| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: PUP.VShare.Redir und PUP.Optional.Open Candy auf dem RechnerWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
25.08.2013, 19:16
| #16 |
| /// the machine /// TB-Ausbilder    |  PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner Thundbird und vor allem Windows updaten. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
28.08.2013, 09:13
| #17 |
 | PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner Hi,
__________________ich bin leider schon beim update von windows zum x-ten Mal gescheitert: er meldet mir immer den Fehler 80004005. Das geht schon seit Wochen so. Wenn du da einen Tipp hättest, wäre ich echt dankbar!!! Hi, ich noch mal. Jetzt hatte ich plötzlich schon wieder so einen virus-Browser-Ding Lyrixx oder so ähnlich. Ich habe AdwCleaner noch mal drüber laufen lassen. Ich schicke dir auch dazu das log noch mal. Tausend Dank für all deine Hilfe... Code:
ATTFilter # AdwCleaner v3.001 - Report created 27/08/2013 at 19:44:19
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Home Premium (64 bits)
# Username : ADMIN - UTE-PC
# Running from : C:\Users\ADMIN\Downloads\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
Service Deleted : BrowserDefendert
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Babylon
[!] Folder Deleted : C:\ProgramData\BrowserDefender
Folder Deleted : C:\Program Files (x86)\delta
Folder Deleted : C:\Program Files (x86)\LyriXeeker
Folder Deleted : C:\Program Files (x86)\openit
Folder Deleted : C:\Program Files (x86)\optimizer pro
Folder Deleted : C:\Users\Ute\AppData\Roaming\optimizer pro
Folder Deleted : C:\Users\ADMIN\AppData\Roaming\BabSolution
Folder Deleted : C:\Users\ADMIN\AppData\Roaming\Babylon
Folder Deleted : C:\Users\ADMIN\AppData\Roaming\DSite
Folder Deleted : C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
File Deleted : C:\Users\Public\Desktop\Open It!.lnk
File Deleted : C:\Users\Ute\AppData\Roaming\Mozilla\Firefox\Profiles\jdh84i10.default\bprotector_extensions.sqlite
File Deleted : C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default\bprotector_extensions.sqlite
File Deleted : C:\Users\Ute\AppData\Roaming\Mozilla\Firefox\Profiles\jdh84i10.default\bprotector_prefs.js
File Deleted : C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default\bprotector_prefs.js
File Deleted : C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default\user.js
File Deleted : C:\Windows\System32\Tasks\BrowserDefendert
File Deleted : C:\Windows\Tasks\DSite.job
File Deleted : C:\Windows\System32\Tasks\DSite
File Deleted : C:\Windows\System32\Tasks\EPUpdater
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NTRedirect]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Key Deleted : HKCU\Software\5b4ddd9b26dbe45
Key Deleted : HKLM\SOFTWARE\5b4ddd9b26dbe45
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\AppDataLow\Software\lyrixeeker
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Delta
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\lyrix@lyrixeeker.co
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenIt Open It!
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll
***** [ Browsers ] *****
-\\ Internet Explorer v8.0.7600.17267
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [bProtectTabs]
-\\ Mozilla Firefox v23.0.1 (de)
[ File : C:\Users\Ute\AppData\Roaming\Mozilla\Firefox\Profiles\jdh84i10.default\prefs.js ]
[ File : C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default\prefs.js ]
Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.dfltLng", "de");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.delta.id", "02306ab400000000000090e6ba5e556c");
Line Deleted : user_pref("extensions.delta.instlDay", "15942");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.24.5");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.24.5");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.24.511:47:45");
Line Deleted : user_pref("extensions.delta_i.babExt", "");
Line Deleted : user_pref("extensions.delta_i.babTrack", "affID=119357&tt=200813_245&tsp=4985");
Line Deleted : user_pref("extensions.delta_i.srcExt", "ss");
[ File : C:\Users\Sicherheitstest\AppData\Roaming\Mozilla\Firefox\Profiles\ih00hz15.default\prefs.js ]
[ File : C:\Users\Kinder\AppData\Roaming\Mozilla\Firefox\Profiles\opdzutu7.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [10606 octets] - [21/08/2013 21:01:08]
AdwCleaner[R1].txt - [1183 octets] - [22/08/2013 13:30:36]
AdwCleaner[R2].txt - [10628 octets] - [27/08/2013 19:42:05]
AdwCleaner[S0].txt - [10718 octets] - [21/08/2013 21:04:04]
AdwCleaner[S1].txt - [1245 octets] - [22/08/2013 13:32:23]
AdwCleaner[S2].txt - [10119 octets] - [27/08/2013 19:44:19]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [10180 octets] ##########
ich habe nach AdwCleaner und Mbam erneut PUPs auf dem Rechner: PupOptional.BabylonA, BabSolution, -Delta, -LyricXeeker, -Optimizer... Habe sie gelöscht bzw. aus der Quarantäne gelöscht. Wo die her kommen, ist mir ein Rätsel. Ich schicke dir hier also auch noch mal das log von Mbam und lasse auch ein neues Frst erstellen. Mache vielleicht auch noch mal alle anderen Schritte, die du genannt hast. Aber noch mal wichtig: Hast du einen Tipp wg. Windows-Aktualisierung, die bei mir ja immer scheitert??? Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.22.07 Windows 7 x64 NTFS Internet Explorer 8.0.7600.16385 ADMIN :: UTE-PC [Administrator] 27.08.2013 21:14:47 mbam-log-2013-08-27 (21-14-47).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 602611 Laufzeit: 3 Stunde(n), 3 Minute(n), 15 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 8 C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\deltaApp.dll.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\deltaEng.dll.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\deltasrv.exe.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\deltaTlbr.dll.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\bh\delta.dll.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files (x86)\LyriXeeker\Uninstall.exe.vir (PUP.Optional.LyricXeeker.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Users\ADMIN\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Users\ADMIN\AppData\Roaming\BabSolution\Shared\BUSolution.dll.vir (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by ADMIN (administrator) on 28-08-2013 09:19:17
Running from C:\Users\ADMIN\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe
(PacketVideo) C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe
() C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16330272 2009-07-02] (NVIDIA Corporation)
HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [617856 2009-07-30] (ELAN Microelectronic Corp.)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Cyberlink\MediaShowEspresso\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\Cyberlink\PowerDirector\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe [87336 2009-04-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [8493624 2009-07-07] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [159744 2009-04-20] (ASUS)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1655296 2010-09-05] (Dominik Reichl)
HKU\Kinder\...\Policies\system: [LogonHoursAction] 2
HKU\Kinder\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Sicherheitstest\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [975288 2012-07-02] (Samsung)
HKU\Sicherheitstest\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKU\Sicherheitstest\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()
HKU\Sicherheitstest\...\Policies\system: [LogonHoursAction] 2
HKU\Sicherheitstest\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Ute\...\Run: [SkypePM] - C:\Users\Ute\AppData\Local\Skype\SkypePM.exe [x]
HKU\Ute\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()
HKU\Ute\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Ute\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]
HKU\Ute\...\Policies\system: [LogonHoursAction] 2
HKU\Ute\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs-x32: c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll [400704 2013-05-22] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk
ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)
Startup: C:\Users\Sicherheitstest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()
Startup: C:\Users\Ute\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Product Registration.lnk
ShortcutTarget: Product Registration.lnk -> C:\Users\ADMIN\AppData\Local\Temp\is-D6743.tmp\ATR1.exe (No File)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO-x32: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {55963676-2F5E-4BAF-AC28-CF26AA587566} https://sslvpn.uni-potsdam.de/CACHE/stc/1/binaries/vpnweb.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\ADMIN\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\128.xpi
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [108289 2009-05-13] (Avira GmbH)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [185089 2009-07-21] (Avira GmbH)
S2 ASUSRDVDService; C:\Program Files (x86)\ASUS\AI Recovery\ServiceSimple2.exe [109184 2009-09-11] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [344064 2009-04-08] (AVerMedia)
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [405504 2008-12-09] ()
S2 FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [306232 2009-07-24] (ASUSTeK Computer Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-01-21] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 TwonkyProxy; C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe [545608 2012-07-09] ()
R2 TwonkyServer; C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe [549704 2012-07-09] (PacketVideo)
R2 TwonkyWebDav; C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe [271176 2012-07-09] ()
==================== Drivers (Whitelisted) ====================
R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
S3 AVerAF15DMBTH64; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [592256 2009-07-27] (AVerMedia TECHNOLOGIES, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [74880 2009-11-25] (Avira GmbH)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-05-20] ()
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [203544 2013-02-06] (DEVGURU Co., LTD.(www.devguru.co.kr))
U3 tmlwf;
U3 tmwfp;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-28 08:45 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe
2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe
2013-08-27 19:59 - 2013-08-27 20:00 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe
2013-08-27 19:40 - 2013-08-27 19:41 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe
2013-08-27 00:34 - 2013-08-27 00:34 - 00000000 ____D C:\Windows\system32\SPReview
2013-08-26 23:09 - 2013-08-26 23:47 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part
2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG
2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 20:15 - 2009-10-10 05:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird
2013-08-26 19:37 - 2013-08-26 19:38 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe
2013-08-26 17:33 - 2011-02-19 08:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt
2013-08-25 11:56 - 2013-08-25 11:57 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe
2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt
2013-08-23 10:35 - 2013-08-23 10:37 - 02347384 _____ (ESET) C:\Users\ADMIN\Downloads\esetsmartinstaller_enu.exe
2013-08-22 21:19 - 2013-04-04 14:50 - 00887432 _____ (Malwarebytes Corporation) C:\Users\ADMIN\Desktop\mbam.exe
2013-08-22 15:12 - 2013-08-22 15:12 - 00032118 _____ C:\Users\ADMIN\Desktop\Addition.txt
2013-08-22 14:46 - 2013-08-22 14:46 - 00002092 _____ C:\Users\ADMIN\Desktop\JRT.txt
2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe
2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt
2013-08-22 11:40 - 2013-08-22 11:41 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt
2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 23:41 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer
2013-08-21 23:01 - 2013-08-21 23:03 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe
2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI
2013-08-21 22:57 - 2013-08-21 22:58 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe
2013-08-21 21:00 - 2013-08-27 20:33 - 00000000 ____D C:\AdwCleaner
2013-08-21 17:22 - 2013-08-21 17:29 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe
2013-08-21 14:30 - 2013-08-21 14:31 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt
2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt
2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST
2013-08-21 14:24 - 2013-08-21 14:25 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe
2013-08-21 14:19 - 2013-08-21 14:20 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe
2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG
2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT
2013-08-21 12:56 - 2013-08-28 08:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job
2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk
2013-08-17 12:24 - 2013-08-25 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 11:32 - 2013-08-15 11:34 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-08-13 00:18 - 2010-09-14 08:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2013-08-13 00:18 - 2010-09-14 08:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2013-08-13 00:10 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-08-13 00:10 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-08-13 00:10 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-08-13 00:10 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-08-13 00:05 - 2013-08-15 10:53 - 00000000 ____D C:\Windows\system32\MRT
2013-08-12 23:55 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-08-12 23:55 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-08-12 23:55 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-08-12 23:55 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-08-12 23:55 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-08-12 23:55 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-08-12 23:55 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-08-12 23:55 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-08-12 10:42 - 2012-01-03 08:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-08-12 10:42 - 2012-01-03 07:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-08-12 10:42 - 2011-05-04 07:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-08-12 10:42 - 2011-05-04 07:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-08-12 10:42 - 2011-05-04 07:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-08-12 10:42 - 2011-05-04 07:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-08-12 10:42 - 2011-05-04 06:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-08-12 10:42 - 2011-05-04 06:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-08-12 10:42 - 2011-05-04 06:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-08-12 10:42 - 2011-05-04 06:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-08-12 10:42 - 2011-02-24 08:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-08-12 10:42 - 2011-02-24 07:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-08-12 10:42 - 2010-08-04 09:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2013-08-12 10:42 - 2010-01-19 11:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2013-08-12 10:42 - 2010-01-19 11:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2013-08-12 10:42 - 2010-01-19 11:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2013-08-12 10:42 - 2010-01-19 11:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2013-08-12 10:42 - 2010-01-19 01:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2013-08-12 10:42 - 2010-01-19 01:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2013-08-12 10:42 - 2010-01-19 01:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2013-08-12 10:42 - 2010-01-19 01:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2013-08-12 10:42 - 2010-01-19 01:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2013-08-12 10:42 - 2010-01-19 01:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2013-08-12 10:41 - 2012-07-06 21:58 - 00552448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2013-08-12 10:41 - 2012-01-04 11:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-08-12 10:41 - 2012-01-04 11:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-08-12 10:41 - 2011-06-16 07:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-08-12 10:41 - 2011-06-16 06:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-08-12 10:41 - 2011-02-26 08:23 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-08-12 10:41 - 2011-02-26 07:33 - 02614784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-08-12 10:40 - 2012-08-02 19:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-08-12 10:40 - 2012-08-02 19:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-08-12 10:40 - 2012-05-02 07:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-08-12 10:40 - 2011-04-22 22:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-08-12 10:40 - 2011-03-12 14:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-08-12 10:40 - 2011-03-12 13:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2013-08-12 10:40 - 2010-12-21 08:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2013-08-12 10:40 - 2010-12-21 08:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2013-08-12 10:40 - 2010-12-21 08:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2013-08-12 10:40 - 2010-12-21 07:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-08-12 10:39 - 2012-12-07 07:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-08-12 10:39 - 2012-12-07 07:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-08-12 10:39 - 2012-12-07 07:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-08-12 10:39 - 2012-12-07 06:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-08-12 10:39 - 2012-12-07 05:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-08-12 10:39 - 2012-11-22 12:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-08-12 10:39 - 2012-11-22 11:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-08-12 10:38 - 2012-11-30 01:21 - 00420032 _____ C:\Windows\SysWOW64\locale.nls
2013-08-12 10:38 - 2012-11-30 01:19 - 00420032 _____ C:\Windows\system32\locale.nls
2013-08-12 10:38 - 2012-04-07 14:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-08-12 10:38 - 2012-04-07 13:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-08-12 10:36 - 2011-03-25 05:23 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-08-12 10:36 - 2011-03-25 05:23 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-08-12 10:36 - 2011-03-25 05:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00187264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2013-08-12 10:36 - 2011-03-11 08:22 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2013-08-12 10:36 - 2011-03-11 08:22 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2013-08-12 10:36 - 2011-03-11 08:18 - 02566144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-08-12 10:36 - 2011-03-11 08:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2013-08-12 10:36 - 2011-03-11 07:39 - 01686016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-08-12 10:36 - 2011-03-11 07:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2013-08-12 10:36 - 2011-03-11 06:31 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-08-12 10:35 - 2013-01-24 07:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-08-12 10:35 - 2012-05-05 10:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-08-12 10:35 - 2012-05-05 09:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-08-12 10:35 - 2012-02-11 08:29 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-08-12 10:35 - 2012-02-11 08:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-08-12 10:35 - 2011-03-25 05:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-08-12 10:35 - 2011-03-25 05:22 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-08-12 10:35 - 2011-03-25 05:22 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-08-12 10:35 - 2011-03-25 05:22 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-08-12 10:35 - 2011-02-18 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-08-12 10:35 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-08-12 10:01 - 2010-03-04 06:40 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-08-12 10:01 - 2010-03-04 06:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2
2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg
2013-08-09 14:35 - 2013-08-14 10:48 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service
2013-08-09 13:55 - 2013-08-09 16:09 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe
2013-08-09 13:52 - 2013-08-09 16:00 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe
2013-08-09 13:49 - 2013-08-11 21:55 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl
2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes
==================== One Month Modified Files and Folders =======
2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe
2013-08-28 09:12 - 2012-12-23 17:19 - 00000000 ____D C:\ProgramData\TwonkyServer
2013-08-28 09:06 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-28 09:06 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-28 09:00 - 2009-11-06 21:11 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-28 08:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-28 08:57 - 2009-10-08 05:25 - 01374633 _____ C:\Windows\WindowsUpdate.log
2013-08-28 08:57 - 2009-07-14 06:51 - 00240053 _____ C:\Windows\setupact.log
2013-08-28 08:56 - 2013-08-21 12:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job
2013-08-28 08:43 - 2013-08-28 08:45 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe
2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe
2013-08-28 08:27 - 2013-03-16 10:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-28 08:27 - 2009-11-06 21:11 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-28 07:20 - 2009-10-08 06:23 - 00051484 _____ C:\Windows\PFRO.log
2013-08-27 20:33 - 2013-08-21 21:00 - 00000000 ____D C:\AdwCleaner
2013-08-27 20:00 - 2013-08-27 19:59 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe
2013-08-27 19:41 - 2013-08-27 19:40 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe
2013-08-27 00:34 - 2013-08-27 00:34 - 00000000 ____D C:\Windows\system32\SPReview
2013-08-26 23:47 - 2013-08-26 23:09 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part
2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 21:57 - 2012-02-23 09:54 - 00008909 _____ C:\Windows\IE9_main.log
2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG
2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird
2013-08-26 19:38 - 2013-08-26 19:37 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe
2013-08-26 17:34 - 2013-01-04 15:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-25 23:06 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-25 21:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-25 13:18 - 2009-10-08 06:24 - 00001927 _____ C:\Windows\system32\ServiceFilter.ini
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt
2013-08-25 11:57 - 2013-08-25 11:56 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe
2013-08-25 11:47 - 2013-08-17 12:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt
2013-08-23 10:37 - 2013-08-23 10:35 - 02347384 _____ (ESET) C:\Users\ADMIN\Downloads\esetsmartinstaller_enu.exe
2013-08-23 10:37 - 2009-08-04 11:51 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-08-23 10:37 - 2009-08-04 11:51 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-08-23 10:37 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-22 18:38 - 2013-04-09 18:07 - 00000000 ___RD C:\Users\Ute\Dropbox
2013-08-22 18:38 - 2012-05-26 14:14 - 00000000 ____D C:\Users\Ute\AppData\Roaming\Dropbox
2013-08-22 15:12 - 2013-08-22 15:12 - 00032118 _____ C:\Users\ADMIN\Desktop\Addition.txt
2013-08-22 14:46 - 2013-08-22 14:46 - 00002092 _____ C:\Users\ADMIN\Desktop\JRT.txt
2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe
2013-08-22 13:36 - 2009-10-08 06:24 - 00002488 _____ C:\Windows\system32\AutoRunFilter.ini
2013-08-22 13:35 - 2009-07-14 06:45 - 00467816 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt
2013-08-22 11:41 - 2013-08-22 11:40 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt
2013-08-22 08:27 - 2009-11-11 01:08 - 00129424 _____ C:\Users\ADMIN\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-21 23:47 - 2010-02-14 22:28 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer
2013-08-21 23:03 - 2013-08-21 23:01 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe
2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI
2013-08-21 22:58 - 2013-08-21 22:57 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe
2013-08-21 22:02 - 2009-10-30 18:54 - 00129424 _____ C:\Users\Ute\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-21 21:33 - 2012-01-15 21:41 - 00000000 ____D C:\Program Files (x86)\Free YouTube to MP3 Converter
2013-08-21 21:29 - 2013-02-22 12:55 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-08-21 21:29 - 2009-10-08 06:07 - 00000000 ____D C:\ProgramData\Adobe
2013-08-21 21:05 - 2012-05-18 20:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-21 18:41 - 2009-11-11 22:45 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Adobe
2013-08-21 17:31 - 2010-03-29 23:05 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-21 17:29 - 2013-08-21 17:22 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe
2013-08-21 14:31 - 2013-08-21 14:30 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt
2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt
2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST
2013-08-21 14:25 - 2013-08-21 14:24 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe
2013-08-21 14:20 - 2013-08-21 14:19 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe
2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG
2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT
2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk
2013-08-20 20:30 - 2013-03-16 10:32 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-20 20:30 - 2012-09-13 20:42 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 20:30 - 2011-11-19 21:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 19:42 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-08-16 11:51 - 2010-08-02 23:26 - 00000000 ____D C:\Program Files (x86)\ElsterFormular
2013-08-16 11:08 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN
2013-08-15 11:54 - 2013-07-22 17:57 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-15 11:54 - 2013-07-22 17:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-15 11:34 - 2013-08-15 11:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-08-15 10:55 - 2009-10-08 05:32 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 10:53 - 2013-08-13 00:05 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 10:49 - 2010-10-02 13:20 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 20:15 - 2012-05-09 14:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Adobe
2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-08-14 17:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 10:48 - 2013-08-09 14:35 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute
2013-08-14 10:48 - 2012-05-09 00:10 - 00129816 _____ C:\Users\Sicherheitstest\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-14 07:17 - 2010-02-14 22:32 - 00000000 ____D C:\Users\Ute\AppData\Roaming\KeePass
2013-08-13 12:04 - 2011-04-06 21:23 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-08-11 22:06 - 2010-10-01 21:25 - 00000000 ____D C:\Windows\pss
2013-08-11 22:01 - 2009-12-19 00:27 - 00000000 ____D C:\Program Files (x86)\Spiele
2013-08-11 21:58 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2013-08-11 21:55 - 2013-08-09 13:49 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl
2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2
2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg
2013-08-09 16:09 - 2013-08-09 13:55 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe
2013-08-09 16:00 - 2013-08-09 13:52 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe
2013-08-09 14:35 - 2009-12-17 22:43 - 00001322 _____ C:\Windows\wiso.ini
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service
2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes
2013-08-08 23:03 - 2011-11-22 11:39 - 00002214 _____ C:\Users\Public\Desktop\Google Earth.lnk
Files to move or delete:
====================
C:\Users\Sicherheitstest\AppData\Local\Temp\drm_dyndata_7380006.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\isp7787.tmp\_Setup.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3_x64.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\msiexec.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\vcredist_x86.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DSETUP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\dsetup32.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DXSETUP.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\be29e7f1-71ae-4703-50cb-1d52be512f51\twapi-be29e7f1-71ae-4703-50cb-1d52be512f51.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\Ute\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\Ute\AppData\Local\Temp\{2650056B-FA80-44FF-836B-A7B42BAB0436}\InstallFlashPlayer.exe
C:\Users\Ute\AppData\Local\Temp\WLZ345C.tmp\CddbLangDE.dll
C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\DropboxNSISTools.dll
C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\UAC.dll
C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\DropboxNSISTools.dll
C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\UAC.dll
C:\Users\Ute\AppData\Local\Temp\MozUpdater-2\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater-1\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-3\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-2\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-1\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe
C:\Users\Ute\AppData\Local\Temp\IXP380.TMP\SetupAdmin.exe
C:\Users\Ute\AppData\Local\Temp\is357113909\OpenItSetup.exe
C:\Users\Ute\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-22 07:16
==================== End Of Log ============================
--- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2013 Ran by ADMIN at 2013-08-28 09:20:32 Running from C:\Users\ADMIN\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Update for Microsoft Office 2007 (KB2508958) (x32) 2007 Microsoft Office system (x32 Version: 12.0.6612.1000) 64 Bit HP CIO Components Installer (Version: 6.2.1) 8000A809 (x32 Version: 50.0.165.000) 8000A809_eDocs (x32 Version: 50.0.165.000) 8000A809_Help (x32 Version: 1.00.0000) Acrobat.com (x32 Version: 1.6.65) Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0) Activation Assistant for the 2007 Microsoft Office suites (x32) Actualização do Microsoft Office Excel 2007 Help (KB963678) (x32) Actualização do Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Actualização do Microsoft Office Word 2007 Help (KB963665) (x32) Adobe Download Assistant (x32 Version: 1.2.5) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) AGEIA PhysX v7.07.24 (x32 Version: 7.07.24) ÅíçìåñùìÝíç Ýêäïóç Microsoft Office Excel 2007 Help (KB963678) (x32) ÅíçìåñùìÝíç Ýêäïóç Microsoft Office Powerpoint 2007 Help (KB963669) (x32) ÅíçìåñùìÝíç Ýêäïóç Microsoft Office Word 2007 Help (KB963665) (x32) Alcor Micro USB Card Reader (x32 Version: 1.2.17.25001) Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) ASUS AI Recovery (x32 Version: 1.0.6) ASUS CopyProtect (x32 Version: 1.0.0015) ASUS Data Security Manager (x32 Version: 1.00.0013) ASUS FancyStart (x32 Version: 1.0.6) ASUS LifeFrame3 (x32 Version: 3.0.20) ASUS Live Update (x32 Version: 2.5.8) ASUS MultiFrame (x32 Version: 1.0.0019) ASUS Power4Gear Hybrid (Version: 1.1.20) ASUS SmartLogon (x32 Version: 1.0.0007) ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028) ASUS Video Magic (x32 Version: 6.0.3212) ASUS Virtual Camera (x32 Version: 1.0.18) Asus_Camera_ScreenSaver (x32 Version: 2.0.0008) Atheros Client Installation Program (x32 Version: 7.0) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.10) ATK Generic Function Service (x32 Version: 1.00.0008) ATK Hotkey (x32 Version: 1.0.0052) ATK Media (x32 Version: 2.0.0005) ATKOSD2 (x32 Version: 7.0.0005) avast! Free Antivirus (x32 Version: 8.0.1489.0) AVerMedia A850 USB DMB-TH 1.0.64.28 (x32 Version: 1.0.64.28) AVerTV (x32 Version: 6.0.18) Avira AntiVir Personal - Free Antivirus (x32) BioShock (x32 Version: 2.62.0000) Bonjour (Version: 3.0.0.10) BPDSoftware (x32 Version: 50.0.165.000) BPDSoftware_Ini (x32 Version: 1.00.0000) BufferChm (x32 Version: 130.0.331.000) Canon MP Navigator EX 4.0 (x32) Canon Solution Menu EX (x32) CanoScan LiDE 210 Scanner Driver Choice Guard (x32 Version: 1.2.87.0) Cisco AnyConnect VPN Client (x32 Version: 2.5.1025) ControlDeck (x32 Version: 1.0.3) Crazy Machines II - Gold (x32 Version: 1.03) CyberLink LabelPrint (x32 Version: 2.5.1720) CyberLink MediaShow Espresso (x32 Version: 5.0.0526) CyberLink PhotoNow (x32 Version: 1.1.6622) CyberLink Power2Go (x32 Version: 6.1.2713) CyberLink PowerDirector (x32 Version: 7.0.3131) CyberLink PowerDVD 9 (x32 Version: 9.0.1719) DeviceDiscovery (x32 Version: 130.0.465.000) ElsterFormular (x32 Version: 14.1.11318) ElsterFormular für Unternehmer (x32 Version: 12.3.2.6814u) Express Gate (x32 Version: 1.2.13.16) Fallout 3 (HKCU Version: 1.00.0000) Fast Boot (Version: 1.0.3) Freemake Video Downloader (x32 Version: 3.0.0) Gigaset QuickSync (x32 Version: 6.1.0822.15063) Google Earth (x32 Version: 5.2.0.5932) Google Earth (x32 Version: 7.1.1.1888) Google Update Helper (x32 Version: 1.3.21.153) Gothic 3 - Götterdämmerung (x32 Version: 1.0.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Officejet Pro 8000 A809 Series (Version: 13.0) HP Photosmart Essential 3.5 (Version: 3.5) HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000) HPPhotosmartEssential (x32 Version: 2.04.0000) iTunes (Version: 10.7.0.21) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Junk Mail filter update (x32 Version: 14.0.8050.1202) KeePass Password Safe 2.13 (x32) Landwirtschafts Simulator 2013 (x32 Version: 1.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) MediaManager (x32 Version: 3.0.3 (60)) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.0.19.0) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office Access MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access MUI (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access MUI (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access MUI (Greek) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access MUI (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Access Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel 2007 Help - Aggiornamento (KB963678) (x32) Microsoft Office Excel 2007 Help §ó·sµ{¦¡ (KB963678) (x32) Microsoft Office Excel 2007 Help Actualización (KB963678) (x32) Microsoft Office Excel MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (Greek) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000) Microsoft Office IME (Chinese (Traditional)) 2007 (Version: 12.0.6612.1000) Microsoft Office IME (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook 2007 Help - Aggiornamento (KB963677) (x32) Microsoft Office Outlook 2007 Help Actualización (KB963677) (x32) Microsoft Office Outlook Connector (x32 Version: 12.0.6414.1000) Microsoft Office Outlook MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (Greek) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669) (x32) Microsoft Office Powerpoint 2007 Help §ó·sµ{¦¡ (KB963669) (x32) Microsoft Office Powerpoint 2007 Help Actualización (KB963669) (x32) Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (Greek) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Professional Hybrid 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Arabic) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Basque) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Catalan) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Dutch) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Galician) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Greek) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Hebrew) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Portuguese (Brazil)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Russian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (Chinese (Traditional)) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing (Dutch) 2007 (x32 Version: 12.0.4518.1017) Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing (French) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing (Greek) 2007 (x32 Version: 12.0.4518.1029) Microsoft Office Proofing (Hebrew) 2007 (x32 Version: 12.0.4518.1016) Microsoft Office Proofing (Italian) 2007 (x32 Version: 12.0.4518.1018) Microsoft Office Proofing (Portuguese (Portugal)) 2007 (x32 Version: 12.0.4518.1029) Microsoft Office Proofing (Spanish) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Publisher MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Publisher MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Publisher MUI (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Publisher MUI (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Publisher MUI (Greek) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Publisher MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Publisher MUI (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Publisher MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Publisher MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (Chinese (Traditional)) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (Dutch) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (French) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (Greek) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (Hebrew) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (Italian) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (Spanish) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (Greek) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word 2007 Help - Aggiornamento (KB963665) (x32) Microsoft Office Word 2007 Help §ó·sµ{¦¡ (KB963665) (x32) Microsoft Office Word 2007 Help Actualización (KB963665) (x32) Microsoft Office Word MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (Greek) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Works 6-9 Converter (x32 Version: 14.0.6120.5002) Mise à jour Microsoft Office Excel 2007 Help (KB963678) (x32) Mise à jour Microsoft Office Outlook 2007 Help (KB963677) (x32) Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Mise à jour Microsoft Office Word 2007 Help (KB963665) (x32) Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1) Mozilla Maintenance Service (x32 Version: 23.0.1) Mozilla Thunderbird (3.0.1) (x32 Version: 3.0.1 (de)) MSVCRT (x32 Version: 14.0.1468.721) myPrintMileage (Officejet Pro 8000 A809) (x32 Version: 1.00.0000) Network64 (Version: 130.0.579.000) NVIDIA Drivers (Version: 1.4) NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0) NVIDIA Install Application (Version: 2.1002.109.718) òãëåï òáåø îñðï ãåàø äæáì ùì Microsoft Office Excel 2007 Help (KB963678) (x32) òãëåï òáåø îñðï ãåàø äæáì ùì Microsoft Office Powerpoint 2007 Help (KB963669) (x32) òãëåï òáåø îñðï ãåàø äæáì ùì Microsoft Office Word 2007 Help (KB963665) (x32) OpenAL (x32) PC Beschleunigen (Version: 1.3.10.20086) phase-6 2.1.2.1b (x32 Version: 2.1.2.1b) Pospos - Im Land der Chuchuks 1.0.1b (x32) ProductContext (x32 Version: 50.0.165.000) QuickTime (x32 Version: 7.72.80.56) Realtek High Definition Audio Driver (x32 Version: 6.0.1.5904) RollerCoaster Tycoon 3 (x32) Samsung Kies (x32 Version: 2.3.2.12064_9) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.6.0) Skype web features (x32 Version: 1.0.3971) Skype™ 5.10 (x32 Version: 5.10.116) Spezialfahrzeuge-Simulator Version 1.45 (x32 Version: 1.45) Spybot - Search & Destroy (x32 Version: 1.6.2) SRS Premium Sound Control Panel (Version: 1.07.0100) Status (x32 Version: 130.0.469.000) Toolbox (x32 Version: 130.0.648.000) TrayApp (x32 Version: 130.0.422.000) Twonky Windows Components (x32 Version: 3.0.3) Uninstall 1.0.0.1 (x32) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft Office 2007 Help for Common Features (KB963673) (x32) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update for Microsoft Office Access 2007 Help (KB963663) (x32) Update for Microsoft Office Excel 2007 Help (KB963678) (x32) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 Help (KB963677) (x32) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition (x32) Update for Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update for Microsoft Office Publisher 2007 Help (KB963667) (x32) Update for Microsoft Office Script Editor Help (KB963671) (x32) Update for Microsoft Office Word 2007 Help (KB963665) (x32) Update für Microsoft Office Excel 2007 Help (KB963678) (x32) Update für Microsoft Office Outlook 2007 Help (KB963677) (x32) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update für Microsoft Office Word 2007 Help (KB963665) (x32) Update voor Microsoft Office Excel 2007 Help (KB963678) (x32) Update voor Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update voor Microsoft Office Word 2007 Help (KB963665) (x32) Ware PS/2-x64 7.0.5.7_WHQL WebReg (x32 Version: 130.0.132.017) WIDCOMM Bluetooth Software (Version: 6.2.0.9600) Winamp (x32 Version: 5.61 ) Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1) Windows Live Anmelde-Assistent (x32 Version: 5.000.818.6) Windows Live Call (x32 Version: 14.0.8050.1202) Windows Live Communications Platform (x32 Version: 14.0.8050.1202) Windows Live Essentials (x32 Version: 14.0.8050.1202) Windows Live Family Safety (Version: 14.0.8052.1208) Windows Live Fotogalerie (x32 Version: 14.0.8051.1204) Windows Live Mail (x32 Version: 14.0.8050.1202) Windows Live Messenger (x32 Version: 14.0.8050.1202) Windows Live Sync (x32 Version: 14.0.8050.1202) Windows Live Writer (x32 Version: 14.0.8050.1202) Windows Live-Uploadtool (x32 Version: 14.0.8014.1029) WinFlash (x32 Version: 2.26.0) WinRAR (x32) Wireless Console 3 (x32 Version: 3.0.10) WISO Sparbuch 2009 (HKCU Version: 16.00.6228) WISO Sparbuch 2010 (x32 Version: 17.00.6531) WISO Steuer-Sparbuch 2011 (x32 Version: 18.00.6928) WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7303) World of Tanks (x32) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {03E8D2B6-0FA8-40E0-A8FB-793E643D37E0} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-08-04] (Microsoft Corporation) Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation) Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation) Task: {1CFB9147-092D-400B-BEF5-64F87E95C0B5} - System32\Tasks\{4C86492E-7501-4045-9764-EAE8D57B44C7} => C:\Program Files (x86)\Microsoft Outlook2007 Academic\Office12\OUTLOOK.EXE [2013-06-21] (Microsoft Corporation) Task: {1DE3F2ED-93F0-4B82-AD6A-6B2E45D2E1C2} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2009-07-14] (Microsoft Corporation) Task: {1F328232-F0B5-49D2-8548-D370B1C0C6DE} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2009-07-14] (Microsoft Corporation) Task: {24B09709-5B83-420E-8B38-E9A4360552EE} - System32\Tasks\{AD507736-6CAC-4129-BA1A-7F1955F91E53} => C:\Program Files (x86)\Spiele\WinLems\WinLems.exe No File Task: {37DD69EA-A053-4A72-B1E7-D605C7C7CC18} - System32\Tasks\{3AC28431-7862-40DE-8E0C-A9726C8AC21C} => C:\Program Files (x86)\Microsoft Outlook2007 Academic\Office12\OUTLOOK.EXE [2013-06-21] (Microsoft Corporation) Task: {3C0DD532-624F-44C8-83A8-0A90A0587D4A} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK) Task: {4442B19A-7BB0-4B68-B027-6E12811A8603} - System32\Tasks\P4GIntlCtrl => C:\Program Files\P4G\IntlCtrl.exe [2009-08-11] (TODO: <Company name>) Task: {46554143-937C-4907-BFB7-14B717632FCC} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2009-07-14] (Microsoft Corporation) Task: {4C75CC8B-79A5-4C0E-A825-C389B544895B} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {5346BDA2-6241-4575-88F7-06682DF97D03} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-11-06] (Google Inc.) Task: {53B54D29-E5F3-41BA-9D01-E907F66853E6} - System32\Tasks\{CC192D56-5326-4BA0-96BF-5637CF86437D} => C:\Program Files (x86)\Spiele\WinLems\WinLems.exe No File Task: {5CF7C858-007D-44C4-91BE-F2EF2F6A425F} - \DSite No Task File Task: {60925855-EC1B-4E4B-B805-F086F2D34F5E} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => C:\Windows\System32\dfdts.dll [2009-07-14] (Microsoft Corporation) Task: {6CA9B0EC-35C5-4EBF-9A02-95172736089D} - System32\Tasks\P4G Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14] (Microsoft Corporation) Task: {6DB2C1AB-8767-49B5-96D5-0CA86A29FC28} - System32\Tasks\MetaCrawler => C:\Users\ADMIN\AppData\Roaming\METACR~1\UPDATE~1\UPDATE~1.EXE No File Task: {6F4D57DC-C4E7-4CE2-B276-9EF5787052A7} - System32\Tasks\{81804752-C995-4CA0-9BFF-28DC85F6D4AD} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.) Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks Task: {78F1A2FF-3161-49D1-9E29-6DD418226CEE} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2009-09-11] (ASUSTek Computer Inc.) Task: {7D34C13A-0576-4F47-B079-EBCD9C2757E2} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {7F2D718C-D6E6-4052-8B04-E00EC64B0440} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-07-23] () Task: {87F1347F-410B-4764-A1CA-48924DC9DB02} - \BrowserDefendert No Task File Task: {9701889A-5F93-46E3-9FB7-762B1BE0E40D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-20] (Adobe Systems Incorporated) Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\System32\srrstr.dll [2009-07-14] (Microsoft Corporation) Task: {9B7F808A-7F56-4E90-8161-6ED2CE68E9CF} - System32\Tasks\WPD\SqmUpload_S-1-5-21-423201937-815055215-1465012819-1003 => C:\Windows\System32\portabledeviceapi.dll [2009-07-14] (Microsoft Corporation) Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\System32\aepdu.dll [2009-07-14] (Microsoft Corporation) Task: {B78E9FDF-E3DE-46E8-BD4C-521FD03C1EDE} - \EPUpdater No Task File Task: {CFFAB942-A04C-4023-A0AA-EB29E5849383} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2009-07-24] () Task: {D6AFF849-F59A-4599-B3B8-9E9BB191089B} - System32\Tasks\WPD\SqmUpload_S-1-5-21-423201937-815055215-1465012819-1004 => C:\Windows\System32\portabledeviceapi.dll [2009-07-14] (Microsoft Corporation) Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => C:\Windows\System32\acproxy.dll [2009-07-14] (Microsoft Corporation) Task: {D94B8963-B048-49FC-8DC8-D152D93C034D} - System32\Tasks\ASPG => C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe [2009-06-29] (ASUS) Task: {DE9C283D-2323-4FED-9D6A-47CA60D2341F} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => C:\Windows\System32\bfe.dll [2009-07-14] (Microsoft Corporation) Task: {E61F9DFF-9E43-4206-A231-139886E06D7F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-11-06] (Google Inc.) Task: {F7E8F4FB-635E-482E-8F55-1B3C09A1A99E} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2009-08-11] (ATK) Task: {FBF59EE6-CAFC-4E97-B1FE-E185B6F2312E} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software) Task: {FFE1B1F5-319C-4FE1-B386-9C81BD4FA22C} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-19] (ASUS) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\MetaCrawler.job => C:\Users\ADMIN\AppData\Roaming\METACR~1\UPDATE~1\UPDATE~1.EXE ==================== Alternate Data Streams (whitelisted) ========== AlternateDataStreams: C:\ProgramData\Temp:373E1720 AlternateDataStreams: C:\Users\Ute\Desktop\Citrix XenApp - Anmeldung.url:favicon ==================== Faulty Device Manager Devices ============= Name: Officejet Pro 8000 A809 Description: Officejet Pro 8000 A809 Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Cisco AnyConnect VPN Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect VPN Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (08/28/2013 08:59:28 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e Name des fehlerhaften Moduls: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000f2b1 ID des fehlerhaften Prozesses: 0x8e0 Startzeit der fehlerhaften Anwendung: 0xFastBootAgent.exe0 Pfad der fehlerhaften Anwendung: FastBootAgent.exe1 Pfad des fehlerhaften Moduls: FastBootAgent.exe2 Berichtskennung: FastBootAgent.exe3 Error: (08/28/2013 08:43:46 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest. Error: (08/28/2013 07:22:06 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e Name des fehlerhaften Moduls: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000f2b1 ID des fehlerhaften Prozesses: 0xb8c Startzeit der fehlerhaften Anwendung: 0xFastBootAgent.exe0 Pfad der fehlerhaften Anwendung: FastBootAgent.exe1 Pfad des fehlerhaften Moduls: FastBootAgent.exe2 Berichtskennung: FastBootAgent.exe3 Error: (08/28/2013 07:17:38 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1699241 Error: (08/28/2013 07:17:38 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1699241 Error: (08/28/2013 07:17:38 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/28/2013 06:34:11 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15391995 Error: (08/28/2013 06:34:11 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 15391995 Error: (08/28/2013 06:34:11 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/27/2013 09:11:11 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e Name des fehlerhaften Moduls: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000f2b1 ID des fehlerhaften Prozesses: 0xad8 Startzeit der fehlerhaften Anwendung: 0xFastBootAgent.exe0 Pfad der fehlerhaften Anwendung: FastBootAgent.exe1 Pfad des fehlerhaften Moduls: FastBootAgent.exe2 Berichtskennung: FastBootAgent.exe3 System errors: ============= Error: (08/28/2013 09:19:21 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (08/28/2013 09:19:21 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (08/28/2013 09:19:21 AM) (Source: PNRPSvc) (User: ) Description: 0x80630801 Error: (08/28/2013 09:12:32 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (08/28/2013 09:12:32 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (08/28/2013 09:12:31 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (08/28/2013 09:12:31 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (08/28/2013 09:12:32 AM) (Source: PNRPSvc) (User: ) Description: 0x80630801 Error: (08/28/2013 09:12:31 AM) (Source: PNRPSvc) (User: ) Description: 0x80630801 Error: (08/28/2013 09:12:16 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Microsoft Office Sessions: ========================= Error: (08/16/2013 02:43:10 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1322 seconds with 480 seconds of active time. This session ended with a crash. Error: (07/22/2012 00:23:11 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 9708 seconds with 240 seconds of active time. This session ended with a crash. Error: (07/05/2012 09:33:29 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6660 seconds with 2100 seconds of active time. This session ended with a crash. Error: (04/15/2012 08:53:22 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 13 seconds with 0 seconds of active time. This session ended with a crash. Error: (12/31/2011 01:18:36 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 126 seconds with 60 seconds of active time. This session ended with a crash. Error: (12/22/2011 09:20:52 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1031 seconds with 840 seconds of active time. This session ended with a crash. Error: (10/19/2011 06:42:10 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 74 seconds with 0 seconds of active time. This session ended with a crash. Error: (09/17/2011 07:26:58 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 856 seconds with 240 seconds of active time. This session ended with a crash. Error: (06/27/2011 02:53:29 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 7 seconds with 0 seconds of active time. This session ended with a crash. Error: (10/12/2010 11:47:51 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6541.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 7574 seconds with 4560 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 33% Total physical RAM: 4095.24 MB Available physical RAM: 2740.58 MB Total Pagefile: 8188.61 MB Available Pagefile: 6421.89 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:232.88 GB) (Free:149.46 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (DATA) (Fixed) (Total:218.23 GB) (Free:110 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: D9B3496E) Partition 1: (Not Active) - (Size=15 GB) - (Type=1C) Partition 2: (Active) - (Size=233 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=218 GB) - (Type=OF Extended) ==================== End Of Log ============================ Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.3 (08.21.2013:1)
OS: Windows 7 Home Premium x64
Ran by ADMIN on 28.08.2013 at 9:44:02,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Successfully deleted [Registry Value] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\bProtectTabs
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\open it!"
