corporation) C:\Windows\System32\mfc110u.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 05592648 ____A (Microsoft Corporation) C:\Windows\System32\mfc110.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00192584 ____A (Microsoft Corporation) C:\Windows\System32\atl110.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00120912 ____A (Microsoft Corporation) C:\Windows\System32\mfcm110d.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00119376 ____A (Microsoft Corporation) C:\Windows\System32\mfcm110ud.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00090192 ____A (Microsoft Corporation) C:\Windows\System32\mfcm110u.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00090184 ____A (Microsoft Corporation) C:\Windows\System32\mfcm110.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00074832 ____A (Microsoft Corporation) C:\Windows\System32\mfc110fra.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00074832 ____A (Microsoft Corporation) C:\Windows\System32\mfc110deu.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00073808 ____A (Microsoft Corporation) C:\Windows\System32\mfc110esn.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00072784 ____A (Microsoft Corporation) C:\Windows\System32\mfc110ita.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00070736 ____A (Microsoft Corporation) C:\Windows\System32\mfc110rus.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00065104 ____A (Microsoft Corporation) C:\Windows\System32\mfc110enu.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00053840 ____A (Microsoft Corporation) C:\Windows\System32\mfc110jpn.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00053328 ____A (Microsoft Corporation) C:\Windows\System32\mfc110kor.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00046160 ____A (Microsoft Corporation) C:\Windows\System32\mfc110cht.dll
2013-06-09 15:59 - 2013-06-09 15:59 - 00046160 ____A (Microsoft Corporation) C:\Windows\System32\mfc110chs.dll
2013-06-08 20:47 - 2013-06-06 10:58 - 3469706681 ____A C:\Users\unknownname\Downloads\20130508-Gorin-SemProg-VL-05-1080p.mkv
2013-06-08 16:08 - 2013-06-12 20:17 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-12 20:17 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-12 20:17 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 20:17 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-12 20:17 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-12 20:18 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 14:23 - 2013-06-06 10:57 - 3292228229 ____A C:\Users\unknownname\Downloads\20130522-Gorin-SemProg-VL-08-1080p.mkv
2013-06-08 13:42 - 2013-06-12 20:17 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 20:17 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 20:17 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 20:17 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 20:17 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 20:18 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 11:38 - 2013-06-08 11:39 - 00023950 ____A C:\Users\Public\Documents\ex6.v
2013-06-07 22:18 - 2012-12-20 09:50 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Lenovo
2013-06-07 22:14 - 2012-12-18 21:20 - 00000000 ____D C:\Users\unknownname\AppData\Local\Macromedia
2013-06-07 22:13 - 2013-06-07 22:13 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\DAEMON Tools Lite
2013-06-07 22:13 - 2012-12-18 21:09 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Mozilla
2013-06-07 22:12 - 2012-12-19 21:21 - 00000000 ____D C:\Program Files\ThinkPad
2013-06-07 14:10 - 2013-06-07 09:51 - 00001243 ____A C:\Users\unknownname\Desktop\petition.txt
2013-06-07 10:16 - 2012-12-19 22:39 - 00000000 ____D C:\Windows\System32\appmgmt
2013-06-07 10:11 - 2013-06-07 10:11 - 00000000 ____D C:\Users\unknownname\Documents\Bluetooth-Exchange-Ordner
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-04 12:30
==================== End Of Log ============================
und nun die Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-07-2013 Ran by unknownname at 2013-07-07 09:56:32 Running from C:\Users\unknownname\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727) Tools for .Net 3.5 (x32 Version: 3.11.50727) Adobe AIR (x32 Version: 3.7.0.2090) Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Anzeige am Bildschirm (Version: 7.06.00) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Astroburn Lite (x32 Version: 1.7.0.0175) AuthenTec TrueSuite (Version: 5.1.100.49) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0) Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0) Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0) Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0) Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0) Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0) Bonjour (Version: 3.0.0.10) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103) Cisco EAP-FAST Module (x32 Version: 2.2.14) Cisco LEAP Module (x32 Version: 1.0.19) Cisco PEAP Module (x32 Version: 1.1.6) Coq Version 8.4pl2 (x32 Version: 8.4pl2) DAEMON Tools Lite (x32 Version: 4.47.1.0333) Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727) Dolby Advanced Audio v2 (x32 Version: 7.2.8000.16) Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298) Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298) Dropbox (HKCU Version: 2.0.22) ElsterFormular (x32 Version: 14.0.0.10899) Energie-Manager (x32 Version: 6.36) Entity Framework Designer for Visual Studio 2012 - enu (x32 Version: 11.1.21009.00) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.21009.00) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60) Free Download Manager 3.9.2 (x32) Free Driver Scout (Version: 1.0.0.111) Free Driver Scout (x32 Version: 1.0.0.111) Free System Utilities (x32 Version: 1.1.0.95) Free SystemUtilities (x32 Version: 1.1.0.95) G Data InternetSecurity 2014 (x32 Version: 24.0.2.4) Git version 1.8.1.2-preview20130201 (x32 Version: 1.8.1.2-preview20130201) Haskell Platform 2012.4.0.0 (x32) iCloud (Version: 2.1.2.8) IIS 8.0 Express (Version: 8.0.1557) IIS Express Application Compatibility Database for x64 IIS Express Application Compatibility Database for x86 ImgBurn (x32 Version: 2.5.7.0) InstallShield 2012 Spring Limited Edition (x32 Version: 19.00.0000) Integrated Camera Driver Installer Package Ver.1.2.1.18 (x32 Version: 1.2.1.18) Intel PROSet Wireless Intel(R) Control Center (x32 Version: 1.2.1.1010) Intel(R) Management Engine Components (x32 Version: 9.0.0.1310) Intel(R) Network Connections Drivers (Version: 16.8) Intel(R) Processor Graphics (x32 Version: 9.17.10.2843) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.3.0.0398) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.8.251) Intel® PROSet/Wireless WiFi-Software (Version: 15.03.1000.1637) Intel® Trusted Connect Service Client (Version: 1.27.757.1) iTunes (Version: 11.0.4.4) Java 7 Update 11 (x32 Version: 7.0.110) Java 7 Update 25 (64-bit) (Version: 7.0.250) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Java SE Development Kit 7 Update 13 (64-bit) (Version: 1.7.0.130) Java SE Development Kit 7 Update 17 (64-bit) (Version: 1.7.0.170) Java SE Development Kit 7 Update 25 (64-bit) (Version: 1.7.0.250) JavaScript Tooling (Version: 11.0.60315) JavaScript Tooling (x32 Version: 11.0.60315) JetBrains ReSharper 7.1.3 (x32 Version: 7.1.3000) JetBrains TeamCity Addin 7.1 (x32 Version: 7.1.646) Lenovo Auto Scroll Utility (Version: 2.00) Lenovo Patch Utility (x32 Version: 1.3.2.4) Lenovo Patch Utility 64 bit (Version: 1.3.2.4) Lenovo Power Management Driver (Version: 1.67.00.02) Lenovo Solution Center (Version: 2.0.020.00) Lenovo System Update (x32 Version: 5.02.0011) LocalESPC (x32 Version: 8.59.25584) LocalESPCui for de-de (x32 Version: 8.59.25584) LocalESPCui for en-us (x32 Version: 8.59.25584) MAGIX Speed burnR (x32 Version: 7.0.1.27) MAGIX Webradio Recorder 5 5.0.0.326 (D) (x32 Version: 5.0.0.326) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319) Microsoft .NET Framework 4.5 (Version: 4.5.50709) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709) Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709) Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0) Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0) Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0) Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0) Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0) Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0) Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0) Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20715.0) Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0) Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727) Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727) Microsoft LightSwitch for Visual Studio 2012 CoreRes - ENU (x32 Version: 11.0.50727) Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.60517) Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.60517) Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - ENU (x32 Version: 11.0.60517) Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727) Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003) Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931) Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929) Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 11.0.50709.17929) Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16) Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16) Microsoft Silverlight (Version: 5.1.20125.0) Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0) Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (Version: 4.0.8876.1) Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools - enu (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server System CLR Types (x32 Version: 10.50.1600.1) Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 32bit Compilers - ENU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers - ENU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106) Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.60610) Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727) Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Devenv Resources (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 Language Pack - ENU (x32 Version: 11.0.50727.1) Microsoft Visual Studio 2012 Performance Collection Tools - ENU (Version: 11.0.50727) Microsoft Visual Studio 2012 Preparation (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools ENU Language Pack (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Resources (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727) Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727) Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.60610) Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.60610) Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources (x32 Version: 11.0.50727) Microsoft Web Deploy 3.0 (Version: 3.1236.1631) Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0) Microsoft Web Deploy dbSqlPackage Provider - enu (x32 Version: 10.3.20225.0) Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 - deu (x32 Version: 1.2.40308.0) Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 (x32 Version: 1.2.40308.0) Microsoft Web Platform Installer 4.0 (Version: 4.0.1622) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60) Mobile Broadband Drivers (x32 Version: 7.2.3.2) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) Mp3tag v2.54 (x32 Version: v2.54) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) Notepad++ (x32 Version: 6.3.2) NUnit 2.6.2 (x32 Version: 2.6.2.12296) NVIDIA 3D Vision Treiber 311.00 (Version: 311.00) NVIDIA Grafiktreiber 311.00 (Version: 311.00) NVIDIA HD-Audiotreiber 1.3.16.0 (Version: 1.3.16.0) NVIDIA Install Application (Version: 2.1002.108.688) NVIDIA nView 136.53 (Version: 136.53) NVIDIA Optimus 1.11.3 (Version: 1.11.3) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1100) NVIDIA Systemsteuerung 311.00 (Version: 311.00) NVIDIA Update 1.11.3 (Version: 1.11.3) NVIDIA Update Components (Version: 1.11.3) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Perforce Visual Components (Version: 131.61.1503) PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1) PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1) Protege 3.4.8 (x32 Version: 1.0.0.0) QuickTime (x32 Version: 7.74.80.86) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6886) RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01) Secunia PSI (3.0.0.7009) (x32 Version: 3.0.0.7009) Sierra Wireless QMI Lenovo Driver Package (x32 Version: 1.0.45.0) Skype™ 6.5 (x32 Version: 6.5.158) SpywareBlaster 5.0 (x32 Version: 5.0.0) StreamTransport version: 1.0.2.2171 (x32) Switch Sound File Converter (x32) ThinkPad UltraNav Driver (Version: 16.2.19.7) ThinkPad Wireless LAN Adapter Software (x32 Version: 1.00.0031.1) ThinkVantage Access Connections (x32 Version: 5.97) ThinkVantage Communications Utility (Version: 3.0.40.0) ThinkVantage Fingerprint Software (Version: 5.9.8.7264) ThinkVantage Password Manager (x32 Version: 4.10.20.0) ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.9) TrueCrypt (x32 Version: 7.1a) Update for (KB2504637) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219) Update for Music Converter (HKCU) Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727) Visual Studio 2012 Prerequisites - ENU Language Pack (Version: 11.0.50727) Visual Studio 2012 Prerequisites (Version: 11.0.50727) Visual Studio 2012 Update 3 (KB2707250) (x32 Version: 11.0.60610) Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9201.20602) VLC media player 2.0.7 (x32 Version: 2.0.7) WavePad Sound Editor (x32) WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0) WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0) WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0) WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0) WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0) Weka 3.6.9 (x32 Version: 3.6.9) Windows App Certification Kit Native Components (Version: 8.59.29736) Windows App Certification Kit x64 (x32 Version: 8.59.29750) Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601) Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601) Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584) Windows Runtime Intellisense Content - en-us (x32 Version: 8.59.25584) Windows Software Development Kit (x32 Version: 8.59.25584) Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584) Windows XP Targeting with C++ (Version: 11.0.51106) Windows XP Targeting with C++ (x32 Version: 11.0.51106) WinPatrol (Version: 28.1.2013.0) WinRAR 4.20 (64-Bit) (Version: 4.20.0) WOT for Internet Explorer (Version: 12.8.2.0) ==================== Restore Points ========================= 29-06-2013 10:44:43 Visual Studio 2012 Update 3 (KB2707250) 29-06-2013 11:18:38 Visual Studio 2012 Update 2 (KB2707250) 02-07-2013 06:20:24 Windows Update 03-07-2013 17:58:18 MSXML 4.0 SP3 Parser wird installiert 03-07-2013 18:09:09 Installed Java SE Development Kit 7 Update 25 (64-bit) 03-07-2013 18:09:57 Installed Java 7 Update 25 (64-bit) 04-07-2013 05:54:11 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {3AFABB19-B0DA-46BF-9A84-25D645784EA0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {3F9F3CF6-6D51-499E-A0ED-12E724C4C6EB} - System32\Tasks\NCH Software\WavePadDowngrade => C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe [2012-12-14] (NCH Software) Task: {4C5048C3-E0DE-475B-B22B-E39FFF8EB650} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe No File Task: {5664DAD4-3366-4EDA-9497-A5D954262EE9} - System32\Tasks\Freemium1ClickMaint => C:\Users\unknownname\Downloads\1Click.exe No File Task: {578E90FE-CE2E-4714-BC9A-6FF647FE07D5} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-06-08] () Task: {7A5BCE17-FBAF-45D1-827B-27D43837DB7B} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-03-14] (Lenovo) Task: {7B614847-D9E7-49F6-9604-64DDF030314F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: {93072582-895F-4E70-BF3D-4134D37C384F} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-07-06] () Task: {9643E515-F85D-4CFF-AE81-7300F9B2E1CC} - System32\Tasks\NCH Software\WavePadReminder => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe [2012-12-14] (NCH Software) Task: {A13B696C-2973-4DCE-8601-A4888770A00A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {AA120A75-46DF-4CF9-96AB-B86410323489} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe No File Task: {ADC259AE-AC07-4A2F-BBBE-54E166B80B18} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-03-14] () Task: {AF6BA135-74B6-4FA9-8764-0D3D6E50A7D6} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-04-11] () Task: {EAB23475-CFF3-4305-B8B4-D0ACFE78B286} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\lsc.exe [2013-03-14] () Task: {ECD5AF80-D5EA-4C4C-8952-7ABD9DFA4260} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {FBF6D8D5-A0F5-40FE-AE0C-D84C39C7D348} - System32\Tasks\Browser Updater\Browser Updater => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {FE8CA6CE-2709-4DCC-AA94-60CDA04A8050} - System32\Tasks\NCH Software\SwitchReminder => C:\Program Files (x86)\NCH Software\Switch\Switch.exe [2012-09-07] (NCH Software) Task: {FF008279-3B42-4C52-9C93-730470D95D66} - System32\Tasks\DSite => C:\Users\JAMESB~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Faulty Device Manager Devices ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=23, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=21, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=18, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0 Error: (07/07/2013 07:50:29 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/06/2013 10:56:23 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/06/2013 10:56:14 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: ZeroConfigService.exe, Version: 15.3.0.0, Zeitstempel: 0x5036b2a4 Name des fehlerhaften Moduls: MurocApi.dll, Version: 15.3.0.0, Zeitstempel: 0x5036b1ea Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000020b2b ID des fehlerhaften Prozesses: 0xd90 Startzeit der fehlerhaften Anwendung: 0xZeroConfigService.exe0 Pfad der fehlerhaften Anwendung: ZeroConfigService.exe1 Pfad des fehlerhaften Moduls: ZeroConfigService.exe2 Berichtskennung: ZeroConfigService.exe3 Error: (07/06/2013 08:45:28 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 System errors: ============= Error: (07/07/2013 08:25:33 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LENOVO.CAMMUTE erreicht. Error: (07/07/2013 08:02:23 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.153.1309.0) Error: (07/06/2013 10:56:20 PM) (Source: Service Control Manager) (User: ) Description: Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (07/06/2013 06:12:25 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LENOVO.CAMMUTE erreicht. Error: (07/06/2013 09:47:05 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.153.1309.0) Error: (07/05/2013 08:17:59 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "System Store" wurde mit folgendem Fehler beendet: %%8 Error: (07/05/2013 10:31:30 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.153.1309.0) Error: (07/03/2013 02:40:48 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LENOVO.CAMMUTE erreicht. Error: (07/03/2013 00:30:01 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LENOVO.CAMMUTE erreicht. Error: (06/28/2013 08:43:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.153.790.0) Microsoft Office Sessions: ========================= Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path43900 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path25900 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path17900 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path23808600 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path21808600 Error: (07/07/2013 08:25:39 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path18808600 Error: (07/07/2013 07:50:29 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/06/2013 10:56:23 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/06/2013 10:56:14 PM) (Source: Application Error)(User: ) Description: ZeroConfigService.exe15.3.0.05036b2a4MurocApi.dll15.3.0.05036b1eac00000050000000000020b2bd9001ce7a8b26bd85c6C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exeC:\Program Files\Intel\WiFi\bin\MurocApi.dll7e4d07a1-e67e-11e2-959b-689423e9d8d1 Error: (07/06/2013 08:45:28 PM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 CodeIntegrity Errors: =================================== Date: 2013-06-26 21:15:29.409 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-26 21:13:17.988 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-18 08:08:51.693 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-14 15:30:34.990 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-13 21:01:59.851 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 21:39:53.081 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 20:00:44.426 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 20:00:14.044 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 11:35:13.209 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-22 12:58:36.510 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 50% Total physical RAM: 7889.63 MB Available physical RAM: 3940.29 MB Total Pagefile: 15777.44 MB Available Pagefile: 11405.29 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:199.9 GB) (Free:94.66 GB) NTFS (Disk=0 Partition=2) Drive d: () (Fixed) (Total:265.76 GB) (Free:257.02 GB) NTFS (Disk=0 Partition=3) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 000E3F0D) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=266 GB) - (Type=07 NTFS) ==================== End Of Log ============================ unknownname |
|
08.07.2013, 21:19
| #4 | |
| /// the machine /// TB-Ausbilder | HomeTab, MPSigStub.exe und mpas-fe.exeCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.07.2013, 12:24
| #5 |
| | HomeTab, MPSigStub.exe und mpas-fe.exe Hallo schrauber, hier die ComboFix.txt: Code:
ATTFilter ComboFix 13-07-08.04 - unknownname 09.07.2013 9:44.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.7890.5143 [GMT 2:00]
ausgeführt von:: c:\users\unknownname\Desktop\ComboFix.exe
AV: G Data InternetSecurity 2014 *Disabled/Updated* {39B780B4-63C2-05B0-3B40-8F7A21E4F496}
FW: G Data Personal Firewall *Enabled* {018C0191-29AD-04E8-101F-264FDF37B3ED}
SP: G Data InternetSecurity 2014 *Disabled/Updated* {82D66150-45F8-0A3E-01F0-B4085A63BE2B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe
c:\programdata\Roaming
.
