| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Disabled.FolderOptionWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
02.09.2013, 16:22
| #1 |
  |  Disabled.FolderOption Liebe Trojaner (  )Heute hab ich mit SUPERAntiSpyware mal einen Quick Scan durchgeführt. Einfach mal wieder um die leckeren Cookies zu verdrücken. Da seh ich so ne Schrift: Disabled.FolderOption Um Himmelswillen; es wird wohl nicht sehr schlimmes sein (hoff ich jetz einfach), oder? Was ist das und wie bringt's man weg? Soll ich ein OTL machen? Ich häng jetzt euch mal ein Log an..... Code:
ATTFilter SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com
Generated 09/02/2013 at 05:21 PM
Application Version : 5.6.1032
Core Rules Database Version : 10738
Trace Rules Database Version: 8550
Scan type : Quick Scan
Total Scan Time : 00:04:56
Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC Off - Administrator
Memory items scanned : 807
Memory threats detected : 0
Registry items scanned : 61061
Registry threats detected : 1
File items scanned : 10781
File threats detected : 9
Disabled.FolderOption
(x86) HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED\FOLDER\HIDDEN\SHOWALL#CHECKEDVALUE
Adware.Tracking Cookie
login.wikimedia.org [ C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OKJZYGK4.DEFAULT\COOKIES.SQLITE ]
.commons.wikimedia.org [ C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OKJZYGK4.DEFAULT\COOKIES.SQLITE ]
.meta.wikimedia.org [ C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OKJZYGK4.DEFAULT\COOKIES.SQLITE ]
commons.wikimedia.org [ C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OKJZYGK4.DEFAULT\COOKIES.SQLITE ]
statse.webtrendslive.com [ C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OKJZYGK4.DEFAULT\COOKIES.SQLITE ]
.xiti.com [ C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OKJZYGK4.DEFAULT\COOKIES.SQLITE ]
.xiti.com [ C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OKJZYGK4.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OKJZYGK4.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OKJZYGK4.DEFAULT\COOKIES.SQLITE ]
Lg Baldoius |
|
02.09.2013, 17:13
| #2 |
| /// the machine /// TB-Ausbilder   | Disabled.FolderOption hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
05.09.2013, 17:40
| #3 |
| | Disabled.FolderOption Hallo Schrauber
__________________Hier das FRST-Log: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-09-2013
Ran by ****** (administrator) on ASUS-X73S on 05-09-2013 18:29:36
Running from C:\Users\******\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Logitech, Inc.) C:\Program Files\Logitech\SolarApp\L4301_Solar.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(hMailServer) C:\Program Files (x86)\hMailServer\Bin\hMailServer.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\xampp\mysql\bin\mysqld.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Windows\System32\tcpsvcs.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Program Files (x86)\Sublime Text 2\sublime_text.exe
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2013-05-22] (Realtek Semiconductor)
HKLM-x32\...\RunOnce: [aswAhAScr.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\AhAScr.dll" [140544 2013-05-09] (AVAST Software)
HKLM-x32\...\RunOnce: [aswasOutExt.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\asOutExt.dll" [289888 2013-07-17] (AVAST Software)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKCU\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKCU\...\Policies\Explorer: [NoDriveAutorun] 0
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\PROGRAM FILES (X86)\KEEPASS PASSWORD SAFE 2\KeePass.exe [1937920 2013-02-03] (Dominik Reichl)
HKU\Gast\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKU\Gast\...\Policies\system: [LogonHoursAction] 2
HKU\Gast\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lea\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKU\Lea\...\Policies\system: [LogonHoursAction] 2
HKU\Lea\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [245872 2013-04-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-04-08] (NVIDIA Corporation)
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VCDDaemon.lnk
ShortcutTarget: VCDDaemon.lnk -> C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG)
BootExecute: autocheck autochk * aswBoot.exe /A:"* " /L:"1031" /heur:80 /RA:ask /pup /archives /IA:0 /KBD:4 /wow /dir:"C:\Program Files\AVAST Software\Avast"
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {5F519B46-96EF-499F-BF24-C9E1548FA56B} hxxp://sonycam/program/SonySncDf70View.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.210 88.84.16.108
Tcpip\..\Interfaces\{52ACCD0C-CD6E-4B80-B520-286DEEC015E3}: [NameServer]192.168.0.220,192.168.0.210
Tcpip\..\Interfaces\{CC6F69AF-BEC2-436E-AA09-0D9DE562E21B}: [NameServer]127.0.0.1
Tcpip\..\Interfaces\{E3B07140-174D-4590-A16C-E4C23E71385D}: [NameServer]192.168.0.220,192.168.0.210
FireFox:
========
FF ProfilePath: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default
FF DefaultSearchEngine: DuckDuckGo
FF SelectedSearchEngine: DuckDuckGo
FF Homepage: google.ch
FF NetworkProxy: "backup.ftp", "5.9.203.92"
FF NetworkProxy: "backup.ftp_port", 3128
FF NetworkProxy: "backup.socks", "5.9.203.92"
FF NetworkProxy: "backup.socks_port", 3128
FF NetworkProxy: "backup.ssl", "5.9.203.92"
FF NetworkProxy: "backup.ssl_port", 3128
FF NetworkProxy: "ftp", "91.228.53.28"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "91.228.53.28"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "91.228.53.28"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "91.228.53.28"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0-git-20121231-0404 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @greentube.com/GreenWebPlayer - C:\Games\GreenWebPlayer\npgreenwebplayer.dll (Greentube Internet Entertainment Solutions GmbH)
FF Plugin HKCU: @stonetrip.com/ShiVaWebPlayer,version=1.8.0.0 - C:\Users\******\AppData\Roaming\..\LocalLow\StoneTrip\Web Player\npShiVa3D.dll (StoneTrip)
FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\searchplugins\anderes-wortde.xml
FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DoNotTrackMe - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\donottrackplus@abine.com
FF Extension: HTTPS-Everywhere - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\https-everywhere@eff.org
FF Extension: MaskMe - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\idme@abine.com
FF Extension: iMacros for Firefox - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}
FF Extension: WOT - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: Flash and Video Download - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
FF Extension: adblockpopups - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: admin - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\admin@proxy-listen.de.xpi
FF Extension: elemhidehelper - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: extension - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\extension@preispilot.com.xpi
FF Extension: fox - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\fox@replace.fx.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] C:\Program Files (x86)\Steganos Password Manager 2012\spmplugin3
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKCU\...\Firefox\Extensions: [extension@preispilot.com] C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\extensions\extension@preispilot.com
==================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-07-11] (SUPERAntiSpyware.com)
R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22016 2012-08-18] (Apache Software Foundation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S3 DCMessages; C:\Windows\SysWOW64\DCMessages.exe [99720 2009-11-24] (Global Graphics Software Ltd)
S2 FileZilla Server; c:\xampp\filezillaftp\filezillaserver.exe [632320 2012-05-11] (FileZilla Project)
R2 hMailServer; C:\Program Files (x86)\hMailServer\Bin\hMailServer.exe [5395968 2010-06-07] (hMailServer)
R2 L4301_Solar; C:\Program Files\Logitech\SolarApp\L4301_Solar.exe [403536 2010-10-26] (Logitech, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22072 2012-09-12] (Microsoft Corporation)
