| |
| |||||||
Log-Analyse und Auswertung: Delta Search ToolbarWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
12.07.2013, 06:56
| #1 |
 |  Delta Search Toolbar Hallo zusammen! Die DeltaSearch Toolbar habe ich zwar deinstalliert und größtenteils entfernt, aber leider eben nur "größtenteils"  .Google Chrome startet noch immer auf der Delta-Seite, obwohl in den Einstellungen google.de hinterlegt ist. Hier die OTL-Files: Code:
ATTFilter OTL logfile created on: 12.07.2013 07:26:23 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dennis\Desktop 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16599) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,95 Gb Total Physical Memory | 5,61 Gb Available Physical Memory | 70,48% Memory free 12,44 Gb Paging File | 7,55 Gb Available in Paging File | 60,69% Paging File free Paging file location(s): c:\pagefile.sys 4596 4596g:\pagef [Binary data over 200 bytes] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 59,28 Gb Total Space | 14,62 Gb Free Space | 24,66% Space Free | Partition Type: NTFS Drive D: | 70,05 Gb Total Space | 53,85 Gb Free Space | 76,87% Space Free | Partition Type: NTFS Drive E: | 200,00 Gb Total Space | 15,97 Gb Free Space | 7,98% Space Free | Partition Type: NTFS Drive F: | 350,51 Gb Total Space | 27,02 Gb Free Space | 7,71% Space Free | Partition Type: NTFS Drive G: | 381,00 Gb Total Space | 14,16 Gb Free Space | 3,72% Space Free | Partition Type: NTFS Drive H: | 295,76 Gb Total Space | 41,22 Gb Free Space | 13,94% Space Free | Partition Type: NTFS Drive I: | 14,89 Gb Total Space | 14,89 Gb Free Space | 100,00% Space Free | Partition Type: FAT32 Drive L: | 99,89 Gb Total Space | 29,33 Gb Free Space | 29,36% Space Free | Partition Type: NTFS Computer Name: DENNIS-PC | User Name: Dennis | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Dennis\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Adobe Systems, Inc.) PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) PRC - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) PRC - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) PRC - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.) PRC - D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe (TomTom) PRC - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis) PRC - C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe (ASUSTeK Computer Inc.) PRC - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe (ASUSTeK Computer Inc.) PRC - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe () PRC - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (ASUSTeK Computer Inc.) PRC - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH) PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe (Apple Inc.) PRC - C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated) PRC - D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe (Acronis) PRC - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe (ASUSTek Computer Inc.) PRC - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis) PRC - C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) PRC - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Sun Microsystems, Inc.) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) PRC - C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ASUSTeK Computer Inc.) PRC - C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe (ASUSTeK Computer Inc.) PRC - C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (ASUSTeK Computer Inc.) PRC - C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated) PRC - C:\Users\Dennis\Desktop\EraserPortable\EraserPortable.exe (PortableApps.com) PRC - C:\Users\Dennis\Desktop\EraserPortable\App\Eraser\Eraser.exe (The Eraser Project) PRC - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Logitech Inc.) PRC - C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe (Brother Industries, Ltd.) ========== Modules (No Company Name) ========== MOD - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\PepperFlash\11.8.800.97\pepflashplayer.dll () MOD - C:\Users\Dennis\AppData\Local\Temp\nseF350.tmp\System.dll () MOD - C:\Users\Dennis\AppData\Local\Temp\nseF350.tmp\newadvsplash.dll () MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ppGoogleNaClPluginChrome.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\pdf.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\libglesv2.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\libegl.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ffmpegsumo.dll () MOD - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\PepperFlash\11.7.700.225\pepflashplayer.dll () MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () MOD - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMLib.dll () MOD - D:\Programme\FileZilla FTP Client\fzshellext.dll () MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll () MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll () MOD - D:\Programme\Acronis\TrueImage2013\TrueImageHome\ti_managers.dll () MOD - C:\Program Files (x86)\Common Files\Acronis\Home\icudt38.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\func.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\Network iControl.dll () MOD - C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\AI Charger+\AIChargerPlus.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\pngio.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll () MOD - C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll () MOD - C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll () ========== Services (SafeList) ========== SRV:64bit: - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation) SRV:64bit: - (TimeBroker) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation) SRV:64bit: - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation) SRV:64bit: - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation) SRV:64bit: - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation) SRV:64bit: - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation) SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation) SRV:64bit: - (WSService) -- C:\Windows\SysNative\WSService.dll (Microsoft Corporation) SRV:64bit: - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation) SRV:64bit: - (BrokerInfrastructure) -- C:\Windows\SysNative\bisrv.dll (Microsoft Corporation) SRV:64bit: - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation) SRV:64bit: - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation) SRV:64bit: - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation) SRV:64bit: - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation) SRV:64bit: - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation) SRV:64bit: - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation) SRV:64bit: - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation) SRV:64bit: - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation) SRV:64bit: - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation) SRV:64bit: - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation) SRV:64bit: - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation) SRV:64bit: - (AllUserInstallAgent) -- C:\Windows\SysNative\AUInstallAgent.dll (Microsoft Corporation) SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SRV:64bit: - (vmicvss) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicrdv) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (VIAKaraokeService) -- C:\Windows\SysNative\ViakaraokeSrv.exe (VIA Technologies, Inc.) SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (TomTomHOMEService) -- D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe (TomTom) SRV - (afcdpsrv) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis) SRV - (AsusFanControlService) -- C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe (ASUSTeK Computer Inc.) SRV - (asHmComSvc) -- C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe (ASUSTeK Computer Inc.) SRV - (asComSvc) -- C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe () SRV - (AsSysCtrlService) -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (ASUSTeK Computer Inc.) SRV - (TeamViewer8) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH) SRV - (PrintNotify) -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll (Microsoft Corporation) SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation) SRV - (AdobeActiveFileMonitor11.0) -- C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated) SRV - (AcrSch2Svc) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) SRV - (syncagentsrv) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis) SRV - (StorSvc) -- C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation) SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (jhi_service) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (SQLWriter) -- C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation) SRV - (AdobeActiveFileMonitor10.0) -- C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated) SRV - (LVPrcS64) -- C:\Programme\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.) ========== Driver Services (SafeList) ========== DRV:64bit: - (spaceport) -- C:\Windows\SysNative\Drivers\spaceport.sys (Microsoft Corporation) DRV:64bit: - (avipbb) -- C:\Windows\SysNative\Drivers\avipbb.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\Drivers\avgntflt.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\Drivers\avkmgr.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (USBXHCI) -- C:\Windows\SysNative\Drivers\USBXHCI.SYS (Microsoft Corporation) DRV:64bit: - (storahci) -- C:\Windows\SysNative\Drivers\storahci.sys (Microsoft Corporation) DRV:64bit: - (TPM) -- C:\Windows\SysNative\Drivers\tpm.sys (Microsoft Corporation) DRV:64bit: - (sdbus) -- C:\Windows\SysNative\Drivers\sdbus.sys (Microsoft Corporation) DRV:64bit: - (pdc) -- C:\Windows\SysNative\Drivers\pdc.sys (Microsoft Corporation) DRV:64bit: - (afcdp) -- C:\Windows\SysNative\Drivers\afcdp.sys (Acronis) DRV:64bit: - (tdrpman) -- C:\Windows\SysNative\Drivers\tdrpman.sys (Acronis) DRV:64bit: - (tib_mounter) -- C:\Windows\SysNative\Drivers\tib_mounter.sys (Acronis) DRV:64bit: - (snapman) -- C:\Windows\SysNative\Drivers\snapman.sys (Acronis) DRV:64bit: - (fltsrv) -- C:\Windows\SysNative\Drivers\fltsrv.sys (Acronis) DRV:64bit: - (AF15BDA) -- C:\Windows\SysNative\Drivers\AF15BDA.sys (AfaTech ) DRV:64bit: - (ssudmdm) -- C:\Windows\SysNative\Drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr)) DRV:64bit: - (dg_ssudbus) -- C:\Windows\SysNative\Drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr)) DRV:64bit: - (USBHUB3) -- C:\Windows\SysNative\Drivers\USBHUB3.SYS (Microsoft Corporation) DRV:64bit: - (BthAvrcpTg) -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys (Microsoft Corporation) DRV:64bit: - (WdBoot) -- C:\Windows\SysNative\Drivers\WdBoot.sys (Microsoft Corporation) DRV:64bit: - (WdFilter) -- C:\Windows\SysNative\Drivers\WdFilter.sys (Microsoft Corporation) DRV:64bit: - (msgpiowin32) -- C:\Windows\SysNative\Drivers\msgpiowin32.sys (Microsoft Corporation) DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\Drivers\AtihdW86.sys (Advanced Micro Devices) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\Drivers\atikmdag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\Drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (ndisrd) -- C:\Windows\SysNative\Drivers\ndisrd.sys (NT Kernel Resources) DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.) DRV:64bit: - (bthhfhid) -- C:\Windows\SysNative\Drivers\BthhfHid.sys (Microsoft Corporation) DRV:64bit: - (hidi2c) -- C:\Windows\SysNative\Drivers\hidi2c.sys (Microsoft Corporation) DRV:64bit: - (FxPPM) -- C:\Windows\SysNative\Drivers\fxppm.sys (Microsoft Corporation) DRV:64bit: - (igfx) -- C:\Windows\SysNative\Drivers\igdkmd64.sys (Intel Corporation) DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys (Microsoft Corporation) DRV:64bit: - (sdstor) -- C:\Windows\SysNative\Drivers\sdstor.sys (Microsoft Corporation) DRV:64bit: - (dam) -- C:\Windows\SysNative\Drivers\dam.sys (Microsoft Corporation) DRV:64bit: - (StillCam) -- C:\Windows\SysNative\Drivers\serscan.sys (Microsoft Corporation) DRV:64bit: - (UCX01000) -- C:\Windows\SysNative\Drivers\UCX01000.SYS (Microsoft Corporation) DRV:64bit: - (GPIOClx0101) -- C:\Windows\SysNative\Drivers\msgpioclx.sys (Microsoft Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\Drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\Drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys (GEAR Software Inc.) DRV:64bit: - (asmtxhci) -- C:\Windows\SysNative\Drivers\asmtxhci.sys (ASMedia Technology Inc) DRV:64bit: - (asmthub3) -- C:\Windows\SysNative\Drivers\asmthub3.sys (ASMedia Technology Inc) DRV:64bit: - (AF9035BDA) -- C:\Windows\SysNative\Drivers\AF9035BDA.sys (AfaTech ) DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\Drivers\PxHlpa64.sys (Corel Corporation) DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (condrv) -- C:\Windows\SysNative\Drivers\condrv.sys (Microsoft Corporation) DRV:64bit: - (VSTXRAID) -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS (VIA Corporation) DRV:64bit: - (VerifierExt) -- C:\Windows\SysNative\Drivers\VerifierExt.sys (Microsoft Corporation) DRV:64bit: - (UASPStor) -- C:\Windows\SysNative\Drivers\uaspstor.sys (Microsoft Corporation) DRV:64bit: - (acpiex) -- C:\Windows\SysNative\Drivers\acpiex.sys (Microsoft Corporation) DRV:64bit: - (mvumis) -- C:\Windows\SysNative\Drivers\mvumis.sys (Marvell Semiconductor, Inc.) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\Drivers\stexstor.sys (Promise Technology, Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\Drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (LSI_SSS) -- C:\Windows\SysNative\Drivers\lsi_sss.