| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Avast erkennt Viren in Java DateiWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
02.02.2014, 12:58
| #1 |
 |  Windows 7: Avast erkennt Viren in Java Datei Liebes Foren Team, Avast hat auf meinem Laptop drei Viren in einer Java Datei gefunden. Ich bin nicht sicher ob das Problem durch das Programm komplett behoben wurde. Könnt ihr mir helfen und sagen was ich tun soll? Viele Grüße Kermit |
|
02.02.2014, 13:11
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 7: Avast erkennt Viren in Java Datei hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
02.02.2014, 13:30
| #3 |
| | Windows 7: Avast erkennt Viren in Java Datei Hallo Schrauber,
__________________vielen Dank für deine Antwort. FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by Heiko (administrator) on HEIKO-NOTEBOOK on 03-02-2014 01:25:44
Running from C:\Users\Heiko\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicatorCom.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-11] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-06] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2009-11-14] ()
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [823840 2009-10-01] (Acer Incorporated)
HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-02] (Microsoft Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-09-25] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [EgisTecLiveUpdate] - C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-05] (Egis Technology Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1094736 2009-11-02] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] - C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-07] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] - C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-10-06] (Acer Corp.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)
HKLM-x32\...\Run: [avast5] - C:\Program Files\Alwil Software\Avast5\avastUI.exe [3764024 2013-12-29] (AVAST Software)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-28] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641664 2012-04-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-02-21] ()
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [156448 2012-05-05] ()
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3764024 2013-12-29] (AVAST Software)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [RegKillElbyCheck] - C:\Program Files (x86)\Elaborate Bytes\DVD Region Killer\ElbyCheck.exe [45056 2002-11-02] (Elaborate Bytes AG)
HKLM-x32\...\Run: [RegKillTray] - C:\Program Files (x86)\Elaborate Bytes\DVD Region Killer\RegKillTray.exe [49152 2002-11-28] (Elaborate Bytes)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1844296 2011-11-10] (Elgato Systems)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-21] (Apple Inc.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-21] (Apple Inc.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [HP Officejet 6700 (NET)] - C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\MountPoints2: E - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\MountPoints2: {e416a087-3905-11df-ad4a-001e6439c82c} - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\MountPoints2: {e416a091-3905-11df-ad4a-001e6439c82c} - E:\setup_vmc_lite.exe /checkApplicationPresence
Startup: C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
ProxyServer: http=127.0.0.1:8888;https=127.0.0.1:8888
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.spiegel.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_5738&r=27361209d206l0378z1h5t5851v381
URLSearchHook: HKCU - (No Name) - {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - No File
SearchScopes: HKLM-x32 - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE360DE360
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE360DE360
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {2D36AF92-04D3-11D8-B719-0000865F231B} https://my.sabre.com/jars/TMinReqX.dll
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default
FF Homepage: www.spiegel.de
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: German Dictionary - C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2012-11-03]
FF Extension: British English Dictionary - C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\Extensions\en-GB@dictionaries.addons.mozilla.org [2010-12-10]
FF Extension: DownloadHelper - C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-29]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-23]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-03-14]
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR DefaultSearchKeyword: google.co.nz
CHR Extension: (Google Docs) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-08]
CHR Extension: (Google Drive) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-08]
CHR Extension: (YouTube) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-08]
CHR Extension: (Google-Suche) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-08]
CHR Extension: (avast! Online Security) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-10]
CHR Extension: (BittorrentBar_DE) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\hempmfkijmahkaddljkmchcmjbojoedl [2012-05-25]
CHR Extension: (Google Wallet) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-08]
CHR Extension: (Google Mail) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-08]
CHR HKCU\...\Chrome\Extension: [hempmfkijmahkaddljkmchcmjbojoedl] - C:\Users\Heiko\AppData\Local\CRE\hempmfkijmahkaddljkmchcmjbojoedl.crx [2012-04-18]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2013-10-23]
CHR HKLM-x32\...\Chrome\Extension: [hempmfkijmahkaddljkmchcmjbojoedl] - C:\Users\Heiko\AppData\Local\CRE\hempmfkijmahkaddljkmchcmjbojoedl.crx [2012-04-18]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2013-12-29] (AVAST Software)
R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-14] (Microsoft Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-11] (Egis Technology Inc.)
S3 OpenVPNService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [37176 2013-11-22] (The OpenVPN Project)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-07] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-07] (Secunia)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [274208 2012-05-05] ()
S2 HsspConfig; C:\Windows\system32\CfgSrvc.exe [x]
==================== Drivers (Whitelisted) ====================
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-29] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-23] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-23] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-29] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-29] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-29] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-29] ()
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310984 2010-12-30] ()
S2 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [16320 2002-11-30] (Elaborate Bytes AG)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2009-06-30] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2010-12-30] ()
S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [631360 2009-11-17] (DiBcom SA)
S3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [23744 2009-11-17] (DiBcom S.A.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-07] (Secunia)
S3 RegKill; C:\Windows\SysWOW64\Drivers\RegKill.sys [6400 2002-11-28] (Elaborate Bytes)
S3 StarOpen; No ImagePath
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-10-06] (CyberLink Corp.)
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 upperdev; system32\DRIVERS\usbser_lowerfltx64.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-03 01:25 - 2014-02-03 01:26 - 00023929 _____ () C:\Users\Heiko\Desktop\FRST.txt
2014-02-03 01:25 - 2014-02-03 01:25 - 00000000 ____D () C:\FRST
2014-02-03 01:24 - 2014-02-03 01:24 - 02080256 _____ (Farbar) C:\Users\Heiko\Desktop\FRST64.exe
2014-02-03 01:24 - 2014-02-03 01:24 - 01137152 _____ (Farbar) C:\Users\Heiko\Desktop\FRST.exe
2014-02-01 18:01 - 2014-02-01 18:01 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-01 16:59 - 2014-02-01 17:05 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\vlc
2014-02-01 16:59 - 2014-02-01 16:59 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-01 16:58 - 2014-02-01 16:58 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-01-30 23:28 - 2014-01-30 23:28 - 00001034 _____ () C:\Users\Public\Desktop\FLV Player.lnk
2014-01-30 23:28 - 2014-01-30 23:28 - 00000000 ____D () C:\Program Files (x86)\FLV Player
2014-01-26 14:45 - 2014-02-02 18:55 - 00000433 _____ () C:\Users\Heiko\.swfinfo
2014-01-26 13:11 - 2014-01-26 13:11 - 00000840 _____ () C:\Users\Heiko\Desktop\HTTrack Website Copier.lnk
2014-01-26 13:11 - 2014-01-26 13:11 - 00000000 ____D () C:\Program Files\WinHTTrack
2014-01-26 12:48 - 2014-01-26 12:50 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\GHISLER
2014-01-26 12:48 - 2014-01-26 12:48 - 00000650 _____ () C:\Users\Heiko\Desktop\Total Commander 64 bit.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000636 _____ () C:\Users\Heiko\Desktop\Total Commander.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\totalcmd
2014-01-25 22:56 - 2014-01-25 22:56 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-25 22:55 - 2014-01-25 22:56 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-25 22:55 - 2014-01-25 22:56 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 22:55 - 2014-01-25 22:56 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-25 22:55 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files\iPod
2014-01-24 20:17 - 2012-10-08 19:52 - 00031968 _____ (Wondershare) C:\Windows\system32\Drivers\Apowersoft_AudioDevice.sys
2014-01-24 20:02 - 2014-01-24 20:02 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Apowersoft
2014-01-24 09:31 - 2014-01-24 09:32 - 00266148 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-01-24 00:15 - 2014-01-24 00:18 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Origin
2014-01-24 00:15 - 2014-01-24 00:15 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-24 00:04 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-23 23:49 - 2014-02-03 00:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-23 23:49 - 2014-01-23 23:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-23 23:40 - 2014-01-23 23:40 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Secunia PSI
2014-01-23 23:39 - 2014-01-23 23:39 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-01-23 23:35 - 2014-01-24 23:42 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-01-23 23:35 - 2014-01-23 23:35 - 00000000 ____D () C:\ProgramData\Licenses
2014-01-23 23:32 - 2014-01-24 00:09 - 00000000 ____D () C:\Users\Heiko\Desktop\Sicherheit
2014-01-23 21:27 - 2014-01-23 21:27 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Apps\2.0
2014-01-16 13:28 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 13:28 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 13:28 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 13:28 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 13:27 - 2014-01-16 13:28 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\Visan
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-01-15 12:41 - 2013-11-27 14:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 12:41 - 2013-11-27 00:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 12:41 - 2013-11-26 23:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 16:48 - 2014-01-14 16:48 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes
2014-01-13 21:31 - 2014-01-13 21:31 - 00000000 ____D () C:\ProgramData\STAAmaQ
2014-01-13 21:31 - 2000-10-02 00:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2014-01-13 21:31 - 2000-07-15 00:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL
2014-01-13 21:31 - 1998-07-06 00:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-01-10 17:37 - 2014-01-10 17:37 - 00000000 ____D () C:\Users\Heiko\AppData\Local\IsolatedStorage
2014-01-10 17:36 - 2014-01-10 17:36 - 00001159 _____ () C:\Users\Public\Desktop\HMA! Pro VPN.lnk
2014-01-10 17:35 - 2014-01-10 17:37 - 00000000 ____D () C:\Program Files (x86)\HMA! Pro VPN
2014-01-09 14:35 - 2014-01-09 14:35 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\InstallShield
2014-01-08 21:40 - 2014-01-22 23:15 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\HpUpdate
2014-01-08 21:40 - 2014-01-08 21:40 - 00002156 _____ () C:\Users\Public\Desktop\HP Officejet 6700.lnk
2014-01-08 21:40 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPM5C12.dll
2014-01-08 21:39 - 2014-01-08 21:40 - 00000000 ____D () C:\Program Files (x86)\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\ProgramData\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\Program Files\HP
2014-01-08 21:09 - 2014-01-08 22:04 - 00000000 ____D () C:\Users\Heiko\AppData\Local\HP
2014-01-08 10:22 - 2014-02-03 01:19 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-08 10:22 - 2014-02-03 00:33 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-08 10:22 - 2014-01-08 10:28 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-08 10:22 - 2014-01-08 10:28 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
==================== One Month Modified Files and Folders =======
2014-02-03 01:26 - 2014-02-03 01:25 - 00023929 _____ () C:\Users\Heiko\Desktop\FRST.txt
2014-02-03 01:25 - 2014-02-03 01:25 - 00000000 ____D () C:\FRST
2014-02-03 01:24 - 2014-02-03 01:24 - 02080256 _____ (Farbar) C:\Users\Heiko\Desktop\FRST64.exe
2014-02-03 01:24 - 2014-02-03 01:24 - 01137152 _____ (Farbar) C:\Users\Heiko\Desktop\FRST.exe
2014-02-03 01:22 - 2009-11-14 21:24 - 01610408 _____ () C:\Windows\WindowsUpdate.log
2014-02-03 01:19 - 2014-01-08 10:22 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-03 01:19 - 2009-07-14 18:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-03 01:18 - 2011-02-25 21:54 - 00068126 _____ () C:\Windows\setupact.log
2014-02-03 01:17 - 2011-02-25 21:54 - 00220190 _____ () C:\Windows\PFRO.log
2014-02-03 00:42 - 2010-11-08 06:18 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\SolSuite
2014-02-03 00:42 - 2010-01-25 04:58 - 00000000 ____D () C:\Program Files (x86)\Games
2014-02-03 00:33 - 2014-01-08 10:22 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-03 00:08 - 2014-01-23 23:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-02 23:21 - 2013-10-13 22:05 - 00000000 ____D () C:\Users\Heiko\AppData\Local\7D091FD7-BC7B-4A11-BD37-1805A3A2443E.aplzod
2014-02-02 22:56 - 2009-12-30 08:50 - 00000000 ____D () C:\Users\Heiko\Downloads\Datenbank
2014-02-02 22:41 - 2009-12-30 06:37 - 00002352 ____H () C:\Users\Heiko\Documents\Default.rdp
2014-02-02 21:35 - 2010-01-04 19:57 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Skype
2014-02-02 19:47 - 2009-07-14 17:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-02 19:47 - 2009-07-14 17:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-02 19:38 - 2012-07-07 19:43 - 00004184 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-02 18:55 - 2014-01-26 14:45 - 00000433 _____ () C:\Users\Heiko\.swfinfo