R2 mysql; C:\xampp\mysql\bin\mysqld.exe [8186368 2012-07-20] ()
S3 PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
S3 PortReporter; C:\Program Files (x86)\PortReporter\portreporter.exe [90183 2004-03-30] ()
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1225312 2012-11-26] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659040 2012-11-26] (Secunia)
S3 SPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation)
==================== Drivers (Whitelisted) ====================
S1 acedrv05; C:\Windows\system32\drivers\acedrv05.sys [136192 2011-09-27] ()
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [228768 2012-08-30] (Microsoft Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S2 ASInsHelp; \??\C:\Windows\SysWow64\drivers\AsInsHelp64.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U3 DfSdkS;
S3 getbus; \??\C:\Users\******\AppData\Local\Temp\getbus.sys [x]
S3 meddmrr; system32\DRIVERS\meddmrr.sys [x]
S3 MEMSWEEP2; No ImagePath
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-05 18:28 - 2013-09-05 18:29 - 01947160 _____ (Farbar) C:\Users\******\Downloads\FRST64.exe
2013-09-05 16:37 - 2013-09-05 16:37 - 00202784 _____ (Amònetíze ltd.) C:\Users\******\Downloads\FlashPlayer__1003_i66628665_il430345.exe
2013-09-04 13:40 - 2013-09-04 13:40 - 00118300 _____ (MATCODE Software, www.matcode.com) C:\Users\******\Downloads\remshutdn.exe
2013-09-02 18:13 - 2013-09-02 18:15 - 05828350 _____ C:\Users\******\Downloads\Elektronik_204109610718.pptx
2013-09-02 17:58 - 2013-09-02 17:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Sublime Text 2
2013-09-02 17:38 - 2013-09-02 17:42 - 23003252 _____ C:\Users\Administrator\Downloads\vlc-2.0.8-win32.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Administrator\Downloads\Shockwave_Installer_Slim.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 01069032 _____ (Solid State Networks) C:\Users\Administrator\Downloads\install_flashplayer11x32_mssd_aaa_aih.exe
2013-09-02 17:18 - 2013-09-02 17:18 - 00002097 _____ C:\Users\Public\Desktop\Canon MP Navigator EX 3.1.lnk
2013-09-02 17:18 - 2013-09-02 17:18 - 00000000 ____D C:\Program Files (x86)\Canon
2013-09-02 17:06 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\Windows\system32\SET6640.tmp
2013-09-02 17:06 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\Windows\system32\SET4909.tmp
2013-09-02 15:41 - 2013-09-02 17:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-02 12:27 - 2013-09-02 12:27 - 00000000 ____D C:\Users\Administrator\Desktop\Freigabeordner - Büro-PC
2013-09-02 12:25 - 2013-09-04 16:28 - 00000392 _____ C:\Windows\setupact.log
2013-09-02 12:25 - 2013-09-02 12:26 - 00556480 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-02 12:25 - 2013-09-02 12:25 - 00000762 _____ C:\Windows\PFRO.log
2013-09-02 12:25 - 2013-09-02 12:25 - 00000000 _____ C:\Windows\setuperr.log
2013-09-01 20:02 - 2013-09-05 18:26 - 00913015 _____ C:\Windows\WindowsUpdate.log
2013-09-01 18:36 - 2010-05-16 05:00 - 00344064 ____N (CANON INC.) C:\Windows\system32\CNMLMA7.DLL
2013-09-01 18:36 - 2009-09-10 09:00 - 00245760 _____ (CANON INC.) C:\Windows\system32\CNMIUA7.DLL
2013-09-01 18:35 - 2013-09-01 18:35 - 00000000 ___HD C:\Program Files\CanonBJ
2013-09-01 17:58 - 2013-09-01 17:58 - 00000000 ____D C:\Users\******\Downloads\CANON_MX870
2013-09-01 17:19 - 2013-09-01 17:19 - 00000779 _____ C:\Users\******\Desktop\meinemap - Verknüpfung.lnk
2013-08-16 19:09 - 2013-08-16 19:16 - 820998144 _____ C:\Users\******\Desktop\OfficeProfessionalPlus_x64_de-de.img
2013-08-16 19:08 - 2013-08-16 19:16 - 00000000 ____D C:\Users\******\AppData\Roaming\Download Manager
2013-08-15 19:21 - 2013-08-16 06:35 - 00000000 ____D C:\Users\******\Downloads\die_drei_fragezeichen
2013-08-15 16:10 - 2013-08-15 16:10 - 08435712 _____ C:\Users\******\Downloads\archpr454_setup_en.msi
2013-08-15 12:08 - 2013-09-01 19:51 - 00176776 _____ C:\Users\******\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-15 06:44 - 2013-08-15 06:44 - 00000941 _____ C:\Users\******\Desktop\FMS.lnk
2013-08-15 06:44 - 2013-08-15 06:44 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flug-Model-Simulator
2013-08-15 06:37 - 2013-08-15 06:44 - 00000000 ____D C:\Program Files (x86)\FMS
2013-08-15 06:35 - 2013-08-15 06:35 - 00000000 ____D C:\Users\******\Downloads\sim_easyglider_e
2013-08-14 12:29 - 2013-08-14 12:29 - 00000000 ____D C:\Program Files (x86)\logisch6
2013-08-12 16:00 - 2013-08-12 16:00 - 00000000 ____D C:\Users\******\Downloads\sendmail
2013-08-12 15:57 - 2013-08-12 15:57 - 00011940 _____ C:\Users\******\Downloads\phpmailscript_v4.zip
2013-08-09 17:31 - 2013-08-14 15:42 - 00013257 _____ C:\Users\******\Downloads\diewelt.sublime-workspace
2013-08-09 12:22 - 2013-08-09 12:22 - 00000000 ____D C:\Users\******\Downloads\gebaeude
2013-08-09 12:18 - 2013-08-09 12:22 - 10698799 _____ C:\Users\******\Downloads\gebaeude.7z
2013-08-09 08:19 - 2013-08-09 08:19 - 00000000 ____D C:\Users\******\Downloads\MapAmpeln
2013-08-09 08:13 - 2013-08-09 08:13 - 00670909 _____ C:\Users\******\Downloads\Ampel_Kit_Mapper.zip
2013-08-09 08:12 - 2013-08-09 08:12 - 00080835 _____ C:\Users\******\Downloads\MapAmpeln.zip
2013-08-08 11:52 - 2013-08-08 11:54 - 00000000 ____D C:\Users\******\Downloads\Baldos_Map
2013-08-08 11:11 - 2013-08-08 11:11 - 00000000 ____D C:\Users\******\Downloads\STRASSEN_BAUKASTEN_1
2013-08-08 11:08 - 2013-08-08 11:08 - 00000000 ____D C:\Users\******\Downloads\Schilderset
2013-08-07 18:48 - 2013-08-07 18:48 - 00000000 ____D C:\Users\******\Desktop\.mayaSwatches
2013-08-06 20:01 - 2013-08-06 20:01 - 00003875 _____ C:\Users\******\AppData\Local\recently-used.xbel
2013-08-06 18:09 - 2013-08-09 17:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-06 17:24 - 2013-08-06 17:24 - 00000000 ____D C:\Users\******\Downloads\grleConverter_4.1.8_win32
2013-08-06 09:24 - 2013-08-06 09:24 - 00000000 ____D C:\Users\******\AppData\Local\GIANTS Editor 5.0.3
2013-08-06 07:59 - 2013-08-06 08:00 - 00000000 ____D C:\Users\******\AppData\Local\GIANTS Editor 64bit 5.0.3
==================== One Month Modified Files and Folders =======
2013-09-05 18:29 - 2013-09-05 18:29 - 00000000 ____D C:\FRST
2013-09-05 18:29 - 2013-09-05 18:28 - 01947160 _____ (Farbar) C:\Users\******\Downloads\FRST64.exe
2013-09-05 18:28 - 2012-03-29 12:17 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-05 18:26 - 2013-09-01 20:02 - 00913015 _____ C:\Windows\WindowsUpdate.log
2013-09-05 18:08 - 2012-09-14 18:23 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-05 17:10 - 2013-06-08 09:10 - 00000000 ____D C:\Users\******\Downloads\badragaz
2013-09-05 16:59 - 2011-06-22 12:39 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-05 16:37 - 2013-09-05 16:37 - 00202784 _____ (Amònetíze ltd.) C:\Users\******\Downloads\FlashPlayer__1003_i66628665_il430345.exe
2013-09-05 06:12 - 2013-06-12 06:37 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-04 17:32 - 2013-06-12 06:37 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-04 16:28 - 2013-09-02 12:25 - 00000392 _____ C:\Windows\setupact.log
2013-09-04 13:46 - 2011-08-07 11:00 - 00000000 ____D C:\Users\******
2013-09-04 06:30 - 2011-08-08 17:05 - 00000000 ____D C:\Users\******\AppData\Local\Paint.NET
2013-09-02 18:28 - 2012-03-29 12:17 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-02 18:28 - 2012-03-29 12:17 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-02 18:28 - 2011-08-08 15:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-02 18:15 - 2013-09-02 18:13 - 05828350 _____ C:\Users\******\Downloads\Elektronik_204109610718.pptx
2013-09-02 18:03 - 2012-12-09 17:27 - 00000422 _____ C:\Windows\Tasks\Wise Care 365.job
2013-09-02 17:58 - 2013-09-02 17:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Sublime Text 2
2013-09-02 17:58 - 2013-06-24 12:40 - 00000000 ____D C:\Program Files (x86)\Sublime Text 2
2013-09-02 17:42 - 2013-09-02 17:38 - 23003252 _____ C:\Users\Administrator\Downloads\vlc-2.0.8-win32.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Administrator\Downloads\Shockwave_Installer_Slim.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 01069032 _____ (Solid State Networks) C:\Users\Administrator\Downloads\install_flashplayer11x32_mssd_aaa_aih.exe