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\Drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (EhStorTcgDrv) -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys (Microsoft Corporation) DRV:64bit: - (EhStorClass) -- C:\Windows\SysNative\Drivers\EhStorClass.sys (Microsoft Corporation) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\Drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (3ware) -- C:\Windows\SysNative\Drivers\3ware.sys (LSI) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\Drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\Drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (CLFS) -- C:\Windows\SysNative\Drivers\clfs.sys (Microsoft Corporation) DRV:64bit: - (WFPLWFS) -- C:\Windows\SysNative\Drivers\wfplwfs.sys (Microsoft Corporation) DRV:64bit: - (vpci) -- C:\Windows\SysNative\Drivers\vpci.sys (Microsoft Corporation) DRV:64bit: - (terminpt) -- C:\Windows\SysNative\Drivers\terminpt.sys (Microsoft Corporation) DRV:64bit: - (mshidumdf) -- C:\Windows\SysNative\Drivers\mshidumdf.sys (Microsoft Corporation) DRV:64bit: - (BasicDisplay) -- C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation) DRV:64bit: - (HyperVideo) -- C:\Windows\SysNative\Drivers\HyperVideo.sys (Microsoft Corporation) DRV:64bit: - (BasicRender) -- C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation) DRV:64bit: - (gencounter) -- C:\Windows\SysNative\Drivers\vmgencounter.sys (Microsoft Corporation) DRV:64bit: - (kdnic) -- C:\Windows\SysNative\Drivers\kdnic.sys (Microsoft Corporation) DRV:64bit: - (acpitime) -- C:\Windows\SysNative\Drivers\acpitime.sys (Microsoft Corporation) DRV:64bit: - (npsvctrig) -- C:\Windows\SysNative\Drivers\npsvctrig.sys (Microsoft Corporation) DRV:64bit: - (WpdUpFltr) -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys (Microsoft Corporation) DRV:64bit: - (acpipagr) -- C:\Windows\SysNative\Drivers\acpipagr.sys (Microsoft Corporation) DRV:64bit: - (hyperkbd) -- C:\Windows\SysNative\Drivers\hyperkbd.sys (Microsoft Corporation) DRV:64bit: - (SerCx) -- C:\Windows\SysNative\Drivers\SerCx.sys (Microsoft Corporation) DRV:64bit: - (SpbCx) -- C:\Windows\SysNative\Drivers\SpbCx.sys (Microsoft Corporation) DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\Drivers\TsUsbGD.sys (Microsoft Corporation) DRV:64bit: - (BthHFEnum) -- C:\Windows\SysNative\Drivers\bthhfenum.sys (Microsoft Corporation) DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\Drivers\dmvsc.sys (Microsoft Corporation) DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:64bit: - (Vid) -- C:\Windows\SysNative\Drivers\Vid.sys (Microsoft Corporation) DRV:64bit: - (storvsp) -- C:\Windows\SysNative\Drivers\storvsp.sys (Microsoft Corporation) DRV:64bit: - (wpcfltr) -- C:\Windows\SysNative\Drivers\wpcfltr.sys (Microsoft Corporation) DRV:64bit: - (vmbusr) -- C:\Windows\SysNative\Drivers\vmbusr.sys (Microsoft Corporation) DRV:64bit: - (vpcivsp) -- C:\Windows\SysNative\Drivers\vpcivsp.sys (Microsoft Corporation) DRV:64bit: - (NdisImPlatform) -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys (Microsoft Corporation) DRV:64bit: - (MsLldp) -- C:\Windows\SysNative\Drivers\mslldp.sys (Microsoft Corporation) DRV:64bit: - (Ndu) -- C:\Windows\SysNative\Drivers\Ndu.sys (Microsoft Corporation) DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\Drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (RTL8168) -- C:\Windows\SysNative\Drivers\Rt630x64.sys (Realtek ) DRV:64bit: - (VIAHdAudAddService) -- C:\Windows\SysNative\Drivers\viahduaa.sys (VIA Technologies, Inc.) DRV:64bit: - (Netaapl) -- C:\Windows\SysNative\Drivers\netaapl64.sys (Apple Inc.) DRV:64bit: - (VClone) -- C:\Windows\SysNative\Drivers\VClone.sys (Elaborate Bytes AG) DRV:64bit: - (ElbyCDIO) -- C:\Windows\SysNative\Drivers\ElbyCDIO.sys (Elaborate Bytes AG) DRV:64bit: - (LVUVC64) -- C:\Windows\SysNative\Drivers\lvuvc64.sys (Logitech Inc.) DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\Drivers\lvrs64.sys (Logitech Inc.) DRV:64bit: - (LVPr2Mon) -- C:\Windows\SysNative\Drivers\LVPr2M64.sys () DRV:64bit: - (LVPr2M64) -- C:\Windows\SysNative\Drivers\LVPr2M64.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 76 26 25 B3 42 25 CE 01 [binary data] IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0 FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: D:\Programme\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\IB UPDATER\FIREFOX FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.06.02 12:57:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\Extensions [2013.06.02 12:57:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\Extensions\home2@tomtom.com [2013.07.09 09:01:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\Firefox\Profiles\kv8pufq0.default\extensions [2013.05.25 20:39:17 | 002,168,615 | ---- | M] () (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\firefox\profiles\kv8pufq0.default\extensions\firebug@software.joehewitt.com.xpi [2013.05.08 18:30:46 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\firefox\profiles\kv8pufq0.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013.07.09 09:01:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\Extensions [2013.07.03 08:47:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2013.07.03 08:47:12 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ========== Chrome ========== CHR - default_search_provider: Delta Search (Enabled) CHR - default_search_provider: search_url = hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938 CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: hxxp://google.de/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll CHR - plugin: AdobeAAMDetect (Enabled) = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Intel Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll CHR - plugin: Intel Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll CHR - plugin: Java(TM) Platform SE 7 U17 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll CHR - plugin: Microsoft Office 2013 (Enabled) = D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL CHR - Extension: Google Docs = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Google Drive = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Google-Suche = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Type Scout = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fedokkaolmkkoeedicihicdeppjjeamj\5_0\ CHR - Extension: Stoppuhr / Timer = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggnidjbcahhbnleinchgobfnabopeioh\3.6_0\ CHR - Extension: IP-Adresse = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpnjjlbngpejmmhgcaagljaomgnginml\7.1_0\ CHR - Extension: Google Maps = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0\ CHR - Extension: Google Mail = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.02.20 09:09:58 | 000,000,920 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 activation.acronis.com O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Programme\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (TerraTec Home Cinema) - {AD6E6555-FB2C-47D4-8339-3E2965509877} - D:\Programme\TerraTec\ThcDeskBand.dll (TerraTec Electronic GmbH) O4:64bit: - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis) O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4 - HKLM..\Run: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [ASUS AiChargerPlus Execute] C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe (ASUSTek Computer Inc.) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA) O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe () O4 - HKLM..\Run: [PDFPrint] D:\Programme\PDF24\pdf24.exe (Geek Software GmbH) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [TrueImageMonitor.exe] D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe (Acronis) O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.) O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\Run: [SanDiskSecureAccess_Manager.exe] C:\Users\Dennis\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe (Gemalto N.V.) O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\Run: [Steam] D:\Programme\Steam\Steam.exe (Valve Corporation) O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware ] D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe (Adobe Systems Incorporated) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{85857567-4AF6-45DF-A32C-664D377FCD21}: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CCED002F-2860-4698-B4A4-8167E81279C0}: DhcpNameServer = 139.7.30.126 139.7.30.125 O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\osf - No CLSID value found O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programme\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27:64bit: - HKLM IFEO\utilman.exe: Debugger - C:\Windows\SysNative\cmd.exe (Microsoft Corporation) O27 - HKLM IFEO\utilman.exe: Debugger - C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) O30 - LSA: Security Packages - (livessp) - File not found O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{36bdab4f-5824-11e2-be81-3085a9eac743}\Shell - "" = AutoRun O33 - MountPoints2\{36bdab4f-5824-11e2-be81-3085a9eac743}\Shell\AutoRun\command - "" = "M:\SETUP.EXE" O33 - MountPoints2\{36bdab4f-5824-11e2-be81-3085a9eac743}\Shell\configure\command - "" = M:\SETUP.EXE O33 - MountPoints2\{36bdab4f-5824-11e2-be81-3085a9eac743}\Shell\install\command - "" = M:\SETUP.EXE O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.07.12 07:24:52 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Dennis\Desktop\OTL.exe [2013.07.09 20:39:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\StarCraft II [2013.07.09 20:39:08 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Desktop\Skirmish [2013.07.09 09:23:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2013.07.09 09:00:53 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Documents\Freemake [2013.07.09 09:00:52 | 000,000,000 | ---D | C] -- C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake [2013.07.09 09:00:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake [2013.07.09 09:00:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Freemake [2013.07.09 09:00:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Freemake [2013.07.08 20:12:51 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Desktop\STICK [2013.07.07 03:00:52 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tssdisai.dll [2013.07.05 07:36:59 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2013.07.05 07:36:35 | 000,000,000 | ---D | C] -- C:\Windows\softwaredistribution.bak1 [2013.07.03 08:47:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2013.06.25 08:21:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2013.06.25 08:21:46 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2013.06.25 08:21:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2013.06.25 08:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 [2013.06.23 23:23:57 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Desktop\test [2013.06.23 23:23:09 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Desktop\EraserPortable [2013.06.23 19:06:31 | 000,000,000 | -HSD | C] -- C:\$$PendingFiles [2013.06.23 18:22:17 | 001,889,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2013.06.23 18:22:16 | 001,255,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe [2013.06.23 18:22:16 | 001,013,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe [2013.06.23 18:22:16 | 000,733,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2013.06.23 18:22:16 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2013.06.23 18:22:15 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll [2013.06.23 18:22:15 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll [2013.06.23 18:22:10 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013.06.23 18:22:09 | 000,915,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll [2013.06.23 18:22:09 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013.06.23 18:22:09 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013.06.23 18:22:09 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013.06.23 18:22:09 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UXInit.dll [2013.06.23 18:22:09 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013.06.23 18:22:09 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UXInit.dll ========== Files - Modified Within 30 Days ========== [2013.07.12 07:24:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Dennis\Desktop\OTL.exe [2013.07.12 06:48:20 | 000,000,565 | ---- | M] () -- C:\Users\Dennis\AppData\Roaming\myMPQ.ini [2013.07.12 06:45:00 | 000,001,130 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.07.12 06:37:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.07.11 23:59:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.07.11 23:59:29 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs [2013.07.11 23:40:02 | 000,001,126 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.07.11 07:32:35 | 001,754,016 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013.07.11 07:32:35 | 000,755,402 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2013.07.11 07:32:35 | 000,712,950 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013.07.11 07:32:35 | 000,156,630 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2013.07.11 07:32:35 | 000,133,260 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013.07.09 21:07:52 | 000,083,556 | ---- | M] () -- C:\Users\Dennis\Desktop\DB BAHN - Verbindungen - Verfügbarkeit.pdf [2013.07.09 20:39:59 | 000,000,974 | ---- | M] () -- C:\Users\Dennis\Desktop\SC2ALLin1.lnk [2013.07.09 20:23:14 | 000,000,667 | ---- | M] () -- C:\Users\Dennis\AppData\Roaming\MPQEditor.ini [2013.07.09 09:23:44 | 000,000,615 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk [2013.07.09 09:20:59 | 000,000,759 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2013.07.09 09:17:12 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2013.07.09 09:17:00 | 2537,435,135 | -HS- | M] () -- C:\hiberfil.sys [2013.07.09 09:00:51 | 000,001,324 | ---- | M] () -- C:\Users\Public\Desktop\Freemake Video Converter.lnk [2013.07.08 10:21:30 | 000,166,704 | ---- | M] () -- C:\Users\Dennis\Desktop\Amazon.pdf [2013.07.01 10:36:19 | 000,002,194 | -H-- | M] () -- C:\Users\Dennis\Documents\Default.rdp [2013.06.27 15:52:08 | 000,083,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys [2013.06.25 08:21:53 | 000,001,543 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2013.06.23 23:21:37 | 000,001,128 | ---- | M] () -- C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk ========== Files Created - No Company Name ========== [2013.07.09 21:07:52 | 000,083,556 | ---- | C] () -- C:\Users\Dennis\Desktop\DB BAHN - Verbindungen - Verfügbarkeit.pdf [2013.07.09 20:41:14 | 000,000,565 | ---- | C] () -- C:\Users\Dennis\AppData\Roaming\myMPQ.ini [2013.07.09 20:39:59 | 000,000,974 | ---- | C] () -- C:\Users\Dennis\Desktop\SC2ALLin1.lnk [2013.07.09 20:22:38 | 000,000,667 | ---- | C] () -- C:\Users\Dennis\AppData\Roaming\MPQEditor.ini [2013.07.09 09:20:59 | 000,000,759 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2013.07.09 09:00:51 | 000,001,324 | ---- | C] () -- C:\Users\Public\Desktop\Freemake Video Converter.lnk [2013.07.08 10:21:29 | 000,166,704 | ---- | C] () -- C:\Users\Dennis\Desktop\Amazon.pdf [2013.06.25 08:21:53 | 000,001,543 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2013.06.23 23:21:37 | 000,001,128 | ---- | C] () -- C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk [2013.05.21 19:47:31 | 001,772,970 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2013.05.17 09:34:49 | 000,000,288 | ---- | C] () -- C:\Users\Dennis\AppData\Roaming\.backup.dm [2013.05.17 09:34:44 | 000,007,620 | ---- | C] () -- C:\Users\Dennis\AppData\Local\Resmon.ResmonCfg [2013.05.17 09:34:44 | 000,000,835 | ---- | C] () -- C:\Users\Dennis\AppData\Local\recently-used.xbel [2013.05.17 09:33:13 | 000,007,680 | ---- | C] () -- C:\Users\Dennis\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013.02.06 19:31:31 | 000,000,256 | ---- | C] () -- C:\Windows\Brpfx04a.ini [2013.02.06 19:31:31 | 000,000,093 | ---- | C] () -- C:\Windows\brpcfx.ini [2013.02.06 19:31:23 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI [2013.02.06 19:31:23 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI [2013.02.06 19:31:13 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\BrMuSNMP.dll [2013.02.06 19:31:13 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini [2013.02.06 19:31:13 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat [2013.01.08 09:06:01 | 000,000,790 | ---- | C] () -- C:\Windows\wiso.ini [2013.01.03 11:37:38 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll [2013.01.02 08:21:17 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2012.12.18 23:04:29 | 004,244,624 | ---- | C] () -- C:\Windows\PE_Rom.dll [2012.12.18 23:00:44 | 000,014,464 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys [2012.12.18 22:59:59 | 000,015,232 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2012.12.18 22:59:59 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys [2012.12.18 22:59:59 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys [2012.12.18 19:37:55 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2012.12.18 19:32:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS [2012.10.22 18:40:28 | 000,598,780 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin [2012.10.22 18:40:04 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll [2012.10.22 18:40:00 | 000,755,048 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin [2012.09.28 03:29:54 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2012.09.28 03:29:54 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2012.07.26 10:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2012.07.26 10:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2012.07.26 09:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2012.07.26 03:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2012.07.25 22:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2012.07.25 22:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2012.06.02 16:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2012.05.02 14:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll [2012.04.20 14:59:44 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll [2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat ========== ZeroAccess Check ========== [2013.03.24 19:56:07 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013.03.06 08:31:28 | 019,758,592 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.03.06 07:03:37 | 017,561,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012.07.26 05:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2012.07.26 05:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012.07.26 05:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] ========== LOP Check ========== [2013.05.17 09:34:49 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\Acronis [2013.07.03 07:36:43 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\ALFBanCo3 [2013.05.17 09:34:55 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\ALFBanCo3_org [2013.05.17 09:34:55 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\AnvSoft [2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\Armagetron [2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\e-academy Inc [2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\FileZilla [2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\ImgBurn [2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\IrfanView [2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\JAM Software [2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\Leadertech [2013.05.17 09:35:00 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\Notepad++ [2013.06.26 23:04:06 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\SanDisk [2013.05.17 09:35:01 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\SanDisk SecureAccess [2013.05.17 09:35:01 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\TeamViewer [2013.05.17 09:35:01 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\TerraTec [2013.06.02 12:57:34 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\TomTom [2013.07.11 07:33:15 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\UseNeXT ========== Purity Check ========== < End of report > Code:
ATTFilter OTL Extras logfile created on: 12.07.2013 07:26:23 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dennis\Desktop
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16599)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
7,95 Gb Total Physical Memory | 5,61 Gb Available Physical Memory | 70,48% Memory free
12,44 Gb Paging File | 7,55 Gb Available in Paging File | 60,69% Paging File free
Paging file location(s): c:\pagefile.sys 4596 4596g:\pagef [Binary data over 200 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 59,28 Gb Total Space | 14,62 Gb Free Space | 24,66% Space Free | Partition Type: NTFS
Drive D: | 70,05 Gb Total Space | 53,85 Gb Free Space | 76,87% Space Free | Partition Type: NTFS
Drive E: | 200,00 Gb Total Space | 15,97 Gb Free Space | 7,98% Space Free | Partition Type: NTFS
Drive F: | 350,51 Gb Total Space | 27,02 Gb Free Space | 7,71% Space Free | Partition Type: NTFS
Drive G: | 381,00 Gb Total Space | 14,16 Gb Free Space | 3,72% Space Free | Partition Type: NTFS
Drive H: | 295,76 Gb Total Space | 41,22 Gb Free Space | 13,94% Space Free | Partition Type: NTFS
Drive I: | 14,89 Gb Total Space | 14,89 Gb Free Space | 100,00% Space Free | Partition Type: FAT32
Drive L: | 99,89 Gb Total Space | 29,33 Gb Free Space | 29,36% Space Free | Partition Type: NTFS
Computer Name: DENNIS-PC | User Name: Dennis | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = CE 37 E6 AF FF 6A CD 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07F7AE09-FBE5-46B1-B33A-1D8E263B2394}" = lport=445 | protocol=6 | dir=in | app=system |
"{085F0C99-7FAA-4E0C-90B4-BE30A387CE39}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{22ECFE2E-B1C3-41AF-9FF8-D579B2441313}" = lport=10243 | protocol=6 | dir=in | app=system |
"{32181453-8CCE-4E5A-A4F4-BD64B13E3667}" = rport=445 | protocol=6 | dir=out | app=system |
"{3B28FBE3-20D2-4014-BC9D-047CB838D175}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3F7BA72F-4961-49FB-868E-2563CAA56A13}" = lport=3702 | protocol=17 | dir=in | app=d:\programme\visualstudio2012\common7\ide\wdexpress.exe |
"{51F9EC06-A687-4D53-9F02-98DFA038C150}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{57596EAC-C99C-41A2-99FA-02C1FE7DC073}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{6283C3D9-7F31-48BC-A167-CA239612A4C1}" = rport=10243 | protocol=6 | dir=out | app=system |
"{76F526E2-FF4A-4867-BA4D-7CF42333D778}" = lport=139 | protocol=6 | dir=in | app=system |
"{78AB8096-E0D1-4738-B968-45BC00E58EE0}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{79353B8B-09F3-4327-B246-B4735419C711}" = rport=137 | protocol=17 | dir=out | app=system |
"{8B4B047E-01EE-4F17-BDCC-A3A12F412B27}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{9645E638-2A0F-4042-BCB9-58708486424C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{A5B1DA88-6F0A-47EE-B204-66A81A70C7F6}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A78FDD4D-C354-47BC-8C5C-E1A82548830E}" = lport=3389 | protocol=17 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe |
"{C135BED8-9002-4A32-B994-623B9A72AF70}" = lport=137 | protocol=17 | dir=in | app=system |
"{C2B0F641-0135-4934-A587-CA3DAEBF37FE}" = lport=138 | protocol=17 | dir=in | app=system |
"{C7FD1924-8A07-4B5B-8499-1F189E30D439}" = rport=138 | protocol=17 | dir=out | app=system |
"{D01AFAF2-BBD9-4F85-892C-B03EB3EDC875}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{D02BB960-99A4-4C6F-A7F7-67F58A73E34A}" = lport=2869 | protocol=6 | dir=in | app=system |
"{D75BFD0D-10E0-48BE-B96A-A306E6504C51}" = lport=3389 | protocol=6 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe |
"{DB1B5242-1ED6-4EDD-B6A4-062EFDA4D2E5}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner |
"{E5741AB9-7137-431E-91ED-B9C2242CE66F}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{EE8986D6-47FD-446C-B119-B56FD99490EA}" = rport=139 | protocol=6 | dir=out | app=system |
"{FF258F7E-F40E-4B9E-BE23-61A7D5290840}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{033B97F7-449E-4867-AC42-33965B947EBC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{062BA0E7-5E2A-4444-92FF-8B85BDB04BBB}" = dir=out | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{077E7610-54CD-4988-AF47-AE7F504FD31A}" = protocol=6 | dir=in | app=d:\programme\terratec\versioncheck\versioncheck.exe |
"{0D13C9BF-7C2D-47E8-BE82-30CBC9439513}" = protocol=6 | dir=in | app=c:\program files (x86)\asus\ai suite ii\ai suite ii.exe |
"{0E5AF445-E232-4BB7-8A02-2AF2F819CCB0}" = dir=out | name=@{microsoft.microsoftskydrive_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} |
"{0E7E997B-53DE-4874-94D5-1DC5EA6E8AFC}" = protocol=6 | dir=in | app=d:\programme\terratec\cinergydvr.exe |
"{112D0A94-C9E2-48F3-88ED-C7FE19A6AEF3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1419B558-42A7-4CDB-95B2-0641EC819F2D}" = dir=out | name=amazon |
"{143E6848-F84A-4F59-81B4-F79882B8588A}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{1552E134-EE42-40A4-A6F2-10089BAFD8F7}" = protocol=17 | dir=in | app=d:\programme\steam\steam.exe |
"{156189B4-B138-4117-A860-80843B70F827}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe |
"{1B5370E8-4084-442E-AE8C-A7CF995C4783}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe |
"{1D3CCE58-ED73-4D1C-A4FF-580C5AA1BC00}" = dir=out | name=@{microsoft.bingfinance_2.0.0.300_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} |
"{240E38CE-2ADF-4503-B2A0-6C8B2CA9DD70}" = dir=out | name=@{44352gadgetwe.unitconversion_1.0.1.4_neutral__wrnqd43hr7tc6?ms-resource://44352gadgetwe.unitconversion/resources/appstorename} |
"{25002815-373A-430A-867C-5B4799FC5F46}" = dir=in | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{27E5989D-82CE-4B76-89A9-C7DA46652501}" = dir=out | name=skype |
"{2D49554E-0761-4811-A1D4-99422654DA31}" = protocol=6 | dir=in | app=c:\program files (x86)\brother\brmfl06a\faxrx.exe |
"{31EDC103-9F84-4922-9858-1BA7CD13FA92}" = protocol=6 | dir=in | app=c:\windows\system32\arfc\wrtc.exe |
"{350C7FD1-C44C-4BE2-9847-6DB052318D40}" = protocol=6 | dir=in | app=c:\windows\system32\arfc\wrtc.exe |
"{35343913-29C2-463A-9A33-6BFAB9B2E606}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{38087BFB-4F6C-4514-9C05-2257CB48CE3C}" = dir=in | name=skype |
"{39F7FF37-D99D-4C80-8956-C8AE65A21D79}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\sid meier's civilization v\launcher.exe |
"{3C237C80-AF3D-4337-A768-BA3CCE342216}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{490B1D59-2BED-4168-87E8-D517784B4041}" = dir=in | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{50B34BB1-A26D-4DC7-98B8-819D03844E1C}" = dir=out | name=@{microsoft.bingsports_2.0.0.273_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} |
"{537060B7-D53A-44B8-87B1-8FAA82DD0688}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\sid meier's civilization v\launcher.exe |
"{5B7226E6-C26A-4898-B427-18B8BBA48A17}" = dir=out | name=@{microsoft.bingmaps_1.6.1821.2624_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{5F4DCD7F-4A86-4344-B5C3-C690CA152650}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{62071E59-4B70-4C1E-B214-650B258664BD}" = dir=out | name=@{microsoft.bingweather_2.0.0.288_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} |
"{694ED10E-5474-4AE4-AB4D-08CE7F4529BC}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{6DE381F3-FF8A-45EA-82D1-0AFD19F47D53}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{6DFF85EA-1E15-4F1E-BD2A-682B4D801394}" = dir=out | name=@{microsoft.bingnews_2.0.0.273_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} |
"{7274EA3D-DC2F-47B4-B562-2390F864DAA9}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{74D2F9C5-1EA9-4A34-A156-8ABBCB3E3099}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{777EE770-45AD-4811-BCE8-5A912DE66E58}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe |
"{7FD395A2-E337-4C9A-B6C3-BC18CB60462B}" = dir=out | name=microsoft minesweeper |
"{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{8319566F-9C98-4E26-80A6-740A0C7F3FF1}" = protocol=6 | dir=in | app=d:\programme\filezilla ftp client\filezilla.exe |
"{84C42697-426E-48E7-B293-493C4CA8945C}" = protocol=17 | dir=in | app=d:\programme\filezilla ftp client\filezilla.exe |
"{87481535-9D4A-41CD-B3AA-A7E3976FB4EC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{875652B2-3465-479E-A36B-837C0F7CF104}" = dir=in | app=d:\programme\itunes\itunes.exe |
"{8B6ABFF0-69BE-4C1D-A3F8-0DFD936E14A3}" = dir=out | name=@{microsoft.bingtravel_2.0.0.274_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} |
"{932F836E-574B-440C-A523-57318BA4731C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{958C1D2A-75D2-4CB7-91CE-D1C9119051ED}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{96B46E0C-2973-4F86-8E6D-E042A7D0189D}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{9908E706-5C0E-4773-87A5-563BEB90848C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{9BDF4387-3312-4DE9-A35E-80F8973E42F1}" = protocol=17 | dir=in | app=d:\programme\terratec\cinergydvr.exe |
"{A19605E4-EFE5-40F7-9530-DECE30F02692}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{A43861A3-0C2A-40EC-836A-42FDB5A1F3DD}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe |
"{AC05E5BF-E4C5-4145-8653-094962C39792}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{ACB1F1C7-DB66-429E-B978-B844D6DA6FFA}" = dir=out | name=@{microsoft.zunemusic_1.4.18.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{AD25907E-2A84-4E9B-B87F-CBC01EE11569}" = protocol=6 | dir=out | app=system |
"{B154FB87-5830-410E-B2D3-4171A724E836}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{B55B938E-3184-47C1-AD2C-E0AD3A844B77}" = protocol=6 | dir=in | app=d:\programme\steam\steam.exe |
"{BD0B2124-B7AA-4738-AB86-275D750A3808}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C0208E7E-7008-431B-88FB-CC681A9D2BA8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{C1DD0B81-9169-491E-A9D0-2FF2C76911DF}" = dir=out | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{C2115DBB-29A0-4A5C-847D-2CAB59E095BD}" = dir=out | name=@{microsoft.bing_1.5.1.259_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} |
"{C98A8C8D-6DEB-4818-BE87-608F99F6420A}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe |
"{CDD8E311-B7FE-4EAF-870E-4AA1F9FA6FA2}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{D5D8AA81-2881-4EB7-9620-93A7A52B222D}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe |
"{D7A9AEC1-7347-444F-A5CE-775ADBE1D563}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D7BF93E0-B075-44B4-9484-6E59707219D2}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{DA327EEE-00F9-4D85-908E-D4DCE027C9AB}" = protocol=17 | dir=in | app=d:\programme\terratec\versioncheck\versioncheck.exe |
"{DBBEA8A6-EAE1-4817-B2CC-A3DBA1EB242E}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{E15B149D-5499-4776-B5A1-5DB5EF8BD21D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E16F8E5B-FCC0-4366-8F9B-9DB3505D15CE}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{E5D39BA6-6BC9-4018-9CBD-AA9477A638C1}" = protocol=6 | dir=in | app=d:\programme\terratec\insttool.exe |
"{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{E90FCD7A-D1E5-4FBA-A45A-18A0733601DE}" = protocol=17 | dir=in | app=c:\program files (x86)\asus\ai suite ii\ai suite ii.exe |