----- Datei Replikatoren -----
.
c:\program files (x86)\Git\bin\git.exe
c:\program files (x86)\Git\libexec\git-core\git-add.exe
c:\program files (x86)\Git\libexec\git-core\git-annotate.exe
c:\program files (x86)\Git\libexec\git-core\git-apply.exe
c:\program files (x86)\Git\libexec\git-core\git-archive.exe
c:\program files (x86)\Git\libexec\git-core\git-bisect--helper.exe
c:\program files (x86)\Git\libexec\git-core\git-blame.exe
c:\program files (x86)\Git\libexec\git-core\git-branch.exe
c:\program files (x86)\Git\libexec\git-core\git-bundle.exe
c:\program files (x86)\Git\libexec\git-core\git-cat-file.exe
c:\program files (x86)\Git\libexec\git-core\git-check-attr.exe
c:\program files (x86)\Git\libexec\git-core\git-check-ref-format.exe
c:\program files (x86)\Git\libexec\git-core\git-checkout-index.exe
c:\program files (x86)\Git\libexec\git-core\git-checkout.exe
c:\program files (x86)\Git\libexec\git-core\git-cherry-pick.exe
c:\program files (x86)\Git\libexec\git-core\git-cherry.exe
c:\program files (x86)\Git\libexec\git-core\git-clean.exe
c:\program files (x86)\Git\libexec\git-core\git-clone.exe
c:\program files (x86)\Git\libexec\git-core\git-column.exe
c:\program files (x86)\Git\libexec\git-core\git-commit-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-commit.exe
c:\program files (x86)\Git\libexec\git-core\git-config.exe
c:\program files (x86)\Git\libexec\git-core\git-count-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-credential.exe
c:\program files (x86)\Git\libexec\git-core\git-describe.exe
c:\program files (x86)\Git\libexec\git-core\git-diff-files.exe
c:\program files (x86)\Git\libexec\git-core\git-diff-index.exe
c:\program files (x86)\Git\libexec\git-core\git-diff-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-diff.exe
c:\program files (x86)\Git\libexec\git-core\git-fast-export.exe
c:\program files (x86)\Git\libexec\git-core\git-fetch-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-fetch.exe
c:\program files (x86)\Git\libexec\git-core\git-fmt-merge-msg.exe
c:\program files (x86)\Git\libexec\git-core\git-for-each-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-format-patch.exe
c:\program files (x86)\Git\libexec\git-core\git-fsck-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-fsck.exe
c:\program files (x86)\Git\libexec\git-core\git-gc.exe
c:\program files (x86)\Git\libexec\git-core\git-get-tar-commit-id.exe
c:\program files (x86)\Git\libexec\git-core\git-grep.exe
c:\program files (x86)\Git\libexec\git-core\git-hash-object.exe
c:\program files (x86)\Git\libexec\git-core\git-help.exe
c:\program files (x86)\Git\libexec\git-core\git-index-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-init-db.exe
c:\program files (x86)\Git\libexec\git-core\git-init.exe
c:\program files (x86)\Git\libexec\git-core\git-log.exe
c:\program files (x86)\Git\libexec\git-core\git-ls-files.exe
c:\program files (x86)\Git\libexec\git-core\git-ls-remote.exe
c:\program files (x86)\Git\libexec\git-core\git-ls-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-mailinfo.exe
c:\program files (x86)\Git\libexec\git-core\git-mailsplit.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-base.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-file.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-index.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-ours.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-recursive.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-subtree.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-merge.exe
c:\program files (x86)\Git\libexec\git-core\git-mktag.exe
c:\program files (x86)\Git\libexec\git-core\git-mktree.exe
c:\program files (x86)\Git\libexec\git-core\git-mv.exe
c:\program files (x86)\Git\libexec\git-core\git-name-rev.exe
c:\program files (x86)\Git\libexec\git-core\git-notes.exe
c:\program files (x86)\Git\libexec\git-core\git-pack-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-pack-redundant.exe
c:\program files (x86)\Git\libexec\git-core\git-pack-refs.exe
c:\program files (x86)\Git\libexec\git-core\git-patch-id.exe
c:\program files (x86)\Git\libexec\git-core\git-peek-remote.exe
c:\program files (x86)\Git\libexec\git-core\git-prune-packed.exe
c:\program files (x86)\Git\libexec\git-core\git-prune.exe
c:\program files (x86)\Git\libexec\git-core\git-push.exe
c:\program files (x86)\Git\libexec\git-core\git-read-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-receive-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-reflog.exe
c:\program files (x86)\Git\libexec\git-core\git-remote-ext.exe
c:\program files (x86)\Git\libexec\git-core\git-remote-fd.exe
c:\program files (x86)\Git\libexec\git-core\git-remote.exe
c:\program files (x86)\Git\libexec\git-core\git-replace.exe
c:\program files (x86)\Git\libexec\git-core\git-repo-config.exe
c:\program files (x86)\Git\libexec\git-core\git-rerere.exe
c:\program files (x86)\Git\libexec\git-core\git-reset.exe
c:\program files (x86)\Git\libexec\git-core\git-rev-list.exe
c:\program files (x86)\Git\libexec\git-core\git-rev-parse.exe
c:\program files (x86)\Git\libexec\git-core\git-revert.exe
c:\program files (x86)\Git\libexec\git-core\git-rm.exe
c:\program files (x86)\Git\libexec\git-core\git-send-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-shortlog.exe
c:\program files (x86)\Git\libexec\git-core\git-show-branch.exe
c:\program files (x86)\Git\libexec\git-core\git-show-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-show.exe
c:\program files (x86)\Git\libexec\git-core\git-stage.exe
c:\program files (x86)\Git\libexec\git-core\git-status.exe
c:\program files (x86)\Git\libexec\git-core\git-stripspace.exe
c:\program files (x86)\Git\libexec\git-core\git-symbolic-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-tag.exe
c:\program files (x86)\Git\libexec\git-core\git-tar-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-unpack-file.exe
c:\program files (x86)\Git\libexec\git-core\git-unpack-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-update-index.exe
c:\program files (x86)\Git\libexec\git-core\git-update-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-update-server-info.exe
c:\program files (x86)\Git\libexec\git-core\git-upload-archive.exe
c:\program files (x86)\Git\libexec\git-core\git-var.exe
c:\program files (x86)\Git\libexec\git-core\git-verify-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-verify-tag.exe
c:\program files (x86)\Git\libexec\git-core\git-whatchanged.exe
c:\program files (x86)\Git\libexec\git-core\git-write-tree.exe
c:\program files (x86)\Git\libexec\git-core\git.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-06-09 bis 2013-07-09 ))))))))))))))))))))))))))))))
.
.
2013-07-09 08:54 . 2013-07-09 08:54 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-07-09 08:54 . 2013-07-09 08:54 -------- d-----w- c:\users\unknownname\AppData\Local\temp
2013-07-07 07:54 . 2013-07-07 07:54 -------- d-----w- C:\FRST
2013-07-07 06:03 . 2013-06-12 03:08 9552976 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6FF4A729-6F74-4225-9CAD-4587BD719DB4}\mpengine.dll
2013-07-03 18:10 . 2013-07-03 18:10 312232 ----a-w- c:\windows\system32\javaws.exe
2013-07-03 18:10 . 2013-07-03 18:10 189352 ----a-w- c:\windows\system32\javaw.exe
2013-07-03 18:10 . 2013-07-03 18:10 188840 ----a-w- c:\windows\system32\java.exe
2013-07-03 18:10 . 2013-07-03 18:10 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-07-03 17:59 . 2013-07-03 17:59 -------- d-----w- c:\program files (x86)\MSXML 4.0
2013-07-02 18:05 . 2013-07-02 18:05 -------- d-----w- c:\program files (x86)\StreamTransport
2013-07-02 18:05 . 2009-10-27 17:31 3982240 ----a-w- c:\windows\SysWow64\Flash10d.ocx
2013-06-25 11:35 . 2013-06-25 12:32 -------- d-----w- c:\program files (x86)\Weka-3-6
2013-06-24 18:39 . 2013-06-24 18:39 -------- d-----w- c:\users\unknownname\AppData\Local\Secunia PSI
2013-06-24 18:38 . 2013-06-24 18:38 -------- d-----w- c:\program files (x86)\Secunia
2013-06-24 18:17 . 2013-06-24 18:17 -------- d-----w- c:\program files\WOT
2013-06-24 18:17 . 2013-06-24 18:17 -------- d-----w- c:\program files (x86)\WOT
2013-06-24 14:35 . 2013-06-24 14:35 -------- d-----w- c:\programdata\Licenses
2013-06-24 14:35 . 2013-06-28 06:43 -------- d-----w- c:\program files (x86)\SpywareBlaster
2013-06-24 14:22 . 2013-06-24 14:22 -------- d-----w- c:\users\unknownname\AppData\Roaming\WinPatrol
2013-06-24 14:22 . 2013-06-24 14:22 -------- d-----w- c:\program files (x86)\BillP Studios
2013-06-24 11:30 . 2013-06-24 11:30 -------- d-----w- c:\users\unknownname\AppData\Roaming\Malwarebytes
2013-06-24 11:30 . 2013-06-24 11:30 -------- d-----w- c:\programdata\Malwarebytes
2013-06-24 11:30 . 2013-06-24 11:30 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-24 11:30 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-06-20 11:28 . 2013-06-12 19:47 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-12 18:42 . 2013-06-12 18:42 -------- d-----w- c:\program files\iPod
2013-06-12 18:42 . 2013-06-12 18:42 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-12 18:42 . 2013-06-12 18:42 -------- d-----w- c:\program files\iTunes
2013-06-12 18:42 . 2013-06-12 18:42 -------- d-----w- c:\program files (x86)\iTunes
2013-06-12 18:18 . 2013-06-08 14:08 279040 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-12 18:18 . 2013-06-08 12:28 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-12 18:18 . 2013-06-08 11:41 218112 ----a-w- c:\program files (x86)\Internet Explorer\sqmapi.dll
2013-06-12 18:18 . 2013-06-08 11:13 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-12 18:17 . 2013-06-08 14:08 1365504 ----a-w- c:\windows\system32\urlmon.dll
2013-06-12 18:17 . 2013-06-08 14:06 526336 ----a-w- c:\windows\system32\ieui.dll
2013-06-12 18:17 . 2013-06-08 14:06 2648064 ----a-w- c:\windows\system32\iertutil.dll
2013-06-12 18:17 . 2013-06-08 14:06 15404544 ----a-w- c:\windows\system32\ieframe.dll
2013-06-12 18:17 . 2013-06-08 14:07 19233792 ----a-w- c:\windows\system32\mshtml.dll
2013-06-12 12:21 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-12 12:21 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-12 12:21 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-12 12:18 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-12 12:18 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-12 12:18 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-12 12:18 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-12 12:17 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-12 12:17 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-12 12:17 . 2013-05-13 03:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-12 12:17 . 2013-05-13 05:51 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-12 12:17 . 2013-05-13 05:51 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-12 12:17 . 2013-05-13 05:51 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-12 12:17 . 2013-05-13 05:50 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-12 12:17 . 2013-05-13 04:45 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-12 12:17 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-12 12:17 . 2013-05-13 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-12 12:17 . 2013-05-13 03:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-12 12:17 . 2013-05-13 03:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-06-09 23:52 . 2013-06-09 23:52 52888 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\LabManagement\deu\TestAgentInstallerMessages.dll
2013-06-09 23:52 . 2013-06-09 23:52 388208 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\x86\1031\TFSOfficeAdd-inUI.dll
2013-06-09 23:52 . 2013-06-09 23:52 379072 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Windows Simulator\11.0\en\Microsoft.Windows.Simulator.resources.dll
2013-06-09 23:52 . 2013-06-09 23:52 374464 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Windows Simulator\11.0\de\Microsoft.Windows.Simulator.resources.dll
2013-06-09 23:52 . 2013-06-09 23:52 26392 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\de\Microsoft.TeamFoundation.Sync.ProjectServerApi.resources.dll
2013-06-09 23:52 . 2013-06-09 23:52 25328 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\de\Microsoft.TeamFoundation.Sync.Mapping.resources.dll
2013-06-09 23:52 . 2013-06-09 23:52 25232 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\de\TFSFieldMapping.resources.dll
2013-06-09 23:52 . 2013-06-09 23:52 212256 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\de\Microsoft.TeamFoundation.OfficeIntegration.Excel.resources.dll
2013-06-09 23:52 . 2013-06-09 23:52 21152 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\de\TfsProtocolHandler.resources.dll
2013-06-09 23:52 . 2013-06-09 23:52 124200 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\de\Microsoft.TeamFoundation.OfficeIntegration.Project.resources.dll
2013-06-09 23:52 . 2013-06-09 23:52 121064 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\de\Microsoft.TeamFoundation.Sync.Shared.resources.dll
2013-06-09 15:23 . 2013-06-09 15:23 388216 ----a-w- c:\program files\Common Files\Microsoft Shared\Team Foundation Server\11.0\amd64\1031\TFSOfficeAdd-inUI.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-03 18:10 . 2013-02-03 09:59 972712 ----a-w- c:\windows\system32\deployJava1.dll
2013-07-03 18:10 . 2013-02-03 09:59 1093032 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-06-29 11:25 . 2013-04-29 20:20 2573184 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1033\ResourceCache.dll
2013-06-29 11:24 . 2013-03-20 19:48 2622688 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1031\ResourceCache.dll
2013-06-27 05:14 . 2013-06-02 20:08 31816 ----a-w- c:\windows\Launcher.exe
2013-06-25 18:23 . 2012-12-17 21:10 64856 ----a-w- c:\windows\system32\drivers\gdwfpcd64.sys
2013-06-12 19:48 . 2012-12-21 13:14 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-06-12 19:48 . 2012-12-21 13:14 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-06-12 18:09 . 2012-12-17 21:10 65368 ----a-w- c:\windows\system32\drivers\HookCentre.sys
2013-06-12 18:09 . 2012-12-17 21:10 130392 ----a-w- c:\windows\system32\drivers\MiniIcpt.sys
2013-06-12 18:09 . 2012-12-17 21:10 60248 ----a-w- c:\windows\system32\drivers\GDBehave.sys
2013-06-12 17:39 . 2012-12-17 20:45 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-06-12 13:02 . 2012-12-17 19:03 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 13:02 . 2012-12-17 19:03 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-03 15:27 . 2012-12-17 21:10 62808 ----a-w- c:\windows\system32\drivers\PktIcpt.sys
2013-06-02 16:32 . 2013-06-02 16:32 335872 ------w- c:\windows\Setup1.exe
2013-06-02 16:32 . 2013-06-02 16:32 74752 ----a-w- c:\windows\ST6UNST.EXE
2013-05-10 07:13 . 2013-05-10 07:13 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-10 07:13 . 2013-05-10 07:13 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-10 07:13 . 2013-05-10 07:13 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-05-10 07:13 . 2013-05-10 07:13 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-05-10 07:13 . 2013-05-10 07:13 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-05-10 07:13 . 2013-05-10 07:13 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-05-10 07:13 . 2013-05-10 07:13 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-05-10 07:13 . 2013-05-10 07:13 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-05-10 07:13 . 2013-05-10 07:13 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-05-10 07:13 . 2013-05-10 07:13 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-05-10 07:13 . 2013-05-10 07:13 197120 ----a-w- c:\windows\system32\msrating.dll