2013-09-02 17:18 - 2013-09-02 17:18 - 00002097 _____ C:\Users\Public\Desktop\Canon MP Navigator EX 3.1.lnk
2013-09-02 17:18 - 2013-09-02 17:18 - 00000000 ____D C:\Program Files (x86)\Canon
2013-09-02 17:11 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-02 17:11 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-02 17:05 - 2013-09-02 15:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-02 17:05 - 2012-05-06 09:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-02 17:04 - 2013-04-25 18:56 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-09-02 17:01 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-02 16:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-02 12:45 - 2011-02-19 06:24 - 00723122 _____ C:\Windows\system32\perfh007.dat
2013-09-02 12:45 - 2011-02-19 06:24 - 00156670 _____ C:\Windows\system32\perfc007.dat
2013-09-02 12:45 - 2009-07-14 07:13 - 01672432 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-02 12:27 - 2013-09-02 12:27 - 00000000 ____D C:\Users\Administrator\Desktop\Freigabeordner - Büro-PC
2013-09-02 12:26 - 2013-09-02 12:25 - 00556480 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-02 12:26 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-02 12:25 - 2013-09-02 12:25 - 00000762 _____ C:\Windows\PFRO.log
2013-09-02 12:25 - 2013-09-02 12:25 - 00000000 _____ C:\Windows\setuperr.log
2013-09-02 12:25 - 2013-05-16 06:38 - 00000000 ____D C:\Program Files (x86)\OXXOGames
2013-09-01 20:05 - 2011-09-25 08:45 - 00000000 ____D C:\Users\******\AppData\Roaming\Notepad++
2013-09-01 20:02 - 2013-04-28 08:28 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-09-01 20:01 - 2011-08-07 11:35 - 00000000 ____D C:\Users\******\AppData\Local\Google
2013-09-01 20:01 - 2011-04-13 04:33 - 00000000 ___HD C:\Program Files (x86)\Google
2013-09-01 19:59 - 2011-08-07 13:03 - 00000000 ____D C:\Users\******\AppData\Roaming\Mozilla
2013-09-01 19:56 - 2013-05-05 18:52 - 00000000 ____D C:\Program Files (x86)\DVDStyler
2013-09-01 19:56 - 2011-08-07 11:00 - 00000000 ___HD C:\ASUS.DAT
2013-09-01 19:53 - 2012-01-05 23:07 - 00000000 ___HD C:\Program Files (x86)\Abloadtool
2013-09-01 19:52 - 2013-04-26 07:11 - 00000000 ____D C:\Program Files (x86)\AF Signal Generator
2013-09-01 19:51 - 2013-08-15 12:08 - 00176776 _____ C:\Users\******\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-01 19:39 - 2013-06-27 19:42 - 00176776 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-01 18:56 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-01 18:35 - 2013-09-01 18:35 - 00000000 ___HD C:\Program Files\CanonBJ
2013-09-01 18:21 - 2011-06-22 12:42 - 00003456 _____ C:\Windows\system32\AutoRunFilter.ini
2013-09-01 17:58 - 2013-09-01 17:58 - 00000000 ____D C:\Users\******\Downloads\CANON_MX870
2013-09-01 17:23 - 2011-08-18 16:57 - 00007663 _____ C:\Users\******\AppData\Local\Resmon.ResmonCfg
2013-09-01 17:19 - 2013-09-01 17:19 - 00000779 _____ C:\Users\******\Desktop\meinemap - Verknüpfung.lnk
2013-08-30 09:48 - 2013-06-12 06:37 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-06-12 06:37 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 09:47 - 2013-06-12 06:37 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-17 07:08 - 2012-06-02 18:50 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-17 07:08 - 2011-04-13 04:25 - 00000000 ___HD C:\Program Files (x86)\Microsoft Office
2013-08-17 07:08 - 2009-07-14 09:45 - 00000000 ____D C:\Windows\ShellNew
2013-08-17 07:08 - 2009-07-14 05:20 - 00000000 ___HD C:\Program Files\Common Files\Microsoft Shared
2013-08-17 06:50 - 2013-02-25 20:41 - 00000000 ____D C:\Users\******\Desktop\Thunderbird
2013-08-16 19:16 - 2013-08-16 19:09 - 820998144 _____ C:\Users\******\Desktop\OfficeProfessionalPlus_x64_de-de.img
2013-08-16 19:16 - 2013-08-16 19:08 - 00000000 ____D C:\Users\******\AppData\Roaming\Download Manager
2013-08-16 17:57 - 2012-10-01 07:40 - 00000000 ____D C:\Users\******\AppData\Roaming\Skype
2013-08-16 17:34 - 2013-05-19 18:09 - 00022528 _____ C:\Users\******\AppData\Local\WebpageIcons.db
2013-08-16 06:35 - 2013-08-15 19:21 - 00000000 ____D C:\Users\******\Downloads\die_drei_fragezeichen
2013-08-15 19:30 - 2011-10-09 14:44 - 00000000 ____D C:\Users\******\AppData\Local\Windows Live
2013-08-15 19:08 - 2013-08-15 19:08 - 00066391 _____ C:\Users\******\Downloads\pech.rpc
2013-08-15 16:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources
2013-08-15 16:10 - 2013-08-15 16:10 - 08435712 _____ C:\Users\******\Downloads\archpr454_setup_en.msi
2013-08-15 06:48 - 2013-05-04 08:06 - 00000000 ____D C:\Users\******\AppData\Roaming\Media Player Classic
2013-08-15 06:48 - 2009-07-29 08:03 - 00000000 ____D C:\Windows\Panther
2013-08-15 06:44 - 2013-08-15 06:44 - 00000941 _____ C:\Users\******\Desktop\FMS.lnk
2013-08-15 06:44 - 2013-08-15 06:44 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flug-Model-Simulator
2013-08-15 06:44 - 2013-08-15 06:37 - 00000000 ____D C:\Program Files (x86)\FMS
2013-08-15 06:35 - 2013-08-15 06:35 - 00000000 ____D C:\Users\******\Downloads\sim_easyglider_e
2013-08-14 15:42 - 2013-08-09 17:31 - 00013257 _____ C:\Users\******\Downloads\diewelt.sublime-workspace
2013-08-14 12:29 - 2013-08-14 12:29 - 00000000 ____D C:\Program Files (x86)\logisch6
2013-08-12 16:00 - 2013-08-12 16:00 - 00000000 ____D C:\Users\******\Downloads\sendmail
2013-08-12 15:57 - 2013-08-12 15:57 - 00011940 _____ C:\Users\******\Downloads\phpmailscript_v4.zip
2013-08-09 17:58 - 2012-08-21 12:31 - 00000000 ____D C:\Users\******\.gimp-2.8
2013-08-09 17:57 - 2013-08-06 18:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-09 12:22 - 2013-08-09 12:22 - 00000000 ____D C:\Users\******\Downloads\gebaeude
2013-08-09 12:22 - 2013-08-09 12:18 - 10698799 _____ C:\Users\******\Downloads\gebaeude.7z
2013-08-09 08:19 - 2013-08-09 08:19 - 00000000 ____D C:\Users\******\Downloads\MapAmpeln
2013-08-09 08:13 - 2013-08-09 08:13 - 00670909 _____ C:\Users\******\Downloads\Ampel_Kit_Mapper.zip
2013-08-09 08:12 - 2013-08-09 08:12 - 00080835 _____ C:\Users\******\Downloads\MapAmpeln.zip
2013-08-08 11:54 - 2013-08-08 11:52 - 00000000 ____D C:\Users\******\Downloads\Baldos_Map
2013-08-08 11:11 - 2013-08-08 11:11 - 00000000 ____D C:\Users\******\Downloads\STRASSEN_BAUKASTEN_1
2013-08-08 11:08 - 2013-08-08 11:08 - 00000000 ____D C:\Users\******\Downloads\Schilderset
2013-08-08 09:42 - 2013-08-05 18:08 - 00000000 ____D C:\Users\******\Downloads\map
2013-08-07 18:48 - 2013-08-07 18:48 - 00000000 ____D C:\Users\******\Desktop\.mayaSwatches
2013-08-07 04:22 - 2011-09-18 09:01 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-08-06 20:01 - 2013-08-06 20:01 - 00003875 _____ C:\Users\******\AppData\Local\recently-used.xbel
2013-08-06 17:24 - 2013-08-06 17:24 - 00000000 ____D C:\Users\******\Downloads\grleConverter_4.1.8_win32
2013-08-06 09:32 - 2011-08-07 13:05 - 00000000 ____D C:\Program Files (x86)\GIANTS Software
2013-08-06 09:24 - 2013-08-06 09:24 - 00000000 ____D C:\Users\******\AppData\Local\GIANTS Editor 5.0.3
2013-08-06 08:00 - 2013-08-06 07:59 - 00000000 ____D C:\Users\******\AppData\Local\GIANTS Editor 64bit 5.0.3
Files to move or delete:
====================
C:\Users\******\AppData\Local\Temp\gert0.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-13 18:10
==================== End Of Log ============================