~~~ FireFox
Emptied folder: C:\Users\ADMIN\AppData\Roaming\mozilla\firefox\profiles\0yhqvmi4.default\minidumps [7 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.08.2013 at 9:52:24,86
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
28.08.2013, 09:21
| #18 |
| | PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner hier neues frst nach jrt Durchlauf
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by ADMIN (administrator) on 28-08-2013 10:15:34
Running from C:\Users\ADMIN\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe
(PacketVideo) C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe
() C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16330272 2009-07-02] (NVIDIA Corporation)
HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [617856 2009-07-30] (ELAN Microelectronic Corp.)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Cyberlink\MediaShowEspresso\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\Cyberlink\PowerDirector\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe [87336 2009-04-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [8493624 2009-07-07] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [159744 2009-04-20] (ASUS)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1655296 2010-09-05] (Dominik Reichl)
HKU\Kinder\...\Policies\system: [LogonHoursAction] 2
HKU\Kinder\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Sicherheitstest\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [975288 2012-07-02] (Samsung)
HKU\Sicherheitstest\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKU\Sicherheitstest\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()
HKU\Sicherheitstest\...\Policies\system: [LogonHoursAction] 2
HKU\Sicherheitstest\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Ute\...\Run: [SkypePM] - C:\Users\Ute\AppData\Local\Skype\SkypePM.exe [x]
HKU\Ute\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()
HKU\Ute\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Ute\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]
HKU\Ute\...\Policies\system: [LogonHoursAction] 2
HKU\Ute\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk
ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)
Startup: C:\Users\Sicherheitstest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()
Startup: C:\Users\Ute\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Product Registration.lnk
ShortcutTarget: Product Registration.lnk -> C:\Users\ADMIN\AppData\Local\Temp\is-D6743.tmp\ATR1.exe (No File)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO-x32: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {55963676-2F5E-4BAF-AC28-CF26AA587566} https://sslvpn.uni-potsdam.de/CACHE/stc/1/binaries/vpnweb.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\ADMIN\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\128.xpi
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [108289 2009-05-13] (Avira GmbH)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [185089 2009-07-21] (Avira GmbH)
S2 ASUSRDVDService; C:\Program Files (x86)\ASUS\AI Recovery\ServiceSimple2.exe [109184 2009-09-11] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [344064 2009-04-08] (AVerMedia)
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [405504 2008-12-09] ()
S2 FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [306232 2009-07-24] (ASUSTeK Computer Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-01-21] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 TwonkyProxy; C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe [545608 2012-07-09] ()
R2 TwonkyServer; C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe [549704 2012-07-09] (PacketVideo)
R2 TwonkyWebDav; C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe [271176 2012-07-09] ()
==================== Drivers (Whitelisted) ====================
R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
S3 AVerAF15DMBTH64; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [592256 2009-07-27] (AVerMedia TECHNOLOGIES, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [74880 2009-11-25] (Avira GmbH)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-05-20] ()
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [203544 2013-02-06] (DEVGURU Co., LTD.(www.devguru.co.kr))
U3 tmlwf;
U3 tmwfp;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe
2013-08-28 08:45 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe
2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe
2013-08-27 19:59 - 2013-08-27 20:00 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe
2013-08-27 19:40 - 2013-08-27 19:41 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe
2013-08-27 00:34 - 2013-08-27 00:34 - 00000000 ____D C:\Windows\system32\SPReview
2013-08-26 23:09 - 2013-08-26 23:47 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part
2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG
2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 20:15 - 2009-10-10 05:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird
2013-08-26 19:37 - 2013-08-26 19:38 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe
2013-08-26 17:33 - 2011-02-19 08:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt
2013-08-25 11:56 - 2013-08-25 11:57 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe
2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt
2013-08-23 10:35 - 2013-08-23 10:37 - 02347384 _____ (ESET) C:\Users\ADMIN\Downloads\esetsmartinstaller_enu.exe
2013-08-22 21:19 - 2013-04-04 14:50 - 00887432 _____ (Malwarebytes Corporation) C:\Users\ADMIN\Desktop\mbam.exe
2013-08-22 15:12 - 2013-08-28 09:20 - 00039035 _____ C:\Users\ADMIN\Desktop\Addition.txt
2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe
2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt
2013-08-22 11:40 - 2013-08-22 11:41 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt
2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 23:41 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer
2013-08-21 23:01 - 2013-08-21 23:03 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe
2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI
2013-08-21 22:57 - 2013-08-21 22:58 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe
2013-08-21 21:00 - 2013-08-27 20:33 - 00000000 ____D C:\AdwCleaner
2013-08-21 17:22 - 2013-08-21 17:29 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe
2013-08-21 14:30 - 2013-08-21 14:31 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt
2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt
2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST
2013-08-21 14:24 - 2013-08-21 14:25 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe
2013-08-21 14:19 - 2013-08-21 14:20 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe
2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG
2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT
2013-08-21 12:56 - 2013-08-28 08:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job
2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk
2013-08-17 12:24 - 2013-08-25 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 11:32 - 2013-08-15 11:34 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-08-13 00:18 - 2010-09-14 08:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2013-08-13 00:18 - 2010-09-14 08:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2013-08-13 00:10 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-08-13 00:10 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-08-13 00:10 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-08-13 00:10 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-08-13 00:05 - 2013-08-15 10:53 - 00000000 ____D C:\Windows\system32\MRT
2013-08-12 23:55 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-08-12 23:55 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-08-12 23:55 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-08-12 23:55 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-08-12 23:55 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-08-12 23:55 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-08-12 23:55 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-08-12 23:55 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-08-12 10:42 - 2012-01-03 08:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-08-12 10:42 - 2012-01-03 07:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-08-12 10:42 - 2011-05-04 07:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-08-12 10:42 - 2011-05-04 07:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-08-12 10:42 - 2011-05-04 07:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-08-12 10:42 - 2011-05-04 07:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-08-12 10:42 - 2011-05-04 06:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-08-12 10:42 - 2011-05-04 06:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-08-12 10:42 - 2011-05-04 06:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-08-12 10:42 - 2011-05-04 06:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-08-12 10:42 - 2011-02-24 08:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-08-12 10:42 - 2011-02-24 07:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-08-12 10:42 - 2010-08-04 09:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2013-08-12 10:42 - 2010-01-19 11:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2013-08-12 10:42 - 2010-01-19 11:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2013-08-12 10:42 - 2010-01-19 11:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2013-08-12 10:42 - 2010-01-19 11:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2013-08-12 10:42 - 2010-01-19 01:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2013-08-12 10:42 - 2010-01-19 01:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2013-08-12 10:42 - 2010-01-19 01:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2013-08-12 10:42 - 2010-01-19 01:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2013-08-12 10:42 - 2010-01-19 01:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2013-08-12 10:42 - 2010-01-19 01:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2013-08-12 10:41 - 2012-07-06 21:58 - 00552448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2013-08-12 10:41 - 2012-01-04 11:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-08-12 10:41 - 2012-01-04 11:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-08-12 10:41 - 2011-06-16 07:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-08-12 10:41 - 2011-06-16 06:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-08-12 10:41 - 2011-02-26 08:23 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-08-12 10:41 - 2011-02-26 07:33 - 02614784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-08-12 10:40 - 2012-08-02 19:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-08-12 10:40 - 2012-08-02 19:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-08-12 10:40 - 2012-05-02 07:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-08-12 10:40 - 2011-04-22 22:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-08-12 10:40 - 2011-03-12 14:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-08-12 10:40 - 2011-03-12 13:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2013-08-12 10:40 - 2010-12-21 08:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2013-08-12 10:40 - 2010-12-21 08:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2013-08-12 10:40 - 2010-12-21 08:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2013-08-12 10:40 - 2010-12-21 07:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-08-12 10:39 - 2012-12-07 07:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-08-12 10:39 - 2012-12-07 07:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-08-12 10:39 - 2012-12-07 07:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-08-12 10:39 - 2012-12-07 06:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-08-12 10:39 - 2012-12-07 05:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-08-12 10:39 - 2012-11-22 12:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-08-12 10:39 - 2012-11-22 11:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-08-12 10:38 - 2012-11-30 01:21 - 00420032 _____ C:\Windows\SysWOW64\locale.nls
2013-08-12 10:38 - 2012-11-30 01:19 - 00420032 _____ C:\Windows\system32\locale.nls
2013-08-12 10:38 - 2012-04-07 14:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-08-12 10:38 - 2012-04-07 13:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-08-12 10:36 - 2011-03-25 05:23 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-08-12 10:36 - 2011-03-25 05:23 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-08-12 10:36 - 2011-03-25 05:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00187264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2013-08-12 10:36 - 2011-03-11 08:22 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2013-08-12 10:36 - 2011-03-11 08:22 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2013-08-12 10:36 - 2011-03-11 08:18 - 02566144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-08-12 10:36 - 2011-03-11 08:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2013-08-12 10:36 - 2011-03-11 07:39 - 01686016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-08-12 10:36 - 2011-03-11 07:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2013-08-12 10:36 - 2011-03-11 06:31 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-08-12 10:35 - 2013-01-24 07:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-08-12 10:35 - 2012-05-05 10:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-08-12 10:35 - 2012-05-05 09:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-08-12 10:35 - 2012-02-11 08:29 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-08-12 10:35 - 2012-02-11 08:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-08-12 10:35 - 2011-03-25 05:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-08-12 10:35 - 2011-03-25 05:22 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-08-12 10:35 - 2011-03-25 05:22 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-08-12 10:35 - 2011-03-25 05:22 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-08-12 10:35 - 2011-02-18 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-08-12 10:35 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-08-12 10:01 - 2010-03-04 06:40 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-08-12 10:01 - 2010-03-04 06:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2