"{EA366C9D-4E89-4C66-AC38-D725C015B31D}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{EAAD3AD7-F2BE-4B79-AD59-619437332C9B}" = dir=out | name=@{microsoft.xboxlivegames_1.3.10.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"{F1573109-C098-43A4-9F09-4C27164E2985}" = protocol=17 | dir=in | app=d:\programme\terratec\insttool.exe |
"{F217ED78-0637-46A0-A8D3-8586D507E53D}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{F2671453-C0F0-4CC5-9667-E33391D24105}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{F50A13B3-AA86-4B67-8F7A-CCE8799C205D}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{F8C150D6-E5D7-453B-BC70-2CC85503EBC2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{FAA37F8F-C424-4ABC-A2AC-8A7557D21E85}" = protocol=17 | dir=in | app=c:\program files (x86)\brother\brmfl06a\faxrx.exe |
"TCP Query User{0E1DDB2C-BECC-472D-926D-5AE526AF412F}L:\spiele\starcraft ii\versions\base15405\sc2.exe" = protocol=6 | dir=in | app=l:\spiele\starcraft ii\versions\base15405\sc2.exe |
"TCP Query User{3C8A0B85-C65F-4E43-82CE-EB0115C5B00B}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{E790C3E2-7219-4A27-83BA-E13ED78BBD34}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{9082F519-D713-473D-A5B5-C1C550F8785D}L:\spiele\starcraft ii\versions\base15405\sc2.exe" = protocol=17 | dir=in | app=l:\spiele\starcraft ii\versions\base15405\sc2.exe |
"UDP Query User{B9F092D8-7B02-4B13-A01A-0DA8B0C89794}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{EDDFA90B-CD13-451E-B9D1-00BB11AB35FB}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{13C9CD03-A5FE-4F50-AC8A-17B77C38CC52}" = Microsoft SQL Server 2012 Transact-SQL ScriptDom
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{27EF252D-800C-ED42-9904-459FE0046225}" = Windows Software Development Kit for Windows Store Apps DirectX x64 Remote
"{2B997E80-3BEC-3222-9114-98DBE1182B2E}" = Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727
"{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
"{36E619BC-A234-4EC3-849B-779A7C865A45}" = Microsoft SQL Server 2012 Data-Tier App Framework
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{55FABD1D-8BE6-4A1A-958D-52B15F1DFEF0}" = Microsoft SQL Server 2012 Transact-SQL Compiler Service
"{5E03A267-415E-5383-FA8F-3CE4145663B9}" = AMD Catalyst Install Manager
"{5FB4C443-6BD6-1514-2717-3827D65AE6FB}" = Windows Software Development Kit DirectX x64 Remote
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64A5D39C-95CD-4B8B-B2FA-6C713133B57F}" = Microsoft-System-CLR-Typen für SQL Server 2012 (x64)
"{66CF1DF9-1715-4325-89BC-76B1CA2EE3BE}" = Adobe Premiere Elements 11
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{6F07A6C2-9068-3673-A120-DC10012468C6}" = Microsoft Visual Studio Team Foundation Server 2012 Object Model
"{704C0303-D20C-45AF-BD2B-556EAF31BE09}" = iCloud
"{76FF0F03-B707-4332-B5D1-A56C8303514E}" = iTunes
"{843AD902-84EA-3CE3-90F3-6866E567427D}" = Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU
"{89EE4A30-080F-2C95-6F78-C98D18FBD74D}" = AMD Accelerated Video Transcoding
"{8E4BA1E5-54E8-41F0-919B-CD875B83CFCE}" = Microsoft SQL Server 2012 Native Client
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{90150000-002A-0000-1000-0000000FF1CE}" = Microsoft Office 64-bit Components 2013
"{90150000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2013
"{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}" = Microsoft SQL Server Compact 4.0 SP1 x64 DEU
"{987FE247-4E69-4A2E-A961-D14F901FDBF6}" = Logitech Webcam Software
"{9CF11D16-ECEB-90A5-A028-CA9E068D848B}" = ccc-utility64
"{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727
"{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727
"{AD49BD4B-6CEE-4EA2-B53E-8EB0606F1B11}" = Microsoft SQL Server 2012 Command Line Utilities
"{D4DA7C91-A59F-4C72-BAC4-DF7C76AB1CB8}" = Microsoft SQL Server 2012 Management Objects (x64)
"{ED1EBD88-D341-321A-BB22-52D7E703E316}" = Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU
"{EF18EF0F-96D3-4A6B-9600-2197F1720A15}" = Microsoft SQL Server 2012 Express LocalDB
"{F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}" = Intel® Trusted Connect Service Client
"097FFCDCC4FD60E5718889F1A1C7F15458FD6845" = Windows-Treiberpaket - TerraTec (AF9035BDA) Media (05/18/2009 8.08.18.01)
"430A686A491BA2CF5123106A821772D4CFD2F3DE" = Windows-Treiberpaket - TERRATEC (AF15BDA) Media (09/17/2009 6.9.28.5)
"GIMP-2_is1" = GIMP 2.8.4
"PremElem110" = Adobe Premiere Elements 11
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00C84D22-DB8F-4159-BF70-682B8EA56A1E}" = Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01)
"{017F8447-2A1D-0DDB-B5D7-CA2BFACE2886}" = CCC Help French
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{054E9A1C-3EA2-C657-E787-FD8DCF5C3D3B}" = CCC Help Czech
"{093E5DE2-3F0E-4305-905E-712231AF3731}" = Microsoft Visual C++ 2012 32bit Compilers - DEU Resources
"{0CC1DAFB-40C8-4903-953D-471E541477C7}" = WISO Steuer-Sparbuch 2012
"{11D08055-939C-432b-98C3-E072478A0CD7}" = PSE10 STI Installer
"{15B644D2-BB50-45AE-95E6-7717B15181E7}" = TERRATEC CINERGY T USB XE MKII (64 Bit)
"{1948E039-EC79-4591-951D-9867A8C14C90}" = Microsoft .NET Framework 4.5 SDK
"{1BE2AFE6-209E-3862-AE45-DA9D3D21BD65}" = Microsoft Visual Studio Express 2012 for Windows Desktop
"{1C163D33-33B3-33EB-A617-0D4D852BE8E1}" = Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727
"{1DE2BD51-0300-772D-5E18-F337D95D5687}" = CCC Help German
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F64A9D9-1014-4703-9AB3-D40186EC1FD9}" = Cinergy T Stick Driver Installation (64 Bit)
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{224E8FEB-5C1F-077F-6FC5-602AC1AE644D}" = CCC Help Danish
"{22D3A614-482C-444A-932C-9DA1B8ECDFD2}" = Elements 10 Organizer
"{23176E97-26CB-C72A-19EB-BFB21AC1D15A}" = Windows Software Development Kit DirectX x86 Remote
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{275E9C49-C72F-D754-DEB7-77F10A9C00D8}" = CCC Help Japanese
"{28C7A4BB-3966-4373-8376-C11F38290630}" = Microsoft SQL Server 2012 T-SQL Language Service
"{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727
"{30049739-BE95-6591-B504-E6D7057D49CC}" = CCC Help Spanish
"{34D3688E-A737-44C5-9E2A-FF73618728E1}" = AI Suite II
"{362BEB3B-09C8-4DAA-87A5-EE3E667C84BA}" = Wolverine Student/Demo Software
"{3F1EB155-F96E-EB7B-2EF2-7375490E0FA9}" = CCC Help English
"{42F61556-29ED-8122-F39E-6F04EA5FF279}" = Windows Software Development Kit for Windows Store Apps DirectX x86 Remote
"{4705DBFD-9D5E-4D23-817C-8CA7359B7BDE}" = Entity Framework Designer für Visual Studio 2012 - DEU
"{49402ED1-A795-4435-A745-1B781BE621A6}" = Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B023D7B-9E67-795D-FB31-B5E1F6DCA451}" = CCC Help Italian
"{4C0B27C3-3E8F-4BD2-80FF-6E9E48EBD6D8}" = Microsoft-System-CLR-Typen für SQL Server 2012
"{555A2B41-E7C9-4389-B605-7393A5B80559}" = Microsoft Visual Studio 2012-Vorbereitung
"{55F6C486-8C75-2A72-DAFE-CE78A624C9F7}" = CCC Help Russian
"{59F3D2AC-5F1F-4A93-8F23-6FD4F029D9A9}" = True Image 2013
"{59F3D2AC-5F1F-4A93-8F23-6FD4F029D9A9}Visible" = True Image 2013
"{5AF23993-7152-1620-E43F-1B4542FB4F84}" = CCC Help Thai
"{5AF4B3C4-C393-48D7-AC7E-8E7615579548}" = Adobe AIR
"{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}" = Microsoft .NET Framework 4.5 Multi-Targeting Pack
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{60D5EF2A-4E0C-2C30-38F6-59C26E134F4A}" = Windows Software Development Kit
"{63326924-3CAF-C858-3A8F-8598C87019D7}" = Catalyst Control Center
"{63822E89-11AA-F8EC-D433-F72A85799EC0}" = CCC Help Greek
"{63B7AC7E-0178-4F4F-A79B-08D97ADD02D7}" = System Requirements Lab for Intel
"{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}" = TerraTec Home Cinema
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{66361420-4905-AEB8-17AE-172FDD164A7E}" = CCC Help Polish
"{69ec32be-d994-44de-9eae-6d86ced6f352}" = Microsoft Visual Studio Express 2012 für Windows Desktop - DEU
"{6B7B7E62-9F56-4C87-8664-0E20F2CAB03B}" = Microsoft SQL Server 2012 Management Objects
"{6DAB46E3-D017-3E2B-85D8-F57A230384C0}" = Microsoft Visual Studio Team Foundation Server 2012 Team Explorer
"{6E839820-0BBA-4310-9D06-4463BAEA6641}" = Secure Download Manager
"{70D065C3-77E5-45E9-A75C-EEB2E84EA869}" = Erforderliche Komponenten für SSDT
"{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}" = Catalyst Control Center InstallProxy
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7A67126D-47F8-37CF-9F81-BB597A9A6C6D}" = Microsoft Visual Studio Express 2012 für Windows Desktop - DEU
"{7E48AFD3-F28A-4E54-99A8-9F3A4A27DBC4}" = Brother MFL-Pro Suite MFC-5460CN
"{80054F6B-11DA-40F6-8306-F9AB2F9074EB}" = Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU
"{800F484E-9D69-492D-B656-7BAA32586142}" = Microsoft Visual Studio 2012 Shell (Minimum)
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 5.2.0
"{820C677A-41B2-48C3-8136-FEE35A052E73}" = Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies
"{8773DD1C-5FB2-95B5-5A93-0EFEAC900A4D}" = CCC Help Norwegian
"{8BAB88C4-5024-3236-84B5-115054CD32B3}" = Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU
"{8CCBB0BF-9CC1-1A65-BB93-56012A460EE6}" = CCC Help Portuguese
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90150000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch
"{90150000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-040C-0000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office*- Français
"{90150000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Italiano
"{90150000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2013
"{90150000-0054-0407-0000-0000000FF1CE}" = Microsoft Visio MUI (German) 2013
"{90150000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2013
"{90150000-00E1-0407-0000-0000000FF1CE}" = Microsoft Office OSM MUI (German) 2013
"{90849941-4C23-3054-B575-3833700DF788}" = Microsoft Help Viewer 2.0 Language Pack - DEU
"{91150000-0051-0000-0000-0000000FF1CE}" = Microsoft Visio Professional 2013
"{98B45D1C-6EB1-460D-A87D-2B60678DC105}" = Microsoft .NET Framework 4.5 SDK - DEU Lang Pack
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A0A3CE05-96CB-52E9-434E-074F3BB7807E}" = CCC Help Turkish
"{A127C3C0-055E-38CF-B38F-1E85F8BBBFFE}" = Adobe Community Help
"{A1785BD4-3486-4E7E-8074-E3FC61B8F315}" = Microsoft Visual C++ 2012 x86-x64 Compilers
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9C64319-932F-D02B-B14C-FFFC3EC49E77}" = CCC Help Chinese Standard
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.03) - Deutsch
"{B33EA6ED-6F46-3BE1-98D2-F43D2A82EE39}" = Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources
"{B362A397-B38A-3A23-A190-611F9C7EB4F9}" = Microsoft Visual C++ 2012 Core Libraries
"{B614E5FA-6DA4-45A1-845C-52F870240A89}" = PRE11 STI 64Installer
"{BD87E147-2948-4E49-9FD9-890A4AE4300A}" = Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen
"{C09DB932-7619-7B56-30E3-C0454811D6D7}" = CCC Help Korean
"{C1BE4600-7D15-3D1E-8AA2-B3241DB1D063}" = Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core
"{C22A4697-BD77-ACB1-744F-1FD0A0BFF798}" = CCC Help Swedish
"{C408E706-94A7-454C-8B52-538AA6CBD0FB}" = True Image 2013 Plus Pack
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D11F66FF-82B3-DDB8-1146-525370552BE1}" = Windows Software Development Kit for Windows Store Apps
"{D4B457B2-260F-C561-CA87-703BD3B724CA}" = Catalyst Control Center Graphics Previews Common
"{D4D065E1-3ABF-41D0-B385-FC6F027F4D00}" = Elements 11 Organizer
"{D6CDB506-297D-AE70-0EF6-DE5185F961BE}" = CCC Help Chinese Traditional
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}" = Asmedia ASM104x USB 3.0 Host Controller Driver
"{E511AE89-54BB-481D-BC4A-1B1F1E1B7693}" = Microsoft SQL Server Data Tools - DEU (11.1.20828.01)
"{EC5F4C1B-F838-4CB7-8561-8F809296428B}" = TomTom HOME
"{ECFD508E-68A2-91B2-46DD-1D03D783D94B}" = Catalyst Control Center Localization All
"{EDE361D5-35A5-DA7D-3462-C3DABD24029B}" = CCC Help Hungarian
"{EE549AF9-8FAA-4584-83B2-ECF1BC9DC1FF}" = Adobe Photoshop Elements 10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F1E7DD6A-AE2D-D706-BEB3-937F76CA6AE9}" = CCC Help Finnish
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F56F54DD-BCB2-1221-2CB7-E983A5CF9D15}" = CCC Help Dutch
"{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}" = Microsoft SQL Server 2012 Data-Tier App Framework
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
"{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727
"{FEB375AB-6EEC-3929-8FAF-188ED81DD8B5}" = Microsoft Help Viewer 2.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 10" = Adobe Photoshop Elements 10
"Alf-BanCo3_is1" = ALF-BanCo 3
"Any Video Converter 5_is1" = Any Video Converter 5 5.0.4
"Avira AntiVir Desktop" = Avira Free Antivirus
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"DVBViewer TERRATEC Edition_is1" = DVBViewer TERRATEC Edition
"ENTERPRISE" = Microsoft Office Enterprise 2007
"FileZilla Client" = FileZilla Client 3.6.0.2
"Freemake Video Converter_is1" = Freemake Video Converter Version 4.0.2
"Google Chrome" = Google Chrome
"HD Tune_is1" = HD Tune 2.55
"ImgBurn" = ImgBurn
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"Microsoft Help Viewer 2.0" = Microsoft Help Viewer 2.0
"Microsoft Help Viewer 2.0 Language Pack - DEU" = Microsoft Help Viewer 2.0 Language Pack - DEU
"Mozilla Firefox 22.0 (x86 de)" = Mozilla Firefox 22.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Notepad++" = Notepad++
"Office15.VISPROR" = Microsoft Visio Professional 2013
"PS3 Media Server" = PS3 Media Server
"Rename Master_is1" = Rename Master
"Steam App 8930" = Sid Meier's Civilization V
"TeamViewer 8" = TeamViewer 8
"TreeSize Free_is1" = TreeSize Free V2.7
"UseNeXT by Tangysoft_is1" = UseNeXT by Tangysoft
"VirtualCloneDrive" = VirtualCloneDrive
"VLC media player" = VLC media player 2.0.7
"WinGrub" = WinGrub
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"@@__UNKNOWN__@@SanDiskSecureAccess_Manager.exe" = SanDiskSecureAccess_Manager.exe
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 05.07.2013 01:13:46 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1,
Zeitstempel: 0x50223ca5 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578,
Zeitstempel: 0x515fac6e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0005221e ID des fehlerhaften
Prozesses: 0x1a58 Startzeit der fehlerhaften Anwendung: 0x01ce793e381ee59a Pfad der
fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelp.exe
Pfad
des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll Berichtskennung: aab4281d-e531-11e2-be9e-3085a9eac743
Vollständiger
Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket
ist:
Error - 05.07.2013 01:18:30 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1,
Zeitstempel: 0x50223ca5 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578,
Zeitstempel: 0x515fac6e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0005221e ID des fehlerhaften
Prozesses: 0x1b88 Startzeit der fehlerhaften Anwendung: 0x01ce793eee3c0266 Pfad der
fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelp.exe