--- --- --- --- --- --- Und das Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-09-2013 Ran by ******* at 2013-09-05 18:30:15 Running from C:\Users\*******\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112) Alcor Micro USB Card Reader (x32 Version: 1.8.17.26026) Altium Designer - Board Level Libraries (x32 Version: 9.4.0.20172) Altium Designer Summer 09 (x32 Version: 9.4.0.20159) Ashampoo Burning Studio 2012 v.10.0.15 (x32 Version: 10.0.15) ASUS AI Recovery (x32 Version: 1.0.13) ASUS FancyStart (x32 Version: 1.1.0) ASUS LifeFrame3 (x32 Version: 3.0.21) ASUS Live Update (x32 Version: 2.5.9) ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0031) ASUS Virtual Camera (x32 Version: 1.0.21) ASUS WebStorage (x32 Version: 3.0.84.161) AsusScr_K3 Series_ENG_Basic (x32 Version: 1.0.0001) AsusVibe2.0 (x32 Version: 2.0.7.146) ATK Package (x32 Version: 1.0.0014) Audacity 2.0.3 (x32 Version: 2.0.3) Autodesk FBX Plug-in 2013.1 - Maya 2013 (x32) Autodesk Maya 2013 32-bit (x32 Version: 15.0.0.0) avast! Free Antivirus (x32 Version: 8.0.1497.0) Bagger-Simulator 2011 (x32) Canon MP Navigator EX 3.1 (x32) Canon MX870 series MP Drivers CDRWIN 9 Basic (x32 Version: 9.0.11.0800) Cisco EAP-FAST Module (x32 Version: 2.2.14) Cisco LEAP Module (x32 Version: 1.0.19) Cisco PEAP Module (x32 Version: 1.1.6) CloneCD (x32) COMPUTERBILD-Abzockschutz (x32 Version: 1.0.48) CrystalDiskInfo 5.3.1 (x32 Version: 5.3.1) D3DX10 (x32 Version: 15.4.2368.0902) Debugging Tools for Windows (x64) (Version: 6.12.2.633) Debugging Tools for Windows (x86) (x32 Version: 6.12.2.633) Der Planer 1 (x32) Dev-C++ 5 beta 9 release (4.9.9.2) (x32) eaner (Version: 4.01) Earth Screensaver HD (x32 Version: Earth Screensaver HD) eReg (x32 Version: 1.20.138.34) ETDWare PS/2-X64 8.0.5.0_WHQL (Version: 8.0.5.0) Extreme Tux Racer (HKCU) Fast Boot (Version: 1.0.8) FFmpeg v0.6.2 for Audacity (x32) File-Upload.net (x32 Version: 1.0) FireJump (x32 Version: 1.0.2.5) FMS (x32) Fotogalerie (x32 Version: 16.4.3505.0912) Free Hide Folder (x32) Free Screen To Video V 2.0 (x32 Version: 2.0.0.0) Fünf Freunde auf Schatzsuche (x32) Game Cam 2.6.1.0 (x32 Version: 2.6.1.0) Game Park Console (x32 Version: 6.2.1.1) GDC 0.24.svn.r229 (x32 Version: 0.24.svn.r229) gDoc (x32 Version: 2.1.0) gDoc Installer (x32 Version: 2.1.0) GIANTS Editor 5.0.1 (x32 Version: 5.0.1) GIANTS Editor 5.0.3 32-bit (x32 Version: 5.0.3) GIMP 2.8.0 (Version: 2.8.0) Google Earth (x32 Version: 7.1.1.1888) Google SketchUp 8 (x32 Version: 3.0.14358) Google Update Helper (x32 Version: 1.3.21.153) GreenWebPlayer (HKCU) GXTranscoder v2 (x32 Version: 2.24.2980) Heroes of Might & Magic V: Hammers of Fate (x32) Heroes of Might and Magic V - Tribes of the East (x32) Heroes of Might and Magic V (x32) Hex-Editor MX (x32 Version: 6.0) hMailServer 5.3.3-B1879 (x32) HMIWorks Standard v2.05 Update 10 (for TouchPAD series) Home Sweet Home - Christmas Edition (x32 Version: 1.0) ICQ 8.0 (build 5989, für aktuellen Benutzer) (HKCU Version: 8.0.5989.0) ImageConverter Plus 8.0 (x32) Inno Setup Version 5.5.2 (x32 Version: 5.5.2) Install Creator (x32) InstallForge (x32 Version: 1.2.4) Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Management Engine Components (x32 Version: 7.0.0.1118) Intel(R) Processor Graphics (x32 Version: 8.15.10.2291) Intel(R) Turbo Boost Technology Monitor 2.0 (Version: 2.1.23.0) IrfanView (remove only) (x32 Version: 4.35) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Juice 2.2 (x32 Version: 2.2) jZip (x32) KeePass Password Safe 2.21 (x32) Kommissar Kugelblitz 3 (x32 Version: 1.00.0000) Landwirtschafts Simulator 2011 (x32 Version: 1.0) Landwirtschafts Simulator 2013 (x32 Version: 1.0) Landwirtschafts-Simulator 2009 Gold (x32) Logitech SetPoint 6.32 (Version: 6.32.20) Logitech Solar App 1.0 (Version: 1.00.46) Loksim3D (Version: 2.8) LTspice IV (x32) MAGIX Screenshare (x32 Version: 4.3.6.1987) MAGIX Web Designer 6 (x32 Version: 6.0.1.17005) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Max und die Geheimformel (x32) MediaInfo 0.7.61 (Version: 0.7.61) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Application Compatibility Toolkit 5.6 (x32 Version: 5.6.7324.0) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000) Microsoft Flight (x32 Version: 1.0.0005.129) Microsoft Flight Simulator X Demo (x32 Version: 10.0.60905) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0) Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0) Microsoft IntelliPoint 8.1 (Version: 8.15.406.0) Microsoft Silverlight (Version: 5.1.20125.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft SQL Server Compact 3.5 ENU (x32 Version: 3.5.5386.0) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) mirabyte Feed Writer 2.8.1 (x32 Version: 2.8.1) mirabyte Web Architect 10.0.1 (x32 Version: 10.0.1) Movie Maker (x32 Version: 16.4.3505.0912) Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1) Mozilla Maintenance Service (x32 Version: 23.0.1) Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8) MPC-HC 1.6.6.6957 (3975d54) (x32 Version: 1.6.6.6957) MPC-HC 1.6.7.7114 (9eb64ec) (64-bit) (Version: 1.6.7.7114) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1109.0912) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0) MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) MyKeyFinder (x32 Version: 2013) MySQL Server 5.5 (x32 Version: 5.5.25) MySQL Server 5.5 (x32 Version: 5.5.28) Need For Speed™ World (x32 Version: 1.0.0.1398) Node.js (Version: 0.10.12) Notepad++ (x32 Version: 5.9.3) NVIDIA Grafiktreiber 311.44 (Version: 311.44) NVIDIA Install Application (Version: 2.1002.109.706) NVIDIA Optimus 1.11.3 (Version: 1.11.3) NVIDIA PhysX (x32 Version: 9.12.0213) NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213) NVIDIA Systemsteuerung 311.44 (Version: 311.44) NVIDIA Update 1.11.3 (Version: 1.11.3) NVIDIA Update Components (Version: 1.11.3) OpenMG Limited Patch 4.7-07-14-05-01 (x32) OpenMG Secure Module 4.7.00 (x32 Version: 4.7.00.12140) OpenOffice.org 3.3 (x32 Version: 3.3.9567) OpenTTD 1.3.0 (x32 Version: 1.3.0) Oracle VM VirtualBox 4.2.6 (Version: 4.2.6) Origin (x32 Version: 9.1.10.2728) Paint.NET v3.5.10 (Version: 3.60.0) Paragon Backup & Recovery™ 2013 Free (x32 Version: 90.00.0003) PDF Split And Merge Basic (Version: 2.2.2) PDFCreator (x32 Version: 1.5.0) Photo Gallery (x32 Version: 16.4.3505.0912) PHPEdit (x32 Version: 0.6) Picasa 3 (x32 Version: 3.9) PicGrab 2.8.0 (x32 Version: 2.8.0) Pic-Upload.de (x32 Version: 1.0) QuickTime (x32 Version: 7.74.80.86) Razer Game Booster (x32 Version: 3.5.6.0) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6438) RippMe (x32 Version: 3.04) Santa Claus 3D Screensaver 1.1 (x32 Version: 1.1) Schriftenbibliothek (x32) Secunia PSI (3.0.0.6001) (x32 Version: 3.0.0.6001) Shockwave (x32) SimCity™ (x32 Version: 1.0.0.0) Ski Challenge 13 (CH) (HKCU) Skiregion Simulator 2012 (x32 Version: 1.0) Skype™ 6.3 (x32 Version: 6.3.107) SmartFTP Client (Version: 4.1.1261.0) SmartFTP Client German (Germany) MUI (Version: 4.1.1261.0) SmartFTP Client Setup Files 4.1 (x64) (remove only) (x32 Version: 4.1) Smarty Uninstaller Pro (x32 Version: 3.0.1) Sparfuchs (x32 Version: 2013) SpeedFan (remove only) (x32) SpywareBlaster 5.0 (x32 Version: 5.0.0) Steinbruch-Simulator 2012 (x32) Steinbruch-Simulator 2012 Patch 1.10 (x32) Stronghold Legends (x32 Version: 1.20.0000) StrongVPN Client version 1.2 (x32 Version: 1.2) Sublime Text 2 Build 2220 (x32) Sublime Text Build 3047 SUPERAntiSpyware (Version: 5.6.1014) SuperTux 0.1.3 (x32) swMSM (x32 Version: 12.0.0.1) TeamSpeak 3 Client (HKCU Version: 3.0.10) TKKG10 (x32) TmNationsForever (x32) Two Worlds Pinball (x32 Version: 1.00) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) VirtualCloneDrive (x32) Vision Runtime Dependencies (x32 Version: 8.0.0.0000) VLC media player 2.0.5 (x32 Version: 2.0.5) VLC media player 2.1.0-git-20121231-0404 (Version: 2.1.0-git-20121231-0404) White Christmas 3D Screensaver and Animated Wallpaper 1.0 (x32 Version: 1.0) Wildlife Park 2 Horses (x32 Version: 2.00) Windows Live Communications Platform (x32 Version: 16.4.3505.0912) Windows Live Essentials (x32 Version: 16.4.3505.0912) Windows Live ID Sign-in Assistant (Version: 7.250.4311.0) Windows Live Installer (x32 Version: 16.4.3505.0912) Windows Live Photo Common (x32 Version: 16.4.3505.0912) Windows Live PIMT Platform (x32 Version: 16.4.3505.0912) Windows Live SOXE (x32 Version: 16.4.3505.0912) Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912) Windows Live UX Platform (x32 Version: 16.4.3505.0912) Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912) Windows Speech Recognition Macros (x32 Version: 1.0.6862.19) WinFlash (x32 Version: 2.31.1) WinRAR 4.20 (64-Bit) (Version: 4.20.0) WinRAR Password Cracker (x32 Version: 3.1.0.0) Wireless Console 3 (x32 Version: 3.0.19) World of Tanks (x32) XAMPP 1.8.1-0 (x32 Version: 1.8.1-0) XnConvert 1.55 (Version: 1.55) Zattoo4 4.0.5 (x32 Version: 4.0.5) ==================== Restore Points ========================= 15-08-2013 04:45:33 Removed Bonjour 17-08-2013 04:47:01 Compatibility