2014-02-01 18:01 - 2014-02-01 18:01 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-01 18:01 - 2009-07-14 16:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-01 17:05 - 2014-02-01 16:59 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\vlc
2014-02-01 16:59 - 2014-02-01 16:59 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-01 16:58 - 2014-02-01 16:58 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-02-01 10:21 - 2009-07-14 18:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-01-30 23:28 - 2014-01-30 23:28 - 00001034 _____ () C:\Users\Public\Desktop\FLV Player.lnk
2014-01-30 23:28 - 2014-01-30 23:28 - 00000000 ____D () C:\Program Files (x86)\FLV Player
2014-01-30 21:58 - 2009-12-31 09:02 - 00000000 ____D () C:\Users\Heiko\Documents\Privat
2014-01-28 19:57 - 2009-12-31 09:02 - 00000000 ____D () C:\Users\Heiko\Documents\Business
2014-01-26 14:45 - 2009-12-30 01:44 - 00000000 ____D () C:\Users\Heiko
2014-01-26 13:11 - 2014-01-26 13:11 - 00000840 _____ () C:\Users\Heiko\Desktop\HTTrack Website Copier.lnk
2014-01-26 13:11 - 2014-01-26 13:11 - 00000000 ____D () C:\Program Files\WinHTTrack
2014-01-26 12:50 - 2014-01-26 12:48 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\GHISLER
2014-01-26 12:48 - 2014-01-26 12:48 - 00000650 _____ () C:\Users\Heiko\Desktop\Total Commander 64 bit.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000636 _____ () C:\Users\Heiko\Desktop\Total Commander.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\totalcmd
2014-01-25 22:56 - 2014-01-25 22:56 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-25 22:56 - 2014-01-25 22:55 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-25 22:56 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 22:56 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-25 22:55 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files\iPod
2014-01-25 20:48 - 2011-10-07 06:52 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-01-25 20:47 - 2010-02-05 21:10 - 00000000 ____D () C:\ProgramData\Apple
2014-01-25 20:16 - 2013-11-23 09:29 - 00000000 ___RD () C:\Users\Heiko\Documents\Dropbox
2014-01-25 20:14 - 2013-11-23 09:25 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Dropbox
2014-01-25 20:14 - 2009-12-30 01:45 - 00000000 ___RD () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 23:42 - 2014-01-23 23:35 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-01-24 20:02 - 2014-01-24 20:02 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Apowersoft
2014-01-24 10:17 - 2009-11-15 06:13 - 00703192 _____ () C:\Windows\system32\perfh007.dat
2014-01-24 10:17 - 2009-11-15 06:13 - 00150800 _____ () C:\Windows\system32\perfc007.dat
2014-01-24 10:17 - 2009-07-14 18:13 - 01629284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-01-24 09:32 - 2014-01-24 09:31 - 00266148 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-01-24 00:18 - 2014-01-24 00:15 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Origin
2014-01-24 00:18 - 2013-10-11 06:23 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Origin
2014-01-24 00:18 - 2013-10-11 06:23 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-01-24 00:17 - 2013-10-11 06:23 - 00000000 ____D () C:\ProgramData\Origin
2014-01-24 00:15 - 2014-01-24 00:15 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-01-24 00:09 - 2014-01-23 23:32 - 00000000 ____D () C:\Users\Heiko\Desktop\Sicherheit
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-24 00:00 - 2009-12-30 02:03 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-01-23 23:58 - 2010-01-04 21:02 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-23 23:49 - 2014-01-23 23:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-23 23:49 - 2012-04-07 03:03 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-23 23:49 - 2011-05-19 06:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-23 23:40 - 2014-01-23 23:40 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Secunia PSI
2014-01-23 23:39 - 2014-01-23 23:39 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-01-23 23:35 - 2014-01-23 23:35 - 00000000 ____D () C:\ProgramData\Licenses
2014-01-23 21:27 - 2014-01-23 21:27 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Apps\2.0
2014-01-23 00:27 - 2009-07-14 16:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-22 23:15 - 2014-01-08 21:40 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\HpUpdate
2014-01-20 11:03 - 2009-12-30 04:12 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Adobe
2014-01-17 12:14 - 2013-11-23 09:29 - 00001027 _____ () C:\Users\Heiko\Desktop\Dropbox.lnk
2014-01-17 12:14 - 2013-11-23 09:26 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-17 12:14 - 2009-12-30 09:42 - 00000781 _____ () C:\Windows\wininit.ini
2014-01-16 13:29 - 2013-10-18 05:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-16 13:28 - 2014-01-16 13:27 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-16 13:28 - 2009-12-30 04:36 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\Visan
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-01-15 13:28 - 2009-07-14 17:45 - 00429056 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 12:46 - 2009-10-29 18:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-15 12:45 - 2013-07-11 18:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 12:41 - 2009-12-30 01:59 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 16:48 - 2014-01-14 16:48 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes
2014-01-14 00:02 - 2011-04-28 01:29 - 00000000 ____D () C:\Users\Heiko\Documents\Scans
2014-01-13 21:31 - 2014-01-13 21:31 - 00000000 ____D () C:\ProgramData\STAAmaQ
2014-01-11 10:03 - 2009-07-14 18:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-10 17:37 - 2014-01-10 17:37 - 00000000 ____D () C:\Users\Heiko\AppData\Local\IsolatedStorage
2014-01-10 17:37 - 2014-01-10 17:35 - 00000000 ____D () C:\Program Files (x86)\HMA! Pro VPN
2014-01-10 17:36 - 2014-01-10 17:36 - 00001159 _____ () C:\Users\Public\Desktop\HMA! Pro VPN.lnk
2014-01-09 14:47 - 2010-09-19 04:23 - 00000000 ____D () C:\ProgramData\EPSON
2014-01-09 14:46 - 2010-09-19 04:36 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Epson
2014-01-09 14:46 - 2010-09-19 04:23 - 00000000 ____D () C:\Program Files (x86)\epson
2014-01-09 14:45 - 2009-10-29 06:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-09 14:35 - 2014-01-09 14:35 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\InstallShield
2014-01-08 22:04 - 2014-01-08 21:09 - 00000000 ____D () C:\Users\Heiko\AppData\Local\HP
2014-01-08 21:40 - 2014-01-08 21:40 - 00002156 _____ () C:\Users\Public\Desktop\HP Officejet 6700.lnk
2014-01-08 21:40 - 2014-01-08 21:39 - 00000000 ____D () C:\Program Files (x86)\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\ProgramData\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\Program Files\HP
2014-01-08 10:28 - 2014-01-08 10:22 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-08 10:28 - 2014-01-08 10:22 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-01-08 10:23 - 2009-10-29 06:36 - 00000000 ____D () C:\Program Files (x86)\Google
Files to move or delete:
====================
C:\Users\Heiko\avcodec-51.dll
C:\Users\Heiko\avutil-49.dll
C:\Users\Heiko\boost_program_options-vc80-mt-1_33_1.dll
C:\Users\Heiko\boost_regex-vc80-mt-1_33_1.dll
C:\Users\Heiko\boost_serialization-vc80-mt-1_33_1.dll
C:\Users\Heiko\boost_signals-vc80-mt-1_33_1.dll
C:\Users\Heiko\curl.dll
C:\Users\Heiko\iconv.dll
C:\Users\Heiko\intl.dll
C:\Users\Heiko\libeay32.dll
C:\Users\Heiko\libgaim.dll
C:\Users\Heiko\libglib-2.0-0.dll
C:\Users\Heiko\libgmodule-2.0-0.dll
C:\Users\Heiko\libgthread-2.0-0.dll
C:\Users\Heiko\liboscar.dll
C:\Users\Heiko\libxml2.dll
C:\Users\Heiko\nspr4.dll
C:\Users\Heiko\nss3.dll
C:\Users\Heiko\owwebcam.dll
C:\Users\Heiko\phamrplugin.dll
C:\Users\Heiko\phapi.dll
C:\Users\Heiko\phapiutil.dll
C:\Users\Heiko\phspeexplugin.dll
C:\Users\Heiko\plc4.dll
C:\Users\Heiko\plds4.dll
C:\Users\Heiko\portaudio.dll
C:\Users\Heiko\QtCore4.dll
C:\Users\Heiko\QtGui4.dll
C:\Users\Heiko\QtSvg4.dll
C:\Users\Heiko\QtXml4.dll
C:\Users\Heiko\sfp-plugin.dll
C:\Users\Heiko\softokn3.dll
C:\Users\Heiko\ssl3.dll
C:\Users\Heiko\ssleay32.dll
C:\Users\Heiko\yealinkwenbox.dll
C:\Users\Heiko\YLTELBOX.dll
C:\Users\Heiko\zlib1.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-29 10:29
==================== End Of Log ============================
--- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04
Ran by Heiko at 2014-02-03 01:27:11
Running from C:\Users\Heiko\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (x32 Version: - Microsoft)
1&1 Surf-Stick (x32 Version: 1.0.0.2 - )
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Acer Arcade Deluxe (x32 Version: 3.0.7006 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.0.7006 - CyberLink Corp.) Hidden
Acer Backup Manager (x32 Version: 2.0.0.29 - NewTech Infosystems)
Acer Crystal Eye webcam Ver:1.1.74.216 (x32 Version: 1.1.74.216 - Chicony Electronics Co.,Ltd.)
Acer ePower Management (x32 Version: 4.05.3004 - Acer Incorporated)
Acer eRecovery Management (x32 Version: 4.05.3005 - Acer Incorporated)
Acer GridVista (x32 Version: 3.01.0730 - Acer Inc.)
Acer Registration (x32 Version: 1.02.3006 - Acer Incorporated)
Acer ScreenSaver (x32 Version: 1.5.0715 - Acer Incorporated)
Acer Updater (x32 Version: 1.01.3017 - Acer Incorporated)
Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.38 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (x32 Version: 10.1.9 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 2.00.0002 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.923.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.873.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.70405.2224 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (x32 Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ATI AVIVO64 Codecs (Version: 10.7.0.40702 - ATI Technologies Inc.) Hidden
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
Backup Manager Basic (x32 Version: 2.0.0.29 - NewTech Infosystems) Hidden
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Broadcom Gigabit NetLink Controller (Version: 12.26.02 - Broadcom Corporation)
Bullzip PDF Printer 7.1.0.1082 (Version: - Bullzip)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.0405.2205.37728 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0405.2205.37728 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2009.0702.1239.20840 - ATI Technologies, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0405.2205.37728 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0405.2205.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0405.2204.37728 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0405.2205.37728 - Advanced Micro Devices, Inc.) Hidden
CCS64 V3.8 (x32 Version: 1.0.0 - Computerbrains C.C.S.)
Cinergy DT USB XS Diversity V3.12.00.00a (x32 Version: 3.12.00.00a - )
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Core FTP LE 2.1 (x32 Version: - )
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
DVD Region Killer (x32 Version: - Elaborate Bytes)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
FLV Player 2.0 (build 25) (x32 Version: 2.0 (build 25) - Martijn de Visser)
Foxit PDF Editor (x32 Version: - )
Foxit PDF Preview Handler (x32 Version: 1.0.0 - Tim Heuer)
FUSSBALL MANAGER 09 (x32 Version: - Electronic Arts)
Geheimakte Tunguska (x32 Version: 1.03.02 - Deep Silver)
Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Gothic III (x32 Version: 1.0.0 - JoWooD Productions Software AG)
GoToMeeting 4.8.0.723 (HKCU Version: 4.8.0.723 - CitrixOnline)
GPL Ghostscript Lite 8.70 (x32 Version: - )
HiJackThis (x32 Version: 1.0.0 - Trend Micro)
HMA! Pro VPN 2.8.3.1 (x32 Version: 2.8.3.1 - )
HP Officejet 6700 - Grundlegende Software für das Gerät (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 6700 Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (x32 Version: 1.0.0.9572 - HP)
HP Update (x32 Version: 5.003.003.001 - Hewlett-Packard)
I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP)
iCloud (Version: 3.1.0.40 - Apple Inc.)
Identity Card (x32 Version: 1.00.3002 - Acer Incorporated)
Intel® Matrix Storage Manager (Version: - Intel Corporation)
iTunes (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Launch Manager (x32 Version: 3.0.05 - Acer Inc.)
LEGO® Indiana Jones™ (x32 Version: 1.00.0000 - LucasArts)
LEGO® Indiana Jones™ (x32 Version: 1.00.0000 - LucasArts) Hidden
LEGO® Star Wars™ III: The Clone Wars™ (x32 Version: 1.0.0.0 - LucasArts)
LSI HDA Modem (Version: 2.1.94 - LSI Corporation)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Merriam Websters Spell Jam (x32 Version: - Oberon Media)
MicroMachines V4 (x32 Version: 2.00.0000 - Codemasters)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0 - Microsoft Corporation)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Access MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Language Pack 2007 - German/Deutsch (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office O MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office X MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs (x32 Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (x32 Version: 9.7.0621 - Microsoft Corporation)
MobileMe Control Panel (Version: 3.1.8.0 - Apple Inc.)
Monkey Island 2: Special Edition (x32 Version: - LucasArts)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVC80_x64 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86 (x32 Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
MyWinLocker (x32 Version: 3.1.76.0 - Egis Technology Inc.)
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
NTI Backup Now 5 (x32 Version: 5.1.2.627 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.627 - NewTech Infosystems) Hidden
NTI Media Maker 8 (x32 Version: 8.0.12.6623 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6623 - NewTech Infosystems) Hidden
Octoshape add-in for Adobe Flash Player (HKCU Version: - )
Open Systems Client (x32 Version: - )
Origin (x32 Version: 9.2.1.4399 - Electronic Arts, Inc.)
Questpaket 4 Update 1 Deinstallation (x32 Version: 4.1.0.0 - Humanforce)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5911 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7100.30093 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.9016) (x32 Version: 3.0.0.9016 - Secunia)
Skype Click to Call (x32 Version: 5.11.9874 - Skype Technologies S.A.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SopCast 3.2.4 (x32 Version: 3.2.4 - SopCast.com)
SpywareBlaster 5.0 (x32 Version: 5.0.0 - BrightFort LLC)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
Synaptics Pointing Device Driver (Version: 14.0.6.0 - Synaptics Incorporated)
TeamViewer 7 (x32 Version: 7.0.14484 - TeamViewer)
TerraTec Home Cinema (x32 Version: 6.25.6 - )
The Secret of Monkey Island: Special Edition (x32 Version: - LucasArts)
TomTom HOME (x32 Version: 2.9.0 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2 - TomTom International B.V.)