Pfad
des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll Berichtskennung: 54300198-e532-11e2-be9f-3085a9eac743
Vollständiger
Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket
ist:
Error - 05.07.2013 01:23:44 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WWAHost.exe, Version: 6.2.9200.16420,
Zeitstempel: 0x505a9152 Name des fehlerhaften Moduls: WinStoreUI.dll, Version: 6.2.9200.16579,
Zeitstempel: 0x51635a2e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000062a63
ID
des fehlerhaften Prozesses: 0x1774 Startzeit der fehlerhaften Anwendung: 0x01ce793fd0633e3b
Pfad
der fehlerhaften Anwendung: C:\Windows\System32\WWAHost.exe Pfad des fehlerhaften
Moduls: C:\Windows\winstore\WinStoreUI.dll Berichtskennung: 0f36c986-e533-11e2-be9f-3085a9eac743
Vollständiger
Name des fehlerhaften Pakets: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy Anwendungs-ID,
die relativ zum fehlerhaften Paket ist: Windows.Store
Error - 05.07.2013 01:23:58 | Computer Name = Dennis-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 2486
Description = Die App „winstore_cw5n1h2txyewy!Windows.Store“ wurde nicht innerhalb
der vorgesehenen Zeit gestartet.
Error - 05.07.2013 01:24:06 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WWAHost.exe, Version: 6.2.9200.16420,
Zeitstempel: 0x505a9152 Name des fehlerhaften Moduls: WinStoreUI.dll, Version: 6.2.9200.16579,
Zeitstempel: 0x51635a2e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000062a63
ID
des fehlerhaften Prozesses: 0x1668 Startzeit der fehlerhaften Anwendung: 0x01ce793fddb0f701
Pfad
der fehlerhaften Anwendung: C:\Windows\System32\WWAHost.exe Pfad des fehlerhaften
Moduls: C:\Windows\winstore\WinStoreUI.dll Berichtskennung: 1c57a70f-e533-11e2-be9f-3085a9eac743
Vollständiger
Name des fehlerhaften Pakets: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy Anwendungs-ID,
die relativ zum fehlerhaften Paket ist: Windows.Store
Error - 05.07.2013 01:45:29 | Computer Name = Dennis-PC | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\SysWOW64\SmartUI2.ocx".
Fehler in Manifest- oder Richtliniendatei "C:\Windows\SysWOW64\SmartUI2.ocx" in
Zeile 21. Ungültige XML-Syntax.
Error - 05.07.2013 01:46:31 | Computer Name = Dennis-PC | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\SysWOW64\SmartUI2.ocx".
Fehler in Manifest- oder Richtliniendatei "C:\Windows\SysWOW64\SmartUI2.ocx" in
Zeile 21. Ungültige XML-Syntax.
Error - 05.07.2013 21:00:41 | Computer Name = Dennis-PC | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\SysWOW64\SmartUI2.ocx".
Fehler in Manifest- oder Richtliniendatei "C:\Windows\SysWOW64\SmartUI2.ocx" in
Zeile 21. Ungültige XML-Syntax.
Error - 09.07.2013 03:18:05 | Computer Name = Dennis-PC | Source = Perflib | ID = 1023
Description =
Error - 09.07.2013 03:19:12 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1,
Zeitstempel: 0x50223ca5 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578,
Zeitstempel: 0x515fac6e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0005221e ID des fehlerhaften
Prozesses: 0x1864 Startzeit der fehlerhaften Anwendung: 0x01ce7c74731e3aa0 Pfad der
fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelp.exe
Pfad
des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll Berichtskennung: da38ec76-e867-11e2-bea0-3085a9eac743
Vollständiger
Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket
ist:
[ System Events ]
Error - 09.07.2013 01:48:18 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps
Error - 09.07.2013 01:48:25 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070005 fehlgeschlagen: Microsoft.MicrosoftSolitaireCollection
Error - 09.07.2013 01:49:24 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo
Error - 09.07.2013 01:49:24 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo
Error - 09.07.2013 02:05:42 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo
Error - 09.07.2013 02:05:42 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo
Error - 09.07.2013 02:06:16 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps
Error - 09.07.2013 02:06:16 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps
Error - 09.07.2013 03:16:30 | Computer Name = Dennis-PC | Source = DCOM | ID = 10010
Description =
Error - 09.07.2013 06:59:53 | Computer Name = Dennis-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
< End of report >
Gruß Dennis
__________________ Gruß Dennis |
|
12.07.2013, 07:13
| #2 |
| /// the machine /// TB-Ausbilder    | Delta Search Toolbar hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
12.07.2013, 08:11
| #3 |
| | Delta Search Toolbar Hier die Logs:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-07-2013 01
Ran by Dennis (administrator) on 12-07-2013 09:08:44
Running from C:\Users\Dennis\Desktop
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TomTom) D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Acronis) D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(PortableApps.com) C:\Users\Dennis\Desktop\EraserPortable\EraserPortable.exe
(The Eraser Project) C:\Users\Dennis\Desktop\EraserPortable\App\Eraser\Eraser.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
(ALF AG) C:\Program Files (x86)\ALFBanCo3\AlfBanCo3.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [171040 2012-10-22] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [399392 2012-10-22] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [441888 2012-10-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] - "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [403888 2012-08-23] (Acronis)
HKLM-x32\...\Runonce: [ Malwarebytes Anti-Malware ] - D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [x]
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Steam] - "D:\Programme\Steam\Steam.exe" -silent [x]
HKCU\...\Run: [SanDiskSecureAccess_Manager.exe] - C:\Users\Dennis\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2013-04-17] (Gemalto N.V.)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe -update plugin [814472 2013-06-23] (Adobe Systems Incorporated)
MountPoints2: {36bdab4f-5824-11e2-be81-3085a9eac743} - "M:\SETUP.EXE"
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5123216 2012-06-08] (VIA)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide [2793304 2009-10-14] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [PDFPrint] - D:\Programme\PDF24\pdf24.exe [x]
HKLM-x32\...\Run: [TrueImageMonitor.exe] - "D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe" [x]
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "D:\Programme\iTunes\iTunesHelper.exe" [x]
IMEO\utilman.exe: [Debugger] c:\windows\system32\cmd.exe
Startup: C:\ProgramData\Start Menu\Programs\Startup\ALF-BanCo 3 Reminder.lnk
ShortcutTarget: ALF-BanCo 3 Reminder.lnk -> C:\Program Files (x86)\ALFBanCo3\AlfReminder3.exe (Alf - AG)
Startup: C:\ProgramData\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> D:\Programme\WISO\Steuer_2012\mshaktuell.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - D:\Programme\TerraTec\ThcDeskBand.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programme\Microsoft Office\Office15\MSOSB.DLL No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
FF Extension: firebug - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox
Chrome:
=======
CHR HomePage: hxxp://google.de/
CHR RestoreOnStartup: "hxxp://www.yd.delta-search.com/?babsrc=HP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938"
CHR DefaultSearchURL: (Delta Search) - hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office 2013) - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-12-18] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe [1475200 2012-12-18] (ASUSTeK Computer Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 TomTomHOMEService; D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe [93072 2013-03-22] (TomTom)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-05-04] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R3 AF15BDA; C:\Windows\system32\DRIVERS\AF15BDA.sys [370528 2013-02-14] (AfaTech )
S3 AF9035BDA; C:\Windows\system32\DRIVERS\AF9035BDA.sys [274344 2012-08-10] (AfaTech )
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [104184 2012-12-21] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-04-06] (Avira Operations GmbH & Co. KG)
R3 LVPr2M64; C:\Windows\system32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-02-20] (Acronis)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-09 20:41 - 2013-07-12 06:48 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:22 - 2013-07-09 20:23 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:15 - 2013-07-09 09:16 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:00 - 2013-07-09 09:01 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-08 20:12 - 2013-07-08 20:13 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-07 03:00 - 2013-05-16 00:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:03 - 2013-07-05 07:04 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-03 08:47 - 2013-07-09 09:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:23 - 2013-06-23 23:36 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-23 19:06 - 2013-07-06 03:02 - 00000000 __SHD C:\$$PendingFiles
2013-06-23 18:22 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-06-23 18:22 - 2013-05-16 00:36 - 14320640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-23 18:22 - 2013-05-16 00:35 - 19230720 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-06-23 18:22 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-06-23 18:22 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-06-23 18:22 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-23 18:22 - 2013-05-04 09:45 - 02233600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-06-23 18:22 - 2013-04-29 00:30 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-06-23 18:22 - 2013-04-29 00:27 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-06-23 18:22 - 2013-04-29 00:27 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-06-23 18:22 - 2013-04-29 00:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-06-23 18:22 - 2013-04-27 07:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-23 18:22 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-23 18:22 - 2013-04-24 01:12 - 01569792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-23 18:22 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-23 18:22 - 2013-04-24 00:55 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-06-23 18:22 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-23 18:22 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
==================== One Month Modified Files and Folders =======
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 09:02 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-07-12 08:46 - 2012-12-18 19:28 - 01210830 _____ C:\Windows\WindowsUpdate.log
2013-07-12 08:45 - 2013-04-01 19:25 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-12 08:37 - 2012-12-18 22:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-12 07:32 - 2013-05-17 09:34 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\ALFBanCo3
2013-07-12 07:32 - 2013-01-02 09:01 - 00000000 ____D C:\ProgramData\AlfBanCo3
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-12 07:23 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\Documents\StarCraft II
2013-07-12 06:48 - 2013-07-09 20:41 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-12 02:00 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Adobe
2013-07-11 23:59 - 2012-12-18 19:32 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-07-11 23:40 - 2013-04-01 19:25 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-11 23:40 - 2013-04-01 19:25 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-11 23:40 - 2013-04-01 19:25 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-11 07:33 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\UseNeXT
2013-07-11 07:32 - 2012-07-26 12:27 - 00755402 _____ C:\Windows\system32\perfh007.dat
2013-07-11 07:32 - 2012-07-26 12:27 - 00156630 _____ C:\Windows\system32\perfc007.dat
2013-07-11 07:32 - 2012-07-26 09:28 - 01754016 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-10 17:10 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-07-09 21:08 - 2013-05-17 09:35 - 00125952 ___SH C:\Users\Dennis\Desktop\Thumbs.db
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:23 - 2013-07-09 20:22 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:28 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\vlc
2013-07-09 09:23 - 2013-05-17 09:36 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:17 - 2012-12-18 21:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-09 09:17 - 2012-12-18 19:21 - 00133176 _____ C:\Windows\PFRO.log
2013-07-09 09:17 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-09 09:16 - 2013-07-09 09:15 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:16 - 2012-07-26 07:37 - 00000000 ____D C:\Windows\servicing
2013-07-09 09:16 - 2012-07-26 07:26 - 06029312 ___SH C:\Windows\system32\config\BBI
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:01 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:01 - 2013-07-03 08:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-09 08:06 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages
2013-07-08 20:13 - 2013-07-08 20:12 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-06 03:02 - 2013-06-23 19:06 - 00000000 __SHD C:\$$PendingFiles
2013-07-05 07:44 - 2012-12-18 19:36 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1471377960-4142091505-4027430203-1001
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:04 - 2013-07-05 07:03 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-01 10:36 - 2013-05-17 09:35 - 00002194 ____H C:\Users\Dennis\Documents\Default.rdp
2013-06-27 15:52 - 2013-05-07 11:40 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-06-27 09:21 - 2013-05-17 09:33 - 00091736 _____ C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-26 23:04 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\SanDisk
2013-06-26 19:10 - 2013-04-17 09:41 - 00000000 ____D C:\Windows\rescache
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:36 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-23 18:37 - 2012-12-18 22:10 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-06-23 18:28 - 2012-12-29 17:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-23 18:26 - 2012-12-18 20:24 - 75825640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-06 03:00