2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg
2013-08-09 14:35 - 2013-08-14 10:48 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service
2013-08-09 13:55 - 2013-08-09 16:09 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe
2013-08-09 13:52 - 2013-08-09 16:00 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe
2013-08-09 13:49 - 2013-08-11 21:55 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl
2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes
==================== One Month Modified Files and Folders =======
2013-08-28 10:05 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-28 10:05 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-28 10:01 - 2009-11-06 21:11 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-28 09:57 - 2012-12-23 17:19 - 00000000 ____D C:\ProgramData\TwonkyServer
2013-08-28 09:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-28 09:56 - 2009-07-14 06:51 - 00240109 _____ C:\Windows\setupact.log
2013-08-28 09:55 - 2009-10-08 05:25 - 01379952 _____ C:\Windows\WindowsUpdate.log
2013-08-28 09:52 - 2013-08-28 09:52 - 00001102 _____ C:\Users\ADMIN\Desktop\JRT.txt
2013-08-28 09:25 - 2013-03-16 10:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-28 09:23 - 2009-11-06 21:11 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-28 09:20 - 2013-08-22 15:12 - 00039035 _____ C:\Users\ADMIN\Desktop\Addition.txt
2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe
2013-08-28 08:56 - 2013-08-21 12:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job
2013-08-28 08:43 - 2013-08-28 08:45 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe
2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe
2013-08-28 07:20 - 2009-10-08 06:23 - 00051484 _____ C:\Windows\PFRO.log
2013-08-27 20:33 - 2013-08-21 21:00 - 00000000 ____D C:\AdwCleaner
2013-08-27 20:00 - 2013-08-27 19:59 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe
2013-08-27 19:41 - 2013-08-27 19:40 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe
2013-08-27 00:34 - 2013-08-27 00:34 - 00000000 ____D C:\Windows\system32\SPReview
2013-08-26 23:47 - 2013-08-26 23:09 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part
2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 21:57 - 2012-02-23 09:54 - 00008909 _____ C:\Windows\IE9_main.log
2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG
2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird
2013-08-26 19:38 - 2013-08-26 19:37 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe
2013-08-26 17:34 - 2013-01-04 15:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-25 23:06 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-25 21:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-25 13:18 - 2009-10-08 06:24 - 00001927 _____ C:\Windows\system32\ServiceFilter.ini
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt
2013-08-25 11:57 - 2013-08-25 11:56 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe
2013-08-25 11:47 - 2013-08-17 12:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt
2013-08-23 10:37 - 2013-08-23 10:35 - 02347384 _____ (ESET) C:\Users\ADMIN\Downloads\esetsmartinstaller_enu.exe
2013-08-23 10:37 - 2009-08-04 11:51 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-08-23 10:37 - 2009-08-04 11:51 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-08-23 10:37 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-22 18:38 - 2013-04-09 18:07 - 00000000 ___RD C:\Users\Ute\Dropbox
2013-08-22 18:38 - 2012-05-26 14:14 - 00000000 ____D C:\Users\Ute\AppData\Roaming\Dropbox
2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe
2013-08-22 13:36 - 2009-10-08 06:24 - 00002488 _____ C:\Windows\system32\AutoRunFilter.ini
2013-08-22 13:35 - 2009-07-14 06:45 - 00467816 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt
2013-08-22 11:41 - 2013-08-22 11:40 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt
2013-08-22 08:27 - 2009-11-11 01:08 - 00129424 _____ C:\Users\ADMIN\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-21 23:47 - 2010-02-14 22:28 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer
2013-08-21 23:03 - 2013-08-21 23:01 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe
2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI
2013-08-21 22:58 - 2013-08-21 22:57 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe
2013-08-21 22:02 - 2009-10-30 18:54 - 00129424 _____ C:\Users\Ute\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-21 21:33 - 2012-01-15 21:41 - 00000000 ____D C:\Program Files (x86)\Free YouTube to MP3 Converter
2013-08-21 21:29 - 2013-02-22 12:55 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-08-21 21:29 - 2009-10-08 06:07 - 00000000 ____D C:\ProgramData\Adobe
2013-08-21 21:05 - 2012-05-18 20:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-21 18:41 - 2009-11-11 22:45 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Adobe
2013-08-21 17:31 - 2010-03-29 23:05 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-21 17:29 - 2013-08-21 17:22 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe
2013-08-21 14:31 - 2013-08-21 14:30 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt
2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt
2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST
2013-08-21 14:25 - 2013-08-21 14:24 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe
2013-08-21 14:20 - 2013-08-21 14:19 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe
2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG
2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT
2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk
2013-08-20 20:30 - 2013-03-16 10:32 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-20 20:30 - 2012-09-13 20:42 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 20:30 - 2011-11-19 21:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 19:42 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-08-16 11:51 - 2010-08-02 23:26 - 00000000 ____D C:\Program Files (x86)\ElsterFormular
2013-08-16 11:08 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN
2013-08-15 11:54 - 2013-07-22 17:57 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-15 11:54 - 2013-07-22 17:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-15 11:34 - 2013-08-15 11:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-08-15 10:55 - 2009-10-08 05:32 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 10:53 - 2013-08-13 00:05 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 10:49 - 2010-10-02 13:20 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 20:15 - 2012-05-09 14:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Adobe
2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-08-14 17:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 10:48 - 2013-08-09 14:35 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute
2013-08-14 10:48 - 2012-05-09 00:10 - 00129816 _____ C:\Users\Sicherheitstest\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-14 07:17 - 2010-02-14 22:32 - 00000000 ____D C:\Users\Ute\AppData\Roaming\KeePass
2013-08-13 12:04 - 2011-04-06 21:23 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-08-11 22:06 - 2010-10-01 21:25 - 00000000 ____D C:\Windows\pss
2013-08-11 22:01 - 2009-12-19 00:27 - 00000000 ____D C:\Program Files (x86)\Spiele
2013-08-11 21:58 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2013-08-11 21:55 - 2013-08-09 13:49 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl
2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2
2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg
2013-08-09 16:09 - 2013-08-09 13:55 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe
2013-08-09 16:00 - 2013-08-09 13:52 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe
2013-08-09 14:35 - 2009-12-17 22:43 - 00001322 _____ C:\Windows\wiso.ini
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service
2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes
2013-08-08 23:03 - 2011-11-22 11:39 - 00002214 _____ C:\Users\Public\Desktop\Google Earth.lnk
Files to move or delete:
====================
C:\Users\ADMIN\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\Sicherheitstest\AppData\Local\Temp\drm_dyndata_7380006.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\isp7787.tmp\_Setup.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3_x64.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\msiexec.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\vcredist_x86.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DSETUP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\dsetup32.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DXSETUP.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\be29e7f1-71ae-4703-50cb-1d52be512f51\twapi-be29e7f1-71ae-4703-50cb-1d52be512f51.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\Ute\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\Ute\AppData\Local\Temp\{2650056B-FA80-44FF-836B-A7B42BAB0436}\InstallFlashPlayer.exe
C:\Users\Ute\AppData\Local\Temp\WLZ345C.tmp\CddbLangDE.dll
C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\DropboxNSISTools.dll
C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\UAC.dll
C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\DropboxNSISTools.dll
C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\UAC.dll
C:\Users\Ute\AppData\Local\Temp\MozUpdater-2\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater-1\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-3\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-2\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-1\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe
C:\Users\Ute\AppData\Local\Temp\IXP380.TMP\SetupAdmin.exe
C:\Users\Ute\AppData\Local\Temp\is357113909\OpenItSetup.exe
C:\Users\Ute\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-22 07:16
==================== End Of Log ============================
|
|
28.08.2013, 09:53
| #19 |
| /// the machine /// TB-Ausbilder | PUP.VShare.Redir und PUP.Optional.Open Candy auf dem RechnerESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
29.08.2013, 08:01
| #20 |
| | PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner Guten Morgen, ich habe gestern den ganzen Tag eset laufen lassen, leider kann ich dir das log nicht schicken, weil ich blöderweise den "uninstall"-button gedrückt hatte beim finish :-( Das Programm hatte aber drei Orte gefunden mit Threats, die ich mir notiert hatte: C:/AdwCleaner/Quarantine/C/ProgramFiles(x86)/LyriXeeker/ C:/AdwCleaner/Quarantine/C/ProgramFiles(x86)/LyriXeeker/... C:/AdwCleaner/Quarantine/C/ProgramFiles(x86)/Optimizer Pro wenn ich in C:/AdwCleaner/Quarantine/C/ProgramFiles(x86) hineingehe, finden sich da auch noch "Common Files", "Delta", "Mozilla Firefox", "Openit", "vShare.TV Plugin". Kann ich das alles mit Rechtsklick auf der Maus löschen? Muss ich etwas bedenken? Kann ich alles unter "Quarantine" mit Löschtaste löschen???? Ich wäre dir sehr dankbar für einen Tipp! Hier nun noch log txt von security check, es folgt aktuelles frstlog... Code:
ATTFilter Results of screen317's Security Check version 0.99.72 Windows 7 x64 (UAC is enabled) Out of date service pack!! ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus AntiVir Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 25 Adobe Flash Player 11.8.800.94 Adobe Reader XI Mozilla Firefox (23.0.1) Mozilla Thunderbird (17.0.8) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Spybot Teatimer.exe is disabled! Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Nachtrag: Hier das Frst-Log: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by ADMIN (administrator) on 29-08-2013 08:49:46
Running from C:\Users\ADMIN\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe
(PacketVideo) C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe
() C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16330272 2009-07-02] (NVIDIA Corporation)
HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [617856 2009-07-30] (ELAN Microelectronic Corp.)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Cyberlink\MediaShowEspresso\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\Cyberlink\PowerDirector\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe [87336 2009-04-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [8493624 2009-07-07] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [159744 2009-04-20] (ASUS)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1655296 2010-09-05] (Dominik Reichl)
HKU\Kinder\...\Policies\system: [LogonHoursAction] 2
HKU\Kinder\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Sicherheitstest\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [975288 2012-07-02] (Samsung)
HKU\Sicherheitstest\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKU\Sicherheitstest\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()
HKU\Sicherheitstest\...\Policies\system: [LogonHoursAction] 2
HKU\Sicherheitstest\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Ute\...\Run: [SkypePM] - C:\Users\Ute\AppData\Local\Skype\SkypePM.exe [x]
HKU\Ute\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()