Total Commander 64-bit (Remove or Repair) (Version: 8.01 - Ghisler Software GmbH)
TVUPlayer 2.5.2.2 (x32 Version: 2.5.2.2 - TVU networks)
Update for 2007 Microsoft Office System (KB967642) (x32 Version: - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office Access 2007 Help (KB963663) (x32 Version: - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (x32 Version: - Microsoft)
Update for Microsoft Office Infopath 2007 Help (KB963662) (x32 Version: - Microsoft)
Update for Microsoft Office OneNote 2007 Help (KB963670) (x32 Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Help (KB963677) (x32 Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version: - Microsoft)
Update for Microsoft Office Publisher 2007 Help (KB963667) (x32 Version: - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (x32 Version: - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (x32 Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32 Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version: - Microsoft)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Welcome Center (x32 Version: 1.00.3008 - Acer Incorporated)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live ID-Anmelde-Assistent (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8091.0730 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - Nokia Modem (10/12/2007 3.6) (Version: 10/12/2007 3.6 - Nokia)
WinHTTrack Website Copier 3.47-27 (x64) (Version: 3.47.27 - HTTrack)
WinRAR (Version: - )
WinZip 16.0 (Version: 16.0.9715 - WinZip Computing, S.L. )
Zattoo4 4.0.5 (x32 Version: 4.0.5 - Zattoo Inc.)
==================== Restore Points =========================
24-01-2014 07:17:45 Gerätetreiber-Paketinstallation: Apowersoft Audio-, Video- und Gamecontroller
28-01-2014 21:42:36 Windows Update
01-02-2014 04:47:36 Windows Modules Installer
01-02-2014 04:58:47 Windows Modules Installer
==================== Hosts content: ==========================
2009-12-31 00:56 - 2014-01-18 13:21 - 00452097 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.34 ofep34.sabre.com # Nortel SSL-VPN
127.0.0.23 ofep23.sabre.com # Nortel SSL-VPN
127.0.0.12 ofep12.sabre.com # Nortel SSL-VPN
127.0.0.36 fos.sabre.com # Nortel SSL-VPN
127.0.0.8 ofep08.sabre.com # Nortel SSL-VPN
127.0.0.19 ofep19.sabre.com # Nortel SSL-VPN
127.0.0.21 ofep21.sabre.com # Nortel SSL-VPN
127.0.0.32 ofep32.sabre.com # Nortel SSL-VPN
127.0.0.1 res.sabre.com # Nortel SSL-VPN
127.0.0.44 access.certd.sabre.com # Nortel SSL-VPN
127.0.0.36 frt.sabre.com # Nortel SSL-VPN
127.0.0.10 ofep10.sabre.com # Nortel SSL-VPN
127.0.0.28 ofep28.sabre.com # Nortel SSL-VPN
127.0.0.17 ofep17.sabre.com # Nortel SSL-VPN
127.0.0.30 ofep30.sabre.com # Nortel SSL-VPN
127.0.0.6 ofep06.sabre.com # Nortel SSL-VPN
127.0.0.41 access.tstsa.sabre.com # Nortel SSL-VPN
127.0.0.26 ofep26.sabre.com # Nortel SSL-VPN
127.0.0.1 hsspconfig.sabre.com # Nortel SSL-VPN
127.0.0.15 ofep15.sabre.com # Nortel SSL-VPN
127.0.0.4 ofep04.sabre.com # Nortel SSL-VPN
127.0.0.35 ofep35.sabre.com # Nortel SSL-VPN
127.0.0.24 ofep24.sabre.com # Nortel SSL-VPN
127.0.0.37 lb1.sabre.com # Nortel SSL-VPN
127.0.0.13 ofep13.sabre.com # Nortel SSL-VPN
127.0.0.39 tsts.sabre.com # Nortel SSL-VPN
127.0.0.1 access.sabre.com # Nortel SSL-VPN
127.0.0.39 access.tsts.sabre.com # Nortel SSL-VPN
127.0.0.33 ofep33.sabre.com # Nortel SSL-VPN
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {0B0EFB60-E81C-4E52-9C52-81C67BF4F2BA} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-08-02] (Microsoft Corporation)
Task: {18FAB775-E45B-4AEB-B34E-55387F13BA0C} - System32\Tasks\{BB2DC1C3-8A57-456C-B7B7-F732E78670C3} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-15] (Skype Technologies S.A.)
Task: {3E4723B3-345A-4EEF-8241-DFF1B7ED18AC} - System32\Tasks\{8A97E6BB-AD56-407E-96B5-BCD32950B222} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-15] (Skype Technologies S.A.)
Task: {50A1DC6A-FC92-41D7-9D51-D4B73DE6E1FD} - System32\Tasks\McQcModifier-5c47-a7b0 => C:\ProgramData\McQcModifier-5c47-a7b0\McQcModifier-5c47-a7b0.cmd [2009-08-29] ()
Task: {60280025-38F9-4757-AF52-1117CA363663} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {A62F568E-D337-4057-9454-CE5EADF72A81} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-08] (Google Inc.)
Task: {AA5A5555-5073-4E26-8169-EBE8B2B6A361} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-23] (Adobe Systems Incorporated)
Task: {BDD788AA-51BD-45C4-A742-2C8884E96AF6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-08] (Google Inc.)
Task: {E9E88071-B4A0-46B3-B0D7-1D91807336E8} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2013-12-29] (AVAST Software)
Task: {FBCDF857-C4B6-476D-9DC7-8FD207BA0273} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-02] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2009-12-31 04:56 - 2009-12-13 03:12 - 00166400 _____ () C:\Program Files\Zubehör\Winrar\rarext.dll
2014-02-02 18:44 - 2014-02-02 10:13 - 02168320 _____ () C:\Program Files\Alwil Software\Avast5\defs\14020101\algo.dll
2014-02-03 01:20 - 2014-02-02 22:38 - 02168320 _____ () C:\Program Files\Alwil Software\Avast5\defs\14020200\algo.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-02-03 13:33 - 2009-02-03 13:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-29 13:55 - 2008-09-29 13:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2013-09-14 12:51 - 2013-09-14 12:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 12:50 - 2013-09-14 12:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2013-10-23 02:30 - 2013-10-23 02:30 - 19336120 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll
2013-12-23 02:06 - 2013-12-23 02:06 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:0B9176C0
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:5D7E5A8F
AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE
AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/02/2014 10:54:08 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x5a0
Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0
Pfad der fehlerhaften Anwendung: MobileMeServices.exe1
Pfad des fehlerhaften Moduls: MobileMeServices.exe2
Berichtskennung: MobileMeServices.exe3
Error: (02/02/2014 10:53:35 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x6d4
Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0
Pfad der fehlerhaften Anwendung: MobileMeServices.exe1
Pfad des fehlerhaften Moduls: MobileMeServices.exe2
Berichtskennung: MobileMeServices.exe3
Error: (02/02/2014 10:52:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: OUTLOOK.EXE, Version: 12.0.6680.5000, Zeitstempel: 0x51c3d112
Name des fehlerhaften Moduls: wwlib.dll, Version: 12.0.6690.5000, Zeitstempel: 0x52881938
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0006fc0b
ID des fehlerhaften Prozesses: 0x1638
Startzeit der fehlerhaften Anwendung: 0xOUTLOOK.EXE0
Pfad der fehlerhaften Anwendung: OUTLOOK.EXE1
Pfad des fehlerhaften Moduls: OUTLOOK.EXE2
Berichtskennung: OUTLOOK.EXE3
Error: (02/02/2014 10:43:32 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x163c
Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0
Pfad der fehlerhaften Anwendung: MobileMeServices.exe1
Pfad des fehlerhaften Moduls: MobileMeServices.exe2
Berichtskennung: MobileMeServices.exe3
Error: (02/02/2014 10:42:59 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x590
Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0
Pfad der fehlerhaften Anwendung: MobileMeServices.exe1
Pfad des fehlerhaften Moduls: MobileMeServices.exe2
Berichtskennung: MobileMeServices.exe3
Error: (02/02/2014 10:41:39 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: OUTLOOK.EXE, Version: 12.0.6680.5000, Zeitstempel: 0x51c3d112
Name des fehlerhaften Moduls: mso.dll, Version: 12.0.6683.5000, Zeitstempel: 0x51e6dff3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000d6ce
ID des fehlerhaften Prozesses: 0x1410
Startzeit der fehlerhaften Anwendung: 0xOUTLOOK.EXE0
Pfad der fehlerhaften Anwendung: OUTLOOK.EXE1
Pfad des fehlerhaften Moduls: OUTLOOK.EXE2
Berichtskennung: OUTLOOK.EXE3
Error: (02/02/2014 10:06:42 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x1184
Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0
Pfad der fehlerhaften Anwendung: MobileMeServices.exe1
Pfad des fehlerhaften Moduls: MobileMeServices.exe2
Berichtskennung: MobileMeServices.exe3
Error: (02/02/2014 10:06:08 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x9b8
Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0
Pfad der fehlerhaften Anwendung: MobileMeServices.exe1
Pfad des fehlerhaften Moduls: MobileMeServices.exe2
Berichtskennung: MobileMeServices.exe3
Error: (02/02/2014 09:42:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x15e8
Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0
Pfad der fehlerhaften Anwendung: MobileMeServices.exe1
Pfad des fehlerhaften Moduls: MobileMeServices.exe2
Berichtskennung: MobileMeServices.exe3
Error: (02/02/2014 09:41:50 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x884
Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0
Pfad der fehlerhaften Anwendung: MobileMeServices.exe1
Pfad des fehlerhaften Moduls: MobileMeServices.exe2
Berichtskennung: MobileMeServices.exe3
System errors:
=============
Error: (02/03/2014 01:19:02 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HSSP Configuration Module" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (02/03/2014 01:19:02 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "ElbyCDIO Driver" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (02/03/2014 01:19:02 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ElbyCDIO.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (02/03/2014 01:19:02 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "atksgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (02/03/2014 01:19:02 AM) (Source: Application Popup) (User: )
Description: Treiber atksgt.sys konnte nicht geladen werden.
Error: (02/03/2014 01:17:47 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\RegKill.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (02/03/2014 00:14:32 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
Error: (02/02/2014 09:42:46 PM) (Source: DCOM) (User: )
Description: {D3F6D4DB-A482-4648-8DBB-3565EBCB7A6B}
Error: (02/02/2014 08:51:34 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (02/02/2014 08:51:34 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Microsoft Office Sessions:
=========================
Error: (02/02/2014 10:52:38 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 598 seconds with 120 seconds of active time. This session ended with a crash.
Error: (02/02/2014 10:41:36 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2133 seconds with 1140 seconds of active time. This session ended with a crash.
Error: (02/01/2014 11:05:37 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7324 seconds with 1500 seconds of active time. This session ended with a crash.
Error: (02/01/2014 08:55:29 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6019 seconds with 540 seconds of active time. This session ended with a crash.
Error: (02/01/2014 04:58:32 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3380 seconds with 360 seconds of active time. This session ended with a crash.
Error: (01/31/2014 10:48:36 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 149 seconds with 60 seconds of active time. This session ended with a crash.
Error: (01/31/2014 10:43:48 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1545 seconds with 180 seconds of active time. This session ended with a crash.
Error: (01/31/2014 10:12:43 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6083 seconds with 660 seconds of active time. This session ended with a crash.
Error: (01/31/2014 08:10:11 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 17928 seconds with 780 seconds of active time. This session ended with a crash.
Error: (01/31/2014 02:09:02 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 424 seconds with 300 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2010-12-30 03:16:20.035
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-12-30 03:16:20.008
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-12-30 03:16:19.444
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-12-30 03:16:19.426
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-12-29 00:42:37.523
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-12-29 00:42:37.508
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-12-29 00:42:36.915
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-12-29 00:42:36.899
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-12-29 00:18:39.046
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-12-29 00:18:39.031
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 60%
Total physical RAM: 4090.93 MB
Available physical RAM: 1621.29 MB
Total Pagefile: 8180.03 MB
Available Pagefile: 5783.11 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (ACER) (Fixed) (Total:285.3 GB) (Free:53.13 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 70077007)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=285 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Kermit |
|
03.02.2014, 10:54
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7: Avast erkennt Viren in Java Datei hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.02.2014, 11:24
| #5 |
| | Windows 7: Avast erkennt Viren in Java Datei Hallo Schrauber, anbei schicke ich dir den Log von Combofix... Code:
ATTFilter ComboFix 14-02-01.01 - Heiko 03.02.2014 23:07:57.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4091.1930 [GMT 13:00]
ausgeführt von:: c:\users\Heiko\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\Acer GameZone online.ico
c:\users\Heiko\AppData\Roaming\.#
c:\users\Heiko\avcodec-51.dll
c:\users\Heiko\avutil-49.dll
c:\users\Heiko\boost_program_options-vc80-mt-1_33_1.dll
c:\users\Heiko\boost_regex-vc80-mt-1_33_1.dll
c:\users\Heiko\boost_serialization-vc80-mt-1_33_1.dll
c:\users\Heiko\boost_signals-vc80-mt-1_33_1.dll
c:\users\Heiko\curl.dll
c:\users\Heiko\liboscar.dll
c:\users\Heiko\libxml2.dll
c:\users\Heiko\owwebcam.dll
c:\users\Heiko\phamrplugin.dll
c:\users\Heiko\phapi.dll
c:\users\Heiko\phapiutil.dll
c:\users\Heiko\phspeexplugin.dll
c:\users\Heiko\portaudio.dll
c:\users\Heiko\sfp-plugin.dll
c:\users\Heiko\yealinkwenbox.dll
c:\users\Heiko\YLTELBOX.dll
c:\windows\IsUn0407.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-01-03 bis 2014-02-03 ))))))))))))))))))))))))))))))
.
.