Pack für 2007 Office System wird entfernt 17-08-2013 04:47:54 Microsoft Office Excel Viewer wird entfernt 17-08-2013 04:49:22 Microsoft Office Word Viewer 2003 wird entfernt 17-08-2013 04:51:46 Installed Microsoft Office Professional Plus 2013 17-08-2013 04:52:06 PROPLUSR 17-08-2013 05:01:44 Installed Microsoft Office Professional Plus 2013 17-08-2013 05:01:56 PROPLUSR 17-08-2013 05:06:20 Installed Microsoft Office Professional Plus 2013 17-08-2013 05:06:29 PROPLUSR 01-09-2013 17:53:58 Removed Bonjour 01-09-2013 17:59:15 Removed Google Talk Plugin 01-09-2013 18:00:14 Removed Google Drive 01-09-2013 18:02:46 Entfernt Paragon Backup & Recovery™ 2013 Free. 02-09-2013 15:20:05 Windows Update 03-09-2013 04:22:53 Windows-Sicherung ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-08-14 06:40 - 00000231 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost 190.93.251.97 www.modhoster.de 190.93.251.97 ets.modhoster.de 190.93.251.97 minecraft.modhoster.de 190.93.251.97 srs-2012.modhoster.de 62.113.217.100 images.modhoster.de 5.9.157.205 chat.modhoster.de ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {0C325E65-BA4C-45BD-B5A7-164244F46074} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation) Task: {1C00D190-2D1E-4B21-B70D-A0CB3DBA956E} - System32\Tasks\{12A85B76-ECAB-40B0-94D1-75E070154840} => C:\Users\*******\Downloads\EnemyNations2\_setup.EXE Task: {266C582F-A968-470A-AF72-F187D71AB823} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software) Task: {2BC24EB0-F145-4A6C-8B37-C5E62D76BF01} - System32\Tasks\Your File Updater => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe Task: {35B8EF23-3F23-4CCB-810D-43708FD09704} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {39C77CB0-CFD6-4828-B60B-28E33F9F8BFF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3972431589-2566625243-1631541889-1001UA => C:\Users\*******\AppData\Local\Google\Update\GoogleUpdate.exe Task: {3ACD0A9E-1B8F-4671-AC7E-463D16F76E26} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd) Task: {3C1C5C0E-C2FE-483F-B293-69A7B9A95471} - System32\Tasks\{4414B346-F6BB-4E6A-8B2E-B36755A5A792} => C:\Users\*******\Downloads\TmNationsForever_Setup.exe Task: {3DE71F9C-2BA9-4A82-966D-0D6686D88B74} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3972431589-2566625243-1631541889-1001Core => C:\Users\*******\AppData\Local\Google\Update\GoogleUpdate.exe Task: {480A7884-CE6E-4360-A80D-B201DFE33F0D} - System32\Tasks\{A82B25BD-3E9F-40D2-9CA6-7DC16DCE4100} => C:\Users\*******\Downloads\gmouse20\SETUP.EXE Task: {597A2E5B-C56E-4335-9CCA-21968A515239} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {5B8EF29F-6142-4CB3-9895-2141FB21E888} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-04-13] (Microsoft Corporation) Task: {5F734090-475F-4DCD-8A93-A22CA762C06A} - System32\Tasks\Wise Care 365 => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe Task: {60F398C6-F009-4FEB-B4EF-955537F134F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.) Task: {647F1615-62F3-4452-9832-398A511DDFA1} - System32\Tasks\{1332E433-5B7A-48E8-AF55-433A34D31E4C} => C:\Users\*******\Downloads\gmouse20\SETUP.EXE Task: {65035588-6343-4692-B48F-D2755D66BBEA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-02] (Adobe Systems Incorporated) Task: {68FC3817-5124-40C7-B237-F77DC23CCA0C} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-21] (ASUS) Task: {6C54C1A0-A0E1-471B-803B-3F9975F06A90} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS) Task: {7181F87D-FD20-4E3F-A6D0-D413C8F87A30} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {77BCFF62-B2E3-4C9A-949C-1FF5E8B3F361} - System32\Tasks\User_Feed_Synchronization-{AA05AC82-BEC2-4802-BCD8-0117CDF6A9E2} => C:\Windows\system32\msfeedssync.exe [2013-02-27] (Microsoft Corporation) Task: {821B7424-53EA-423F-B7B0-5B21BB3A495C} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe Task: {84A77F86-B445-48DE-B57F-B89B693CD5C2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.) Task: {882A8AEE-6222-4E3C-A601-01C4CE6097C1} - System32\Tasks\{09451438-AAD7-4DF4-ACF8-A470A9702C5E} => C:\Users\*******\Downloads\EnemyNations2\_setup.EXE Task: {8F419C90-D714-4F55-A02A-39F92CC5DE9E} - System32\Tasks\{431AD521-9BB2-413B-9E37-F8767A8A2D1C} => E:\Installation.EXE Task: {9B7402EC-A4B7-4989-A50F-B09E11DBFD0D} - System32\Tasks\{D06899CE-6A5A-4C04-BECE-A5946662C5BA} => C:\Program Files (x86)\PHPEdit\PHPEdit.exe [2001-09-26] (PHPEdit project) Task: {B1692FD0-9E43-4A4C-99AD-FB2923F07303} - System32\Tasks\{6D6A87AD-0415-4C5E-B1A3-458DA343AEAB} => C:\Users\*******\Downloads\gmouse20\SETUP.EXE Task: {D472D272-91AD-446D-9182-CC0356339E25} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {D765114F-1CCD-48E6-BC61-C810362C3F90} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {DBED2C32-E27A-45F4-858A-8814D0855153} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation) Task: {E4F5A865-4B8D-498A-8168-CDF4E3B12EEE} - System32\Tasks\{7B69C7DA-4C5D-40C3-AF4E-B4A6AFC3AF4B} => C:\Users\*******\Downloads\gmouse20\SETUP.EXE Task: {EEF0C6F2-2E34-41A9-8A4A-AF4EA797BDFA} - System32\Tasks\{350EB947-0948-4B8D-8F47-493ECF8D60C4} => C:\Users\*******\Downloads\TmNationsForever_Setup.exe Task: {FCCA7AEF-40B6-4282-B526-CA2360265672} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: {FDA853CC-5A65-401B-9B8D-2E7D71BA9526} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe [2012-11-13] () Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\ASUS P4G.job => C:\Program Files (x86)\P4G\BatteryLife.exe Task: C:\Windows\Tasks\ATKOSD2.job => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe Task: C:\Windows\Tasks\ATKOSD2_876975.job => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe Task: C:\Windows\Tasks\DMedia_877022.job => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce8313387cd85a.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HControlUser_876959.job => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe Task: C:\Windows\Tasks\P4GIntlCtrl.job => C:\Program Files\P4G\IntlDPST.exe Task: C:\Windows\Tasks\Wise Care 365.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe ==================== Loaded Modules (whitelisted) ============= 2010-09-02 10:41 - 2010-09-02 10:41 - 00220160 ____H (eCareme Technologies, Inc.) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll 2012-08-24 01:36 - 2012-08-24 01:36 - 00460168 _____ (SmartSoft Ltd.) C:\Program Files\SmartFTP Client\sfShellTools.dll 2012-12-14 02:42 - 2012-12-14 02:42 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc 2011-02-21 06:06 - 2011-02-21 06:06 - 04493312 ____H (eCareme) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\XPClient.dll 2010-04-01 04:55 - 2010-04-01 04:55 - 00221184 ____H ( ) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\LogicNP.EZNamespaceExtensions.dll 2011-02-21 06:05 - 2011-02-21 06:05 - 00266240 ____H (.) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\eCaremeDLL.dll 2009-10-29 03:41 - 2009-10-29 03:41 - 00270336 ____H (The Apache Software Foundation) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\log4net.dll 2013-09-01 18:36 - 2009-10-22 11:33 - 00111616 _____ (Canon Inc.) C:\Windows\system32\spool\DRIVERS\x64\3\CNCF2Gm.dll 2013-09-01 18:36 - 2009-10-22 11:33 - 00253440 _____ (Canon Inc.) C:\Windows\system32\spool\DRIVERS\x64\3\CNCF2Um.dll 2009-03-02 04:07 - 2009-03-02 04:07 - 00200704 ____H ( ) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\LogicNP.EZShellExtensions.dll 2011-06-22 12:38 - 2013-04-08 13:32 - 02833232 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2011-01-29 02:34 - 2013-03-14 08:28 - 00076064 _____ (NVIDIA Corporation) C:\Windows\system32\Nv3DAppShExtR.dll 2010-04-03 04:21 - 2008-10-01 08:08 - 00011264 ____H () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2013-05-15 12:11 - 2013-04-13 07:49 - 00308736 _____ (Microsoft Corporation) C:\Windows\AppPatch\AppPatch64\AcGenral.DLL 2012-11-13 22:53 - 2012-11-13 22:53 - 00139024 _____ () C:\Program Files (x86)\Razer\Razer Game Booster\GBV3ContextMenu.dll 2011-07-19 02:08 - 2011-07-19 02:08 - 00210816 _____ (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL 2013-06-12 06:43 - 2012-06-09 19:20 - 00196608 _____ (Alexander Roshal) C:\Program