2013-05-10 07:13 . 2013-05-10 07:13 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-05-10 07:13 . 2013-05-10 07:13 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-05-10 07:13 . 2013-05-10 07:13 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-05-10 07:13 . 2013-05-10 07:13 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-05-10 07:13 . 2013-05-10 07:13 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-05-10 07:13 . 2013-05-10 07:13 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-05-10 07:13 . 2013-05-10 07:13 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-05-10 07:13 . 2013-05-10 07:13 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-05-10 07:13 . 2013-05-10 07:13 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-05-10 07:13 . 2013-05-10 07:13 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-10 07:13 . 2013-05-10 07:13 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-10 07:13 . 2013-05-10 07:13 81408 ----a-w- c:\windows\system32\icardie.dll
2013-05-10 07:13 . 2013-05-10 07:13 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-05-10 07:13 . 2013-05-10 07:13 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-05-10 07:13 . 2013-05-10 07:13 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-05-10 07:13 . 2013-05-10 07:13 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-05-10 07:13 . 2013-05-10 07:13 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-05-10 07:13 . 2013-05-10 07:13 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-05-10 07:13 . 2013-05-10 07:13 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-10 07:13 . 2013-05-10 07:13 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-05-10 07:13 . 2013-05-10 07:13 441856 ----a-w- c:\windows\system32\html.iec
2013-05-10 07:13 . 2013-05-10 07:13 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-05-10 07:13 . 2013-05-10 07:13 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-10 07:13 . 2013-05-10 07:13 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-05-10 07:13 . 2013-05-10 07:13 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-05-10 07:13 . 2013-05-10 07:13 235008 ----a-w- c:\windows\system32\url.dll
2013-05-10 07:13 . 2013-05-10 07:13 216064 ----a-w- c:\windows\system32\msls31.dll
2013-05-10 07:13 . 2013-05-10 07:13 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-10 07:13 . 2013-05-10 07:13 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-05-10 07:13 . 2013-05-10 07:13 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-10 07:13 . 2013-05-10 07:13 149504 ----a-w- c:\windows\system32\occache.dll
2013-05-10 07:13 . 2013-05-10 07:13 144896 ----a-w- c:\windows\system32\wextract.exe
2013-05-10 07:13 . 2013-05-10 07:13 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-05-10 07:13 . 2013-05-10 07:13 13824 ----a-w- c:\windows\system32\mshta.exe
2013-05-10 07:13 . 2013-05-10 07:13 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-05-10 07:13 . 2013-05-10 07:13 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-10 07:13 . 2013-05-10 07:13 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-05-10 07:13 . 2013-05-10 07:13 102912 ----a-w- c:\windows\system32\inseng.dll
2013-05-02 00:06 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-05-01 08:01 . 2013-05-01 08:01 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10144.bin
2013-05-01 01:59 . 2013-05-01 01:59 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2013-05-01 01:59 . 2013-05-01 01:59 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2013-04-28 04:52 . 2013-04-28 04:52 61224 ----a-w- c:\windows\system32\ibmpmsvc.exe
2013-04-28 04:52 . 2013-04-28 04:52 60712 ----a-w- c:\windows\system32\ibmpmctl.exe
2013-04-28 04:52 . 2013-04-28 04:52 44800 ----a-w- c:\windows\system32\drivers\ibmpmdrv.sys
2013-04-28 04:52 . 2013-04-28 04:52 40232 ----a-w- c:\windows\system32\tpinspm.dll
2013-04-23 23:23 . 2013-04-23 23:23 178416 ----a-w- c:\windows\system32\SynTPCo14.dll
2013-04-23 23:23 . 2013-04-23 23:23 460528 ----a-w- c:\windows\system32\drivers\SynTP.sys
2013-04-23 23:23 . 2013-04-23 23:23 114416 ----a-w- c:\windows\SysWow64\SynTPCOM.dll
2013-04-23 23:23 . 2012-12-19 19:16 1048816 ----a-w- c:\windows\system32\SynCOM.dll
2013-04-23 23:22 . 2013-04-23 23:22 229616 ----a-w- c:\windows\system32\SynTPAPI.dll
2013-04-23 23:22 . 2013-04-23 23:22 540400 ----a-w- c:\windows\SysWow64\SynCOM.dll
2013-04-18 13:55 . 2013-04-18 13:55 18456 ----a-w- c:\windows\system32\drivers\psi_mf_amd64.sys
2013-04-17 18:11 . 2013-06-02 12:15 3355336 ----a-w- c:\windows\system32\drivers\RTKVHD64.sys
2013-04-17 11:30 . 2013-06-02 12:15 22429696 ----a-w- c:\windows\system32\RCoRes64.dat
2013-04-16 14:21 . 2013-06-02 12:15 1003080 ----a-w- c:\windows\system32\RtkApi64.dll
2013-04-13 18:39 . 2013-04-13 18:39 59816 ----a-r- c:\users\unknownname\AppData\Roaming\Microsoft\Installer\{47C4D20F-1A75-44F4-BF51-479C3119BEEF}\ARPPRODUCTICON.exe
2013-04-13 18:38 . 2013-04-13 18:38 59816 ----a-r- c:\users\unknownname\AppData\Roaming\Microsoft\Installer\{1D2FF661-4402-4D75-AA40-B23FCAF81D32}\ARPPRODUCTICON.exe
2013-04-13 05:49 . 2013-05-14 18:00 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-14 18:00 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-14 18:00 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-14 18:00 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-14 18:00 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-14 18:00 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 05:36 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-11 12:35 . 2013-06-02 12:15 138824 ----a-w- c:\windows\system32\RCoInstII64.dll
2013-04-10 15:22 . 2013-06-02 12:15 2802760 ----a-w- c:\windows\system32\RtPgEx64.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 130736 ----a-w- c:\users\unknownname\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 130736 ----a-w- c:\users\unknownname\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 130736 ----a-w- c:\users\unknownname\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"WinPatrol"="c:\program files (x86)\BillP Studios\WinPatrol\winpatrol.exe" [2013-04-26 423144]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"GDFirewallTray"="c:\program files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe" [2013-03-22 1854928]
"RotateImage"="c:\program files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe" [2008-10-30 55808]
"Dolby Advanced Audio v2"="c:\program files (x86)\Dolby Advanced Audio v2\pcee4.exe" [2012-07-25 508656]
"PWMTRV"="c:\progra~2\ThinkPad\UTILIT~1\PWMTR64V.DLL" [2012-09-24 5998144]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2013-02-22 292088]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" [2013-03-26 703888]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2013-02-15 134616]
"G Data AntiVirus Tray"="c:\program files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe" [2013-03-22 1444304]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
.
c:\users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files (x86)\SECUNIA\PSI\psi_tray.exe [2013-4-18 563224]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\ThinkVantage Fingerprint Software\psqlpwd.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 SystemStoreService;System Store;c:\program files (x86)\SoftwareUpdater\SystemStore.exe -displayname System Store -servicename SystemStoreService;c:\program files (x86)\SoftwareUpdater\SystemStore.exe -displayname System Store -servicename SystemStoreService [x]
R3 acsock;acsock;c:\windows\system32\DRIVERS\acsock64.sys;c:\windows\SYSNATIVE\DRIVERS\acsock64.sys [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 DozeSvc;Lenovo Doze Mode Service;c:\program files (x86)\ThinkPad\Utilities\DZSVC64.EXE;c:\program files (x86)\ThinkPad\Utilities\DZSVC64.EXE [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 Power Manager DBC Service;Power Manager DBC Service;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [x]
R3 PwmEWSvc;Cisco EnergyWise Enabler;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S0 DzHDD64;DzHDD64;c:\windows\System32\DRIVERS\DzHDD64.sys;c:\windows\SYSNATIVE\DRIVERS\DzHDD64.sys [x]
S0 GDBehave;GDBehave;c:\windows\system32\drivers\GDBehave.sys;c:\windows\SYSNATIVE\drivers\GDBehave.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys;c:\windows\SYSNATIVE\DRIVERS\ApsHM64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 GDMnIcpt;GDMnIcpt;c:\windows\system32\drivers\MiniIcpt.sys;c:\windows\SYSNATIVE\drivers\MiniIcpt.sys [x]
S1 gdwfpcd;G Data WFP CD;c:\windows\system32\drivers\gdwfpcd64.sys;c:\windows\SYSNATIVE\drivers\gdwfpcd64.sys [x]
S1 GRD;G Data Rootkit Detector Driver;c:\windows\system32\drivers\GRD.sys;c:\windows\SYSNATIVE\drivers\GRD.sys [x]
S1 HookCentre;HookCentre;c:\windows\system32\drivers\HookCentre.sys;c:\windows\SYSNATIVE\drivers\HookCentre.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 AVKProxy;G Data AntiVirus Proxy;c:\program files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe;c:\program files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [x]
S2 AVKService;G Data Scheduler;c:\program files (x86)\G Data\InternetSecurity\AVK\AVKService.exe;c:\program files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [x]
S2 AVKWCtl;G Data Dateisystem Wächter;c:\program files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe;c:\program files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 FPLService;TrueSuiteService;c:\program files\AuthenTec TrueSuite\TrueSuiteService.exe;c:\program files\AuthenTec TrueSuite\TrueSuiteService.exe [x]
S2 GobiQDLService;Sierra Wireless QDL Service;c:\program files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe;c:\program files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 LENOVO.CAMMUTE;Lenovo Camera Mute;c:\program files\Lenovo\Communications Utility\CAMMUTE.exe;c:\program files\Lenovo\Communications Utility\CAMMUTE.exe [x]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [x]
S2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction;c:\program files\Lenovo\Communications Utility\TPKNRSVC.exe;c:\program files\Lenovo\Communications Utility\TPKNRSVC.exe [x]
S2 LENOVO.TVTVCAM;ThinkVantage Virtual Camera Controller;c:\program files\Lenovo\Communications Utility\vcamsvc.exe;c:\program files\Lenovo\Communications Utility\vcamsvc.exe [x]
S2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;c:\program files\LENOVO\VIRTSCRL\lvvsst.exe;c:\program files\LENOVO\VIRTSCRL\lvvsst.exe [x]
S2 risdxc;risdxc;c:\windows\system32\DRIVERS\risdxc64.sys;c:\windows\SYSNATIVE\DRIVERS\risdxc64.sys [x]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
S2 smihlp;SMI Helper Driver (smihlp);c:\program files\ThinkVantage Fingerprint Software\smihlp.sys;c:\program files\ThinkVantage Fingerprint Software\smihlp.sys [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [x]
S2 TPHKSVC;Anzeige am Bildschirm;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe [x]
S2 vpnagent;Cisco AnyConnect Secure Mobility Agent;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [x]
S2 WMCoreService;Mobile Broadband Service;c:\program files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe servicemode;c:\program files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe servicemode [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 5U877;5U877;c:\windows\system32\DRIVERS\5U877.sys;c:\windows\SYSNATIVE\DRIVERS\5U877.sys [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed - Virtueller Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
S3 GDFwSvc;G Data Personal Firewall;c:\program files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe;c:\program files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [x]
S3 GDPkIcpt;GDPkIcpt;c:\windows\system32\drivers\PktIcpt.sys;c:\windows\SYSNATIVE\drivers\PktIcpt.sys [x]
S3 GDScan;G Data Scanner;c:\program files (x86)\Common Files\G Data\GDScan\GDScan.exe;c:\program files (x86)\Common Files\G Data\GDScan\GDScan.exe [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LenovoRd;LenovoRd;c:\windows\system32\Drivers\LenovoRd.sys;c:\windows\SYSNATIVE\Drivers\LenovoRd.sys [x]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x]
S3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\DRIVERS\Tvti2c.sys;c:\windows\SYSNATIVE\DRIVERS\Tvti2c.sys [x]
S3 tvtvcamd;Camera Plus (VGA Resolution Maximum);c:\windows\system32\DRIVERS\tvtvcamd.sys;c:\windows\SYSNATIVE\DRIVERS\tvtvcamd.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-17 13:02]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 164016 ----a-w- c:\users\unknownname\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 164016 ----a-w- c:\users\unknownname\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 164016 ----a-w- c:\users\unknownname\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 164016 ----a-w- c:\users\unknownname\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-09-03 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-09-03 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-09-03 441152]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-04-10 13519432]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2013-03-08 1278024]
"PSQLLauncher"="c:\program files\ThinkVantage Fingerprint Software\launcher.exe" [2012-09-21 85864]
"AcWin7Hlpr"="c:\program files (x86)\Lenovo\Access Connections\AcTBenabler.exe" [2012-09-07 63376]
"TpShocks"="TpShocks.exe" [2012-09-20 228744]
"LENOVO.TPKNRRES"="c:\program files\Lenovo\Communications Utility\TPKNRRES.exe" [2012-11-26 293232]
"PasswordManager"="c:\program files\Lenovo\Password Manager\password_manager.exe" [2012-10-23 1534888]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:newtab
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mStart Page = about:newtab
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = *.local
IE: Alles mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlall.htm
IE: Auswahl mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlselected.htm
IE: Datei mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dllink.htm
IE: Videos mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlfvideo.htm
TCP: DhcpNameServer = 131.188.0.10 131.188.0.11
FF - ProfilePath - c:\users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\
FF - prefs.js: browser.startup.homepage - about:newtab
FF - prefs.js: keyword.URL - hxxps://www.google.de/search?ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:de:official&client=firefox-a&q=
FF - ExtSQL: 2013-06-18 08:14; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: 2013-06-24 11:01; {DDC359D1-844A-42a7-9AA1-88A850A938A8}; c:\users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
FF - ExtSQL: 2013-06-24 20:29; {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}; c:\users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - ExtSQL: 2013-06-25 13:10; {c36177c0-224a-11da-8cd6-0800200c9a91}; c:\users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
FF - ExtSQL: 2013-06-25 13:13; adblockpopups@jessehakanen.net; c:\users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\extensions\adblockpopups@jessehakanen.net.xpi
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{ba696155-d96e-4281-b467-0367a0456474} - (no file)
Toolbar-{ba696155-d96e-4281-b467-0367a0456474} - (no file)
Wow6432Node-HKCU-Run-PureSync - c:\program files (x86)\PureSync\PureSyncTray.exe
c:\users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe
c:\users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-DSite - c:\users\unknownname\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{722b3793-5367-4446-b6bb-db89b05c1f24}\LocalServer32]
@DACL=(02 0000)
@=expand:"%SystemRoot%\\System32\\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {722b3793-5367-4446-b6bb-db89b05c1f24}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe
c:\program files (x86)\Lenovo\Access Connections\AcSvc.exe
c:\progra~1\Lenovo\HOTKEY\TPONSCR.EXE
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files\lenovo\lenovo solution center\lsc.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-07-09 11:07:50 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-07-09 09:07
.