2014-02-02 12:25 . 2014-02-02 12:27 -------- d-----w- C:\FRST
2014-02-01 05:01 . 2014-02-01 05:02 -------- d-----w- c:\windows\ehome
2014-02-01 05:01 . 2014-02-01 05:01 -------- d-----w- c:\users\Default\AppData\Roaming\Media Center Programs
2014-02-01 05:01 . 2014-02-01 05:01 -------- d-----r- c:\users\Public\Recorded TV
2014-02-01 03:59 . 2014-02-01 04:05 -------- d-----w- c:\users\Heiko\AppData\Roaming\vlc
2014-02-01 03:58 . 2014-02-01 03:58 -------- d-----w- c:\program files (x86)\VideoLAN
2014-01-31 21:17 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{65BC7006-19E9-4C69-955D-20BB123E67B8}\mpengine.dll
2014-01-30 10:28 . 2014-01-30 10:28 -------- d-----w- c:\program files (x86)\FLV Player
2014-01-26 00:11 . 2014-01-26 00:11 -------- d-----w- c:\program files\WinHTTrack
2014-01-25 23:48 . 2014-01-25 23:50 -------- d-----w- c:\users\Heiko\AppData\Roaming\GHISLER
2014-01-25 23:48 . 2014-01-25 23:48 -------- d-----w- C:\totalcmd
2014-01-25 09:55 . 2014-01-25 09:55 -------- d-----w- c:\program files\iPod
2014-01-25 09:55 . 2014-01-25 09:56 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-25 09:55 . 2014-01-25 09:56 -------- d-----w- c:\program files\iTunes
2014-01-25 09:55 . 2014-01-25 09:56 -------- d-----w- c:\program files (x86)\iTunes
2014-01-24 07:17 . 2012-10-08 06:52 31968 ----a-w- c:\windows\system32\drivers\Apowersoft_AudioDevice.sys
2014-01-24 07:02 . 2014-01-24 07:02 -------- d-----w- c:\users\Heiko\AppData\Roaming\Apowersoft
2014-01-23 11:15 . 2014-01-23 11:15 -------- d-----w- c:\program files (x86)\Origin Games
2014-01-23 11:15 . 2014-01-23 11:18 -------- d-----w- c:\users\Heiko\AppData\Local\Origin
2014-01-23 11:04 . 2014-01-23 11:04 -------- d-----w- c:\users\Heiko\AppData\Roaming\Malwarebytes
2014-01-23 11:04 . 2014-01-23 11:04 -------- d-----w- c:\programdata\Malwarebytes
2014-01-23 11:04 . 2014-01-23 11:04 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-01-23 11:04 . 2013-04-04 01:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-01-23 11:04 . 2014-01-23 11:04 -------- d-----w- c:\users\Heiko\AppData\Local\Programs
2014-01-23 10:40 . 2014-01-23 10:40 -------- d-----w- c:\users\Heiko\AppData\Local\Secunia PSI
2014-01-23 10:39 . 2014-01-23 10:39 -------- d-----w- c:\program files (x86)\Secunia
2014-01-23 10:35 . 2014-01-23 10:35 -------- d-----w- c:\programdata\Licenses
2014-01-23 10:35 . 2014-01-24 10:42 -------- d-----w- c:\program files (x86)\SpywareBlaster
2014-01-23 08:27 . 2014-01-23 08:27 -------- d-----w- c:\users\Heiko\AppData\Local\Apps
2014-01-16 00:28 . 2013-12-18 08:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-15 09:31 . 2014-01-15 09:31 -------- d-----w- c:\program files (x86)\HP Photo Creations
2014-01-15 09:31 . 2014-01-15 09:31 -------- d-----w- c:\programdata\HP Photo Creations
2014-01-15 09:31 . 2014-01-15 09:31 -------- d-----w- c:\programdata\Visan
2014-01-14 23:41 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-01-14 23:41 . 2013-11-27 01:41 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-01-14 23:41 . 2013-11-27 01:41 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-01-14 23:41 . 2013-11-27 01:41 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-01-14 23:41 . 2013-11-27 01:41 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-01-14 23:41 . 2013-11-27 01:41 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-01-14 23:41 . 2013-11-27 01:41 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-01-14 23:41 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2014-01-14 23:41 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-01-14 03:48 . 2014-01-14 03:48 -------- d-----w- c:\program files (x86)\Elaborate Bytes
2014-01-13 08:31 . 2014-01-13 08:31 -------- d-----w- c:\programdata\STAAmaQ
2014-01-13 08:31 . 2000-10-01 11:00 125712 ----a-w- c:\windows\SysWow64\VB6DE.DLL
2014-01-13 08:31 . 2000-07-14 11:00 101888 ----a-w- c:\windows\SysWow64\VB6STKIT.DLL
2014-01-13 08:31 . 1998-07-05 11:00 158208 ----a-w- c:\windows\SysWow64\MSCMCDE.DLL
2014-01-10 04:37 . 2014-01-10 04:37 -------- d-----w- c:\users\Heiko\AppData\Local\IsolatedStorage
2014-01-10 04:35 . 2014-01-10 04:37 -------- d-----w- c:\program files (x86)\HMA! Pro VPN
2014-01-09 01:35 . 2014-01-09 01:35 -------- d-----w- c:\users\Heiko\AppData\Roaming\InstallShield
2014-01-08 08:40 . 2014-01-22 10:15 -------- d-----w- c:\users\Heiko\AppData\Roaming\HpUpdate
2014-01-08 08:40 . 2012-10-16 15:31 741480 ------w- c:\windows\system32\HPDiscoPM5C12.dll
2014-01-08 08:39 . 2014-01-08 08:39 -------- d-----w- c:\programdata\HP
2014-01-08 08:39 . 2014-01-08 08:40 -------- d-----w- c:\program files (x86)\HP
2014-01-08 08:39 . 2014-01-08 08:39 -------- d-----w- c:\program files\HP
2014-01-08 08:09 . 2014-01-08 09:04 -------- d-----w- c:\users\Heiko\AppData\Local\HP
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-23 10:49 . 2012-04-06 14:03 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-23 10:49 . 2011-05-18 17:28 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-14 23:41 . 2009-12-29 12:59 86054176 ----a-w- c:\windows\system32\MRT.exe
2013-12-29 08:48 . 2013-12-29 08:47 79672 ----a-w- c:\windows\system32\drivers\aswstm.sys
2013-12-29 08:47 . 2013-03-13 22:09 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-12-29 08:47 . 2011-03-13 18:00 1034464 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-12-29 08:47 . 2011-03-13 18:00 334136 ----a-w- c:\windows\system32\aswBoot.exe
2013-12-29 08:47 . 2009-12-29 20:01 422216 ----a-w- c:\windows\system32\drivers\aswsp.sys
2013-12-29 08:47 . 2009-12-29 20:01 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-12-29 08:47 . 2010-06-29 06:41 43152 ----a-w- c:\windows\avastSS.scr
2013-12-17 17:13 . 2009-12-29 12:58 270496 ------w- c:\windows\system32\MpSigStub.exe
2013-12-06 14:47 . 2013-12-06 14:47 18456 ----a-w- c:\windows\system32\drivers\psi_mf_amd64.sys
2013-11-26 11:54 . 2013-12-11 11:55 23183360 ----a-w- c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-11 11:55 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-11 11:55 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-11 11:55 66048 ----a-w- c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-11 11:55 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-11 11:55 2764288 ----a-w- c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-11 11:55 53760 ----a-w- c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-11 11:55 33792 ----a-w- c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-11 11:55 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-11 11:55 574976 ----a-w- c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-11 11:55 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-11 11:55 111616 ----a-w- c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-11 11:55 708608 ----a-w- c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-11 11:55 218624 ----a-w- c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-11 11:55 5769216 ----a-w- c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-11 11:55 553472 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-11 11:55 4243968 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-11 11:55 1995264 ----a-w- c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-11 11:55 12996608 ----a-w- c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-11 11:55 1928192 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-11 11:55 2334208 ----a-w- c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-11 11:55 1395200 ----a-w- c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-11 11:55 817664 ----a-w- c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-11 11:55 1820160 ----a-w- c:\windows\SysWow64\wininet.dll
2013-11-23 18:26 . 2013-12-11 11:49 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-11 11:49 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-21 13:44 . 2013-11-21 13:44 40664 ----a-w- c:\windows\system32\drivers\tap0901.sys
2013-11-12 09:16 . 2013-11-12 09:16 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-12 09:16 . 2013-11-12 09:16 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-11-12 09:16 . 2013-11-12 09:16 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-11-12 09:16 . 2013-11-12 09:16 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-11-12 09:16 . 2013-11-12 09:16 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-11-12 09:16 . 2013-11-12 09:16 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-11-12 09:16 . 2013-11-12 09:16 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-11-12 09:16 . 2013-11-12 09:16 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-11-12 09:16 . 2013-11-12 09:16 81408 ----a-w- c:\windows\system32\icardie.dll
2013-11-12 09:16 . 2013-11-12 09:16 774144 ----a-w- c:\windows\system32\jscript.dll
2013-11-12 09:16 . 2013-11-12 09:16 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-11-12 09:16 . 2013-11-12 09:16 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-12 09:16 . 2013-11-12 09:16 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-12 09:16 . 2013-11-12 09:16 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-11-12 09:16 . 2013-11-12 09:16 626176 ----a-w- c:\windows\system32\msfeeds.dll
2013-11-12 09:16 . 2013-11-12 09:16 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-11-12 09:16 . 2013-11-12 09:16 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-11-12 09:16 . 2013-11-12 09:16 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-11-12 09:16 . 2013-11-12 09:16 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-11-12 09:16 . 2013-11-12 09:16 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-11-12 09:16 . 2013-11-12 09:16 548352 ----a-w- c:\windows\system32\vbscript.dll
2013-11-12 09:16 . 2013-11-12 09:16 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-11-12 09:16 . 2013-11-12 09:16 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2013-11-12 09:16 . 2013-11-12 09:16 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-11-12 09:16 . 2013-11-12 09:16 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-11-12 09:16 . 2013-11-12 09:16 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-11-12 09:16 . 2013-11-12 09:16 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-11-12 09:16 . 2013-11-12 09:16 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-11-12 09:16 . 2013-11-12 09:16 413696 ----a-w- c:\windows\system32\html.iec
2013-11-12 09:16 . 2013-11-12 09:16 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-12 09:16 . 2013-11-12 09:16 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-11-12 09:16 . 2013-11-12 09:16 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-12 09:16 . 2013-11-12 09:16 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-11-12 09:16 . 2013-11-12 09:16 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-11-12 09:16 . 2013-11-12 09:16 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-11-12 09:16 . 2013-11-12 09:16 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-11-12 09:16 . 2013-11-12 09:16 247808 ----a-w- c:\windows\system32\msls31.dll
2013-11-12 09:16 . 2013-11-12 09:16 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-11-12 09:16 . 2013-11-12 09:16 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-11-12 09:16 . 2013-11-12 09:16 235520 ----a-w- c:\windows\system32\url.dll
2013-11-12 09:16 . 2013-11-12 09:16 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-11-12 09:16 . 2013-11-12 09:16 195584 ----a-w- c:\windows\system32\msrating.dll
2013-11-12 09:16 . 2013-11-12 09:16 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-11-12 09:16 . 2013-11-12 09:16 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-11-12 09:16 . 2013-11-12 09:16 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-11-12 09:16 . 2013-11-12 09:16 147968 ----a-w- c:\windows\system32\occache.dll
2013-11-12 09:16 . 2013-11-12 09:16 143872 ----a-w- c:\windows\system32\wextract.exe
2013-11-12 09:16 . 2013-11-12 09:16 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-11-12 09:16 . 2013-11-12 09:16 13824 ----a-w- c:\windows\system32\mshta.exe
2013-11-12 09:16 . 2013-11-12 09:16 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-11-12 09:16 . 2013-11-12 09:16 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-11-12 09:16 . 2013-11-12 09:16 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-11-12 09:16 . 2013-11-12 09:16 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-11-12 09:16 . 2013-11-12 09:16 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-11-12 09:16 . 2013-11-12 09:16 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-11-12 09:16 . 2013-11-12 09:16 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-11-12 09:16 . 2013-11-12 09:16 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-11-12 09:16 . 2013-11-12 09:16 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-11-12 09:16 . 2013-11-12 09:16 101376 ----a-w- c:\windows\system32\inseng.dll
2013-11-12 02:23 . 2013-12-11 11:49 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-12 02:07 . 2013-12-11 11:49 2048 ----a-w- c:\windows\SysWow64\tzres.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Heiko\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Heiko\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Heiko\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-09-11 05:41 120104 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Remote Control Editor"="c:\program files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe" [2011-11-09 1844296]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-11-20 59720]
"HP Officejet 6700 (NET)"="c:\program files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe" [2012-10-16 2573416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-09-24 261888]
"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 199464]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-11-01 1094736]
"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-10-06 419112]
"PlayMovie"="c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-10-05 181480]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2013-12-29 3764024]
"AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-09-27 59240]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-01-20 43848]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-04-05 641664]
"UIExec"="c:\program files (x86)\1&1 Surf-Stick\UIExec.exe" [2012-05-04 156448]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"AvastUI.exe"="c:\program files\Alwil Software\Avast5\AvastUI.exe" [2013-12-29 3764024]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-27 49208]
"RegKillElbyCheck"="c:\program files (x86)\Elaborate Bytes\DVD Region Killer\ElbyCheck.exe" [2002-11-02 45056]
"RegKillTray"="c:\program files (x86)\Elaborate Bytes\DVD Region Killer\RegKillTray.exe" [2002-11-27 49152]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-01-20 152392]
.
c:\users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk - c:\windows\system32\RunDll32.exe "c:\program files\HP\HP Officejet 6700\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN39QCRG4M05RQ;CONNECTION=NW;MONITOR=1; [2009-7-14 45568]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2013-12-7 565464]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 HsspConfig;HSSP Configuration Module;c:\windows\system32\CfgSrvc.exe;c:\windows\SYSNATIVE\CfgSrvc.exe [x]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys;c:\windows\SYSNATIVE\drivers\Apowersoft_AudioDevice.sys [x]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]
R3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\DRIVERS\ewusbfake.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbfake.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys;c:\windows\SYSNATIVE\drivers\massfilter.sys [x]
R3 MODRC;Cinergy DT USB XS Diversity IR Service;c:\windows\system32\DRIVERS\modrc.sys;c:\windows\SYSNATIVE\DRIVERS\modrc.sys [x]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 NETw5s64;Intel(R) Wireless WiFi Link Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RegKill;RegKill;c:\windows\system32\Drivers\RegKill.sys;c:\windows\SYSNATIVE\Drivers\RegKill.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys;c:\windows\SYSNATIVE\DRIVERS\Rts516xIR.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};Power Control [2009/11/14 09:27];c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl;c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe;c:\program files (x86)\Acer\Registration\GregHSRW.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [x]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [x]
S2 UI Assistant Service;UI Assistant Service;c:\program files (x86)\1&1 Surf-Stick\AssistantServices.exe;c:\program files (x86)\1&1 Surf-Stick\AssistantServices.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-01-27 20:33 1211672 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.102\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-06 10:49]
.