Files\WinRAR\rarext.dll 2011-08-07 12:26 - 2009-12-14 19:16 - 00107688 ____H (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll 2011-07-18 23:04 - 2011-07-18 23:04 - 00301568 ____H () C:\Program Files (x86)\Notepad++\NppShell_04.dll 2011-01-29 02:34 - 2013-03-14 08:28 - 01002272 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2011-01-29 02:33 - 2013-03-14 08:29 - 04155680 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvUI.dll 2012-04-28 09:26 - 2013-04-08 13:32 - 00778528 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\easyDaemonAPIU64.DLL 2012-04-28 09:26 - 2013-04-08 13:32 - 03587360 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll 2012-04-28 09:26 - 2013-04-08 13:32 - 00981280 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\NVUPDTR.DLL 2011-10-07 11:39 - 2011-10-07 11:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll 2011-04-20 10:18 - 2011-01-27 02:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-05-22 16:29 - 2013-05-22 16:23 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2013-05-22 16:29 - 2013-05-22 16:23 - 03200104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2013-05-22 16:29 - 2013-05-22 16:23 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2009-07-14 02:29 - 2009-07-14 03:38 - 00701952 _____ (Microsoft Corporation) C:\Windows\System32\hhctrl.ocx 2013-09-01 18:36 - 2012-03-14 05:00 - 00780288 _____ (CANON INC.) C:\Windows\system32\spool\DRIVERS\x64\3\CNMDRA7.DLL 2013-09-01 18:36 - 2012-03-14 05:00 - 03769344 _____ (CANON INC.) C:\Windows\system32\spool\DRIVERS\x64\3\CNMUIA7.DLL 2009-07-14 02:34 - 2009-07-14 03:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\System32\Speech\SpeechUX\SpTip.dll 2009-07-14 02:34 - 2009-07-14 03:41 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\Speech\SpeechUX\SpeechUXPS.DLL 2009-11-06 20:18 - 2009-11-06 20:18 - 00004096 ____H ( ) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\Interop.SimpleAES64Lib.dll 2009-10-29 05:00 - 2009-10-29 05:00 - 00004096 ____H ( ) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\Interop.SIMPLEAESLib.dll 2009-03-02 04:08 - 2009-03-02 04:08 - 00003584 ____H () C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\LogicNP.PropSheetExtensionHelper_x64.dll 2009-07-14 01:58 - 2009-07-14 03:38 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-04-08 13:32 - 2013-04-08 13:32 - 00201576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-04-08 13:32 - 2013-04-08 13:32 - 00286536 _____ (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\nvd3d9wrap.dll 2013-04-08 13:32 - 2013-04-08 13:32 - 00193336 _____ (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\nvdxgiwrap.dll 2012-03-18 08:22 - 2009-10-07 22:28 - 00200704 _____ () C:\Program Files (x86)\ImageConverter Plus\gpgate.dll 2012-03-18 08:22 - 2009-10-07 22:22 - 01183744 _____ () C:\Program Files (x86)\ImageConverter Plus\FCRTL.dll 2012-03-18 08:22 - 2009-10-07 22:24 - 01339392 _____ () C:\Program Files (x86)\ImageConverter Plus\fcnv.dll 2012-03-18 08:22 - 2009-10-07 22:22 - 06803456 _____ () C:\Program Files (x86)\ImageConverter Plus\fpdf.dll 2012-03-18 08:22 - 2009-10-07 22:18 - 00020992 _____ () C:\Program Files (x86)\ImageConverter Plus\MemHandler.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 01740800 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\sal3.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00086016 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\uwinapi.dll 2010-12-13 17:23 - 2013-02-15 20:38 - 00379904 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sofficeapp.dll 2011-01-17 17:19 - 2013-02-15 20:37 - 01033728 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\comphelp4MSC.dll 2010-11-19 19:45 - 2013-02-15 20:38 - 00432128 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppuhelper3MSC.dll 2010-11-19 19:45 - 2013-02-15 20:38 - 00013312 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\salhelper3MSC.dll 2010-11-19 19:45 - 2013-02-15 20:38 - 00142848 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppu3.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00597504 _____ (STLport Consulting, Inc.) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stlport_vc7145.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00358912 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucbhelper4MSC.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00094208 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\vos3MSC.dll 2011-01-17 17:19 - 2013-02-15 20:37 - 00135680 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmiscmi.dll 2011-01-17 17:19 - 2013-02-15 20:37 - 00832000 _____ (Oracle) C:\Program Files (x86)\OpenOffice.org 3\program\libdb47.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 00529408 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\tlmi.dll 2011-01-17 17:19 - 2013-02-15 20:37 - 00700928 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\basegfxmi.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00026112 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18nisolang1MSC.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 00958464 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\utlmi.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00531456 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\xcrmi.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 03234816 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sfxmi.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00869888 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwemi.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00311296 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwimi.dll 2010-12-13 17:23 - 2013-02-15 20:38 - 02863616 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svtmi.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 02186752 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\tkmi.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 03266560 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\vclmi.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00256000 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sotmi.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00029184 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18npapermi.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00066560 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18nutilMSC.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00951296 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuuc40.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 13914112 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icudt40.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 00777216 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svlmi.dll 2010-11-19 19:45 - 2013-02-15 20:38 - 00092160 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\jvmfwk3.dll 2011-01-17 17:19 - 2013-02-15 20:37 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2011-01-17 17:19 - 2013-02-15 20:37 - 01577984 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sbmi.dll 2010-11-19 13:42 - 2010-11-19 13:42 - 00083456 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\saxmi.dll 2010-11-19 19:45 - 2013-02-15 20:38 - 00051712 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\msci_uno.dll 2010-11-19 19:45 - 2013-02-15 20:38 - 00452608 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\bootstrap.uno.dll 2010-11-19 19:45 - 2013-02-15 20:38 - 00092672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reg3.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00053248 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\store3.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00396800 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\configmgr.uno.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00024064 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\localebe1.uno.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00092672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stocservices.uno.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00212992 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucb1.