Vor Suchlauf: 15 Verzeichnis(se), 101.043.507.200 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 100.403.417.088 Bytes frei
.
- - End Of File - - 9A6449A78047BCC6CD93047E181F837A
A36C5E4F47E84449FF07ED3517B43A31
Schöne Grüße unknownname |
|
09.07.2013, 12:27
| #6 |
| /// the machine /// TB-Ausbilder | HomeTab, MPSigStub.exe und mpas-fe.exe Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST Log bitte.
__________________ --> HomeTab, MPSigStub.exe und mpas-fe.exe |
|
09.07.2013, 15:54
| #7 |
| | HomeTab, MPSigStub.exe und mpas-fe.exe Hallo schrauber, irgendwie will JRT.exe nicht durchlaufen. Das ganze läuft schon einige Stunden und CPU-Auslastung ist bei 0%. Das erste Mal ist es bei Checking Processes, nun bei Checking Startup stecken geblieben. Hast du eine Lösung parat? Schöne Grüße unknownname |
|
09.07.2013, 16:58
| #8 |
| /// the machine /// TB-Ausbilder | HomeTab, MPSigStub.exe und mpas-fe.exe Beenden und Adw laufen lassen 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.08.2013, 19:00
| #9 |
| | HomeTab, MPSigStub.exe und mpas-fe.exe Hallo schrauber, leider bleibt JRT jetzt immer bei Checking Registry stehen und auch mehrfach AdwCleaner ausführen bringt nichts. Hast du zufällig irgendwelche anderen Rettungsideen? Oder ist es normal, dass die CPU bei JRT Checking Registry auf 0% Auslastung ist? Denn von der Anzahl der Prozesse tut sich zwischendrinn irgendwie schon mal etwas. Wie lange sollte die Ausführung von JRT denn insgesamt ungefähr dauern? Vielen Dank und schöne Grüße unknownname |
|
03.08.2013, 07:33
| #10 |
| /// the machine /// TB-Ausbilder | HomeTab, MPSigStub.exe und mpas-fe.exe Du sollst JRT beenden und ADwCleaner laufen lassen, und eben dieses LOgfile posten. AdwCleaner sollte ohne Probleme durchlaufen. Und wenn möglich ein wenig schneller, in den 3 Wochen kann sich der Rechner von harmlos in Zombie verwandeln.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.08.2013, 08:32
| #11 |
| | HomeTab, MPSigStub.exe und mpas-fe.exe Hallo schrauber, sorry, dass ich mich erst jetzt wieder gemeldet habe, aber ich hatte ziemlichen Stress. Das mit AdwCleaner und JRT habe ich leider so verstanden, dass ich AdwCleaner nochmal ausführen soll, damit JRT funktioniert, da ich ja AdwCleaner vor JRT ausführen sollte. Hier sind AdwCleaner-Dateien für vier verschiedene Ausführungen: Code:
ATTFilter # AdwCleaner v2.306 - Datei am 02/08/2013 um 19:22:41 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : unknownname - NOTEBOOK
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16635
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v22.0 (de)
Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js
[OK] Die Datei ist sauber.
Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js
[OK] Die Datei ist sauber.
*************************
AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22]
AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25]
AdwCleaner[S2].txt - [1213 octets] - [09/07/2013 13:41:24]
AdwCleaner[S3].txt - [1173 octets] - [09/07/2013 19:56:56]
AdwCleaner[S4].txt - [1294 octets] - [02/08/2013 18:52:00]
AdwCleaner[S5].txt - [1164 octets] - [02/08/2013 19:22:41]
########## EOF - C:\AdwCleaner[S5].txt - [1224 octets] ##########
Code:
ATTFilter # AdwCleaner v2.304 - Datei am 09/07/2013 um 13:41:24 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : unknownname - NOTEBOOK
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe
# Option [Löschen]
**** [Dienste] ****
Gestoppt & Gelöscht : SystemStoreService
***** [Dateien / Ordner] *****
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16611
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v22.0 (de)
Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js
[OK] Die Datei ist sauber.
Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js
[OK] Die Datei ist sauber.
*************************
AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22]
AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25]
AdwCleaner[S2].txt - [1084 octets] - [09/07/2013 13:41:24]
########## EOF - C:\AdwCleaner[S2].txt - [1144 octets] ##########
Code:
ATTFilter # AdwCleaner v2.304 - Datei am 09/07/2013 um 19:56:56 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : unknownname - NOTEBOOK
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16611
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v22.0 (de)
Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js
[OK] Die Datei ist sauber.
Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js
[OK] Die Datei ist sauber.
*************************
AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22]
AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25]
AdwCleaner[S2].txt - [1213 octets] - [09/07/2013 13:41:24]
AdwCleaner[S3].txt - [1044 octets] - [09/07/2013 19:56:56]
########## EOF - C:\AdwCleaner[S3].txt - [1104 octets] ##########
Code:
ATTFilter # AdwCleaner v2.306 - Datei am 02/08/2013 um 18:52:00 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : unknownname - NOTEBOOK
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Ordner Gelöscht : C:\Users\unknownname\AppData\Local\Freemium
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16635
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v22.0 (de)
Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js
[OK] Die Datei ist sauber.
Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js
[OK] Die Datei ist sauber.
*************************
AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22]
AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25]
AdwCleaner[S2].txt - [1213 octets] - [09/07/2013 13:41:24]
AdwCleaner[S3].txt - [1173 octets] - [09/07/2013 19:56:56]
AdwCleaner[S4].txt - [1165 octets] - [02/08/2013 18:52:00]
########## EOF - C:\AdwCleaner[S4].txt - [1225 octets] ##########
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-08-2013
Ran by unknownname (administrator) on 03-08-2013 09:17:49
Running from C:\Users\unknownname\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Ericsson AB) C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Password Manager\password_manager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Secunia) C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Dropbox, Inc.) C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files\lenovo\lenovo solution center\lsc.exe
(Lenovo) C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13519432 2013-04-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [PSQLLauncher] - C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [85864 2012-09-21] (Authentec Inc.)
HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63376 2012-09-07] (Lenovo)
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [228744 2012-09-20] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293232 2012-11-26] (Lenovo Group Limited)
HKLM\...\Run: [PasswordManager] - C:\Program Files\Lenovo\Password Manager\password_manager.exe [1534888 2012-10-23] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [423144 2013-04-27] (BillP Studios)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [PWMTRV] - rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor [x]
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-02-15] (Intel Corporation)
HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444304 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-03-14] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-03-14] (Lenovo)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [245872 2013-02-28] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-02-28] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
SearchScopes: HKCU - DefaultScope {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
SearchScopes: HKCU - {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: No Name - {ba696155-d96e-4281-b467-0367a0456474} - No File
BHO-x32: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files (x86)\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - No Name - {ba696155-d96e-4281-b467-0367a0456474} - No File
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default
FF Homepage: about:newtab
FF Keyword.URL: https://www.google.de/search?ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:de:official&client=firefox-a&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: adblockpopups - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
==================== Services (Whitelisted) =================
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1957840 2013-03-22] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635344 2013-02-25] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2556384 2013-07-02] (G Data Software AG)
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2012-09-24] (Lenovo.)