2014-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-07 21:22]
.
2014-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-07 21:22]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-12-29 08:47 287280 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Heiko\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Heiko\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Heiko\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Heiko\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-09-11 05:44 137512 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"mwlDaemon"="c:\program files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-09-11 349480]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-08-06 8060960]
"PLFSetI"="c:\windows\PLFSetI.exe" [2009-11-14 200704]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-09-30 823840]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 2417032]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.spiegel.de/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <-loopback>
uInternet Settings,ProxyServer = http=127.0.0.1:8888;https=127.0.0.1:8888
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
Trusted Zone: agentware.net
Trusted Zone: rundumsorglos.net\mail
Trusted Zone: sabre.com
TCP: DhcpNameServer = 192.168.1.1
DPF: {2D36AF92-04D3-11D8-B719-0000865F231B} - hxxps://my.sabre.com/jars/TMinReqX.dll
FF - ProfilePath - c:\users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\
FF - prefs.js: browser.startup.homepage - www.spiegel.de
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - (no file)
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-MobileDocuments - c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
SafeBoot-mcmscsvc
SafeBoot-MCODS
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Open Systems Client - c:\windows\ISUN0407.EXE
AddRemove-Octoshape add-in for Adobe Flash Player - c:\users\Heiko\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3175191187-1249783048-3626377888-1000\Software\SecuROM\License information*]
"datasecu"=hex:c4,50,f1,5a,26,4a,68,6f,ea,47,94,2e,b0,09,0d,c3,65,b7,b2,40,e3,
5c,e5,c6,ee,90,31,06,4d,74,b9,63,8d,4a,ad,4d,7e,a4,3a,09,4a,ba,b3,77,35,6d,\
"rkeysecu"=hex:15,6c,01,a7,f3,08,cc,a5,1f,4f,d9,17,3b,e9,80,0a
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_38_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_38_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_38_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_38_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_38.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_38.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_38.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_38.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-02-03 23:20:37
ComboFix-quarantined-files.txt 2014-02-03 10:20
.
Vor Suchlauf: 15 Verzeichnis(se), 60.446.945.280 Bytes frei
Nach Suchlauf: 22 Verzeichnis(se), 59.975.741.440 Bytes frei
.
- - End Of File - - 26FE225E9EDFE7569F19E32EA79E060E
5C616939100B85E558DA92B899A0FC36
Kermit |
|
04.02.2014, 09:08
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7: Avast erkennt Viren in Java Datei Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Windows 7: Avast erkennt Viren in Java Datei |
|
04.02.2014, 12:04
| #7 |
| | Windows 7: Avast erkennt Viren in Java Datei Hallo Schrauber, hier die gewünschten Logs: Malwarebytes Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.02.04.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Heiko :: HEIKO-NOTEBOOK [Administrator] 04.02.2014 21:49:04 mbam-log-2014-02-04 (21-49-04).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 555886 Laufzeit: 1 Stunde(n), 45 Minute(n), 11 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.018 - Bericht erstellt am 04/02/2014 um 23:39:42
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Heiko - HEIKO-NOTEBOOK
# Gestartet von : C:\Users\Heiko\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Users\Heiko\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\hempmfkijmahkaddljkmchcmjbojoedl
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sabre VPN.lnk
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\hempmfkijmahkaddljkmchcmjbojoedl
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\hempmfkijmahkaddljkmchcmjbojoedl
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2849855
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{40C3CC16-7269-4B32-9531-17F2950FB06F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\smartbar
Schlüssel Gelöscht : HKLM\Software\Conduit
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v26.0 (de)
[ Datei : C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\prefs.js ]
-\\ Google Chrome v32.0.1700.107
[ Datei : C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [3247 octets] - [04/02/2014 23:38:41]
AdwCleaner[S0].txt - [3032 octets] - [04/02/2014 23:39:42]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3092 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Heiko on 04.02.2014 at 23:47:12,68
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Users\Heiko\appdata\local\cre"
~~~ FireFox
Emptied folder: C:\Users\Heiko\AppData\Roaming\mozilla\firefox\profiles\4x3svtcd.default\minidumps [94 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.02.2014 at 23:57:59,98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by Heiko (administrator) on HEIKO-NOTEBOOK on 04-02-2014 23:59:41
Running from C:\Users\Heiko\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-11] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-06] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2009-11-14] ()
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [823840 2009-10-01] (Acer Incorporated)
HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-02] (Microsoft Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-09-25] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [EgisTecLiveUpdate] - C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-05] (Egis Technology Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1094736 2009-11-02] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] - C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-07] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] - C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-10-06] (Acer Corp.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)
HKLM-x32\...\Run: [avast5] - C:\Program Files\Alwil Software\Avast5\avastUI.exe [3764024 2013-12-29] (AVAST Software)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-28] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641664 2012-04-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-02-21] ()
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [156448 2012-05-05] ()
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3764024 2013-12-29] (AVAST Software)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [RegKillElbyCheck] - C:\Program Files (x86)\Elaborate Bytes\DVD Region Killer\ElbyCheck.exe [45056 2002-11-02] (Elaborate Bytes AG)
HKLM-x32\...\Run: [RegKillTray] - C:\Program Files (x86)\Elaborate Bytes\DVD Region Killer\RegKillTray.exe [49152 2002-11-28] (Elaborate Bytes)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1844296 2011-11-10] (Elgato Systems)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-21] (Apple Inc.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-21] (Apple Inc.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [HP Officejet 6700 (NET)] - C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
Startup: C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
ProxyServer: http=127.0.0.1:8888;https=127.0.0.1:8888
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.spiegel.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE360DE360
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {2D36AF92-04D3-11D8-B719-0000865F231B} https://my.sabre.com/jars/TMinReqX.dll
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default
FF Homepage: www.spiegel.de
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: German Dictionary - C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2012-11-03]
FF Extension: British English Dictionary - C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\Extensions\en-GB@dictionaries.addons.mozilla.org [2010-12-10]
FF Extension: DownloadHelper - C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-29]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-23]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-03-14]
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR DefaultSearchKeyword: google.co.nz
CHR Extension: (Google Docs) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-08]
CHR Extension: (Google Drive) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-08]
CHR Extension: (YouTube) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-08]
CHR Extension: (Google-Suche) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-08]
CHR Extension: (avast! Online Security) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-10]
CHR Extension: (BittorrentBar_DE) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\hempmfkijmahkaddljkmchcmjbojoedl [2012-05-25]
CHR Extension: (Google Wallet) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-08]
CHR Extension: (Google Mail) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-08]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2013-10-23]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2013-12-29] (AVAST Software)
R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-14] (Microsoft Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-11] (Egis Technology Inc.)
S3 OpenVPNService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [37176 2013-11-22] (The OpenVPN Project)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-07] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-07] (Secunia)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [274208 2012-05-05] ()
S2 HsspConfig; C:\Windows\system32\CfgSrvc.exe [x]
==================== Drivers (Whitelisted) ====================
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-29] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-23] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-23] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-29] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-29] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-29] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-29] ()
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310984 2010-12-30] ()
S2 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [16320 2002-11-30] (Elaborate Bytes AG)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2009-06-30] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2010-12-30] ()
S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [631360 2009-11-17] (DiBcom SA)
S3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [23744 2009-11-17] (DiBcom S.A.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-07] (Secunia)
S3 RegKill; C:\Windows\SysWOW64\Drivers\RegKill.sys [6400 2002-11-28] (Elaborate Bytes)
S3 StarOpen; No ImagePath
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-10-06] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 upperdev; system32\DRIVERS\usbser_lowerfltx64.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-04 23:58 - 2014-02-04 23:58 - 00000826 _____ () C:\Users\Heiko\Desktop\JRT.txt
2014-02-04 23:47 - 2014-02-04 23:47 - 00000000 ____D () C:\Windows\ERUNT
2014-02-04 23:46 - 2014-02-04 23:46 - 01037530 _____ (Thisisu) C:\Users\Heiko\Desktop\JRT.exe
2014-02-04 23:43 - 2014-02-04 23:43 - 00003172 _____ () C:\Users\Heiko\Desktop\AdwCleaner[S0].txt
2014-02-04 23:37 - 2014-02-04 23:39 - 00000000 ____D () C:\AdwCleaner
2014-02-04 23:37 - 2014-02-04 23:36 - 01166132 _____ () C:\Users\Heiko\Desktop\adwcleaner.exe
2014-02-04 23:36 - 2014-02-04 23:36 - 01166132 _____ () C:\Users\Heiko\Downloads\adwcleaner.exe
2014-02-03 23:20 - 2014-02-03 23:20 - 00039016 _____ () C:\ComboFix.txt
2014-02-03 23:04 - 2014-02-03 23:20 - 00000000 ____D () C:\Qoobox
2014-02-03 23:04 - 2014-02-03 23:18 - 00000000 ____D () C:\Windows\erdnt
2014-02-03 23:04 - 2011-06-26 19:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-03 23:04 - 2010-11-08 06:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-03 23:04 - 2009-04-20 17:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-03 23:03 - 2014-02-03 23:03 - 05179159 ____R (Swearware) C:\Users\Heiko\Desktop\ComboFix.exe
2014-02-03 01:27 - 2014-02-03 01:27 - 00044365 _____ () C:\Users\Heiko\Desktop\Addition.txt
2014-02-03 01:25 - 2014-02-04 23:59 - 00022047 _____ () C:\Users\Heiko\Desktop\FRST.txt
2014-02-03 01:25 - 2014-02-04 23:59 - 00000000 ____D () C:\FRST
2014-02-03 01:24 - 2014-02-03 01:24 - 02080256 _____ (Farbar) C:\Users\Heiko\Desktop\FRST64.exe
2014-02-03 01:24 - 2014-02-03 01:24 - 01137152 _____ (Farbar) C:\Users\Heiko\Desktop\FRST.exe
2014-02-01 18:01 - 2014-02-01 18:01 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-01 16:59 - 2014-02-01 17:05 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\vlc
2014-02-01 16:59 - 2014-02-01 16:59 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-01 16:58 - 2014-02-01 16:58 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-01-30 23:28 - 2014-01-30 23:28 - 00001034 _____ () C:\Users\Public\Desktop\FLV Player.lnk
2014-01-30 23:28 - 2014-01-30 23:28 - 00000000 ____D () C:\Program Files (x86)\FLV Player
2014-01-26 14:45 - 2014-02-02 18:55 - 00000433 _____ () C:\Users\Heiko\.swfinfo
2014-01-26 13:11 - 2014-01-26 13:11 - 00000840 _____ () C:\Users\Heiko\Desktop\HTTrack Website Copier.lnk
2014-01-26 13:11 - 2014-01-26 13:11 - 00000000 ____D () C:\Program Files\WinHTTrack
2014-01-26 12:48 - 2014-01-26 12:50 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\GHISLER
2014-01-26 12:48 - 2014-01-26 12:48 - 00000650 _____ () C:\Users\Heiko\Desktop\Total Commander 64 bit.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000636 _____ () C:\Users\Heiko\Desktop\Total Commander.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\totalcmd
2014-01-25 22:56 - 2014-01-25 22:56 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-25 22:55 - 2014-01-25 22:56 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-25 22:55 - 2014-01-25 22:56 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 22:55 - 2014-01-25 22:56 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-25 22:55 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files\iPod
2014-01-24 20:17 - 2012-10-08 19:52 - 00031968 _____ (Wondershare) C:\Windows\system32\Drivers\Apowersoft_AudioDevice.sys
2014-01-24 20:02 - 2014-01-24 20:02 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Apowersoft
2014-01-24 09:31 - 2014-01-24 09:32 - 00266148 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-01-24 00:15 - 2014-01-24 00:18 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Origin
2014-01-24 00:15 - 2014-01-24 00:15 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-24 00:04 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-23 23:49 - 2014-02-04 23:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-23 23:49 - 2014-01-23 23:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-23 23:40 - 2014-01-23 23:40 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Secunia PSI
2014-01-23 23:39 - 2014-01-23 23:39 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-01-23 23:35 - 2014-01-24 23:42 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-01-23 23:35 - 2014-01-23 23:35 - 00000000 ____D () C:\ProgramData\Licenses
2014-01-23 23:32 - 2014-01-24 00:09 - 00000000 ____D () C:\Users\Heiko\Desktop\Sicherheit
2014-01-23 21:27 - 2014-01-23 21:27 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Apps\2.0
2014-01-16 13:28 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 13:28 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 13:28 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 13:28 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 13:27 - 2014-01-16 13:28 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\Visan
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-01-15 12:41 - 2013-11-27 14:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 12:41 - 2013-11-27 00:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 12:41 - 2013-11-26 23:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 16:48 - 2014-01-14 16:48 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes
2014-01-13 21:31 - 2014-01-13 21:31 - 00000000 ____D () C:\ProgramData\STAAmaQ
2014-01-13 21:31 - 2000-10-02 00:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2014-01-13 21:31 - 2000-07-15 00:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL
2014-01-13 21:31 - 1998-07-06 00:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-01-10 17:37 - 2014-01-10 17:37 - 00000000 ____D () C:\Users\Heiko\AppData\Local\IsolatedStorage
2014-01-10 17:36 - 2014-01-10 17:36 - 00001159 _____ () C:\Users\Public\Desktop\HMA! Pro VPN.lnk
2014-01-10 17:35 - 2014-01-10 17:37 - 00000000 ____D () C:\Program Files (x86)\HMA! Pro VPN
2014-01-09 14:35 - 2014-01-09 14:35 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\InstallShield