HKU\Ute\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Ute\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]
HKU\Ute\...\Policies\system: [LogonHoursAction] 2
HKU\Ute\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk
ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)
Startup: C:\Users\Sicherheitstest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()
Startup: C:\Users\Ute\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Product Registration.lnk
ShortcutTarget: Product Registration.lnk -> C:\Users\ADMIN\AppData\Local\Temp\is-D6743.tmp\ATR1.exe (No File)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO-x32: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {55963676-2F5E-4BAF-AC28-CF26AA587566} https://sslvpn.uni-potsdam.de/CACHE/stc/1/binaries/vpnweb.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\ADMIN\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\128.xpi
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [108289 2009-05-13] (Avira GmbH)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [185089 2009-07-21] (Avira GmbH)
S2 ASUSRDVDService; C:\Program Files (x86)\ASUS\AI Recovery\ServiceSimple2.exe [109184 2009-09-11] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [344064 2009-04-08] (AVerMedia)
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [405504 2008-12-09] ()
S2 FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [306232 2009-07-24] (ASUSTeK Computer Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-01-21] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 TwonkyProxy; C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe [545608 2012-07-09] ()
R2 TwonkyServer; C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe [549704 2012-07-09] (PacketVideo)
R2 TwonkyWebDav; C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe [271176 2012-07-09] ()
==================== Drivers (Whitelisted) ====================
R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
S3 AVerAF15DMBTH64; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [592256 2009-07-27] (AVerMedia TECHNOLOGIES, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [74880 2009-11-25] (Avira GmbH)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-05-20] ()
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [203544 2013-02-06] (DEVGURU Co., LTD.(www.devguru.co.kr))
U3 tmlwf;
U3 tmwfp;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-29 08:05 - 2013-08-25 11:57 - 00891115 _____ C:\Users\ADMIN\Desktop\SecurityCheck.exe
2013-08-28 23:54 - 2013-08-28 23:54 - 00000000 ____D C:\Windows\system32\SPReview
2013-08-28 09:52 - 2013-08-28 09:52 - 00001102 _____ C:\Users\ADMIN\Desktop\JRT.txt
2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe
2013-08-28 08:45 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe
2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe
2013-08-27 19:59 - 2013-08-27 20:00 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe
2013-08-27 19:40 - 2013-08-27 19:41 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe
2013-08-26 23:09 - 2013-08-26 23:47 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part
2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG
2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 20:15 - 2009-10-10 05:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2013-08-26 20:09 - 2013-08-29 08:30 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird
2013-08-26 19:37 - 2013-08-26 19:38 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe
2013-08-26 17:33 - 2011-02-19 08:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt
2013-08-25 11:56 - 2013-08-25 11:57 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe
2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt
2013-08-22 21:19 - 2013-04-04 14:50 - 00887432 _____ (Malwarebytes Corporation) C:\Users\ADMIN\Desktop\mbam.exe
2013-08-22 15:12 - 2013-08-28 09:20 - 00039035 _____ C:\Users\ADMIN\Desktop\Addition.txt
2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe
2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt
2013-08-22 11:40 - 2013-08-22 11:41 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt
2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 23:41 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer
2013-08-21 23:01 - 2013-08-21 23:03 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe
2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI
2013-08-21 22:57 - 2013-08-21 22:58 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe
2013-08-21 21:00 - 2013-08-27 20:33 - 00000000 ____D C:\AdwCleaner
2013-08-21 17:22 - 2013-08-21 17:29 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe
2013-08-21 14:30 - 2013-08-21 14:31 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt
2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt
2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST
2013-08-21 14:24 - 2013-08-21 14:25 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe
2013-08-21 14:19 - 2013-08-21 14:20 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe
2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG
2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT
2013-08-21 12:56 - 2013-08-29 07:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job
2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk
2013-08-17 12:24 - 2013-08-25 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 11:32 - 2013-08-15 11:34 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-08-13 00:18 - 2010-09-14 08:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2013-08-13 00:18 - 2010-09-14 08:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2013-08-13 00:10 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-08-13 00:10 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-08-13 00:10 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-08-13 00:10 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-08-13 00:05 - 2013-08-15 10:53 - 00000000 ____D C:\Windows\system32\MRT
2013-08-12 23:55 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-08-12 23:55 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-08-12 23:55 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-08-12 23:55 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-08-12 23:55 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-08-12 23:55 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-08-12 23:55 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-08-12 23:55 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-08-12 10:42 - 2012-01-03 08:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-08-12 10:42 - 2012-01-03 07:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-08-12 10:42 - 2011-05-04 07:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-08-12 10:42 - 2011-05-04 07:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-08-12 10:42 - 2011-05-04 07:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-08-12 10:42 - 2011-05-04 07:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-08-12 10:42 - 2011-05-04 07:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-08-12 10:42 - 2011-05-04 06:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-08-12 10:42 - 2011-05-04 06:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-08-12 10:42 - 2011-05-04 06:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-08-12 10:42 - 2011-05-04 06:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-08-12 10:42 - 2011-05-04 06:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-08-12 10:42 - 2011-02-24 08:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-08-12 10:42 - 2011-02-24 07:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-08-12 10:42 - 2010-08-04 09:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2013-08-12 10:42 - 2010-01-19 11:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2013-08-12 10:42 - 2010-01-19 11:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2013-08-12 10:42 - 2010-01-19 11:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2013-08-12 10:42 - 2010-01-19 11:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2013-08-12 10:42 - 2010-01-19 01:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2013-08-12 10:42 - 2010-01-19 01:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2013-08-12 10:42 - 2010-01-19 01:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2013-08-12 10:42 - 2010-01-19 01:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2013-08-12 10:42 - 2010-01-19 01:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2013-08-12 10:42 - 2010-01-19 01:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2013-08-12 10:41 - 2012-07-06 21:58 - 00552448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2013-08-12 10:41 - 2012-01-04 11:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-08-12 10:41 - 2012-01-04 11:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-08-12 10:41 - 2011-06-16 07:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-08-12 10:41 - 2011-06-16 06:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-08-12 10:41 - 2011-02-26 08:23 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-08-12 10:41 - 2011-02-26 07:33 - 02614784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-08-12 10:40 - 2012-08-02 19:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-08-12 10:40 - 2012-08-02 19:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-08-12 10:40 - 2012-05-02 07:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-08-12 10:40 - 2011-04-22 22:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-08-12 10:40 - 2011-03-12 14:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-08-12 10:40 - 2011-03-12 13:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2013-08-12 10:40 - 2010-12-21 08:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2013-08-12 10:40 - 2010-12-21 08:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2013-08-12 10:40 - 2010-12-21 08:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2013-08-12 10:40 - 2010-12-21 08:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2013-08-12 10:40 - 2010-12-21 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2013-08-12 10:40 - 2010-12-21 07:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-08-12 10:39 - 2012-12-07 07:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-08-12 10:39 - 2012-12-07 07:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-08-12 10:39 - 2012-12-07 07:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-08-12 10:39 - 2012-12-07 06:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-08-12 10:39 - 2012-12-07 05:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-08-12 10:39 - 2012-12-07 05:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-08-12 10:39 - 2012-12-07 05:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-08-12 10:39 - 2012-11-22 12:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-08-12 10:39 - 2012-11-22 11:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-08-12 10:38 - 2012-11-30 01:21 - 00420032 _____ C:\Windows\SysWOW64\locale.nls
2013-08-12 10:38 - 2012-11-30 01:19 - 00420032 _____ C:\Windows\system32\locale.nls
2013-08-12 10:38 - 2012-04-07 14:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-08-12 10:38 - 2012-04-07 13:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-08-12 10:36 - 2011-03-25 05:23 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-08-12 10:36 - 2011-03-25 05:23 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-08-12 10:36 - 2011-03-25 05:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00187264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2013-08-12 10:36 - 2011-03-11 08:23 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2013-08-12 10:36 - 2011-03-11 08:22 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2013-08-12 10:36 - 2011-03-11 08:22 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2013-08-12 10:36 - 2011-03-11 08:18 - 02566144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-08-12 10:36 - 2011-03-11 08:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2013-08-12 10:36 - 2011-03-11 07:39 - 01686016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-08-12 10:36 - 2011-03-11 07:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2013-08-12 10:36 - 2011-03-11 06:31 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-08-12 10:35 - 2013-01-24 07:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-08-12 10:35 - 2012-05-05 10:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-08-12 10:35 - 2012-05-05 09:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-08-12 10:35 - 2012-02-11 08:29 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-08-12 10:35 - 2012-02-11 08:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-08-12 10:35 - 2011-03-25 05:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-08-12 10:35 - 2011-03-25 05:22 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-08-12 10:35 - 2011-03-25 05:22 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-08-12 10:35 - 2011-03-25 05:22 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-08-12 10:35 - 2011-02-18 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-08-12 10:35 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-08-12 10:01 - 2010-03-04 06:40 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-08-12 10:01 - 2010-03-04 06:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2
2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg
2013-08-09 14:35 - 2013-08-14 10:48 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service
2013-08-09 13:55 - 2013-08-09 16:09 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe
2013-08-09 13:52 - 2013-08-09 16:00 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe
2013-08-09 13:49 - 2013-08-11 21:55 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl
2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes
==================== One Month Modified Files and Folders =======