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-07-2013 01 Ran by Dennis at 2013-07-12 09:09:09 Running from C:\Users\Dennis\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Adobe AIR (x32 Version: 3.6.0.6090) Adobe Community Help (x32 Version: 3.5.23) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) Adobe Photoshop Elements 10 (x32 Version: 10.0) Adobe Premiere Elements 11 (Version: 11.0) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) AI Suite II (x32 Version: 2.01.01) ALF-BanCo 3 (x32) AMD Accelerated Video Transcoding (Version: 12.5.100.21219) AMD APP SDK Runtime (Version: 10.0.1084.4) AMD Catalyst Install Manager (Version: 8.0.903.0) Any Video Converter 5 5.0.4 (x32) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.16.2.0) Avira Free Antivirus (x32 Version: 13.0.0.3737) Bonjour (Version: 3.0.0.10) Brother MFL-Pro Suite MFC-5460CN (x32 Version: 1.0.3.0) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center (x32 Version: 2012.1219.1521.27485) Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485) Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485) Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485) CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485) CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485) CCC Help Czech (x32 Version: 2012.1219.1520.27485) CCC Help Danish (x32 Version: 2012.1219.1520.27485) CCC Help Dutch (x32 Version: 2012.1219.1520.27485) CCC Help English (x32 Version: 2012.1219.1520.27485) CCC Help Finnish (x32 Version: 2012.1219.1520.27485) CCC Help French (x32 Version: 2012.1219.1520.27485) CCC Help German (x32 Version: 2012.1219.1520.27485) CCC Help Greek (x32 Version: 2012.1219.1520.27485) CCC Help Hungarian (x32 Version: 2012.1219.1520.27485) CCC Help Italian (x32 Version: 2012.1219.1520.27485) CCC Help Japanese (x32 Version: 2012.1219.1520.27485) CCC Help Korean (x32 Version: 2012.1219.1520.27485) CCC Help Norwegian (x32 Version: 2012.1219.1520.27485) CCC Help Polish (x32 Version: 2012.1219.1520.27485) CCC Help Portuguese (x32 Version: 2012.1219.1520.27485) CCC Help Russian (x32 Version: 2012.1219.1520.27485) CCC Help Spanish (x32 Version: 2012.1219.1520.27485) CCC Help Swedish (x32 Version: 2012.1219.1520.27485) CCC Help Thai (x32 Version: 2012.1219.1520.27485) CCC Help Turkish (x32 Version: 2012.1219.1520.27485) ccc-utility64 (Version: 2012.1219.1521.27485) Cinergy T Stick Driver Installation (64 Bit) (x32 Version: 8.08.18.01) Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (x32) dows-Treiberpaket - TerraTec (AF9035BDA) Media (05/18/2009 8.08.18.01) (Version: 05/18/2009 8.08.18.01) DVBViewer TERRATEC Edition (x32) Elements 10 Organizer (x32 Version: 10.0) Elements 11 Organizer (x32 Version: 11.0) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20810.00) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60) FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2) Freemake Video Converter Version 4.0.2 (x32 Version: 4.0.2) GIMP 2.8.4 (Version: 2.8.4) Google Chrome (x32 Version: 28.0.1500.71) Google Update Helper (x32 Version: 1.3.21.153) HD Tune 2.55 (x32) iCloud (Version: 2.1.2.8) ImgBurn (x32 Version: 2.5.7.0) Intel(R) Management Engine Components (x32 Version: 8.1.0.1252) Intel(R) Processor Graphics (x32 Version: 9.17.10.2875) Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149) Intel® Trusted Connect Service Client (Version: 1.24.388.1) IrfanView (remove only) (x32 Version: 4.35) iTunes (Version: 11.0.4.4) Java 7 Update 17 (x32 Version: 7.0.170) Java Auto Updater (x32 Version: 2.1.9.0) Logitech Webcam Software (Version: 12.10.1113) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319) Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727) Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.0.30717.9005) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office 64-bit Components 2013 (Version: 15.0.4420.1017) Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Korrekturhilfen 2013 - Deutsch (x32 Version: 15.0.4420.1017) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office OSM MUI (German) 2013 (x32 Version: 15.0.4420.1017) Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing (German) 2013 (x32 Version: 15.0.4420.1017) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Proofing Tools 2013 - English (x32 Version: 15.0.4420.1017) Microsoft Office Proofing Tools 2013 - Italiano (x32 Version: 15.0.4420.1017) Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2013 (x32 Version: 15.0.4420.1017) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1) Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01) Microsoft Visio MUI (German) 2013 (x32 Version: 15.0.4420.1017) Microsoft Visio Professional 2013 (x32 Version: 15.0.4420.1017) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727) Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727) Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727.42) Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) Notepad++ (x32 Version: 6.2.3) Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4420.1017) PDF24 Creator 5.2.0 (x32) Platform (x32 Version: 1.39) PRE11 STI 64Installer (x32 Version: 11.0) PS3 Media Server (x32 Version: 1.72.0) PSE10 STI Installer (x32 Version: 10.0) Rename Master (x32) SanDiskSecureAccess_Manager.exe (HKCU Version: 1.1.19755) Secure Download Manager (x32 Version: 3.1.01) Sid Meier's Civilization V (x32) Steam (x32 Version: 1.0.0.0) System Requirements Lab for Intel (x32 Version: 4.5.11.0) TeamViewer 8 (x32 Version: 8.0.16642) TERRATEC CINERGY T USB XE MKII (64 Bit) (x32 Version: 6.09.28.05) TerraTec Home Cinema (x32 Version: 6.25.6) TomTom HOME (x32 Version: 2.9.5) TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2) TreeSize Free V2.7 (x32 Version: 2.7) True Image 2013 (x32 Version: 16.0.5551) True Image 2013 Plus Pack (x32 Version: 16.0.5551) Update for (KB2504637) (x32 Version: 1) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft Excel 2013 (KB2760339) 32-Bit Edition (x32) Update for Microsoft Lync 2013 (KB2768004) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2726961) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2737954) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2752025) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2752094) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2752101) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2760538) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2767860) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2810010) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2810014) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2810017) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2810018) 32-Bit Edition (x32) Update for Microsoft Office 2013 (KB2817320) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817327) 32-Bit Edition (x32) Update for Microsoft OneNote 2013 (KB2760334) 32-Bit Edition (x32) Update for Microsoft Outlook 2013 (KB2810015) 32-Bit Edition (x32) Update for Microsoft SkyDrive Pro (KB2767865) 32-Bit Edition (x32) Update for Microsoft SkyDrive Pro (KB2810019) 32-Bit Edition (x32) Update for Microsoft Visio 2013 (KB2810008) 32-Bit Edition (x32) Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition (x32) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219) Update für Microsoft Office Excel 2007 Help (KB963678) (x32) Update für Microsoft Office Outlook 2007 Help (KB963677) (x32) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update für Microsoft Office Word 2007 Help (KB963665) (x32) UseNeXT by Tangysoft (x32) VIA Plattform-Geräte-Manager (x32 Version: 1.39) VirtualCloneDrive (x32) VLC media player 2.0.7 (x32 Version: 2.0.7) Windows Software Development Kit (x32 Version: 8.59.25584) Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584) Windows-Treiberpaket - TERRATEC (AF15BDA) Media (09/17/2009 6.9.28.5) (Version: 09/17/2009 6.9.28.5) WinGrub (x32) WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7303) Wolverine Student/Demo Software (x32 Version: 1.0.0) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2012-07-26 07:26 - 2013-02-20 09:09 - 00000920 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 activate.adobe.com 127.0.0.1 activation.acronis.com ==================== Scheduled Tasks (whitelisted) ============= Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation) Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler Task: {1AABBAD6-DE4A-420F-88BD-1D23C503D355} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents Task: {1F624D14-7E2B-4B06-91BC-87FAA59768D6} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {29CB5240-0456-424E-A874-20E178FF527D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update Task: {34DB7012-E2C5-47B5-8A3A-1BA7E5F1CFC8} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-26] (Microsoft Corporation) Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon Task: {4E38299F-33BB-4CE7-970F-DAA74623186C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation) Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation) Task: {666D05C3-1A00-45DD-B78D-99FB5845DE9E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-01] (Google Inc.) Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation) Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update Task: {7794C94F-3023-4529-9B15-88BD68F0102F} - System32\Tasks\ASUS\ASUS Network iControl Help Execute => C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe [2012-05-02] (ASUSTeK Computer Inc.) Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode) Task: {875C10DC-AA06-4867-B17A-8F5AB4D58A4E} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-dennis@stumpe-home.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated) Task: {8CE29BFF-815C-4E3B-AAB1-106ED9279CA8} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe No File Task: {8DFAABBF-F4E0-42C2-ABED-0CB161AC2F97} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {8E11FF85-B8CC-4054-AB3D-6B53B40A475B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses Task: {925B8D6C-EC0A-405A-AAFD-C46D38D39F80} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-01] (Google Inc.) Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask Task: {AD7A143C-F244-4916-8B98-236776C8B313} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.) Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask Task: {AF4D8CDD-F3C7-4973-A6E4-C142F48FE0BB} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1471377960-4142091505-4027430203-1001 Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan Task: {B58623CD-C71E-44D5-857D-13F29F5C0AB4} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-10] () Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical Task: {DBD7DFB6-99F3-40A3-BF05-9B41D524F0AD} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation) Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery Task: {E0069CF7-F17E-497F-BB56-7696D8C40E8D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation) Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM Task: {F2C41250-060F-4340-BB9B-1E803CCED374} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-23] (Adobe Systems Incorporated) Task: {FFE3FD50-646E-4A64-913B-23C4187E6025} - System32\Tasks\Microsoft\Windows\File Classification Infrastructure\Property Definition Sync Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/09/2013 09:19:12 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1, Zeitstempel: 0x50223ca5 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0005221e ID des fehlerhaften Prozesses: 0x1864 Startzeit der fehlerhaften Anwendung: 0xNetSvcHelp.exe0 Pfad der fehlerhaften Anwendung: NetSvcHelp.exe1 Pfad des fehlerhaften Moduls: NetSvcHelp.exe2 Berichtskennung: NetSvcHelp.exe3 Vollständiger Name des fehlerhaften Pakets: NetSvcHelp.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NetSvcHelp.exe5 Error: (07/09/2013 09:18:05 AM) (Source: Perflib) (User: ) Description: rdyboost4 Error: (07/06/2013 03:00:41 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (07/05/2013 07:46:31 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (07/05/2013 07:45:29 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (07/05/2013 07:24:06 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: WWAHost.exe, Version: 6.2.9200.16420, Zeitstempel: 0x505a9152 Name des fehlerhaften Moduls: WinStoreUI.dll, Version: 6.2.9200.16579, Zeitstempel: 0x51635a2e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000062a63 ID des fehlerhaften Prozesses: 0x1668 Startzeit der fehlerhaften Anwendung: 0xWWAHost.exe0 Pfad der fehlerhaften Anwendung: WWAHost.exe1 Pfad des fehlerhaften Moduls: WWAHost.exe2 Berichtskennung: WWAHost.exe3 Vollständiger Name des fehlerhaften Pakets: WWAHost.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WWAHost.exe5 Error: (07/05/2013 07:23:58 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: DENNIS-PC) Description: Die App „winstore_cw5n1h2txyewy!Windows.Store“ wurde nicht innerhalb der vorgesehenen Zeit gestartet. Error: (07/05/2013 07:23:44 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: WWAHost.exe, Version: 6.2.9200.16420, Zeitstempel: 0x505a9152 Name des fehlerhaften Moduls: WinStoreUI.dll, Version: 6.2.9200.16579, Zeitstempel: 0x51635a2e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000062a63 ID des fehlerhaften Prozesses: 0x1774 Startzeit der fehlerhaften Anwendung: 0xWWAHost.exe0 Pfad der fehlerhaften Anwendung: WWAHost.exe1 Pfad des fehlerhaften Moduls: WWAHost.exe2 Berichtskennung: WWAHost.exe3 Vollständiger Name des fehlerhaften Pakets: WWAHost.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WWAHost.exe5 Error: (07/05/2013 07:18:30 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1, Zeitstempel: 0x50223ca5 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0005221e ID des fehlerhaften Prozesses: 0x1b88 Startzeit der fehlerhaften Anwendung: 0xNetSvcHelp.exe0 Pfad der fehlerhaften Anwendung: NetSvcHelp.exe1 Pfad des fehlerhaften Moduls: NetSvcHelp.exe2 Berichtskennung: NetSvcHelp.exe3 Vollständiger Name des fehlerhaften Pakets: NetSvcHelp.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NetSvcHelp.exe5 Error: (07/05/2013 07:13:46 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1, Zeitstempel: 0x50223ca5 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0005221e ID des fehlerhaften Prozesses: 0x1a58 Startzeit der fehlerhaften Anwendung: 0xNetSvcHelp.exe0 Pfad der fehlerhaften Anwendung: NetSvcHelp.exe1 Pfad des fehlerhaften Moduls: NetSvcHelp.exe2 Berichtskennung: NetSvcHelp.exe3 Vollständiger Name des fehlerhaften Pakets: NetSvcHelp.