R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [296808 2012-08-30] (AuthenTec, Inc)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2926672 2013-03-22] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [696808 2013-02-25] (G Data Software AG)
R2 GobiQDLService; C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe [312688 2011-11-25] (Sierra Wireless, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-02-15] (Intel Corporation)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [187760 2012-11-26] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
R2 WMCoreService; C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [x]
==================== Drivers (Whitelisted) ====================
R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-20] (DT Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-06-12] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-07-22] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62808 2013-06-03] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-07-22] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-07-28] (G Data Software)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-07-28] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-06-12] (G Data Software AG)
R3 LenovoRd; C:\Windows\System32\Drivers\LenovoRd.sys [118016 2009-05-11] (Lenovo)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11525872 2013-02-27] (Intel Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [284448 2013-02-28] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-04-18] (Secunia)
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-18] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [x]
S3 btwaudio; system32\drivers\btwaudio.sys [x]
S3 btwavdt; system32\drivers\btwavdt.sys [x]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [x]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-02 19:22 - 2013-08-02 19:23 - 00001293 _____ C:\AdwCleaner[S5].txt
2013-08-02 18:52 - 2013-08-02 18:52 - 00001294 _____ C:\AdwCleaner[S4].txt
2013-08-02 18:50 - 2013-08-02 18:50 - 00666633 _____ C:\Users\unknownname\Desktop\adwcleaner(1).exe
2013-08-02 09:28 - 2013-08-02 09:30 - 00000000 ____D C:\32788R22FWJFW
2013-08-01 20:27 - 2013-08-02 09:22 - 00000000 ____D C:\Users\unknownname\Desktop\hitzler.Semantic_Web
2013-08-01 16:55 - 2013-08-01 16:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-07-31 10:29 - 2013-07-31 10:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\OpenOffice
2013-07-28 15:28 - 2013-07-28 15:36 - 00000000 ____D C:\Users\unknownname\Desktop\Restored Files
2013-07-28 15:17 - 2013-07-28 15:17 - 00676403 _____ ((c) Copyright 1999-2006 Smart PC Solutions, LLC ) C:\Users\unknownname\Downloads\flashrecovery.exe
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\UpdatusUser\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00000000 ____D C:\Program Files (x86)\Smart Flash Recovery
2013-07-28 12:20 - 2013-07-28 12:20 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-07-28 12:14 - 2013-07-28 12:16 - 162401424 _____ C:\Users\unknownname\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_de.exe
2013-07-25 07:57 - 2013-07-25 08:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\FreeFileSync
2013-07-25 07:57 - 2013-07-25 07:57 - 00000000 ____D C:\Program Files\FreeFileSync
2013-07-19 09:51 - 2013-07-19 11:04 - 00012874 _____ C:\Users\unknownname\Downloads\#blatt11.v#
2013-07-19 08:41 - 2013-07-19 08:41 - 00012386 _____ C:\Users\unknownname\Downloads\blatt11.v
2013-07-18 09:27 - 2013-07-18 09:27 - 00008244 _____ C:\Users\unknownname\Downloads\ex11vorlage.v
2013-07-12 22:25 - 2013-07-12 22:28 - 00000000 ____D C:\Windows\system32\MRT
2013-07-12 10:35 - 2013-07-12 10:35 - 00023618 _____ C:\Users\Public\Documents\semprog.odt
2013-07-11 13:04 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 13:04 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 13:04 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 13:04 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 13:04 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 13:04 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 13:04 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 13:04 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 13:04 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 08:24 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 08:24 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 08:24 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 08:24 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 08:24 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 08:24 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 08:24 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 09:58 - 2013-07-10 09:59 - 15474652 _____ (The Git Development Community ) C:\Users\unknownname\Downloads\Git-1.8.3-preview20130601.exe
2013-07-10 09:56 - 2013-07-10 09:56 - 00000000 ____D C:\Users\unknownname\.ssh
2013-07-10 09:55 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\GitHub
2013-07-10 09:55 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Local\GitHub
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\Documents\GitHub
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2013-07-10 09:51 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Local\Deployment
2013-07-10 09:51 - 2013-07-10 09:51 - 00715360 _____ () C:\Users\unknownname\Downloads\GitHubSetup(1).exe
2013-07-10 09:51 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Apps\2.0
2013-07-09 19:56 - 2013-07-09 19:57 - 00001173 _____ C:\AdwCleaner[S3].txt
2013-07-09 13:45 - 2013-07-09 13:45 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 13:41 - 2013-07-09 13:42 - 00001213 _____ C:\AdwCleaner[S2].txt
2013-07-09 13:38 - 2013-07-09 13:38 - 00552389 _____ (Oleg N. Scherbakov) C:\Users\unknownname\Desktop\JRT.exe
2013-07-09 13:21 - 2013-07-09 13:21 - 00048873 _____ C:\Users\unknownname\Documents\ComboFix2.txt
2013-07-09 12:50 - 2013-07-09 12:50 - 00000004 _____ C:\Users\unknownname\Desktop\unterdrücken.txt
2013-07-09 11:07 - 2013-07-09 11:07 - 00048813 _____ C:\ComboFix.txt
2013-07-09 09:41 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-09 09:41 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-09 09:41 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-09 09:39 - 2013-07-09 11:08 - 00000000 ____D C:\Qoobox
2013-07-09 09:38 - 2013-07-09 11:03 - 00000000 ____D C:\Windows\erdnt
2013-07-09 09:35 - 2013-08-02 09:29 - 05097176 ____R (Swearware) C:\Users\unknownname\Desktop\ComboFix.exe
2013-07-07 09:56 - 2013-07-07 10:02 - 00035057 _____ C:\Users\unknownname\Desktop\Addition.txt
2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST
2013-07-07 08:04 - 2013-07-07 08:56 - 00000296 _____ C:\Users\unknownname\Desktop\problem.txt
2013-07-04 07:54 - 2013-07-04 07:54 - 00262292 _____ C:\Windows\msxml4-KB2758694-deu.LOG
127
==================== One Month Modified Files and Folders =======
2013-08-03 09:14 - 2013-08-03 09:14 - 01781485 _____ (Farbar) C:\Users\unknownname\Desktop\FRST64.exe
2013-08-03 09:14 - 2012-12-18 02:33 - 01411395 _____ C:\Windows\WindowsUpdate.log
2013-08-03 09:14 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-03 09:14 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-03 09:07 - 2013-04-24 13:58 - 00000000 ___RD C:\Users\unknownname\Dropbox
2013-08-03 09:07 - 2013-04-24 13:53 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Dropbox
2013-08-03 09:06 - 2012-12-17 22:54 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-03 09:06 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-03 09:06 - 2009-07-14 06:51 - 00079850 _____ C:\Windows\setupact.log
2013-08-02 22:02 - 2012-12-17 21:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-02 19:23 - 2013-08-02 19:22 - 00001293 _____ C:\AdwCleaner[S5].txt
2013-08-02 18:52 - 2013-08-02 18:52 - 00001294 _____ C:\AdwCleaner[S4].txt
2013-08-02 18:50 - 2013-08-02 18:50 - 00666633 _____ C:\Users\unknownname\Desktop\adwcleaner(1).exe
2013-08-02 09:30 - 2013-08-02 09:28 - 00000000 ____D C:\32788R22FWJFW
2013-08-02 09:29 - 2013-07-09 09:35 - 05097176 ____R (Swearware) C:\Users\unknownname\Desktop\ComboFix.exe
2013-08-02 09:22 - 2013-08-01 20:27 - 00000000 ____D C:\Users\unknownname\Desktop\hitzler.Semantic_Web
2013-08-01 18:49 - 2012-12-19 23:20 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\LSC
2013-08-01 18:40 - 2013-06-03 11:37 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-08-01 17:13 - 2012-12-19 21:44 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\LSC
2013-08-01 16:55 - 2013-08-01 16:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-08-01 10:35 - 2013-04-23 12:43 - 00000000 ____D C:\Users\unknownname\Downloads\kommpar
2013-07-31 17:49 - 2013-03-20 21:47 - 00000000 ____D C:\Users\unknownname\Documents\Visual Studio 2012
2013-07-31 10:29 - 2013-07-31 10:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\OpenOffice
2013-07-30 17:13 - 2013-04-23 08:51 - 00000000 ____D C:\Users\unknownname\Downloads\semprog
2013-07-29 08:43 - 2009-07-14 06:45 - 00296888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-28 16:14 - 2012-12-18 22:31 - 00065232 _____ C:\Users\unknownname\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-28 15:36 - 2013-07-28 15:28 - 00000000 ____D C:\Users\unknownname\Desktop\Restored Files
2013-07-28 15:17 - 2013-07-28 15:17 - 00676403 _____ ((c) Copyright 1999-2006 Smart PC Solutions, LLC ) C:\Users\unknownname\Downloads\flashrecovery.exe
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\UpdatusUser\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00000000 ____D C:\Program Files (x86)\Smart Flash Recovery
2013-07-28 15:17 - 2012-12-19 21:53 - 00065232 _____ C:\Users\unknownname\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-28 15:17 - 2010-11-21 08:50 - 00699666 _____ C:\Windows\system32\perfh007.dat
2013-07-28 15:17 - 2010-11-21 08:50 - 00149774 _____ C:\Windows\system32\perfc007.dat
2013-07-28 15:17 - 2009-07-14 07:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-28 15:13 - 2013-02-12 15:26 - 00107128 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2013-07-28 15:13 - 2013-02-12 15:26 - 00016944 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2013-07-28 12:20 - 2013-07-28 12:20 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-07-28 12:16 - 2013-07-28 12:14 - 162401424 _____ C:\Users\unknownname\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_de.exe
2013-07-26 08:18 - 2010-11-21 05:47 - 00451066 _____ C:\Windows\PFRO.log
2013-07-25 08:29 - 2013-07-25 07:57 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\FreeFileSync
2013-07-25 07:57 - 2013-07-25 07:57 - 00000000 ____D C:\Program Files\FreeFileSync
2013-07-24 22:12 - 2012-12-17 21:03 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-24 22:12 - 2012-12-17 21:03 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-24 22:12 - 2012-12-17 21:03 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-24 22:11 - 2012-12-19 21:43 - 00000000 ____D C:\Users\unknownname\AppData\Local\Adobe
2013-07-24 22:08 - 2012-12-18 21:15 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Adobe
2013-07-23 08:15 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-22 20:42 - 2012-12-17 23:10 - 00130392 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2013-07-22 20:42 - 2012-12-17 23:10 - 00064856 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2013-07-21 09:30 - 2012-12-19 21:57 - 00000000 ____D C:\Windows\System32\Tasks\TVT
2013-07-21 09:30 - 2012-12-19 21:31 - 00000000 ____D C:\Program Files (x86)\Lenovo
2013-07-20 08:42 - 2013-05-30 16:07 - 00031351 _____ C:\Users\Public\Documents\kommpar.odt
2013-07-19 18:18 - 2013-05-23 21:07 - 00000000 ____D C:\Users\unknownname\Downloads\datamining
2013-07-19 11:04 - 2013-07-19 09:51 - 00012874 _____ C:\Users\unknownname\Downloads\#blatt11.v#
2013-07-19 08:41 - 2013-07-19 08:41 - 00012386 _____ C:\Users\unknownname\Downloads\blatt11.v
2013-07-18 15:40 - 2012-12-17 23:08 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Apple Computer
2013-07-18 09:27 - 2013-07-18 09:27 - 00008244 _____ C:\Users\unknownname\Downloads\ex11vorlage.v
2013-07-17 08:27 - 2013-02-14 16:27 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-07-16 13:30 - 2012-12-18 02:33 - 00000000 ____D C:\Users\unknownname
2013-07-16 12:53 - 2013-03-25 21:02 - 00000000 ____D C:\Users\unknownname\Documents\amos
2013-07-12 22:28 - 2013-07-12 22:25 - 00000000 ____D C:\Windows\system32\MRT
2013-07-12 12:23 - 2013-03-29 12:08 - 00000000 ____D C:\Users\unknownname\Documents\Krypto
2013-07-12 10:35 - 2013-07-12 10:35 - 00023618 _____ C:\Users\Public\Documents\semprog.odt
2013-07-11 15:26 - 2013-03-13 15:20 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 15:26 - 2013-03-13 15:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 15:26 - 2010-11-21 09:01 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 15:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 15:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-10 10:02 - 2013-04-24 07:36 - 00000000 ____D C:\Program Files (x86)\Git
2013-07-10 09:59 - 2013-07-10 09:58 - 15474652 _____ (The Git Development Community ) C:\Users\unknownname\Downloads\Git-1.8.3-preview20130601.exe
2013-07-10 09:57 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\GitHub
2013-07-10 09:57 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Local\GitHub
2013-07-10 09:57 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Deployment
2013-07-10 09:56 - 2013-07-10 09:56 - 00000000 ____D C:\Users\unknownname\.ssh
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\Documents\GitHub
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2013-07-10 09:51 - 2013-07-10 09:51 - 00715360 _____ () C:\Users\unknownname\Downloads\GitHubSetup(1).exe
2013-07-10 09:51 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Apps\2.0
2013-07-09 19:57 - 2013-07-09 19:56 - 00001173 _____ C:\AdwCleaner[S3].txt
2013-07-09 13:45 - 2013-07-09 13:45 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 13:42 - 2013-07-09 13:41 - 00001213 _____ C:\AdwCleaner[S2].txt
2013-07-09 13:38 - 2013-07-09 13:38 - 00552389 _____ (Oleg N. Scherbakov) C:\Users\unknownname\Desktop\JRT.exe
2013-07-09 13:22 - 2013-06-02 08:36 - 00004128 _____ C:\Windows\System32\Tasks\Software Updater
2013-07-09 13:22 - 2013-06-02 08:36 - 00004106 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-07-09 13:21 - 2013-07-09 13:21 - 00048873 _____ C:\Users\unknownname\Documents\ComboFix2.txt
2013-07-09 12:50 - 2013-07-09 12:50 - 00000004 _____ C:\Users\unknownname\Desktop\unterdrücken.txt
2013-07-09 11:08 - 2013-07-09 09:39 - 00000000 ____D C:\Qoobox
2013-07-09 11:07 - 2013-07-09 11:07 - 00048813 _____ C:\ComboFix.txt
2013-07-09 11:07 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-09 11:04 - 2012-12-18 02:34 - 00000000 ___RD C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-09 11:03 - 2013-07-09 09:38 - 00000000 ____D C:\Windows\erdnt
2013-07-09 10:58 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-09 10:57 - 2009-07-14 04:34 - 17301504 _____ C:\Windows\system32\config\system.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 112197632 _____ C:\Windows\system32\config\software.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 05242880 _____ C:\Windows\system32\config\default.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\security.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\sam.bak
2013-07-07 10:02 - 2013-07-07 09:56 - 00035057 _____ C:\Users\unknownname\Desktop\Addition.txt
2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST
2013-07-07 08:56 - 2013-07-07 08:04 - 00000296 _____ C:\Users\unknownname\Desktop\problem.txt
2013-07-04 15:43 - 2013-06-25 14:32 - 00003163 _____ C:\Users\unknownname\weka.log
2013-07-04 07:54 - 2013-07-04 07:54 - 00262292 _____ C:\Windows\msxml4-KB2758694-deu.LOG
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-02 13:19
==================== End Of Log ============================