2013-08-29 08:30 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird
2013-08-29 08:30 - 2012-05-18 20:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-29 08:30 - 2010-02-05 23:42 - 00002088 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2013-08-29 08:30 - 2010-02-05 23:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-29 08:25 - 2013-08-29 08:22 - 19681592 _____ (Mozilla) C:\Users\ADMIN\Downloads\Thunderbird_Setup_17.0.8.exe
2013-08-29 08:25 - 2013-03-16 10:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-29 08:23 - 2009-11-06 21:11 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-29 07:56 - 2013-08-21 12:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job
2013-08-29 07:56 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-29 07:56 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-29 07:53 - 2009-11-06 21:11 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-29 07:48 - 2012-12-23 17:19 - 00000000 ____D C:\ProgramData\TwonkyServer
2013-08-29 07:47 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-29 07:47 - 2009-07-14 06:51 - 00240221 _____ C:\Windows\setupact.log
2013-08-28 23:58 - 2009-10-08 05:25 - 01494175 _____ C:\Windows\WindowsUpdate.log
2013-08-28 23:54 - 2013-08-28 23:54 - 00000000 ____D C:\Windows\system32\SPReview
2013-08-28 09:52 - 2013-08-28 09:52 - 00001102 _____ C:\Users\ADMIN\Desktop\JRT.txt
2013-08-28 09:20 - 2013-08-22 15:12 - 00039035 _____ C:\Users\ADMIN\Desktop\Addition.txt
2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe
2013-08-28 08:43 - 2013-08-28 08:45 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe
2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe
2013-08-28 07:20 - 2009-10-08 06:23 - 00051484 _____ C:\Windows\PFRO.log
2013-08-27 20:33 - 2013-08-21 21:00 - 00000000 ____D C:\AdwCleaner
2013-08-27 20:00 - 2013-08-27 19:59 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe
2013-08-27 19:41 - 2013-08-27 19:40 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe
2013-08-26 23:47 - 2013-08-26 23:09 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part
2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url
2013-08-26 21:57 - 2012-02-23 09:54 - 00008909 _____ C:\Windows\IE9_main.log
2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG
2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird
2013-08-26 19:38 - 2013-08-26 19:37 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe
2013-08-26 17:34 - 2013-01-04 15:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-25 23:06 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-25 21:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-25 13:18 - 2009-10-08 06:24 - 00001927 _____ C:\Windows\system32\ServiceFilter.ini
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt
2013-08-25 11:57 - 2013-08-29 08:05 - 00891115 _____ C:\Users\ADMIN\Desktop\SecurityCheck.exe
2013-08-25 11:57 - 2013-08-25 11:56 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe
2013-08-25 11:47 - 2013-08-17 12:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt
2013-08-23 10:37 - 2009-08-04 11:51 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-08-23 10:37 - 2009-08-04 11:51 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-08-23 10:37 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-22 18:38 - 2013-04-09 18:07 - 00000000 ___RD C:\Users\Ute\Dropbox
2013-08-22 18:38 - 2012-05-26 14:14 - 00000000 ____D C:\Users\Ute\AppData\Roaming\Dropbox
2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe
2013-08-22 13:36 - 2009-10-08 06:24 - 00002488 _____ C:\Windows\system32\AutoRunFilter.ini
2013-08-22 13:35 - 2009-07-14 06:45 - 00467816 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt
2013-08-22 11:41 - 2013-08-22 11:40 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt
2013-08-22 08:27 - 2009-11-11 01:08 - 00129424 _____ C:\Users\ADMIN\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-21 23:47 - 2010-02-14 22:28 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer
2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer
2013-08-21 23:03 - 2013-08-21 23:01 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe
2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI
2013-08-21 22:58 - 2013-08-21 22:57 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe
2013-08-21 22:02 - 2009-10-30 18:54 - 00129424 _____ C:\Users\Ute\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-21 21:33 - 2012-01-15 21:41 - 00000000 ____D C:\Program Files (x86)\Free YouTube to MP3 Converter
2013-08-21 21:29 - 2013-02-22 12:55 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-08-21 21:29 - 2009-10-08 06:07 - 00000000 ____D C:\ProgramData\Adobe
2013-08-21 18:41 - 2009-11-11 22:45 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Adobe
2013-08-21 17:31 - 2010-03-29 23:05 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-21 17:29 - 2013-08-21 17:22 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe
2013-08-21 14:31 - 2013-08-21 14:30 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt
2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt
2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST
2013-08-21 14:25 - 2013-08-21 14:24 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe
2013-08-21 14:20 - 2013-08-21 14:19 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe
2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG
2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT
2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk
2013-08-20 20:30 - 2013-03-16 10:32 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-20 20:30 - 2012-09-13 20:42 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 20:30 - 2011-11-19 21:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 19:42 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-08-16 11:51 - 2010-08-02 23:26 - 00000000 ____D C:\Program Files (x86)\ElsterFormular
2013-08-16 11:08 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN
2013-08-15 11:54 - 2013-07-22 17:57 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-15 11:54 - 2013-07-22 17:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-15 11:34 - 2013-08-15 11:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-08-15 10:55 - 2009-10-08 05:32 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 10:53 - 2013-08-13 00:05 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 10:49 - 2010-10-02 13:20 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 20:15 - 2012-05-09 14:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Adobe
2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-08-14 17:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 10:48 - 2013-08-09 14:35 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute
2013-08-14 10:48 - 2012-05-09 00:10 - 00129816 _____ C:\Users\Sicherheitstest\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-14 07:17 - 2010-02-14 22:32 - 00000000 ____D C:\Users\Ute\AppData\Roaming\KeePass
2013-08-13 12:04 - 2011-04-06 21:23 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-08-11 22:06 - 2010-10-01 21:25 - 00000000 ____D C:\Windows\pss
2013-08-11 22:01 - 2009-12-19 00:27 - 00000000 ____D C:\Program Files (x86)\Spiele
2013-08-11 21:58 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2013-08-11 21:55 - 2013-08-09 13:49 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl
2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2
2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg
2013-08-09 16:09 - 2013-08-09 13:55 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe
2013-08-09 16:00 - 2013-08-09 13:52 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe
2013-08-09 14:35 - 2009-12-17 22:43 - 00001322 _____ C:\Windows\wiso.ini
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service
2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service
2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes
2013-08-08 23:03 - 2011-11-22 11:39 - 00002214 _____ C:\Users\Public\Desktop\Google Earth.lnk
Files to move or delete:
====================
C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Objlist.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\runprocesses.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\uninstalllist.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Other\cmdinfo.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Other\nircmdc.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Other\sed.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Other\swreg.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Objlist.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\runprocesses.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\uninstalllist.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\cmdinfo.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\nircmdc.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\sed.exe
C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\swreg.exe
C:\Users\ADMIN\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\Sicherheitstest\AppData\Local\Temp\drm_dyndata_7380006.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\isp7787.tmp\_Setup.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3_x64.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\msiexec.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\vcredist_x86.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DSETUP.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\dsetup32.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DXSETUP.exe
C:\Users\Sicherheitstest\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\be29e7f1-71ae-4703-50cb-1d52be512f51\twapi-be29e7f1-71ae-4703-50cb-1d52be512f51.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll
C:\Users\Sicherheitstest\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\Ute\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\Ute\AppData\Local\Temp\{2650056B-FA80-44FF-836B-A7B42BAB0436}\InstallFlashPlayer.exe
C:\Users\Ute\AppData\Local\Temp\WLZ345C.tmp\CddbLangDE.dll
C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\DropboxNSISTools.dll
C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\UAC.dll
C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\DropboxNSISTools.dll
C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\UAC.dll
C:\Users\Ute\AppData\Local\Temp\MozUpdater-2\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater-1\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-3\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-2\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-1\updater.exe
C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe
C:\Users\Ute\AppData\Local\Temp\IXP380.TMP\SetupAdmin.exe
C:\Users\Ute\AppData\Local\Temp\is357113909\OpenItSetup.exe
C:\Users\Ute\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll
C:\Users\Ute\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-22 07:16
==================== End Of Log ============================
--- --- --- Tausend Dank im Voraus für deine Antwort!!! |
|
29.08.2013, 08:27
| #21 | ||
| /// the machine /// TB-Ausbilder | PUP.VShare.Redir und PUP.Optional.Open Candy auf dem RechnerZitat:
Zitat:
Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ --> PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner |
|
29.08.2013, 09:34
| #22 |
| | PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner Hi, ich wieder... also vielen Dank schon mal für deine Antworten!!! Ich versuche gleich das Servicepack offline herunterzuladen von der Microsoft-Windows-Seite... ; die drei Dateien von AdwCleaner Quarantäne hab ich also nicht mehr angefasst. Wann muss ich denn die Tools entfernen??? Und wie? Ach ja, bei Malwarebytes habe ich unlängst in dem Fenster, wo er einem die Viren anzeigt, die in Quarantäne stehen, auf den Button "Alle löschen" gedrückt. War das auch total falsch??? (Schreck!) Hier aber zunächst das fix log: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-08-2013
Ran by ADMIN at 2013-08-29 10:28:43 Run:1
Running from C:\Users\ADMIN\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]
*****************
HKU\Ute\Software\Microsoft\Windows\CurrentVersion\Run\\Optimizer Pro => Value deleted successfully.
==== End of Fixlog ====
|
|
29.08.2013, 11:02
| #23 |
| /// the machine /// TB-Ausbilder | PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner Nee passt, Quarantäne in MBAM kannste leeren Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
30.08.2013, 12:23
| #24 |
| | PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner Hallo, tausend Dank noch Mal für deine Geduld! Und deine sehr hilfreichen Tipps, die ich nach Möglichkeit alle umsetzen werde!!! Hier noch die letzten Dinge: - Also, das Löschen aller Scanner etc. hat gut geklappt (ich hatte aber weder Defogger noch Combofix im Einsatz. Ich hoffe, da hatte ich nichts übersehen bei deinen Anweisungen!) - Noch eine Nachfrage: In den Downloads einer der User-Konten finde ich immer noch den ZipOpenerSetup.exe; kann ich den einfach anklicken und mit Rechtsklick löschen??? Oder nicht anfassen? Zum ewig scheiternden Windows 7 Servicepack 1-Update: Liegt wahrscheinlich laut microsoft an einer "Inkonsistenz im Windows Servicing Store", ich lade mir jetzt ein Systemupdate-Vorbereitungstool herunter und dann klappt es ja vielleicht... P.S.: bin mit dem Update des Servicepacks trotzdem gescheitert. Weiß echt nicht, woran es noch liegen könnte :-((( |
|
30.08.2013, 20:21
| #25 | ||
| /// the machine /// TB-Ausbilder | PUP.VShare.Redir und PUP.Optional.Open Candy auf dem RechnerZitat:
Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner |
| candy, dankbar, dateien, erste mal, forum, funktionier, funktioniert, funktioniert nicht, gepostet, hoffe, laufe, laufen, löschen, malwarebytes, pup.optional.opencandy, pup.optional.opensomoto, pup.vshare.redir, rechner, richtig |