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NetSvcHelp.exe5 System errors: ============= Error: (07/09/2013 00:59:53 PM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (07/09/2013 09:16:30 AM) (Source: DCOM) (User: DENNIS-PC) Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39} Error: (07/09/2013 08:06:16 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps Error: (07/09/2013 08:06:16 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps Error: (07/09/2013 08:05:42 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo Error: (07/09/2013 08:05:42 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo Error: (07/09/2013 07:49:24 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo Error: (07/09/2013 07:49:24 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo Error: (07/09/2013 07:48:25 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.MicrosoftSolitaireCollection Error: (07/09/2013 07:48:18 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2013-06-03 14:20:38.620 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. Date: 2013-05-24 13:22:03.978 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. Date: 2013-05-22 15:37:09.459 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. Date: 2013-05-22 15:22:46.831 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. Date: 2013-05-22 14:08:04.061 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. Date: 2013-05-22 13:44:37.095 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. Date: 2013-05-21 15:33:11.344 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. Date: 2013-05-21 14:36:08.592 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. Date: 2013-05-21 11:28:48.070 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. Date: 2013-05-21 11:14:02.776 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Percentage of memory in use: 36% Total physical RAM: 8144.86 MB Available physical RAM: 5143.29 MB Total Pagefile: 12740.86 MB Available Pagefile: 7232.28 MB Total Virtual: 8192 MB Available Virtual: 8191.77 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:59.28 GB) (Free:14.5 GB) NTFS (Disk=0 Partition=2) Drive d: (Progs) (Fixed) (Total:70.05 GB) (Free:53.85 GB) NTFS (Disk=1 Partition=1) Drive e: (Eigene Dateien) (Fixed) (Total:200 GB) (Free:15.96 GB) NTFS (Disk=6 Partition=2) Drive f: (Filme) (Fixed) (Total:350.51 GB) (Free:27.02 GB) NTFS (Disk=6 Partition=1) Drive g: (Backup) (Fixed) (Total:381 GB) (Free:14.16 GB) NTFS (Disk=6 Partition=3) Drive h: (Images_Downloads) (Fixed) (Total:295.76 GB) (Free:41.22 GB) NTFS (Disk=1 Partition=2) Drive i: () (Removable) (Total:14.89 GB) (Free:14.89 GB) FAT32 (Disk=2 Partition=1) Drive l: (Spiele) (Fixed) (Total:99.89 GB) (Free:29.33 GB) NTFS (Disk=1 Partition=3) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 60 GB) (Disk ID: E89C5BCF) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=59 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 4A472E94) Partition 1: (Active) - (Size=70 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=100 GB) - (Type=OF Extended) Partition 3: (Not Active) - (Size=296 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 15 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=15 GB) - (Type=0C) ======================================================== Disk: 6 (Size: 932 GB) (Disk ID: 44FDFE06) Partition 1: (Active) - (Size=351 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=381 GB) - (Type=OF Extended) ==================== End Of Log ============================
__________________ |
|
12.07.2013, 08:37
| #4 |
| /// the machine /// TB-Ausbilder | Delta Search Toolbar Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
12.07.2013, 11:14
| #5 |
| | Delta Search Toolbar Hallo! Hier die Logs. AdwCleaner: Code:
ATTFilter # AdwCleaner v2.305 - Datei am 12/07/2013 um 11:33:07 erstellt
# Aktualisiert am 11/07/2013 von Xplode
# Betriebssystem : Windows 8 Pro (64 bits)
# Benutzer : Dennis - DENNIS-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Dennis\Desktop\adwcleaner (1).exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Freemake Video Converter_is1
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16537
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v22.0 (de)
Datei : C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\prefs.js
[OK] Die Datei ist sauber.
-\\ Google Chrome v28.0.1500.71
Datei : C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Preferences
Gelöscht [l.39] : icon_url = "hxxp://www.yd.delta-search.com/favicon.ico",
Gelöscht [l.42] : keyword = "yd.delta-search.com",
Gelöscht [l.46] : search_url = "hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C983085A9E[...]
Gelöscht [l.2717] : urls_to_restore_on_startup = [ "hxxp://www.yd.delta-search.com/?babsrc=HP_ss&mntrId=7C983085A[...]
*************************
AdwCleaner[R1].txt - [6837 octets] - [09/07/2013 09:14:46]
AdwCleaner[S1].txt - [6654 octets] - [09/07/2013 09:15:37]
AdwCleaner[S2].txt - [1437 octets] - [12/07/2013 11:33:07]
########## EOF - C:\AdwCleaner[S2].txt - [1497 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.0.7 (07.11.2013:1)
OS: Windows 8 Pro x64
Ran by Dennis on 12.07.2013 at 11:47:20,18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Successfully deleted: [File] C:\Users\Dennis\AppData\Roaming\mozilla\firefox\profiles\kv8pufq0.default\invalidprefs.js
Emptied folder: C:\Users\Dennis\AppData\Roaming\mozilla\firefox\profiles\kv8pufq0.default\minidumps [4 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.07.2013 at 11:49:53,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-07-2013 01
Ran by Dennis (administrator) on 12-07-2013 12:06:01
Running from C:\Users\Dennis\Desktop
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\LogonUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TomTom) D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\rdpclip.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Acronis) D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe
(Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [171040 2012-10-22] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [399392 2012-10-22] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [441888 2012-10-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] - "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [403888 2012-08-23] (Acronis)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Steam] - "D:\Programme\Steam\Steam.exe" -silent [x]
HKCU\...\Run: [SanDiskSecureAccess_Manager.exe] - C:\Users\Dennis\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2013-04-17] (Gemalto N.V.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
MountPoints2: {36bdab4f-5824-11e2-be81-3085a9eac743} - "M:\SETUP.EXE"
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5123216 2012-06-08] (VIA)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide [2793304 2009-10-14] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [PDFPrint] - D:\Programme\PDF24\pdf24.exe [x]
HKLM-x32\...\Run: [TrueImageMonitor.exe] - "D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe" [x]
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "D:\Programme\iTunes\iTunesHelper.exe" [x]
IMEO\utilman.exe: [Debugger] c:\windows\system32\cmd.exe
Startup: C:\ProgramData\Start Menu\Programs\Startup\ALF-BanCo 3 Reminder.lnk
ShortcutTarget: ALF-BanCo 3 Reminder.lnk -> C:\Program Files (x86)\ALFBanCo3\AlfReminder3.exe (Alf - AG)
Startup: C:\ProgramData\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> D:\Programme\WISO\Steuer_2012\mshaktuell.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - D:\Programme\TerraTec\ThcDeskBand.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programme\Microsoft Office\Office15\MSOSB.DLL No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
FF Extension: firebug - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox
Chrome:
=======
CHR HomePage: hxxp://google.de/
CHR RestoreOnStartup: "hxxp://www.yd.delta-search.com/?babsrc=HP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938"
CHR DefaultSearchURL: (Delta Search) - hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office 2013) - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-12-18] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe [1475200 2012-12-18] (ASUSTeK Computer Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 TomTomHOMEService; D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe [93072 2013-03-22] (TomTom)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-05-04] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R3 AF15BDA; C:\Windows\system32\DRIVERS\AF15BDA.sys [370528 2013-02-14] (AfaTech )
S3 AF9035BDA; C:\Windows\system32\DRIVERS\AF9035BDA.sys [274344 2012-08-10] (AfaTech )
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [104184 2012-12-21] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-04-06] (Avira Operations GmbH & Co. KG)
R3 LVPr2M64; C:\Windows\system32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-02-20] (Acronis)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-12 11:49 - 2013-07-12 11:49 - 00000869 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-07-12 11:47 - 2013-07-12 11:47 - 00000000 ____D C:\Windows\ERUNT
2013-07-12 11:44 - 2013-07-12 11:44 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Dennis\Desktop\JRT.exe
2013-07-12 11:33 - 2013-07-12 11:34 - 00001566 _____ C:\AdwCleaner[S2].txt
2013-07-12 11:30 - 2013-07-12 11:30 - 00662345 _____ C:\Users\Dennis\Desktop\adwcleaner (1).exe
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Buhl Data Service
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Local\Buhl Data Service
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-10 17:14 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-10 17:14 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-10 17:14 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-10 17:14 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-10 17:14 - 2013-06-01 11:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 17:14 - 2013-06-01 11:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 17:14 - 2013-05-31 01:14 - 04036096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 17:14 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 17:14 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 17:14 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 17:14 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 20:41 - 2013-07-12 10:24 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:22 - 2013-07-09 20:23 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:15 - 2013-07-09 09:16 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:00 - 2013-07-09 09:01 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-08 20:12 - 2013-07-08 20:13 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-07 03:00 - 2013-05-16 00:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:03 - 2013-07-05 07:04 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-03 08:47 - 2013-07-09 09:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:23 - 2013-06-23 23:36 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-23 19:06 - 2013-07-06 03:02 - 00000000 __SHD C:\$$PendingFiles
2013-06-23 18:22 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-06-23 18:22 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-06-23 18:22 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-06-23 18:22 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-23 18:22 - 2013-05-04 09:45 - 02233600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-06-23 18:22 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-06-23 18:22 - 2013-04-27 07:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-23 18:22 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-23 18:22 - 2013-04-24 01:12 - 01569792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-23 18:22 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-23 18:22 - 2013-04-24 00:55 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-06-23 18:22 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-23 18:22 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
==================== One Month Modified Files and Folders =======
2013-07-12 12:02 - 2012-12-18 19:28 - 01563051 _____ C:\Windows\WindowsUpdate.log
2013-07-12 12:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-07-12 11:53 - 2012-12-18 19:36 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1471377960-4142091505-4027430203-1001
2013-07-12 11:49 - 2013-07-12 11:49 - 00000869 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-07-12 11:47 - 2013-07-12 11:47 - 00000000 ____D C:\Windows\ERUNT
2013-07-12 11:45 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Adobe
2013-07-12 11:45 - 2013-04-01 19:25 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-12 11:44 - 2013-07-12 11:44 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Dennis\Desktop\JRT.exe
2013-07-12 11:44 - 2012-12-18 22:10 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-12 11:44 - 2012-12-18 22:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-12 11:42 - 2013-04-01 19:25 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-12 11:39 - 2012-07-26 12:27 - 00755402 _____ C:\Windows\system32\perfh007.dat
2013-07-12 11:39 - 2012-07-26 12:27 - 00156630 _____ C:\Windows\system32\perfc007.dat
2013-07-12 11:39 - 2012-07-26 09:28 - 01754016 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-12 11:35 - 2012-12-18 19:32 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-07-12 11:35 - 2012-12-18 19:21 - 00134088 _____ C:\Windows\PFRO.log
2013-07-12 11:35 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-12 11:34 - 2013-07-12 11:33 - 00001566 _____ C:\AdwCleaner[S2].txt
2013-07-12 11:34 - 2012-07-26 12:29 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-12 11:34 - 2012-07-26 07:26 - 01048576 ___SH C:\Windows\system32\config\BBI
2013-07-12 11:30 - 2013-07-12 11:30 - 00662345 _____ C:\Users\Dennis\Desktop\adwcleaner (1).exe
2013-07-12 10:24 - 2013-07-09 20:41 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-12 09:35 - 2012-12-18 20:24 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-12 09:33 - 2012-12-29 17:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 09:20 - 2013-01-08 08:53 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH
2013-07-12 09:19 - 2013-01-08 09:06 - 00000790 _____ C:\Windows\wiso.ini
2013-07-12 09:18 - 2013-05-17 09:34 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\ALFBanCo3
2013-07-12 09:18 - 2013-01-02 09:01 - 00000000 ____D C:\ProgramData\AlfBanCo3
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Buhl Data Service
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Local\Buhl Data Service
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-12 07:23 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\Documents\StarCraft II
2013-07-11 23:40 - 2013-04-01 19:25 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-11 23:40 - 2013-04-01 19:25 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-11 07:33 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\UseNeXT
2013-07-10 17:10 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-07-09 21:08 - 2013-05-17 09:35 - 00125952 ___SH C:\Users\Dennis\Desktop\Thumbs.db
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:23 - 2013-07-09 20:22 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:28 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\vlc
2013-07-09 09:23 - 2013-05-17 09:36 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:17 - 2012-12-18 21:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-09 09:16 - 2013-07-09 09:15 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:16 - 2012-07-26 07:37 - 00000000 ____D C:\Windows\servicing
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:01 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:01 - 2013-07-03 08:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-09 08:06 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages
2013-07-08 20:13 - 2013-07-08 20:12 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-06 03:02 - 2013-06-23 19:06 - 00000000 __SHD C:\$$PendingFiles