2014-01-08 21:40 - 2014-01-22 23:15 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\HpUpdate
2014-01-08 21:40 - 2014-01-08 21:40 - 00002156 _____ () C:\Users\Public\Desktop\HP Officejet 6700.lnk
2014-01-08 21:40 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPM5C12.dll
2014-01-08 21:39 - 2014-01-08 21:40 - 00000000 ____D () C:\Program Files (x86)\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\ProgramData\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\Program Files\HP
2014-01-08 21:09 - 2014-01-08 22:04 - 00000000 ____D () C:\Users\Heiko\AppData\Local\HP
2014-01-08 10:22 - 2014-02-04 23:42 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-08 10:22 - 2014-02-04 23:33 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-08 10:22 - 2014-01-08 10:28 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-08 10:22 - 2014-01-08 10:28 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
==================== One Month Modified Files and Folders =======
2014-02-05 00:00 - 2014-02-03 01:25 - 00022047 _____ () C:\Users\Heiko\Desktop\FRST.txt
2014-02-04 23:59 - 2014-02-03 01:25 - 00000000 ____D () C:\FRST
2014-02-04 23:59 - 2009-11-14 21:24 - 01674386 _____ () C:\Windows\WindowsUpdate.log
2014-02-04 23:58 - 2014-02-04 23:58 - 00000826 _____ () C:\Users\Heiko\Desktop\JRT.txt
2014-02-04 23:52 - 2009-07-14 17:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-04 23:52 - 2009-07-14 17:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-04 23:47 - 2014-02-04 23:47 - 00000000 ____D () C:\Windows\ERUNT
2014-02-04 23:46 - 2014-02-04 23:46 - 01037530 _____ (Thisisu) C:\Users\Heiko\Desktop\JRT.exe
2014-02-04 23:43 - 2014-02-04 23:43 - 00003172 _____ () C:\Users\Heiko\Desktop\AdwCleaner[S0].txt
2014-02-04 23:42 - 2014-01-08 10:22 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-04 23:41 - 2011-02-25 21:54 - 00068518 _____ () C:\Windows\setupact.log
2014-02-04 23:41 - 2009-07-14 18:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-04 23:39 - 2014-02-04 23:37 - 00000000 ____D () C:\AdwCleaner
2014-02-04 23:39 - 2009-12-30 09:47 - 00000968 _____ () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sabre VPN.lnk
2014-02-04 23:36 - 2014-02-04 23:37 - 01166132 _____ () C:\Users\Heiko\Desktop\adwcleaner.exe
2014-02-04 23:36 - 2014-02-04 23:36 - 01166132 _____ () C:\Users\Heiko\Downloads\adwcleaner.exe
2014-02-04 23:33 - 2014-01-08 10:22 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-04 23:08 - 2014-01-23 23:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-04 21:45 - 2010-01-04 19:57 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Skype
2014-02-04 21:40 - 2009-12-30 06:37 - 00002352 ____H () C:\Users\Heiko\Documents\Default.rdp
2014-02-04 20:01 - 2013-10-13 22:05 - 00000000 ____D () C:\Users\Heiko\AppData\Local\7D091FD7-BC7B-4A11-BD37-1805A3A2443E.aplzod
2014-02-04 17:33 - 2012-07-07 19:43 - 00004184 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-03 23:33 - 2011-02-25 21:54 - 00220736 _____ () C:\Windows\PFRO.log
2014-02-03 23:20 - 2014-02-03 23:20 - 00039016 _____ () C:\ComboFix.txt
2014-02-03 23:20 - 2014-02-03 23:04 - 00000000 ____D () C:\Qoobox
2014-02-03 23:18 - 2014-02-03 23:04 - 00000000 ____D () C:\Windows\erdnt
2014-02-03 23:17 - 2009-07-14 15:34 - 00000292 _____ () C:\Windows\system.ini
2014-02-03 23:16 - 2009-12-30 01:44 - 00000000 ____D () C:\Users\Heiko
2014-02-03 23:03 - 2014-02-03 23:03 - 05179159 ____R (Swearware) C:\Users\Heiko\Desktop\ComboFix.exe
2014-02-03 16:08 - 2009-07-14 16:20 - 00000000 ____D () C:\Windows\rescache
2014-02-03 01:27 - 2014-02-03 01:27 - 00044365 _____ () C:\Users\Heiko\Desktop\Addition.txt
2014-02-03 01:24 - 2014-02-03 01:24 - 02080256 _____ (Farbar) C:\Users\Heiko\Desktop\FRST64.exe
2014-02-03 01:24 - 2014-02-03 01:24 - 01137152 _____ (Farbar) C:\Users\Heiko\Desktop\FRST.exe
2014-02-03 00:42 - 2010-11-08 06:18 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\SolSuite
2014-02-03 00:42 - 2010-01-25 04:58 - 00000000 ____D () C:\Program Files (x86)\Games
2014-02-02 22:56 - 2009-12-30 08:50 - 00000000 ____D () C:\Users\Heiko\Downloads\Datenbank
2014-02-02 18:55 - 2014-01-26 14:45 - 00000433 _____ () C:\Users\Heiko\.swfinfo
2014-02-01 18:01 - 2014-02-01 18:01 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-01 18:01 - 2009-07-14 16:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-01 17:05 - 2014-02-01 16:59 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\vlc
2014-02-01 16:59 - 2014-02-01 16:59 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-01 16:58 - 2014-02-01 16:58 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-02-01 10:21 - 2009-07-14 18:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-01-30 23:28 - 2014-01-30 23:28 - 00001034 _____ () C:\Users\Public\Desktop\FLV Player.lnk
2014-01-30 23:28 - 2014-01-30 23:28 - 00000000 ____D () C:\Program Files (x86)\FLV Player
2014-01-30 21:58 - 2009-12-31 09:02 - 00000000 ____D () C:\Users\Heiko\Documents\Privat
2014-01-28 19:57 - 2009-12-31 09:02 - 00000000 ____D () C:\Users\Heiko\Documents\Business
2014-01-26 13:11 - 2014-01-26 13:11 - 00000840 _____ () C:\Users\Heiko\Desktop\HTTrack Website Copier.lnk
2014-01-26 13:11 - 2014-01-26 13:11 - 00000000 ____D () C:\Program Files\WinHTTrack
2014-01-26 12:50 - 2014-01-26 12:48 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\GHISLER
2014-01-26 12:48 - 2014-01-26 12:48 - 00000650 _____ () C:\Users\Heiko\Desktop\Total Commander 64 bit.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000636 _____ () C:\Users\Heiko\Desktop\Total Commander.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\totalcmd
2014-01-25 22:56 - 2014-01-25 22:56 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-25 22:56 - 2014-01-25 22:55 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-25 22:56 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 22:56 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-25 22:55 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files\iPod
2014-01-25 20:48 - 2011-10-07 06:52 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-01-25 20:47 - 2010-02-05 21:10 - 00000000 ____D () C:\ProgramData\Apple
2014-01-25 20:16 - 2013-11-23 09:29 - 00000000 ___RD () C:\Users\Heiko\Documents\Dropbox
2014-01-25 20:14 - 2013-11-23 09:25 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Dropbox
2014-01-25 20:14 - 2009-12-30 01:45 - 00000000 ___RD () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 23:42 - 2014-01-23 23:35 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-01-24 20:02 - 2014-01-24 20:02 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Apowersoft
2014-01-24 10:17 - 2009-11-15 06:13 - 00703192 _____ () C:\Windows\system32\perfh007.dat
2014-01-24 10:17 - 2009-11-15 06:13 - 00150800 _____ () C:\Windows\system32\perfc007.dat
2014-01-24 10:17 - 2009-07-14 18:13 - 01629284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-01-24 09:32 - 2014-01-24 09:31 - 00266148 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-01-24 00:18 - 2014-01-24 00:15 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Origin
2014-01-24 00:18 - 2013-10-11 06:23 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Origin
2014-01-24 00:18 - 2013-10-11 06:23 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-01-24 00:17 - 2013-10-11 06:23 - 00000000 ____D () C:\ProgramData\Origin
2014-01-24 00:15 - 2014-01-24 00:15 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-01-24 00:09 - 2014-01-23 23:32 - 00000000 ____D () C:\Users\Heiko\Desktop\Sicherheit
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-24 00:00 - 2009-12-30 02:03 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-01-23 23:58 - 2010-01-04 21:02 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-23 23:49 - 2014-01-23 23:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-23 23:49 - 2012-04-07 03:03 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-23 23:49 - 2011-05-19 06:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-23 23:40 - 2014-01-23 23:40 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Secunia PSI
2014-01-23 23:39 - 2014-01-23 23:39 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-01-23 23:35 - 2014-01-23 23:35 - 00000000 ____D () C:\ProgramData\Licenses
2014-01-23 21:27 - 2014-01-23 21:27 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Apps\2.0
2014-01-23 00:27 - 2009-07-14 16:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-22 23:15 - 2014-01-08 21:40 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\HpUpdate
2014-01-20 11:03 - 2009-12-30 04:12 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Adobe
2014-01-17 12:14 - 2013-11-23 09:29 - 00001027 _____ () C:\Users\Heiko\Desktop\Dropbox.lnk
2014-01-17 12:14 - 2013-11-23 09:26 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-17 12:14 - 2009-12-30 09:42 - 00000781 _____ () C:\Windows\wininit.ini
2014-01-16 13:29 - 2013-10-18 05:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-16 13:28 - 2014-01-16 13:27 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-16 13:28 - 2009-12-30 04:36 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\Visan
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-01-15 13:28 - 2009-07-14 17:45 - 00429056 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 12:46 - 2009-10-29 18:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-15 12:45 - 2013-07-11 18:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 12:41 - 2009-12-30 01:59 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 16:48 - 2014-01-14 16:48 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes
2014-01-14 00:02 - 2011-04-28 01:29 - 00000000 ____D () C:\Users\Heiko\Documents\Scans
2014-01-13 21:31 - 2014-01-13 21:31 - 00000000 ____D () C:\ProgramData\STAAmaQ
2014-01-11 10:03 - 2009-07-14 18:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-10 17:37 - 2014-01-10 17:37 - 00000000 ____D () C:\Users\Heiko\AppData\Local\IsolatedStorage
2014-01-10 17:37 - 2014-01-10 17:35 - 00000000 ____D () C:\Program Files (x86)\HMA! Pro VPN
2014-01-10 17:36 - 2014-01-10 17:36 - 00001159 _____ () C:\Users\Public\Desktop\HMA! Pro VPN.lnk
2014-01-09 14:47 - 2010-09-19 04:23 - 00000000 ____D () C:\ProgramData\EPSON
2014-01-09 14:46 - 2010-09-19 04:36 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Epson
2014-01-09 14:46 - 2010-09-19 04:23 - 00000000 ____D () C:\Program Files (x86)\epson
2014-01-09 14:45 - 2009-10-29 06:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-09 14:35 - 2014-01-09 14:35 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\InstallShield
2014-01-08 22:04 - 2014-01-08 21:09 - 00000000 ____D () C:\Users\Heiko\AppData\Local\HP
2014-01-08 21:40 - 2014-01-08 21:40 - 00002156 _____ () C:\Users\Public\Desktop\HP Officejet 6700.lnk
2014-01-08 21:40 - 2014-01-08 21:39 - 00000000 ____D () C:\Program Files (x86)\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\ProgramData\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\Program Files\HP
2014-01-08 10:28 - 2014-01-08 10:22 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-08 10:28 - 2014-01-08 10:22 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-01-08 10:23 - 2009-10-29 06:36 - 00000000 ____D () C:\Program Files (x86)\Google
Files to move or delete:
====================
C:\Users\Heiko\iconv.dll
C:\Users\Heiko\intl.dll
C:\Users\Heiko\libeay32.dll
C:\Users\Heiko\libgaim.dll
C:\Users\Heiko\libglib-2.0-0.dll
C:\Users\Heiko\libgmodule-2.0-0.dll
C:\Users\Heiko\libgthread-2.0-0.dll
C:\Users\Heiko\nspr4.dll
C:\Users\Heiko\nss3.dll
C:\Users\Heiko\plc4.dll
C:\Users\Heiko\plds4.dll
C:\Users\Heiko\QtCore4.dll
C:\Users\Heiko\QtGui4.dll
C:\Users\Heiko\QtSvg4.dll
C:\Users\Heiko\QtXml4.dll
C:\Users\Heiko\softokn3.dll
C:\Users\Heiko\ssl3.dll
C:\Users\Heiko\ssleay32.dll
C:\Users\Heiko\zlib1.dll
Some content of TEMP:
====================
C:\Users\Heiko\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-29 10:29
==================== End Of Log ============================
--- --- --- Viele Grüße Kermit |
|
05.02.2014, 09:04
| #8 |
| /// the machine /// TB-Ausbilder | Windows 7: Avast erkennt Viren in Java DateiESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.02.2014, 13:06
| #9 |
| | Windows 7: Avast erkennt Viren in Java Datei Hallo Schrauber, der ESET scheint noch was gefunden zu haben: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=8031cfc97fb8074ba752a7924163dc83
# engine=16943
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-05 11:53:52
# local_time=2014-02-06 12:53:52 (+1200, Neuseeland Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 0 143234682 0 0
# scanned=272085
# found=13
# cleaned=0
# scan_time=12065
sh=692FB6540B8E1B4718F95A131DE518942FD93588 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\399ff34a-49c8cac2"
sh=0B561DF863AA72CB8655C9C45C31A6DBACDFDEB0 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\656a368d-3dddd14b"
sh=F71B4CE40932BBC708120D96382E27FCF16E57BE ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\29613354-32c38bbd"
sh=EE5B67A2B7EA6B3A5CEAC89A03F9B0AFC1B2F788 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2013-1493.HV trojan" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\4af9aa59-507bf82e"
sh=ADDAB146BD8EFD582076783ACBC364C2D945783A ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CT trojan" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\54dc679b-63cf7b34"
sh=F71B4CE40932BBC708120D96382E27FCF16E57BE ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30\5cc00cde-4daf887a"
sh=692FB6540B8E1B4718F95A131DE518942FD93588 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\6cdd8de8-37041b3d"
sh=EE5B67A2B7EA6B3A5CEAC89A03F9B0AFC1B2F788 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2013-1493.HV trojan" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\7e8495a9-7835bf7e"
sh=ADDAB146BD8EFD582076783ACBC364C2D945783A ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CT trojan" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\814cd30-33a7116b"
sh=2AC8648A19EEA01D4F9BECAE0F7C4D8DB7941807 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\b1114b1-5cd36772"
sh=0B561DF863AA72CB8655C9C45C31A6DBACDFDEB0 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\17c55cb6-36b86322"
sh=CF5FF332AF377A3EAADB58638D98DF4903026CE0 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\2d12d1be-2b0e2fe6"
sh=91414FC78D9E91CC9F1AAA7C2B8C8D9D53D1BC75 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Heiko\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\675b3e09-6db0f7f1"
Code:
ATTFilter Results of screen317's Security Check version 0.99.79 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` SpywareBlaster 5.0 Secunia PSI (3.0.0.9016) Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 51 Adobe Flash Player 12.0.0.43 Flash Player out of Date! Adobe Reader 10.1.9 Adobe Reader out of Date! Mozilla Firefox (26.0) Google Chrome 32.0.1700.102 Google Chrome 32.0.1700.107 ````````Process Check: objlist.exe by Laurent```````` Alwil Software Avast5 AvastSvc.exe Alwil Software Avast5 AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by Heiko (administrator) on HEIKO-NOTEBOOK on 06-02-2014 01:02:32
Running from C:\Users\Heiko\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicatorCom.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\Heiko\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-11] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-06] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2009-11-14] ()
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [823840 2009-10-01] (Acer Incorporated)
HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-02] (Microsoft Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-09-25] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [EgisTecLiveUpdate] - C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-05] (Egis Technology Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1094736 2009-11-02] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] - C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-07] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] - C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-10-06] (Acer Corp.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)
HKLM-x32\...\Run: [avast5] - C:\Program Files\Alwil Software\Avast5\avastUI.exe [3764024 2013-12-29] (AVAST Software)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-28] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641664 2012-04-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-02-21] ()
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [156448 2012-05-05] ()
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3764024 2013-12-29] (AVAST Software)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [RegKillElbyCheck] - C:\Program Files (x86)\Elaborate Bytes\DVD Region Killer\ElbyCheck.exe [45056 2002-11-02] (Elaborate Bytes AG)
HKLM-x32\...\Run: [RegKillTray] - C:\Program Files (x86)\Elaborate Bytes\DVD Region Killer\RegKillTray.exe [49152 2002-11-28] (Elaborate Bytes)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1844296 2011-11-10] (Elgato Systems)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-21] (Apple Inc.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-21] (Apple Inc.)