Und die Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2013 Ran by unknownname at 2013-08-03 09:18:28 Running from C:\Users\unknownname\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727) Tools for .Net 3.5 (x32 Version: 3.11.50727) Adobe AIR (x32 Version: 3.8.0.870) Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Anzeige am Bildschirm (Version: 7.06.00) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Astroburn Lite (x32 Version: 1.7.0.0175) AuthenTec TrueSuite (Version: 5.1.100.49) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0) Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0) Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0) Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0) Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0) Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0) Bonjour (Version: 3.0.0.10) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103) Cisco EAP-FAST Module (x32 Version: 2.2.14) Cisco LEAP Module (x32 Version: 1.0.19) Cisco PEAP Module (x32 Version: 1.1.6) Coq Version 8.4pl2 (x32 Version: 8.4pl2) DAEMON Tools Lite (x32 Version: 4.47.1.0333) Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727) Dolby Advanced Audio v2 (x32 Version: 7.2.8000.16) Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298) Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298) Dropbox (HKCU Version: 2.0.22) ElsterFormular (x32 Version: 14.0.0.10899) Energie-Manager (x32 Version: 6.36) Entity Framework Designer for Visual Studio 2012 - enu (x32 Version: 11.1.21009.00) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.21009.00) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60) Free Download Manager 3.9.2 (x32) Free Driver Scout (Version: 1.0.0.111) Free Driver Scout (x32 Version: 1.0.0.111) Free System Utilities (x32 Version: 1.1.0.95) Free SystemUtilities (x32 Version: 1.1.0.95) FreeFileSync 5.16 (x32 Version: 5.16) G Data InternetSecurity 2014 (x32 Version: 24.0.2.5) Git version 1.8.3-preview20130601 (x32 Version: 1.8.3-preview20130601) GitHub (HKCU Version: 1.0.52.0) Haskell Platform 2012.4.0.0 (x32) iCloud (Version: 2.1.2.8) IIS 8.0 Express (Version: 8.0.1557) IIS Express Application Compatibility Database for x64 IIS Express Application Compatibility Database for x86 ImgBurn (x32 Version: 2.5.7.0) InstallShield 2012 Spring Limited Edition (x32 Version: 19.00.0000) Integrated Camera Driver Installer Package Ver.1.2.1.18 (x32 Version: 1.2.1.18) Intel PROSet Wireless Intel(R) Control Center (x32 Version: 1.2.1.1010) Intel(R) Management Engine Components (x32 Version: 9.0.0.1310) Intel(R) Network Connections Drivers (Version: 16.8) Intel(R) Processor Graphics (x32 Version: 9.17.10.2843) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.3.0.0398) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.8.251) Intel® PROSet/Wireless WiFi-Software (Version: 15.03.1000.1637) Intel® Trusted Connect Service Client (Version: 1.27.757.1) iTunes (Version: 11.0.4.4) Java 7 Update 11 (x32 Version: 7.0.110) Java 7 Update 25 (64-bit) (Version: 7.0.250) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Java SE Development Kit 7 Update 13 (64-bit) (Version: 1.7.0.130) Java SE Development Kit 7 Update 17 (64-bit) (Version: 1.7.0.170) Java SE Development Kit 7 Update 25 (64-bit) (Version: 1.7.0.250) JavaScript Tooling (Version: 11.0.60315) JavaScript Tooling (x32 Version: 11.0.60315) JetBrains ReSharper 7.1.3 (x32 Version: 7.1.3000) JetBrains TeamCity Addin 7.1 (x32 Version: 7.1.646) Lenovo Patch Utility (x32 Version: 1.3.2.4) Lenovo Patch Utility 64 bit (Version: 1.3.2.4) Lenovo Power Management Driver (Version: 1.67.00.02) Lenovo Solution Center (Version: 2.0.020.00) Lenovo System Update (x32 Version: 5.02.0018) LocalESPC (x32 Version: 8.59.25584) LocalESPCui for de-de (x32 Version: 8.59.25584) LocalESPCui for en-us (x32 Version: 8.59.25584) MAGIX Speed burnR (x32 Version: 7.0.1.27) MAGIX Webradio Recorder 5 5.0.0.326 (D) (x32 Version: 5.0.0.326) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319) Microsoft .NET Framework 4.5 (Version: 4.5.50709) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709) Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709) Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0) Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0) Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0) Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0) Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0) Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0) Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0) Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20715.0) Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0) Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727) Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727) Microsoft LightSwitch for Visual Studio 2012 CoreRes - ENU (x32 Version: 11.0.50727) Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.60517) Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.60517) Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - ENU (x32 Version: 11.0.60517) Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727) Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003) Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931) Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929) Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 11.0.50709.17929) Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16) Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0) Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (Version: 4.0.8876.1) Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools - enu (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server System CLR Types (x32 Version: 10.50.1600.1) Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 32bit Compilers - ENU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers - ENU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106) Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.60610) Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727) Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Devenv Resources (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 Language Pack - ENU (x32 Version: 11.0.50727.1) Microsoft Visual Studio 2012 Performance Collection Tools - ENU (Version: 11.0.50727) Microsoft Visual Studio 2012 Preparation (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools ENU Language Pack (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Resources (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727) Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727) Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.60610) Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.60610) Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources (x32 Version: 11.0.50727) Microsoft Web Deploy 3.0 (Version: 3.1236.1631) Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0) Microsoft Web Deploy dbSqlPackage Provider - enu (x32 Version: 10.3.20225.0) Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 - deu (x32 Version: 1.2.40308.0) Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 (x32 Version: 1.2.40308.0) Microsoft Web Platform Installer 4.0 (Version: 4.0.1622) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60) Mobile Broadband Drivers (x32 Version: 7.2.3.2) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) Mp3tag v2.54 (x32 Version: v2.54) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) Notepad++ (x32 Version: 6.3.2) NUnit 2.6.2 (x32 Version: 2.6.2.12296) NVIDIA 3D Vision Treiber 311.00 (Version: 311.00) NVIDIA Grafiktreiber 311.00 (Version: 311.00) NVIDIA HD-Audiotreiber 1.3.16.0 (Version: 1.3.16.0) NVIDIA Install Application (Version: 2.1002.108.688) NVIDIA nView 136.53 (Version: 136.53) NVIDIA Optimus 1.11.3 (Version: 1.11.3) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1100) NVIDIA Systemsteuerung 311.00 (Version: 311.00) NVIDIA Update 1.11.3 (Version: 1.11.3) NVIDIA Update Components (Version: 1.11.3) OpenOffice 4.0.0 (x32 Version: 4.00.9702) ovo Auto Scroll Utility (Version: 2.00) Perforce Visual Components (Version: 131.61.1503) PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1) PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1) Protege 3.4.8 (x32 Version: 1.0.0.0) QuickTime (x32 Version: 7.74.80.86) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6886) RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01) Secunia PSI (3.0.0.7009) (x32 Version: 3.0.0.7009) Sierra Wireless QMI Lenovo Driver Package (x32 Version: 1.0.45.0) Skype™ 6.5 (x32 Version: 6.5.158) Smart Flash Recovery v. 2.0 (x32 Version: 2.0) SpywareBlaster 5.0 (x32 Version: 5.0.0) StreamTransport version: 1.0.2.2171 (x32) Switch Sound File Converter (x32) ThinkPad UltraNav Driver (Version: 16.2.19.7) ThinkPad Wireless LAN Adapter Software (x32 Version: 1.00.0031.1) ThinkVantage Access Connections (x32 Version: 5.97) ThinkVantage Communications Utility (Version: 3.0.40.0) ThinkVantage Fingerprint Software (Version: 5.9.8.7264) ThinkVantage Password Manager (x32 Version: 4.10.20.0) ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.9) TrueCrypt (x32 Version: 7.1a) Update for (KB2504637) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219) Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727) Visual Studio 2012 Prerequisites - ENU Language Pack (Version: 11.0.50727) Visual Studio 2012 Prerequisites (Version: 11.0.50727) Visual Studio 2012 Update 3 (KB2707250) (x32 Version: 11.0.60610) Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9201.20602) VLC media player 2.0.7 (x32 Version: 2.0.7) WavePad Sound Editor (x32) WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0) WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0) WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0) WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0) WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0) Weka 3.6.9 (x32 Version: 3.6.9) Windows App Certification Kit Native Components (Version: 8.59.29736) Windows App Certification Kit x64 (x32 Version: 8.59.29750) Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601) Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601) Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584) Windows Runtime Intellisense Content - en-us (x32 Version: 8.59.25584) Windows Software Development Kit (x32 Version: 8.59.25584) Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584) Windows XP Targeting with C++ (Version: 11.0.51106) Windows XP Targeting with C++ (x32 Version: 11.0.51106) WinPatrol (Version: 28.1.2013.0) WinRAR 4.20 (64-Bit) (Version: 4.20.0) WOT for Internet Explorer (Version: 12.8.2.0) ==================== Restore Points ========================= 22-07-2013 11:04:45 Geplanter Prüfpunkt 23-07-2013 06:19:07 Windows Update 26-07-2013 06:22:54 Windows Update 28-07-2013 10:17:42 OpenOffice 4.0.0 wird installiert 30-07-2013 06:10:41 Windows Update 02-08-2013 07:02:02 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-07-09 10:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {35B88FFE-29A9-4B59-BF70-7F10142358A3} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] () Task: {3AFABB19-B0DA-46BF-9A84-25D645784EA0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {4C5048C3-E0DE-475B-B22B-E39FFF8EB650} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe No File Task: {5664DAD4-3366-4EDA-9497-A5D954262EE9} - System32\Tasks\Freemium1ClickMaint => C:\Users\unknownname\Downloads\1Click.exe No File Task: {578E90FE-CE2E-4714-BC9A-6FF647FE07D5} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe No File Task: {6EBFA79C-425B-4383-94B9-7D38F8264125} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1260871158-490153657-2048939727-1004 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {7A5BCE17-FBAF-45D1-827B-27D43837DB7B} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-03-14] (Lenovo) Task: {7B614847-D9E7-49F6-9604-64DDF030314F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24] (Adobe Systems Incorporated) Task: {84AC90CA-C832-429C-AFB1-F086F4AAD5F7} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {93072582-895F-4E70-BF3D-4134D37C384F} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe No File Task: {9D450B53-E0DB-4974-8293-98BD9BA35620} - System32\Tasks\NCH Software\WavePadReminder => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe [2012-12-14] (NCH Software) Task: {A13B696C-2973-4DCE-8601-A4888770A00A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {AA120A75-46DF-4CF9-96AB-B86410323489} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe No File Task: {EAB23475-CFF3-4305-B8B4-D0ACFE78B286} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\lsc.exe [2013-03-14] () Task: {EC6C84A9-65C3-4C52-811F-A5877AB0F548} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-03-14] () Task: {FBF6D8D5-A0F5-40FE-AE0C-D84C39C7D348} - System32\Tasks\Browser Updater\Browser Updater => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {FE8CA6CE-2709-4DCC-AA94-60CDA04A8050} - System32\Tasks\NCH Software\SwitchReminder => C:\Program Files (x86)\NCH Software\Switch\Switch.exe [2012-09-07] (NCH Software) Task: {FF008279-3B42-4C52-9C93-730470D95D66} - System32\Tasks\DSite => C:\Users\unknownname\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Faulty Device Manager Devices ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (08/03/2013 09:06:36 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 09:39:10 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 07:25:11 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 07:20:04 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 06:53:53 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 06:41:15 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 90080108 Error: (08/02/2013 09:21:29 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 System errors: ============= Error: (08/03/2013 09:11:48 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.155.1346.0) Error: (08/03/2013 09:08:56 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (08/03/2013 09:08:56 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (08/02/2013 09:41:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (08/02/2013 09:41:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (08/02/2013 07:27:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (08/02/2013 07:27:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (08/02/2013 07:23:39 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (08/02/2013 07:23:39 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht. Error: (08/02/2013 07:22:25 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Microsoft Office Sessions: ========================= Error: (08/03/2013 09:06:36 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 09:39:10 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 07:25:11 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 07:20:04 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 06:53:53 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 06:41:15 PM) (Source: Customer Experience Improvement Program)(User: ) Description: 90080108 Error: (08/02/2013 09:21:29 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path43900 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path25900 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path17900 CodeIntegrity Errors: =================================== Date: 2013-07-26 17:16:22.123 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-07-09 10:53:40.824 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-07-09 10:53:40.746 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-26 21:15:29.409 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-26 21:13:17.988 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-18 08:08:51.693 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-14 15:30:34.990 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-13 21:01:59.851 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 21:39:53.081 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 20:00:44.426 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 38% Total physical RAM: 7889.63 MB Available physical RAM: 4816.05 MB Total Pagefile: 15777.44 MB Available Pagefile: 12442.07 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:199.9 GB) (Free:55.44 GB) NTFS (Disk=0 Partition=2) Drive d: () (Fixed) (Total:265.76 GB) (Free:256.74 GB) NTFS (Disk=0 Partition=3) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 000E3F0D) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=266 GB) - (Type=07 NTFS) ==================== End Of Log ============================ unknownname |
|
04.08.2013, 09:05
| #12 |
| /// the machine /// TB-Ausbilder | HomeTab, MPSigStub.exe und mpas-fe.exeESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.08.2013, 20:29
| #13 |
| | HomeTab, MPSigStub.exe und mpas-fe.exe Hallo schrauber, hier die Datei für ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f94ef52aac3ffe46b32ebb4a8f5c071d
# engine=14644
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-04 06:52:24
# local_time=2013-08-04 08:52:24 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 175102 127272194 0 0
# scanned=308458
# found=1
# cleaned=0
# scan_time=35031
sh=4187832EA88214AA2B3459DE8F4D5D98CBD5B604 ft=1 fh=723e7f02d32f39e5 vn="a variant of Win32/Adware.iBryte.G application" ac=I fn="C:\Users\Public\Documents\Setup.exe"
Code:
ATTFilter Results of screen317's Security Check version 0.99.71 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` G Data InternetSecurity 2014 Antivirus out of date! `````````Anti-malware/Other Utilities Check:````````` SpywareBlaster 5.0 Secunia PSI (3.0.0.7009) Malwarebytes Anti-Malware Version 1.75.0.1300 Visual Studio Extensions for Windows Library for JavaScript Java 7 Update 11 Java 7 Update 25 JavaScript Tooling Adobe Flash Player 11.8.800.94 Adobe Reader XI Mozilla Firefox (22.0) ````````Process Check: objlist.exe by Laurent```````` WinPatrol winpatrol.exe G Data InternetSecurity Firewall GDFwSvcx64.exe G Data InternetSecurity Firewall GDFirewallTray.exe BillP Studios WinPatrol WinPatrol.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-08-2013
Ran by unknownname (administrator) on 04-08-2013 21:23:55
Running from C:\Users\unknownname\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Ericsson AB) C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Password Manager\password_manager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Secunia) C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe
(Dropbox, Inc.) C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\swriter.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13519432 2013-04-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [PSQLLauncher] - C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [85864 2012-09-21] (Authentec Inc.)
HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63376 2012-09-07] (Lenovo)
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [228744 2012-09-20] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293232 2012-11-26] (Lenovo Group Limited)
HKLM\...\Run: [PasswordManager] - C:\Program Files\Lenovo\Password Manager\password_manager.exe [1534888 2012-10-23] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [423144 2013-04-27] (BillP Studios)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [PWMTRV] - rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor [x]
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-02-15] (Intel Corporation)
HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444304 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-03-14] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-03-14] (Lenovo)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [245872 2013-02-28] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-02-28] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
SearchScopes: HKCU - DefaultScope {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
SearchScopes: HKCU - {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: No Name - {ba696155-d96e-4281-b467-0367a0456474} - No File
BHO-x32: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files (x86)\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - No Name - {ba696155-d96e-4281-b467-0367a0456474} - No File
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default
FF Homepage: about:newtab
FF Keyword.URL: https://www.google.de/search?ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:de:official&client=firefox-a&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: adblockpopups - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
==================== Services (Whitelisted) =================
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1957840 2013-03-22] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635344 2013-02-25] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2556384 2013-07-02] (G Data Software AG)
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2012-09-24] (Lenovo.)