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 01649152 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwkmi.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 00257024 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucpfile1.dll 2011-01-17 17:19 - 2013-02-15 20:37 - 01317376 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18npool.uno.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 01071616 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuin40.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00083968 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\oooimprovementmi.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00287232 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\oleautobridge.uno.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00148480 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\emsermi.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 00226304 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\uuimi.dll 2011-01-06 18:50 - 2013-02-15 20:37 - 00186880 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\filterconfig1.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00115200 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\dnd.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 07884800 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\swmi.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00991744 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\lngmi.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 02967552 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\xomi.dll 2010-12-13 17:23 - 2013-02-15 20:38 - 05470208 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svxcoremi.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 01457152 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\editengmi.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00211456 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\avmediami.dll 2011-01-17 17:18 - 2013-02-15 20:37 - 01026560 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\drawinglayermi.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00503296 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\canvastoolsmi.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00129024 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\aggmi.dll 2011-01-17 17:18 - 2013-02-15 20:37 - 00285184 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\cppcanvasmi.dll 2010-12-13 17:23 - 2013-02-15 20:38 - 02524672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svxmi.dll 2011-01-17 17:19 - 2013-02-15 20:37 - 00697344 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_euro.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00103936 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_en.dll 2011-01-06 18:51 - 2013-02-15 20:37 - 00282112 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\package2.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00106496 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sysdtrans.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 00346112 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\xstor.dll 2010-11-19 19:45 - 2013-02-15 20:38 - 00098816 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reflection.uno.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00051712 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fileacc.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00156672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sax.uno.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00093696 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fsstorage.uno.dll 2011-01-17 17:19 - 2013-02-15 20:37 - 00542208 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmi.uno.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00154624 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\helplinkermi.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00024064 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucpexpand1.uno.dll 2010-11-19 19:46 - 2013-02-15 20:38 - 00294400 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\unoxmlmi.dll 2010-11-19 19:45 - 2013-02-15 20:38 - 00098816 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\introspection.uno.dll 2010-12-13 17:23 - 2013-02-15 20:38 - 00174080 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\updchk.uno.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00180224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files (x86)\OpenOffice.org 3\program\libcurl.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00050688 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ftransl.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00033280 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\mcnttype.dll 2010-12-13 17:23 - 2013-02-15 20:38 - 00053760 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\updatefeed.uno.dll 2010-11-19 19:45 - 2013-02-15 20:37 - 00008192 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\onlinecheck.DLL 2010-12-13 17:23 - 2013-02-15 20:38 - 00048128 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\updchkmi.dll 2010-12-13 17:22 - 2013-02-15 20:37 - 00063488 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\resmi.dll 2011-01-17 17:19 - 2013-02-15 20:38 - 00260096 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucpchelp1.dll 2009-07-14 02:14 - 2009-07-14 03:16 - 00126976 _____ (Microsoft Corporation) C:\Windows\IME\SpTip.dll 2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm 2013-08-06 18:09 - 2013-08-06 18:09 - 02244504 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2013-08-06 18:09 - 2013-08-06 18:09 - 00158104 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2013-08-06 18:09 - 2013-08-06 18:09 - 00022424 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll 2013-08-06 18:09 - 2013-08-06 18:09 - 00579480 _____ (sqlite.org) C:\Program Files (x86)\Mozilla Thunderbird\mozsqlite3.dll 2013-03-14 07:32 - 2013-02-11 09:55 - 00209408 _____ (Mozilla Foundation) C:\Users\*******\AppData\Roaming\Thunderbird\Profiles\7t9h8wy2.default\extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103}\components\calbasecomps.dll 2013-06-24 12:40 - 2010-09-15 22:06 - 02145280 _____ (Python Software Foundation) C:\Program Files (x86)\Sublime Text 2\python26.dll 2013-06-24 12:40 - 2010-09-15 22:06 - 00073728 _____ () C:\Program Files (x86)\Sublime Text 2\_ctypes.pyd 2013-06-24 12:40 - 2010-09-15 22:06 - 00040448 _____ () C:\Program Files (x86)\Sublime Text 2\_socket.pyd 2013-06-24 12:40 - 2010-09-15 22:06 - 00665600 _____ () C:\Program Files (x86)\Sublime Text 2\_ssl.pyd 2013-06-24 12:40 - 2010-09-15 22:06 - 00286208 _____ () C:\Program Files (x86)\Sublime Text 2\_hashlib.pyd 2013-06-24 12:40 - 2010-09-15 22:06 - 00585728 _____ () C:\Program Files (x86)\Sublime Text 2\unicodedata.pyd 2013-09-02 15:41 - 2013-09-02 15:41 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2011-07-18 23:07 - 2011-07-18 23:07 - 00106496 ____H (Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\plugins\NppConverter.dll 2011-07-18 23:07 - 2011-07-18 23:07 - 00014336 ____H () C:\Program Files (x86)\Notepad++\plugins\NppExport.dll 2011-07-18 23:07 - 2012-05-16 19:34 - 01673728 _____ () C:\Program Files (x86)\Notepad++\plugins\NppFTP.dll 2011-07-18 23:07 - 2012-01-04 16:51 - 00545792 ____H (Dave Brotherstone. davegb@pobox.com) C:\Program Files (x86)\Notepad++\plugins\PluginManager.dll 2011-07-18 23:07 - 2011-07-18 23:07 - 00081920 ____H (jens.plugin.npp@gmx.de) C:\Program Files (x86)\Notepad++\plugins\SpellChecker.dll 2012-04-27 19:51 - 2012-06-20 17:57 - 00311296 _____ () C:\Program Files (x86)\Notepad++\plugins\XMLTools.dll 2012-04-27 19:51 - 2012-06-20 17:57 - 00987136 _____ () C:\Program Files (x86)\Notepad++\libxml2.dll 2012-04-27 19:51 - 2012-06-20 17:57 - 00888832 _____ (Free Software Foundation) C:\Program Files (x86)\Notepad++\iconv.dll 2012-04-27 19:51 - 2012-06-20 17:57 - 00077824 _____ () C:\Program Files (x86)\Notepad++\zlib1.dll 2012-04-27 19:51 - 2012-06-20 17:57 - 00166912 _____ () C:\Program Files (x86)\Notepad++\libxslt.dll ==================== Alternate Data Streams (whitelisted) ========== AlternateDataStreams: C:\ProgramData\Temp:5C321E34 AlternateDataStreams: C:\ProgramData\Temp:DED17083 AlternateDataStreams: C:\Users\*******\Thumbs.db:encryptable ==================== Faulty Device Manager Devices ============= Name: ASInsHelp Description: ASInsHelp Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: ASInsHelp Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (09/05/2013 05:01:09 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: KHALMNPR.EXE, Version: 5.33.14.0, Zeitstempel: 0x4e8218bd Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e Ausnahmecode: 0xc0000374 Fehleroffset: 0x00000000000c40f2 ID des fehlerhaften Prozesses: 0xe6c Startzeit der fehlerhaften Anwendung: 0xKHALMNPR.EXE0 Pfad der fehlerhaften Anwendung: KHALMNPR.EXE1 Pfad des fehlerhaften Moduls: KHALMNPR.EXE2 Berichtskennung: KHALMNPR.EXE3 Error: (09/03/2013 05:39:28 PM) (Source: Application Hang) (User: ) Description: Programm sublime_text.