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:04 - 2013-07-05 07:03 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-01 10:36 - 2013-05-17 09:35 - 00002194 ____H C:\Users\Dennis\Documents\Default.rdp
2013-06-28 00:04 - 2012-07-26 10:14 - 00693112 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-28 00:04 - 2012-07-26 10:14 - 00078200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-27 15:52 - 2013-05-07 11:40 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-06-27 09:21 - 2013-05-17 09:33 - 00091736 _____ C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-26 23:04 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\SanDisk
2013-06-26 19:10 - 2013-04-17 09:41 - 00000000 ____D C:\Windows\rescache
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:36 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-12 01:43 - 2013-07-10 17:14 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 01:42 - 2013-07-10 17:14 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 01:42 - 2013-07-10 17:14 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-06-12 01:25 - 2013-07-10 17:14 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-12 09:29
==================== End Of Log ============================
__________________ Gruß Dennis |
|
12.07.2013, 11:28
| #6 |
| /// the machine /// TB-Ausbilder | Delta Search ToolbarESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> Delta Search Toolbar |
|
12.07.2013, 16:52
| #7 |
| | Delta Search Toolbar ESET ohne Ergebnis. SecurityCheck: Code:
ATTFilter Results of screen317's Security Check version 0.99.68 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 17 Java version out of Date! Adobe Flash Player 11.8.800.94 Adobe Reader XI Mozilla Firefox (22.0) Google Chrome 27.0.1453.116 Google Chrome 28.0.1500.71 ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-07-2013 01
Ran by Dennis (administrator) on 12-07-2013 17:48:06
Running from C:\Users\Dennis\Desktop
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TomTom) D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Acronis) D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Vernam7) L:\Spiele\StarCraft II\SC2ALLin1\SC2ALLin1.exe
(Microsoft Corporation) C:\Windows\syswow64\wwahost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [171040 2012-10-22] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [399392 2012-10-22] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [441888 2012-10-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] - "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [403888 2012-08-23] (Acronis)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Steam] - "D:\Programme\Steam\Steam.exe" -silent [x]
HKCU\...\Run: [SanDiskSecureAccess_Manager.exe] - C:\Users\Dennis\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2013-04-17] (Gemalto N.V.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
MountPoints2: {36bdab4f-5824-11e2-be81-3085a9eac743} - "M:\SETUP.EXE"
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5123216 2012-06-08] (VIA)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide [2793304 2009-10-14] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [PDFPrint] - D:\Programme\PDF24\pdf24.exe [x]
HKLM-x32\...\Run: [TrueImageMonitor.exe] - "D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe" [x]
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "D:\Programme\iTunes\iTunesHelper.exe" [x]
IMEO\utilman.exe: [Debugger] c:\windows\system32\cmd.exe
Startup: C:\ProgramData\Start Menu\Programs\Startup\ALF-BanCo 3 Reminder.lnk
ShortcutTarget: ALF-BanCo 3 Reminder.lnk -> C:\Program Files (x86)\ALFBanCo3\AlfReminder3.exe (Alf - AG)
Startup: C:\ProgramData\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> D:\Programme\WISO\Steuer_2012\mshaktuell.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - D:\Programme\TerraTec\ThcDeskBand.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programme\Microsoft Office\Office15\MSOSB.DLL No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
FF Extension: firebug - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox
Chrome:
=======
CHR HomePage: hxxp://google.de/
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-12-18] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe [1475200 2012-12-18] (ASUSTeK Computer Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 TomTomHOMEService; D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe [93072 2013-03-22] (TomTom)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-05-04] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R3 AF15BDA; C:\Windows\system32\DRIVERS\AF15BDA.sys [370528 2013-02-14] (AfaTech )
S3 AF9035BDA; C:\Windows\system32\DRIVERS\AF9035BDA.sys [274344 2012-08-10] (AfaTech )
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [104184 2012-12-21] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-04-06] (Avira Operations GmbH & Co. KG)
R3 LVPr2M64; C:\Windows\system32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-02-20] (Acronis)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-12 17:42 - 2013-07-12 17:42 - 00890988 _____ C:\Users\Dennis\Desktop\SecurityCheck.exe
2013-07-12 13:24 - 2013-07-12 13:24 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-12 13:16 - 2013-07-12 13:17 - 02347384 _____ (ESET) C:\Users\Dennis\Downloads\esetsmartinstaller_enu.exe
2013-07-12 12:15 - 2013-07-12 12:15 - 03371680 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-12 12:14 - 2013-07-12 12:14 - 00001506 _____ C:\AdwCleaner[S3].txt
2013-07-12 11:49 - 2013-07-12 11:49 - 00000869 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-07-12 11:47 - 2013-07-12 11:47 - 00000000 ____D C:\Windows\ERUNT
2013-07-12 11:44 - 2013-07-12 11:44 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Dennis\Desktop\JRT.exe
2013-07-12 11:33 - 2013-07-12 11:34 - 00001566 _____ C:\AdwCleaner[S2].txt
2013-07-12 11:30 - 2013-07-12 11:30 - 00662345 _____ C:\Users\Dennis\Desktop\adwcleaner (1).exe
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Buhl Data Service
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Local\Buhl Data Service
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-10 17:14 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-10 17:14 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-10 17:14 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-10 17:14 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-10 17:14 - 2013-06-01 11:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 17:14 - 2013-06-01 11:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 17:14 - 2013-05-31 01:14 - 04036096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 17:14 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 17:14 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 17:14 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 17:14 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 20:41 - 2013-07-12 17:41 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:22 - 2013-07-09 20:23 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:15 - 2013-07-09 09:16 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:00 - 2013-07-09 09:01 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-08 20:12 - 2013-07-08 20:13 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-07 03:00 - 2013-05-16 00:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:03 - 2013-07-05 07:04 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-03 08:47 - 2013-07-09 09:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:23 - 2013-06-23 23:36 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-23 19:06 - 2013-07-06 03:02 - 00000000 __SHD C:\$$PendingFiles
2013-06-23 18:22 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-06-23 18:22 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-06-23 18:22 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-06-23 18:22 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-23 18:22 - 2013-05-04 09:45 - 02233600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-06-23 18:22 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-06-23 18:22 - 2013-04-27 07:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-23 18:22 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-23 18:22 - 2013-04-24 01:12 - 01569792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-23 18:22 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-23 18:22 - 2013-04-24 00:55 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-06-23 18:22 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-23 18:22 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
==================== One Month Modified Files and Folders =======
2013-07-12 17:45 - 2013-04-01 19:25 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-12 17:42 - 2013-07-12 17:42 - 00890988 _____ C:\Users\Dennis\Desktop\SecurityCheck.exe
2013-07-12 17:41 - 2013-07-09 20:41 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-12 17:37 - 2012-12-18 22:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-12 17:15 - 2012-12-18 19:28 - 01648837 _____ C:\Windows\WindowsUpdate.log
2013-07-12 17:02 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-07-12 13:24 - 2013-07-12 13:24 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-12 13:21 - 2012-12-18 19:36 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1471377960-4142091505-4027430203-1001
2013-07-12 13:17 - 2013-07-12 13:16 - 02347384 _____ (ESET) C:\Users\Dennis\Downloads\esetsmartinstaller_enu.exe
2013-07-12 13:15 - 2013-04-01 19:25 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-12 12:19 - 2012-07-26 12:27 - 00755402 _____ C:\Windows\system32\perfh007.dat
2013-07-12 12:19 - 2012-07-26 12:27 - 00156630 _____ C:\Windows\system32\perfc007.dat
2013-07-12 12:19 - 2012-07-26 09:28 - 01754016 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-12 12:15 - 2013-07-12 12:15 - 03371680 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-12 12:15 - 2012-12-18 19:32 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-07-12 12:15 - 2012-12-18 19:21 - 00134740 _____ C:\Windows\PFRO.log
2013-07-12 12:15 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-12 12:15 - 2012-07-26 07:26 - 02097152 ___SH C:\Windows\system32\config\BBI
2013-07-12 12:14 - 2013-07-12 12:14 - 00001506 _____ C:\AdwCleaner[S3].txt
2013-07-12 11:49 - 2013-07-12 11:49 - 00000869 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-07-12 11:47 - 2013-07-12 11:47 - 00000000 ____D C:\Windows\ERUNT
2013-07-12 11:45 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Adobe
2013-07-12 11:44 - 2013-07-12 11:44 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Dennis\Desktop\JRT.exe
2013-07-12 11:44 - 2012-12-18 22:10 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-12 11:34 - 2013-07-12 11:33 - 00001566 _____ C:\AdwCleaner[S2].txt
2013-07-12 11:34 - 2012-07-26 12:29 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-12 11:30 - 2013-07-12 11:30 - 00662345 _____ C:\Users\Dennis\Desktop\adwcleaner (1).exe
2013-07-12 09:35 - 2012-12-18 20:24 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-12 09:33 - 2012-12-29 17:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 09:20 - 2013-01-08 08:53 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH
2013-07-12 09:19 - 2013-01-08 09:06 - 00000790 _____ C:\Windows\wiso.ini
2013-07-12 09:18 - 2013-05-17 09:34 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\ALFBanCo3
2013-07-12 09:18 - 2013-01-02 09:01 - 00000000 ____D C:\ProgramData\AlfBanCo3
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Buhl Data Service
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Local\Buhl Data Service
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-12 07:23 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\Documents\StarCraft II
2013-07-11 23:40 - 2013-04-01 19:25 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-11 23:40 - 2013-04-01 19:25 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-11 07:33 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\UseNeXT
2013-07-10 17:10 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-07-09 21:08 - 2013-05-17 09:35 - 00125952 ___SH C:\Users\Dennis\Desktop\Thumbs.db
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:23 - 2013-07-09 20:22 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:28 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\vlc
2013-07-09 09:23 - 2013-05-17 09:36 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:17 - 2012-12-18 21:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-09 09:16 - 2013-07-09 09:15 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:16 - 2012-07-26 07:37 - 00000000 ____D C:\Windows\servicing
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:01 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:01 - 2013-07-03 08:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-09 08:06 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages
2013-07-08 20:13 - 2013-07-08 20:12 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-06 03:02 - 2013-06-23 19:06 - 00000000 __SHD C:\$$PendingFiles
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:04 - 2013-07-05 07:03 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-01 10:36 - 2013-05-17 09:35 - 00002194 ____H C:\Users\Dennis\Documents\Default.rdp
2013-06-28 00:04 - 2012-07-26 10:14 - 00693112 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-28 00:04 - 2012-07-26 10:14 - 00078200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-27 15:52 - 2013-05-07 11:40 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-06-27 09:21 - 2013-05-17 09:33 - 00091736 _____ C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-26 23:04 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\SanDisk
2013-06-26 19:10 - 2013-04-17 09:41 - 00000000 ____D C:\Windows\rescache
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:36 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-12 01:43 - 2013-07-10 17:14 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 01:42 - 2013-07-10 17:14 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 01:42 - 2013-07-10 17:14 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-06-12 01:25 - 2013-07-10 17:14 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-12 09:29
==================== End Of Log ============================
__________________ Gruß Dennis |
|
12.07.2013, 16:54
| #8 |
| /// the machine /// TB-Ausbilder | Delta Search Toolbar Java bitte updaten. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
12.07.2013, 16:54
| #9 |
| | Delta Search Toolbar Scheint mir jetzt alles wieder sauber zu sein! Vielen Vielen Dank! :-)
__________________ Gruß Dennis |
|
12.07.2013, 16:55
| #10 |
| /// the machine /// TB-Ausbilder | Delta Search Toolbar Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Delta Search Toolbar |
| 7-zip, adobe reader xi, antivir, autorun, avira, bho, bonjour, continue, down, error, firefox, flash player, helper, helper.exe, home, homepage, iexplore.exe, install.exe, installation, logfile, lws.exe, mozilla, ntdll.dll, object, office 2013, plug-in, realtek, registry, richtlinie, scan, security, senden, software, svchost.exe, visual studio, windows |
Linear-Darstellung