HKU\S-1-5-21-3175191187-1249783048-3626377888-1000\...\Run: [HP Officejet 6700 (NET)] - C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
Startup: C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
ProxyServer: http=127.0.0.1:8888;https=127.0.0.1:8888
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.spiegel.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE360DE360
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE360DE360
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {2D36AF92-04D3-11D8-B719-0000865F231B} https://my.sabre.com/jars/TMinReqX.dll
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default
FF Homepage: www.spiegel.de
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: German Dictionary - C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2012-11-03]
FF Extension: British English Dictionary - C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\Extensions\en-GB@dictionaries.addons.mozilla.org [2010-12-10]
FF Extension: DownloadHelper - C:\Users\Heiko\AppData\Roaming\Mozilla\Firefox\Profiles\4x3svtcd.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-29]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-23]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-03-14]
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR DefaultSearchKeyword: google.co.nz
CHR Extension: (Google Docs) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-08]
CHR Extension: (Google Drive) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-08]
CHR Extension: (YouTube) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-08]
CHR Extension: (Google-Suche) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-08]
CHR Extension: (avast! Online Security) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-10]
CHR Extension: (Google Wallet) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-08]
CHR Extension: (Google Mail) - C:\Users\Heiko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-08]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2013-10-23]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2013-12-29] (AVAST Software)
R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-14] (Microsoft Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-11] (Egis Technology Inc.)
S3 OpenVPNService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [37176 2013-11-22] (The OpenVPN Project)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-07] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-07] (Secunia)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [274208 2012-05-05] ()
S2 HsspConfig; C:\Windows\system32\CfgSrvc.exe [x]
==================== Drivers (Whitelisted) ====================
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-29] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-23] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-23] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-29] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-29] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-29] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-29] ()
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310984 2010-12-30] ()
S2 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [16320 2002-11-30] (Elaborate Bytes AG)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2009-06-30] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2010-12-30] ()
S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [631360 2009-11-17] (DiBcom SA)
S3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [23744 2009-11-17] (DiBcom S.A.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-07] (Secunia)
S3 RegKill; C:\Windows\SysWOW64\Drivers\RegKill.sys [6400 2002-11-28] (Elaborate Bytes)
S3 StarOpen; No ImagePath
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-10-06] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 upperdev; system32\DRIVERS\usbser_lowerfltx64.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-06 00:58 - 2014-02-06 00:58 - 00987425 _____ () C:\Users\Heiko\Desktop\SecurityCheck.exe
2014-02-06 00:55 - 2014-02-06 00:55 - 00003177 _____ () C:\Users\Heiko\Desktop\Eset.txt
2014-02-05 21:24 - 2014-02-05 21:24 - 02347384 _____ (ESET) C:\Users\Heiko\Desktop\esetsmartinstaller_enu.exe
2014-02-04 23:58 - 2014-02-04 23:58 - 00000826 _____ () C:\Users\Heiko\Desktop\JRT.txt
2014-02-04 23:47 - 2014-02-04 23:47 - 00000000 ____D () C:\Windows\ERUNT
2014-02-04 23:46 - 2014-02-04 23:46 - 01037530 _____ (Thisisu) C:\Users\Heiko\Desktop\JRT.exe
2014-02-04 23:43 - 2014-02-04 23:43 - 00003172 _____ () C:\Users\Heiko\Desktop\AdwCleaner[S0].txt
2014-02-04 23:37 - 2014-02-04 23:39 - 00000000 ____D () C:\AdwCleaner
2014-02-04 23:37 - 2014-02-04 23:36 - 01166132 _____ () C:\Users\Heiko\Desktop\adwcleaner.exe
2014-02-04 23:36 - 2014-02-04 23:36 - 01166132 _____ () C:\Users\Heiko\Downloads\adwcleaner.exe
2014-02-03 23:20 - 2014-02-03 23:20 - 00039016 _____ () C:\ComboFix.txt
2014-02-03 23:04 - 2014-02-03 23:20 - 00000000 ____D () C:\Qoobox
2014-02-03 23:04 - 2014-02-03 23:18 - 00000000 ____D () C:\Windows\erdnt
2014-02-03 23:04 - 2011-06-26 19:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-03 23:04 - 2010-11-08 06:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-03 23:04 - 2009-04-20 17:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-03 23:04 - 2000-08-31 13:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-03 23:03 - 2014-02-03 23:03 - 05179159 ____R (Swearware) C:\Users\Heiko\Desktop\ComboFix.exe
2014-02-03 01:27 - 2014-02-03 01:27 - 00044365 _____ () C:\Users\Heiko\Desktop\Addition.txt
2014-02-03 01:25 - 2014-02-06 01:02 - 00022502 _____ () C:\Users\Heiko\Desktop\FRST.txt
2014-02-03 01:25 - 2014-02-06 01:02 - 00000000 ____D () C:\FRST
2014-02-03 01:24 - 2014-02-03 01:24 - 02080256 _____ (Farbar) C:\Users\Heiko\Desktop\FRST64.exe
2014-02-03 01:24 - 2014-02-03 01:24 - 01137152 _____ (Farbar) C:\Users\Heiko\Desktop\FRST.exe
2014-02-01 18:01 - 2014-02-01 18:01 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-01 16:59 - 2014-02-01 17:05 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\vlc
2014-02-01 16:59 - 2014-02-01 16:59 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-01 16:58 - 2014-02-01 16:58 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-01-30 23:28 - 2014-01-30 23:28 - 00001034 _____ () C:\Users\Public\Desktop\FLV Player.lnk
2014-01-30 23:28 - 2014-01-30 23:28 - 00000000 ____D () C:\Program Files (x86)\FLV Player
2014-01-26 14:45 - 2014-02-02 18:55 - 00000433 _____ () C:\Users\Heiko\.swfinfo
2014-01-26 13:11 - 2014-01-26 13:11 - 00000840 _____ () C:\Users\Heiko\Desktop\HTTrack Website Copier.lnk
2014-01-26 13:11 - 2014-01-26 13:11 - 00000000 ____D () C:\Program Files\WinHTTrack
2014-01-26 12:48 - 2014-01-26 12:50 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\GHISLER
2014-01-26 12:48 - 2014-01-26 12:48 - 00000650 _____ () C:\Users\Heiko\Desktop\Total Commander 64 bit.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000636 _____ () C:\Users\Heiko\Desktop\Total Commander.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\totalcmd
2014-01-25 22:56 - 2014-01-25 22:56 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-25 22:55 - 2014-01-25 22:56 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-25 22:55 - 2014-01-25 22:56 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 22:55 - 2014-01-25 22:56 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-25 22:55 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files\iPod
2014-01-24 20:17 - 2012-10-08 19:52 - 00031968 _____ (Wondershare) C:\Windows\system32\Drivers\Apowersoft_AudioDevice.sys
2014-01-24 20:02 - 2014-01-24 20:02 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Apowersoft
2014-01-24 09:31 - 2014-01-24 09:32 - 00266148 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-01-24 00:15 - 2014-01-24 00:18 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Origin
2014-01-24 00:15 - 2014-01-24 00:15 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-24 00:04 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-23 23:49 - 2014-02-06 00:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-23 23:49 - 2014-01-23 23:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-23 23:40 - 2014-01-23 23:40 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Secunia PSI
2014-01-23 23:39 - 2014-01-23 23:39 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-01-23 23:35 - 2014-01-24 23:42 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-01-23 23:35 - 2014-01-23 23:35 - 00000000 ____D () C:\ProgramData\Licenses
2014-01-23 23:32 - 2014-01-24 00:09 - 00000000 ____D () C:\Users\Heiko\Desktop\Sicherheit
2014-01-23 21:27 - 2014-01-23 21:27 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Apps\2.0
2014-01-16 13:28 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 13:28 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 13:28 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 13:28 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 13:27 - 2014-01-16 13:28 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\Visan
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-01-15 12:41 - 2013-11-27 14:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 12:41 - 2013-11-27 14:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 12:41 - 2013-11-27 00:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 12:41 - 2013-11-26 23:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 16:48 - 2014-01-14 16:48 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes
2014-01-13 21:31 - 2014-01-13 21:31 - 00000000 ____D () C:\ProgramData\STAAmaQ
2014-01-13 21:31 - 2000-10-02 00:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2014-01-13 21:31 - 2000-07-15 00:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL
2014-01-13 21:31 - 1998-07-06 00:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-01-10 17:37 - 2014-01-10 17:37 - 00000000 ____D () C:\Users\Heiko\AppData\Local\IsolatedStorage
2014-01-10 17:36 - 2014-01-10 17:36 - 00001159 _____ () C:\Users\Public\Desktop\HMA! Pro VPN.lnk
2014-01-10 17:35 - 2014-01-10 17:37 - 00000000 ____D () C:\Program Files (x86)\HMA! Pro VPN
2014-01-09 14:35 - 2014-01-09 14:35 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\InstallShield
2014-01-08 21:40 - 2014-01-22 23:15 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\HpUpdate
2014-01-08 21:40 - 2014-01-08 21:40 - 00002156 _____ () C:\Users\Public\Desktop\HP Officejet 6700.lnk
2014-01-08 21:40 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPM5C12.dll
2014-01-08 21:39 - 2014-01-08 21:40 - 00000000 ____D () C:\Program Files (x86)\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\ProgramData\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\Program Files\HP
2014-01-08 21:09 - 2014-01-08 22:04 - 00000000 ____D () C:\Users\Heiko\AppData\Local\HP
2014-01-08 10:22 - 2014-02-06 00:33 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-08 10:22 - 2014-02-05 15:06 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-08 10:22 - 2014-01-08 10:28 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-08 10:22 - 2014-01-08 10:28 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
==================== One Month Modified Files and Folders =======
2014-02-06 01:02 - 2014-02-03 01:25 - 00022502 _____ () C:\Users\Heiko\Desktop\FRST.txt
2014-02-06 01:02 - 2014-02-03 01:25 - 00000000 ____D () C:\FRST
2014-02-06 00:58 - 2014-02-06 00:58 - 00987425 _____ () C:\Users\Heiko\Desktop\SecurityCheck.exe
2014-02-06 00:55 - 2014-02-06 00:55 - 00003177 _____ () C:\Users\Heiko\Desktop\Eset.txt
2014-02-06 00:33 - 2014-01-08 10:22 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-06 00:08 - 2014-01-23 23:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-05 21:53 - 2011-02-25 21:54 - 00068686 _____ () C:\Windows\setupact.log