R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [296808 2012-08-30] (AuthenTec, Inc)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2926672 2013-03-22] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [696808 2013-02-25] (G Data Software AG)
R2 GobiQDLService; C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe [312688 2011-11-25] (Sierra Wireless, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-02-15] (Intel Corporation)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [187760 2012-11-26] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
R2 WMCoreService; C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [x]
==================== Drivers (Whitelisted) ====================
R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-20] (DT Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-06-12] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-07-22] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62808 2013-06-03] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-07-22] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-07-28] (G Data Software)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-07-28] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-06-12] (G Data Software AG)
R3 LenovoRd; C:\Windows\System32\Drivers\LenovoRd.sys [118016 2009-05-11] (Lenovo)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11525872 2013-02-27] (Intel Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [284448 2013-02-28] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-04-18] (Secunia)
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-18] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [x]
S3 btwaudio; system32\drivers\btwaudio.sys [x]
S3 btwavdt; system32\drivers\btwavdt.sys [x]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [x]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-04 15:44 - 2013-08-04 15:44 - 00153831 _____ C:\Users\unknownname\Downloads\RAM-Test Wieviel Speicher brauchen Spieler wirklich Arbeitsspeicher-Kaufberatung DDR3 und DDR2 (August 2013).htm
2013-08-04 15:44 - 2013-08-04 15:44 - 00000000 ____D C:\Users\unknownname\Downloads\RAM-Test Wieviel Speicher brauchen Spieler wirklich Arbeitsspeicher-Kaufberatung DDR3 und DDR2 (August 2013)-Dateien
2013-08-04 12:27 - 2013-08-04 12:27 - 00001406 _____ C:\Users\unknownname\Desktop\Top Songs.wpl - Verknüpfung.lnk
2013-08-04 11:05 - 2013-08-04 11:05 - 00891098 _____ C:\Users\unknownname\Desktop\SecurityCheck.exe
2013-08-04 11:04 - 2013-08-04 11:05 - 02347384 _____ (ESET) C:\Users\unknownname\Desktop\esetsmartinstaller_enu.exe
2013-08-03 09:14 - 2013-08-03 09:14 - 01781485 _____ (Farbar) C:\Users\unknownname\Desktop\FRST64.exe
2013-08-02 19:22 - 2013-08-02 19:23 - 00001293 _____ C:\AdwCleaner[S5].txt
2013-08-02 18:52 - 2013-08-02 18:52 - 00001294 _____ C:\AdwCleaner[S4].txt
2013-08-02 18:50 - 2013-08-02 18:50 - 00666633 _____ C:\Users\unknownname\Desktop\adwcleaner(1).exe
2013-08-02 09:28 - 2013-08-02 09:30 - 00000000 ____D C:\32788R22FWJFW
2013-08-01 20:27 - 2013-08-02 09:22 - 00000000 ____D C:\Users\unknownname\Desktop\hitzler.Semantic_Web
2013-08-01 16:55 - 2013-08-01 16:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-07-31 10:29 - 2013-07-31 10:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\OpenOffice
2013-07-28 15:28 - 2013-07-28 15:36 - 00000000 ____D C:\Users\unknownname\Desktop\Restored Files
2013-07-28 15:17 - 2013-07-28 15:17 - 00676403 _____ ((c) Copyright 1999-2006 Smart PC Solutions, LLC ) C:\Users\unknownname\Downloads\flashrecovery.exe
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\UpdatusUser\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00000000 ____D C:\Program Files (x86)\Smart Flash Recovery
2013-07-28 12:20 - 2013-07-28 12:20 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-07-28 12:14 - 2013-07-28 12:16 - 162401424 _____ C:\Users\unknownname\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_de.exe
2013-07-25 07:57 - 2013-07-25 08:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\FreeFileSync
2013-07-25 07:57 - 2013-07-25 07:57 - 00000000 ____D C:\Program Files\FreeFileSync
2013-07-19 09:51 - 2013-07-19 11:04 - 00012874 _____ C:\Users\unknownname\Downloads\#blatt11.v#
2013-07-19 08:41 - 2013-07-19 08:41 - 00012386 _____ C:\Users\unknownname\Downloads\blatt11.v
2013-07-18 09:27 - 2013-07-18 09:27 - 00008244 _____ C:\Users\unknownname\Downloads\ex11vorlage.v
2013-07-12 22:25 - 2013-07-12 22:28 - 00000000 ____D C:\Windows\system32\MRT
2013-07-12 10:35 - 2013-07-12 10:35 - 00023618 _____ C:\Users\Public\Documents\semprog.odt
2013-07-11 13:04 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 13:04 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 13:04 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 13:04 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 13:04 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 13:04 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 13:04 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 13:04 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 13:04 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 08:24 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 08:24 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 08:24 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 08:24 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 08:24 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 08:24 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 08:24 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 09:58 - 2013-07-10 09:59 - 15474652 _____ (The Git Development Community ) C:\Users\unknownname\Downloads\Git-1.8.3-preview20130601.exe
2013-07-10 09:56 - 2013-07-10 09:56 - 00000000 ____D C:\Users\unknownname\.ssh
2013-07-10 09:55 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\GitHub
2013-07-10 09:55 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Local\GitHub
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\Documents\GitHub
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2013-07-10 09:51 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Local\Deployment
2013-07-10 09:51 - 2013-07-10 09:51 - 00715360 _____ () C:\Users\unknownname\Downloads\GitHubSetup(1).exe
2013-07-10 09:51 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Apps\2.0
2013-07-09 19:56 - 2013-07-09 19:57 - 00001173 _____ C:\AdwCleaner[S3].txt
2013-07-09 13:45 - 2013-07-09 13:45 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 13:41 - 2013-07-09 13:42 - 00001213 _____ C:\AdwCleaner[S2].txt
2013-07-09 13:38 - 2013-07-09 13:38 - 00552389 _____ (Oleg N. Scherbakov) C:\Users\unknownname\Desktop\JRT.exe
2013-07-09 13:21 - 2013-07-09 13:21 - 00048873 _____ C:\Users\unknownname\Documents\ComboFix2.txt
2013-07-09 12:50 - 2013-07-09 12:50 - 00000004 _____ C:\Users\unknownname\Desktop\unterdrücken.txt
2013-07-09 11:07 - 2013-07-09 11:07 - 00048813 _____ C:\ComboFix.txt
2013-07-09 09:41 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-09 09:41 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-09 09:41 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-09 09:39 - 2013-07-09 11:08 - 00000000 ____D C:\Qoobox
2013-07-09 09:38 - 2013-07-09 11:03 - 00000000 ____D C:\Windows\erdnt
2013-07-09 09:35 - 2013-08-02 09:29 - 05097176 ____R (Swearware) C:\Users\unknownname\Desktop\ComboFix.exe
2013-07-07 09:56 - 2013-08-03 09:27 - 00035307 _____ C:\Users\unknownname\Desktop\Addition.txt
2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST
2013-07-07 08:04 - 2013-07-07 08:56 - 00000296 _____ C:\Users\unknownname\Desktop\problem.txt
129
==================== One Month Modified Files and Folders =======
2013-08-04 21:23 - 2013-08-04 21:23 - 00001096 _____ C:\Users\unknownname\Desktop\checkup.txt
2013-08-04 21:09 - 2013-05-23 21:07 - 00000000 ____D C:\Users\unknownname\Downloads\datamining
2013-08-04 21:02 - 2012-12-17 21:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-04 19:17 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-04 19:17 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-04 16:48 - 2009-07-14 06:51 - 00080298 _____ C:\Windows\setupact.log
2013-08-04 15:44 - 2013-08-04 15:44 - 00153831 _____ C:\Users\unknownname\Downloads\RAM-Test Wieviel Speicher brauchen Spieler wirklich Arbeitsspeicher-Kaufberatung DDR3 und DDR2 (August 2013).htm
2013-08-04 15:44 - 2013-08-04 15:44 - 00000000 ____D C:\Users\unknownname\Downloads\RAM-Test Wieviel Speicher brauchen Spieler wirklich Arbeitsspeicher-Kaufberatung DDR3 und DDR2 (August 2013)-Dateien
2013-08-04 12:27 - 2013-08-04 12:27 - 00001406 _____ C:\Users\unknownname\Desktop\Top Songs.wpl - Verknüpfung.lnk
2013-08-04 11:05 - 2013-08-04 11:05 - 00891098 _____ C:\Users\unknownname\Desktop\SecurityCheck.exe
2013-08-04 11:05 - 2013-08-04 11:04 - 02347384 _____ (ESET) C:\Users\unknownname\Desktop\esetsmartinstaller_enu.exe
2013-08-04 07:07 - 2012-12-18 02:33 - 01474221 _____ C:\Windows\WindowsUpdate.log
2013-08-04 07:05 - 2013-04-24 13:58 - 00000000 ___RD C:\Users\unknownname\Dropbox
2013-08-04 07:05 - 2013-04-24 13:53 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Dropbox
2013-08-04 07:03 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-04 07:02 - 2012-12-17 22:54 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-03 09:27 - 2013-07-07 09:56 - 00035307 _____ C:\Users\unknownname\Desktop\Addition.txt
2013-08-03 09:14 - 2013-08-03 09:14 - 01781485 _____ (Farbar) C:\Users\unknownname\Desktop\FRST64.exe
2013-08-02 19:23 - 2013-08-02 19:22 - 00001293 _____ C:\AdwCleaner[S5].txt
2013-08-02 18:52 - 2013-08-02 18:52 - 00001294 _____ C:\AdwCleaner[S4].txt
2013-08-02 18:50 - 2013-08-02 18:50 - 00666633 _____ C:\Users\unknownname\Desktop\adwcleaner(1).exe
2013-08-02 09:30 - 2013-08-02 09:28 - 00000000 ____D C:\32788R22FWJFW
2013-08-02 09:29 - 2013-07-09 09:35 - 05097176 ____R (Swearware) C:\Users\unknownname\Desktop\ComboFix.exe
2013-08-02 09:22 - 2013-08-01 20:27 - 00000000 ____D C:\Users\unknownname\Desktop\hitzler.Semantic_Web
2013-08-01 18:49 - 2012-12-19 23:20 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\LSC
2013-08-01 18:40 - 2013-06-03 11:37 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-08-01 17:13 - 2012-12-19 21:44 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\LSC
2013-08-01 16:55 - 2013-08-01 16:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-08-01 10:35 - 2013-04-23 12:43 - 00000000 ____D C:\Users\unknownname\Downloads\kommpar
2013-07-31 17:49 - 2013-03-20 21:47 - 00000000 ____D C:\Users\unknownname\Documents\Visual Studio 2012
2013-07-31 10:29 - 2013-07-31 10:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\OpenOffice
2013-07-30 17:13 - 2013-04-23 08:51 - 00000000 ____D C:\Users\unknownname\Downloads\semprog
2013-07-29 08:43 - 2009-07-14 06:45 - 00296888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-28 16:14 - 2012-12-18 22:31 - 00065232 _____ C:\Users\unknownname\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-28 15:36 - 2013-07-28 15:28 - 00000000 ____D C:\Users\unknownname\Desktop\Restored Files
2013-07-28 15:17 - 2013-07-28 15:17 - 00676403 _____ ((c) Copyright 1999-2006 Smart PC Solutions, LLC ) C:\Users\unknownname\Downloads\flashrecovery.exe
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\UpdatusUser\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00000000 ____D C:\Program Files (x86)\Smart Flash Recovery
2013-07-28 15:17 - 2012-12-19 21:53 - 00065232 _____ C:\Users\unknownname\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-28 15:17 - 2010-11-21 08:50 - 00699666 _____ C:\Windows\system32\perfh007.dat
2013-07-28 15:17 - 2010-11-21 08:50 - 00149774 _____ C:\Windows\system32\perfc007.dat
2013-07-28 15:17 - 2009-07-14 07:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-28 15:13 - 2013-02-12 15:26 - 00107128 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2013-07-28 15:13 - 2013-02-12 15:26 - 00016944 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2013-07-28 12:20 - 2013-07-28 12:20 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-07-28 12:16 - 2013-07-28 12:14 - 162401424 _____ C:\Users\unknownname\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_de.exe
2013-07-26 08:18 - 2010-11-21 05:47 - 00451066 _____ C:\Windows\PFRO.log
2013-07-25 08:29 - 2013-07-25 07:57 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\FreeFileSync
2013-07-25 07:57 - 2013-07-25 07:57 - 00000000 ____D C:\Program Files\FreeFileSync
2013-07-24 22:12 - 2012-12-17 21:03 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-24 22:12 - 2012-12-17 21:03 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-24 22:12 - 2012-12-17 21:03 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-24 22:11 - 2012-12-19 21:43 - 00000000 ____D C:\Users\unknownname\AppData\Local\Adobe
2013-07-24 22:08 - 2012-12-18 21:15 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Adobe
2013-07-23 08:15 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-22 20:42 - 2012-12-17 23:10 - 00130392 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2013-07-22 20:42 - 2012-12-17 23:10 - 00064856 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2013-07-21 09:30 - 2012-12-19 21:57 - 00000000 ____D C:\Windows\System32\Tasks\TVT
2013-07-21 09:30 - 2012-12-19 21:31 - 00000000 ____D C:\Program Files (x86)\Lenovo
2013-07-20 08:42 - 2013-05-30 16:07 - 00031351 _____ C:\Users\Public\Documents\kommpar.odt
2013-07-19 11:04 - 2013-07-19 09:51 - 00012874 _____ C:\Users\unknownname\Downloads\#blatt11.v#
2013-07-19 08:41 - 2013-07-19 08:41 - 00012386 _____ C:\Users\unknownname\Downloads\blatt11.v
2013-07-18 15:40 - 2012-12-17 23:08 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Apple Computer
2013-07-18 09:27 - 2013-07-18 09:27 - 00008244 _____ C:\Users\unknownname\Downloads\ex11vorlage.v
2013-07-17 08:27 - 2013-02-14 16:27 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-07-16 13:30 - 2012-12-18 02:33 - 00000000 ____D C:\Users\unknownname
2013-07-16 12:53 - 2013-03-25 21:02 - 00000000 ____D C:\Users\unknownname\Documents\amos
2013-07-12 22:28 - 2013-07-12 22:25 - 00000000 ____D C:\Windows\system32\MRT
2013-07-12 12:23 - 2013-03-29 12:08 - 00000000 ____D C:\Users\unknownname\Documents\Krypto
2013-07-12 10:35 - 2013-07-12 10:35 - 00023618 _____ C:\Users\Public\Documents\semprog.odt
2013-07-11 15:26 - 2013-03-13 15:20 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 15:26 - 2013-03-13 15:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 15:26 - 2010-11-21 09:01 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 15:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 15:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-10 10:02 - 2013-04-24 07:36 - 00000000 ____D C:\Program Files (x86)\Git
2013-07-10 09:59 - 2013-07-10 09:58 - 15474652 _____ (The Git Development Community ) C:\Users\unknownname\Downloads\Git-1.8.3-preview20130601.exe
2013-07-10 09:57 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\GitHub
2013-07-10 09:57 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Local\GitHub
2013-07-10 09:57 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Deployment
2013-07-10 09:56 - 2013-07-10 09:56 - 00000000 ____D C:\Users\unknownname\.ssh
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\Documents\GitHub
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2013-07-10 09:51 - 2013-07-10 09:51 - 00715360 _____ () C:\Users\unknownname\Downloads\GitHubSetup(1).exe
2013-07-10 09:51 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Apps\2.0
2013-07-09 19:57 - 2013-07-09 19:56 - 00001173 _____ C:\AdwCleaner[S3].txt
2013-07-09 13:45 - 2013-07-09 13:45 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 13:42 - 2013-07-09 13:41 - 00001213 _____ C:\AdwCleaner[S2].txt
2013-07-09 13:38 - 2013-07-09 13:38 - 00552389 _____ (Oleg N. Scherbakov) C:\Users\unknownname\Desktop\JRT.exe
2013-07-09 13:22 - 2013-06-02 08:36 - 00004128 _____ C:\Windows\System32\Tasks\Software Updater
2013-07-09 13:22 - 2013-06-02 08:36 - 00004106 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-07-09 13:21 - 2013-07-09 13:21 - 00048873 _____ C:\Users\unknownname\Documents\ComboFix2.txt
2013-07-09 12:50 - 2013-07-09 12:50 - 00000004 _____ C:\Users\unknownname\Desktop\unterdrücken.txt
2013-07-09 11:08 - 2013-07-09 09:39 - 00000000 ____D C:\Qoobox
2013-07-09 11:07 - 2013-07-09 11:07 - 00048813 _____ C:\ComboFix.txt
2013-07-09 11:07 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-09 11:04 - 2012-12-18 02:34 - 00000000 ___RD C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-09 11:03 - 2013-07-09 09:38 - 00000000 ____D C:\Windows\erdnt
2013-07-09 10:58 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-09 10:57 - 2009-07-14 04:34 - 17301504 _____ C:\Windows\system32\config\system.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 112197632 _____ C:\Windows\system32\config\software.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 05242880 _____ C:\Windows\system32\config\default.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\security.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\sam.bak
2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST
2013-07-07 08:56 - 2013-07-07 08:04 - 00000296 _____ C:\Users\unknownname\Desktop\problem.txt
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-02 13:19
==================== End Of Log ============================
Und die Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2013 Ran by unknownname at 2013-08-04 21:24:38 Running from C:\Users\unknownname\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727) Tools for .Net 3.5 (x32 Version: 3.11.50727) Adobe AIR (x32 Version: 3.8.0.870) Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Anzeige am Bildschirm (Version: 7.06.00) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Astroburn Lite (x32 Version: 1.7.0.0175) AuthenTec TrueSuite (Version: 5.1.100.49) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0) Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0) Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0) Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0) Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0) Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0) Bonjour (Version: 3.0.0.10) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103) Cisco EAP-FAST Module (x32 Version: 2.2.14) Cisco LEAP Module (x32 Version: 1.0.19) Cisco PEAP Module (x32 Version: 1.1.6) Coq Version 8.4pl2 (x32 Version: 8.4pl2) DAEMON Tools Lite (x32 Version: 4.47.1.0333) Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727) Dolby Advanced Audio v2 (x32 Version: 7.2.8000.16) Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298) Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298) Dropbox (HKCU Version: 2.0.22) ElsterFormular (x32 Version: 14.0.0.10899) Energie-Manager (x32 Version: 6.36) Entity Framework Designer for Visual Studio 2012 - enu (x32 Version: 11.1.21009.00) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.21009.00) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60) Free Download Manager 3.9.2 (x32) Free Driver Scout (Version: 1.0.0.111) Free Driver Scout (x32 Version: 1.0.0.111) Free System Utilities (x32 Version: 1.1.0.95) Free SystemUtilities (x32 Version: 1.1.0.95) FreeFileSync 5.16 (x32 Version: 5.16) G Data InternetSecurity 2014 (x32 Version: 24.0.2.5) Git version 1.8.3-preview20130601 (x32 Version: 1.8.3-preview20130601) GitHub (HKCU Version: 1.0.52.0) Haskell Platform 2012.4.0.0 (x32) iCloud (Version: 2.1.2.8) IIS 8.0 Express (Version: 8.0.1557) IIS Express Application Compatibility Database for x64 IIS Express Application Compatibility Database for x86 ImgBurn (x32 Version: 2.5.7.0) InstallShield 2012 Spring Limited Edition (x32 Version: 19.00.0000) Integrated Camera Driver Installer Package Ver.1.2.1.18 (x32 Version: 1.2.1.18) Intel PROSet Wireless Intel(R) Control Center (x32 Version: 1.2.1.1010) Intel(R) Management Engine Components (x32 Version: 9.0.0.1310) Intel(R) Network Connections Drivers (Version: 16.8) Intel(R) Processor Graphics (x32 Version: 9.17.10.2843) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.3.0.0398) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.8.251) Intel® PROSet/Wireless WiFi-Software (Version: 15.03.1000.1637) Intel® Trusted Connect Service Client (Version: 1.27.757.1) iTunes (Version: 11.0.4.4) Java 7 Update 11 (x32 Version: 7.0.110) Java 7 Update 25 (64-bit) (Version: 7.0.250) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Java SE Development Kit 7 Update 13 (64-bit) (Version: 1.7.0.130) Java SE Development Kit 7 Update 17 (64-bit) (Version: 1.7.0.170) Java SE Development Kit 7 Update 25 (64-bit) (Version: 1.7.0.250) JavaScript Tooling (Version: 11.0.60315) JavaScript Tooling (x32 Version: 11.0.60315) JetBrains ReSharper 7.1.3 (x32 Version: 7.1.3000) JetBrains TeamCity Addin 7.1 (x32 Version: 7.1.646) Lenovo Patch Utility (x32 Version: 1.3.2.4) Lenovo Patch Utility 64 bit (Version: 1.3.2.4) Lenovo Power Management Driver (Version: 1.67.00.02) Lenovo Solution Center (Version: 2.0.020.00) Lenovo System Update (x32 Version: 5.02.0018) LocalESPC (x32 Version: 8.59.25584) LocalESPCui for de-de (x32 Version: 8.59.25584) LocalESPCui for en-us (x32 Version: 8.59.25584) MAGIX Speed burnR (x32 Version: 7.0.1.27) MAGIX Webradio Recorder 5 5.0.0.326 (D) (x32 Version: 5.0.0.326) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319) Microsoft .NET Framework 4.5 (Version: 4.5.50709) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709) Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709) Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0) Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0) Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0) Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0) Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0) Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0) Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0) Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20715.0) Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0) Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727) Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727) Microsoft LightSwitch for Visual Studio 2012 CoreRes - ENU (x32 Version: 11.0.50727) Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.60517) Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.60517) Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - ENU (x32 Version: 11.0.60517) Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727) Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003) Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931) Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929) Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 11.0.50709.17929) Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16) Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0) Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (Version: 4.0.8876.1) Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools - enu (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server System CLR Types (x32 Version: 10.50.1600.1) Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 32bit Compilers - ENU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers - ENU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106) Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.60610) Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727) Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Devenv Resources (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 Language Pack - ENU (x32 Version: 11.0.50727.1) Microsoft Visual Studio 2012 Performance Collection Tools - ENU (Version: 11.0.50727) Microsoft Visual Studio 2012 Preparation (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools ENU Language Pack (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Resources (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727) Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727) Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.60610) Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.60610) Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources (x32 Version: 11.0.50727) Microsoft Web Deploy 3.0 (Version: 3.1236.1631) Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0) Microsoft Web Deploy dbSqlPackage Provider - enu (x32 Version: 10.3.20225.0) Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 - deu (x32 Version: 1.2.40308.0) Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 (x32 Version: 1.2.40308.0) Microsoft Web Platform Installer 4.0 (Version: 4.0.1622) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60) Mobile Broadband Drivers (x32 Version: 7.2.3.2) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) Mp3tag v2.54 (x32 Version: v2.54) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) Notepad++ (x32 Version: 6.3.2) NUnit 2.6.2 (x32 Version: 2.6.2.12296) NVIDIA 3D Vision Treiber 311.00 (Version: 311.00) NVIDIA Grafiktreiber 311.00 (Version: 311.00) NVIDIA HD-Audiotreiber 1.3.16.0 (Version: 1.3.16.0) NVIDIA Install Application (Version: 2.1002.108.688) NVIDIA nView 136.53 (Version: 136.53) NVIDIA Optimus 1.11.3 (Version: 1.11.3) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1100) NVIDIA Systemsteuerung 311.00 (Version: 311.00) NVIDIA Update 1.11.3 (Version: 1.11.3) NVIDIA Update Components (Version: 1.11.3) OpenOffice 4.0.0 (x32 Version: 4.00.9702) ovo Auto Scroll Utility (Version: 2.00) Perforce Visual Components (Version: 131.61.1503) PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1) PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1) Protege 3.4.8 (x32 Version: 1.0.0.0) QuickTime (x32 Version: 7.74.80.86) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6886) RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01) Secunia PSI (3.0.0.7009) (x32 Version: 3.0.0.7009) Sierra Wireless QMI Lenovo Driver Package (x32 Version: 1.0.45.0) Skype™ 6.5 (x32 Version: 6.5.158) Smart Flash Recovery v. 2.0 (x32 Version: 2.0) SpywareBlaster 5.0 (x32 Version: 5.0.0) StreamTransport version: 1.0.2.2171 (x32) Switch Sound File Converter (x32) ThinkPad UltraNav Driver (Version: 16.2.19.7) ThinkPad Wireless LAN Adapter Software (x32 Version: 1.00.0031.1) ThinkVantage Access Connections (x32 Version: 5.97) ThinkVantage Communications Utility (Version: 3.0.40.0) ThinkVantage Fingerprint Software (Version: 5.9.8.7264) ThinkVantage Password Manager (x32 Version: 4.10.20.0) ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.9) TrueCrypt (x32 Version: 7.1a) Update for (KB2504637) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219) Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727) Visual Studio 2012 Prerequisites - ENU Language Pack (Version: 11.0.50727) Visual Studio 2012 Prerequisites (Version: 11.0.50727) Visual Studio 2012 Update 3 (KB2707250) (x32 Version: 11.0.60610) Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9201.20602) VLC media player 2.0.7 (x32 Version: 2.0.7) WavePad Sound Editor (x32) WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0) WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0) WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0) WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0) WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0) Weka 3.6.9 (x32 Version: 3.6.9) Windows App Certification Kit Native Components (Version: 8.59.29736) Windows App Certification Kit x64 (x32 Version: 8.59.29750) Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601) Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601) Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584) Windows Runtime Intellisense Content - en-us (x32 Version: 8.59.25584) Windows Software Development Kit (x32 Version: 8.59.25584) Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584) Windows XP Targeting with C++ (Version: 11.0.51106) Windows XP Targeting with C++ (x32 Version: 11.0.51106) WinPatrol (Version: 28.1.2013.0) WinRAR 4.20 (64-Bit) (Version: 4.20.0) WOT for Internet Explorer (Version: 12.8.2.0) ==================== Restore Points ========================= 22-07-2013 11:04:45 Geplanter Prüfpunkt 23-07-2013 06:19:07 Windows Update 26-07-2013 06:22:54 Windows Update 28-07-2013 10:17:42 OpenOffice 4.0.0 wird installiert 30-07-2013 06:10:41 Windows Update 02-08-2013 07:02:02 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-07-09 10:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {35B88FFE-29A9-4B59-BF70-7F10142358A3} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] () Task: {3AFABB19-B0DA-46BF-9A84-25D645784EA0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {4C5048C3-E0DE-475B-B22B-E39FFF8EB650} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe No File Task: {5664DAD4-3366-4EDA-9497-A5D954262EE9} - System32\Tasks\Freemium1ClickMaint => C:\Users\unknownname\Downloads\1Click.exe No File Task: {578E90FE-CE2E-4714-BC9A-6FF647FE07D5} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe No File Task: {6EBFA79C-425B-4383-94B9-7D38F8264125} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1260871158-490153657-2048939727-1004 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {7A5BCE17-FBAF-45D1-827B-27D43837DB7B} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-03-14] (Lenovo) Task: {7B614847-D9E7-49F6-9604-64DDF030314F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24] (Adobe Systems Incorporated) Task: {93072582-895F-4E70-BF3D-4134D37C384F} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe No File Task: {9D450B53-E0DB-4974-8293-98BD9BA35620} - System32\Tasks\NCH Software\WavePadReminder => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe [2012-12-14] (NCH Software) Task: {A13B696C-2973-4DCE-8601-A4888770A00A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {AA120A75-46DF-4CF9-96AB-B86410323489} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe No File Task: {CE9C8AF7-24FC-4ED3-9324-347BD67E29F6} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {EAB23475-CFF3-4305-B8B4-D0ACFE78B286} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\lsc.exe [2013-03-14] () Task: {EC6C84A9-65C3-4C52-811F-A5877AB0F548} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-03-14] () Task: {FBF6D8D5-A0F5-40FE-AE0C-D84C39C7D348} - System32\Tasks\Browser Updater\Browser Updater => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {FE8CA6CE-2709-4DCC-AA94-60CDA04A8050} - System32\Tasks\NCH Software\SwitchReminder => C:\Program Files (x86)\NCH Software\Switch\Switch.exe [2012-09-07] (NCH Software) Task: {FF008279-3B42-4C52-9C93-730470D95D66} - System32\Tasks\DSite => C:\Users\JAMESB~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Faulty Device Manager Devices ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (08/04/2013 09:12:36 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=23, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=21, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=18, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/04/2013 01:49:27 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 6411 Error: (08/04/2013 01:49:27 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 6411 Error: (08/04/2013 01:49:27 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second System errors: ============= Error: (08/04/2013 00:26:57 PM) (Source: WMPNetworkSvc) (User: ) Description: 0x80004004-1 Error: (08/04/2013 10:38:14 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LENOVO.CAMMUTE erreicht. Error: (08/04/2013 07:17:36 AM) (Source: WMPNetworkSvc) (User: ) Description: 0x80004004-1 Error: (08/04/2013 07:07:38 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.155.1346.0) Error: (08/04/2013 07:05:59 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (08/04/2013 07:05:59 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (08/03/2013 05:40:19 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (08/03/2013 05:40:19 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (08/03/2013 01:57:12 PM) (Source: DCOM) (User: ) Description: {45597C98-80F6-4549-84FF-752CF55E2D29} Error: (08/03/2013 01:49:31 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Microsoft Office Sessions: ========================= Error: (08/04/2013 09:12:36 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path43900 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path25900 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path17900 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path23808600 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path21808600 Error: (08/04/2013 01:49:30 PM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path18808600 Error: (08/04/2013 01:49:27 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 6411 Error: (08/04/2013 01:49:27 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 6411 Error: (08/04/2013 01:49:27 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second CodeIntegrity Errors: =================================== Date: 2013-07-26 17:16:22.123 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-07-09 10:53:40.824 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-07-09 10:53:40.746 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-26 21:15:29.409 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-26 21:13:17.988 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-18 08:08:51.693 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-14 15:30:34.990 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-13 21:01:59.851 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 21:39:53.081 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 20:00:44.426 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 45% Total physical RAM: 7889.63 MB Available physical RAM: 4314.58 MB Total Pagefile: 15777.44 MB Available Pagefile: 11916.18 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:199.9 GB) (Free:54.28 GB) NTFS (Disk=0 Partition=2) Drive d: () (Fixed) (Total:265.76 GB) (Free:256.74 GB) NTFS (Disk=0 Partition=3) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 000E3F0D) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=266 GB) - (Type=07 NTFS) ==================== End Of Log ============================ unknownname |
|
05.08.2013, 08:05
| #14 |
| /// the machine /// TB-Ausbilder | HomeTab, MPSigStub.exe und mpas-fe.exe Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\Public\Documents\Setup.exe
Task: {FBF6D8D5-A0F5-40FE-AE0C-D84C39C7D348} - System32\Tasks\Browser Updater\Browser Updater => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
C:\Windows\System32\Tasks\Browser Updater
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.08.2013, 10:04
| #15 |
| | HomeTab, MPSigStub.exe und mpas-fe.exe Hallo schrauber, hier die Fixlog.txt: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-08-2013
Ran by unknownname at 2013-08-05 10:40:46 Run:1
Running from C:\Users\unknownname\Desktop
Boot Mode: Normal
==============================================
C:\Users\Public\Documents\Setup.exe => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FBF6D8D5-A0F5-40FE-AE0C-D84C39C7D348} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBF6D8D5-A0F5-40FE-AE0C-D84C39C7D348} => Key deleted successfully.
C:\Windows\System32\Tasks\Browser Updater\Browser Updater => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Browser Updater\Browser Updater => Key deleted successfully.
"C:\Windows\System32\Tasks\Browser Updater" directory move:
Could not move "C:\Windows\System32\Tasks\Browser Updater" directory. => Scheduled to move on reboot.
=========== Result of Scheduled Files to move ===========
"C:\Windows\System32\Tasks\Browser Updater" => Directory could not move.
==== End of Fixlog ====
Schöne Grüße unknownname |
|
| Themen zu HomeTab, MPSigStub.exe und mpas-fe.exe |
| anmelden, anmeldung, anwendung, ausgehende, autostart, beim starten, c:\windows, download, files, firefox, folge, g-data, hallo zusammen, home, hometab, meldung, modul, mpas-fe.exe, mpsigstub.exe, nicht mehr, nichts, ordner, plug-in, registry, security, starten, system32, verbindung, windows |
Linear-Darstellung