2014-02-05 21:24 - 2014-02-05 21:24 - 02347384 _____ (ESET) C:\Users\Heiko\Desktop\esetsmartinstaller_enu.exe
2014-02-05 21:22 - 2009-12-30 06:37 - 00002352 ____H () C:\Users\Heiko\Documents\Default.rdp
2014-02-05 17:02 - 2009-11-14 21:24 - 01720495 _____ () C:\Windows\WindowsUpdate.log
2014-02-05 15:19 - 2009-07-14 17:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-05 15:19 - 2009-07-14 17:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-05 15:09 - 2012-07-07 19:43 - 00004184 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-05 15:06 - 2014-01-08 10:22 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-05 15:06 - 2009-07-14 18:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-05 10:11 - 2013-10-13 22:05 - 00000000 ____D () C:\Users\Heiko\AppData\Local\7D091FD7-BC7B-4A11-BD37-1805A3A2443E.aplzod
2014-02-04 23:58 - 2014-02-04 23:58 - 00000826 _____ () C:\Users\Heiko\Desktop\JRT.txt
2014-02-04 23:47 - 2014-02-04 23:47 - 00000000 ____D () C:\Windows\ERUNT
2014-02-04 23:46 - 2014-02-04 23:46 - 01037530 _____ (Thisisu) C:\Users\Heiko\Desktop\JRT.exe
2014-02-04 23:43 - 2014-02-04 23:43 - 00003172 _____ () C:\Users\Heiko\Desktop\AdwCleaner[S0].txt
2014-02-04 23:39 - 2014-02-04 23:37 - 00000000 ____D () C:\AdwCleaner
2014-02-04 23:39 - 2009-12-30 09:47 - 00000968 _____ () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sabre VPN.lnk
2014-02-04 23:36 - 2014-02-04 23:37 - 01166132 _____ () C:\Users\Heiko\Desktop\adwcleaner.exe
2014-02-04 23:36 - 2014-02-04 23:36 - 01166132 _____ () C:\Users\Heiko\Downloads\adwcleaner.exe
2014-02-04 21:45 - 2010-01-04 19:57 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Skype
2014-02-03 23:33 - 2011-02-25 21:54 - 00220736 _____ () C:\Windows\PFRO.log
2014-02-03 23:20 - 2014-02-03 23:20 - 00039016 _____ () C:\ComboFix.txt
2014-02-03 23:20 - 2014-02-03 23:04 - 00000000 ____D () C:\Qoobox
2014-02-03 23:18 - 2014-02-03 23:04 - 00000000 ____D () C:\Windows\erdnt
2014-02-03 23:17 - 2009-07-14 15:34 - 00000292 _____ () C:\Windows\system.ini
2014-02-03 23:16 - 2009-12-30 01:44 - 00000000 ____D () C:\Users\Heiko
2014-02-03 23:03 - 2014-02-03 23:03 - 05179159 ____R (Swearware) C:\Users\Heiko\Desktop\ComboFix.exe
2014-02-03 16:08 - 2009-07-14 16:20 - 00000000 ____D () C:\Windows\rescache
2014-02-03 01:27 - 2014-02-03 01:27 - 00044365 _____ () C:\Users\Heiko\Desktop\Addition.txt
2014-02-03 01:24 - 2014-02-03 01:24 - 02080256 _____ (Farbar) C:\Users\Heiko\Desktop\FRST64.exe
2014-02-03 01:24 - 2014-02-03 01:24 - 01137152 _____ (Farbar) C:\Users\Heiko\Desktop\FRST.exe
2014-02-03 00:42 - 2010-11-08 06:18 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\SolSuite
2014-02-03 00:42 - 2010-01-25 04:58 - 00000000 ____D () C:\Program Files (x86)\Games
2014-02-02 22:56 - 2009-12-30 08:50 - 00000000 ____D () C:\Users\Heiko\Downloads\Datenbank
2014-02-02 18:55 - 2014-01-26 14:45 - 00000433 _____ () C:\Users\Heiko\.swfinfo
2014-02-01 18:01 - 2014-02-01 18:01 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-01 18:01 - 2009-07-14 16:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-01 17:05 - 2014-02-01 16:59 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\vlc
2014-02-01 16:59 - 2014-02-01 16:59 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-01 16:58 - 2014-02-01 16:58 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-02-01 10:21 - 2009-07-14 18:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-01-30 23:28 - 2014-01-30 23:28 - 00001034 _____ () C:\Users\Public\Desktop\FLV Player.lnk
2014-01-30 23:28 - 2014-01-30 23:28 - 00000000 ____D () C:\Program Files (x86)\FLV Player
2014-01-30 21:58 - 2009-12-31 09:02 - 00000000 ____D () C:\Users\Heiko\Documents\Privat
2014-01-28 19:57 - 2009-12-31 09:02 - 00000000 ____D () C:\Users\Heiko\Documents\Business
2014-01-26 13:11 - 2014-01-26 13:11 - 00000840 _____ () C:\Users\Heiko\Desktop\HTTrack Website Copier.lnk
2014-01-26 13:11 - 2014-01-26 13:11 - 00000000 ____D () C:\Program Files\WinHTTrack
2014-01-26 12:50 - 2014-01-26 12:48 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\GHISLER
2014-01-26 12:48 - 2014-01-26 12:48 - 00000650 _____ () C:\Users\Heiko\Desktop\Total Commander 64 bit.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000636 _____ () C:\Users\Heiko\Desktop\Total Commander.lnk
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-01-26 12:48 - 2014-01-26 12:48 - 00000000 ____D () C:\totalcmd
2014-01-25 22:56 - 2014-01-25 22:56 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-25 22:56 - 2014-01-25 22:55 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-25 22:56 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 22:56 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-25 22:55 - 2014-01-25 22:55 - 00000000 ____D () C:\Program Files\iPod
2014-01-25 20:48 - 2011-10-07 06:52 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-01-25 20:47 - 2010-02-05 21:10 - 00000000 ____D () C:\ProgramData\Apple
2014-01-25 20:16 - 2013-11-23 09:29 - 00000000 ___RD () C:\Users\Heiko\Documents\Dropbox
2014-01-25 20:14 - 2013-11-23 09:25 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Dropbox
2014-01-25 20:14 - 2009-12-30 01:45 - 00000000 ___RD () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 23:42 - 2014-01-23 23:35 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-01-24 20:02 - 2014-01-24 20:02 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Apowersoft
2014-01-24 10:17 - 2009-11-15 06:13 - 00703192 _____ () C:\Windows\system32\perfh007.dat
2014-01-24 10:17 - 2009-11-15 06:13 - 00150800 _____ () C:\Windows\system32\perfc007.dat
2014-01-24 10:17 - 2009-07-14 18:13 - 01629284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-01-24 09:32 - 2014-01-24 09:31 - 00266148 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-01-24 00:18 - 2014-01-24 00:15 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Origin
2014-01-24 00:18 - 2013-10-11 06:23 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Origin
2014-01-24 00:18 - 2013-10-11 06:23 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-01-24 00:17 - 2013-10-11 06:23 - 00000000 ____D () C:\ProgramData\Origin
2014-01-24 00:15 - 2014-01-24 00:15 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-01-24 00:09 - 2014-01-23 23:32 - 00000000 ____D () C:\Users\Heiko\Desktop\Sicherheit
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-24 00:04 - 2014-01-24 00:04 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-24 00:00 - 2009-12-30 02:03 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-01-23 23:58 - 2010-01-04 21:02 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-23 23:49 - 2014-01-23 23:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-23 23:49 - 2012-04-07 03:03 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-23 23:49 - 2011-05-19 06:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-23 23:40 - 2014-01-23 23:40 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Secunia PSI
2014-01-23 23:39 - 2014-01-23 23:39 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-01-23 23:35 - 2014-01-23 23:35 - 00000000 ____D () C:\ProgramData\Licenses
2014-01-23 21:27 - 2014-01-23 21:27 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Apps\2.0
2014-01-23 00:27 - 2009-07-14 16:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-22 23:15 - 2014-01-08 21:40 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\HpUpdate
2014-01-20 11:03 - 2009-12-30 04:12 - 00000000 ____D () C:\Users\Heiko\AppData\Local\Adobe
2014-01-17 12:14 - 2013-11-23 09:29 - 00001027 _____ () C:\Users\Heiko\Desktop\Dropbox.lnk
2014-01-17 12:14 - 2013-11-23 09:26 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-17 12:14 - 2009-12-30 09:42 - 00000781 _____ () C:\Windows\wininit.ini
2014-01-16 13:29 - 2013-10-18 05:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-16 13:28 - 2014-01-16 13:27 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-16 13:28 - 2009-12-30 04:36 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-16 09:59 - 2009-12-30 01:58 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\Visan
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-01-15 22:31 - 2014-01-15 22:31 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-01-15 13:28 - 2009-07-14 17:45 - 00429056 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 12:46 - 2009-10-29 18:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-15 12:45 - 2013-07-11 18:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 12:41 - 2009-12-30 01:59 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 16:48 - 2014-01-14 16:48 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes
2014-01-14 00:02 - 2011-04-28 01:29 - 00000000 ____D () C:\Users\Heiko\Documents\Scans
2014-01-13 21:31 - 2014-01-13 21:31 - 00000000 ____D () C:\ProgramData\STAAmaQ
2014-01-11 10:03 - 2009-07-14 18:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-10 17:37 - 2014-01-10 17:37 - 00000000 ____D () C:\Users\Heiko\AppData\Local\IsolatedStorage
2014-01-10 17:37 - 2014-01-10 17:35 - 00000000 ____D () C:\Program Files (x86)\HMA! Pro VPN
2014-01-10 17:36 - 2014-01-10 17:36 - 00001159 _____ () C:\Users\Public\Desktop\HMA! Pro VPN.lnk
2014-01-09 14:47 - 2010-09-19 04:23 - 00000000 ____D () C:\ProgramData\EPSON
2014-01-09 14:46 - 2010-09-19 04:36 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\Epson
2014-01-09 14:46 - 2010-09-19 04:23 - 00000000 ____D () C:\Program Files (x86)\epson
2014-01-09 14:45 - 2009-10-29 06:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-09 14:35 - 2014-01-09 14:35 - 00000000 ____D () C:\Users\Heiko\AppData\Roaming\InstallShield
2014-01-08 22:04 - 2014-01-08 21:09 - 00000000 ____D () C:\Users\Heiko\AppData\Local\HP
2014-01-08 21:40 - 2014-01-08 21:40 - 00002156 _____ () C:\Users\Public\Desktop\HP Officejet 6700.lnk
2014-01-08 21:40 - 2014-01-08 21:39 - 00000000 ____D () C:\Program Files (x86)\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\ProgramData\HP
2014-01-08 21:39 - 2014-01-08 21:39 - 00000000 ____D () C:\Program Files\HP
2014-01-08 10:28 - 2014-01-08 10:22 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-08 10:28 - 2014-01-08 10:22 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-01-08 10:23 - 2009-10-29 06:36 - 00000000 ____D () C:\Program Files (x86)\Google
Files to move or delete:
====================
C:\Users\Heiko\iconv.dll
C:\Users\Heiko\intl.dll
C:\Users\Heiko\libeay32.dll
C:\Users\Heiko\libgaim.dll
C:\Users\Heiko\libglib-2.0-0.dll
C:\Users\Heiko\libgmodule-2.0-0.dll
C:\Users\Heiko\libgthread-2.0-0.dll
C:\Users\Heiko\nspr4.dll
C:\Users\Heiko\nss3.dll
C:\Users\Heiko\plc4.dll
C:\Users\Heiko\plds4.dll
C:\Users\Heiko\QtCore4.dll
C:\Users\Heiko\QtGui4.dll
C:\Users\Heiko\QtSvg4.dll
C:\Users\Heiko\QtXml4.dll
C:\Users\Heiko\softokn3.dll
C:\Users\Heiko\ssl3.dll
C:\Users\Heiko\ssleay32.dll
C:\Users\Heiko\zlib1.dll
Some content of TEMP:
====================
C:\Users\Heiko\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-29 10:29
==================== End Of Log ============================
--- --- --- Viele Grüße Kermit |
|
06.02.2014, 10:01
| #10 |
| /// the machine /// TB-Ausbilder | Windows 7: Avast erkennt Viren in Java Datei Flash und Adobe updaten. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
06.02.2014, 11:06
| #11 |
| | Windows 7: Avast erkennt Viren in Java Datei Hallo Schrauber, ich habe alles gemacht wie du beschrieben hast... Vielen Dank nochmal für deine großartige Hilfe...Ich werde euch in jedem Fall weiterempfehlen.. Viele Grüße Kermit |
|
07.02.2014, 08:03
| #12 |
| /// the machine /// TB-Ausbilder | Windows 7: Avast erkennt Viren in Java Datei Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7: Avast erkennt Viren in Java Datei |
| avast, datei, erkenn, erkennt, foren, gefunde, java, komplett, laptop, nicht sicher, problem, programm, viren, windows, windows 7 |
WARNUNG an die MITLESER: 
Linear-Darstellung