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1808 Startzeit: 01cea85d844f8cb9 Endzeit: 23 Anwendungspfad: C:\Program Files (x86)\Sublime Text 2\sublime_text.exe Berichts-ID: 004a6732-14af-11e3-bcc5-14dae90d9b4d Error: (09/03/2013 06:29:12 AM) (Source: Application Hang) (User: ) Description: Programm firefox.exe, Version 23.0.1.4974 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: a5c Startzeit: 01cea85d6a4f59f5 Endzeit: 30 Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Berichts-ID: 5dc7f187-1451-11e3-bcc5-14dae90d9b4d Error: (09/03/2013 06:21:59 AM) (Source: MsiInstaller) (User: ASUS-X73S) Description: Produkt: COMPUTERBILD-Abzockschutz -- Fehler 1704. Eine Installation von Paragon Backup & Recovery™ 2013 Free wurde unterbrochen. Sie müssen die von dieser Installation vorgenommenen Änderungen rückgängig machen, bevor Sie den Vorgang fortsetzen können. Möchten Sie diese Änderungen rückgängig machen? Error: (09/02/2013 06:14:23 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LiveUpdt.exe, Version: 2.0.0.0, Zeitstempel: 0x4a6d7c8e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002e3be ID des fehlerhaften Prozesses: 0x156c Startzeit der fehlerhaften Anwendung: 0xLiveUpdt.exe0 Pfad der fehlerhaften Anwendung: LiveUpdt.exe1 Pfad des fehlerhaften Moduls: LiveUpdt.exe2 Berichtskennung: LiveUpdt.exe3 Error: (09/02/2013 06:03:19 PM) (Source: ESENT) (User: ) Description: taskhost (5548) Versuch, Datei "C:\Users\*******\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (09/02/2013 05:14:08 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LiveUpdt.exe, Version: 2.0.0.0, Zeitstempel: 0x4a6d7c8e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002e3be ID des fehlerhaften Prozesses: 0x1794 Startzeit der fehlerhaften Anwendung: 0xLiveUpdt.exe0 Pfad der fehlerhaften Anwendung: LiveUpdt.exe1 Pfad des fehlerhaften Moduls: LiveUpdt.exe2 Berichtskennung: LiveUpdt.exe3 Error: (09/02/2013 00:26:08 PM) (Source: Schedule) (User: ) Description: Schedule error: 10106Initialize call failed, bailing out Error: (09/01/2013 07:58:45 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: gert0.exe, Version: 0.0.0.0, Zeitstempel: 0x3da6a14d Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc000041d Fehleroffset: 0x77a21221 ID des fehlerhaften Prozesses: 0x2604 Startzeit der fehlerhaften Anwendung: 0xgert0.exe0 Pfad der fehlerhaften Anwendung: gert0.exe1 Pfad des fehlerhaften Moduls: gert0.exe2 Berichtskennung: gert0.exe3 Error: (09/01/2013 07:58:36 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: uninstall.exe_unknown, Version: 0.0.0.0, Zeitstempel: 0x3da6a14d Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc000041d Fehleroffset: 0x77a21221 ID des fehlerhaften Prozesses: 0x16dc Startzeit der fehlerhaften Anwendung: 0xuninstall.exe_unknown0 Pfad der fehlerhaften Anwendung: uninstall.exe_unknown1 Pfad des fehlerhaften Moduls: uninstall.exe_unknown2 Berichtskennung: uninstall.exe_unknown3 System errors: ============= Error: (09/03/2013 05:18:18 PM) (Source: iaStor) (User: ) Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet. Error: (09/03/2013 06:32:04 AM) (Source: VDS Basic Provider) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (09/03/2013 06:32:04 AM) (Source: VDS Basic Provider) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (09/03/2013 06:32:04 AM) (Source: VDS Basic Provider) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (09/03/2013 06:32:04 AM) (Source: VDS Basic Provider) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (09/02/2013 05:05:40 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (09/02/2013 05:05:40 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1326 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (09/02/2013 05:03:58 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (09/02/2013 05:03:36 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: acedrv05 UimBus Uim_IM Uim_VIM Error: (09/02/2013 05:02:38 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "FileZilla Server FTP server" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office Sessions: ========================= Error: (09/05/2013 05:01:09 PM) (Source: Application Error)(User: ) Description: KHALMNPR.EXE5.33.14.04e8218bdntdll.dll6.1.7601.177254ec4aa8ec000037400000000000c40f2e6c01cea7ed78c85810C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXEC:\Windows\SYSTEM32\ntdll.dllfed7aba0-163b-11e3-bcc5-14dae90d9b4d Error: (09/03/2013 05:39:28 PM) (Source: Application Hang)(User: ) Description: sublime_text.exe1.0.0.1180801cea85d844f8cb923C:\Program Files (x86)\Sublime Text 2\sublime_text.exe004a6732-14af-11e3-bcc5-14dae90d9b4d Error: (09/03/2013 06:29:12 AM) (Source: Application Hang)(User: ) Description: firefox.exe23.0.1.4974a5c01cea85d6a4f59f530C:\Program Files (x86)\Mozilla Firefox\firefox.exe5dc7f187-1451-11e3-bcc5-14dae90d9b4d Error: (09/03/2013 06:21:59 AM) (Source: MsiInstaller)(User: ASUS-X73S) Description: Produkt: COMPUTERBILD-Abzockschutz -- Fehler 1704. Eine Installation von Paragon Backup & Recovery™ 2013 Free wurde unterbrochen. Sie müssen die von dieser Installation vorgenommenen Änderungen rückgängig machen, bevor Sie den Vorgang fortsetzen können. Möchten Sie diese Änderungen rückgängig machen?(NULL)(NULL)(NULL)(NULL)(NULL) Error: (09/02/2013 06:14:23 PM) (Source: Application Error)(User: ) Description: LiveUpdt.exe2.0.0.04a6d7c8entdll.dll6.1.7601.177254ec49b8fc00000050002e3be156c01cea7f77abef14fC:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdt.exeC:\Windows\SysWOW64\ntdll.dllba960d22-13ea-11e3-bcc5-14dae90d9b4d Error: (09/02/2013 06:03:19 PM) (Source: ESENT)(User: ) Description: taskhost5548C:\Users\*******\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. Error: (09/02/2013 05:14:08 PM) (Source: Application Error)(User: ) Description: LiveUpdt.exe2.0.0.04a6d7c8entdll.dll6.1.7601.177254ec49b8fc00000050002e3be179401cea7ef0713ab71C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdt.exeC:\Windows\SysWOW64\ntdll.dll4fcc1916-13e2-11e3-bcc5-14dae90d9b4d Error: (09/02/2013 00:26:08 PM) (Source: Schedule)(User: ) Description: Schedule error: 10106Initialize call failed, bailing out Error: (09/01/2013 07:58:45 PM) (Source: Application Error)(User: ) Description: gert0.exe0.0.0.03da6a14dunknown0.0.0.000000000c000041d77a21221260401cea73ce6b3756aC:\Users\*******\AppData\Local\Temp\gert0.exeunknown2479b27d-1330-11e3-b8f1-14dae90d9b4d Error: (09/01/2013 07:58:36 PM) (Source: Application Error)(User: ) Description: uninstall.exe_unknown0.0.0.03da6a14dunknown0.0.0.000000000c000041d77a2122116dc01cea73ce06b9d58C:\Programme\ftp-uploader\uninstall.exeunknown1f0961a7-1330-11e3-b8f1-14dae90d9b4d CodeIntegrity Errors: =================================== Date: 2013-09-02 17:01:08.704 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-02 17:01:08.610 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-02 12:24:58.373 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-02 12:24:58.248 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-01 19:29:01.124 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-01 19:29:01.046 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-01 18:27:57.500 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-01 18:27:57.422 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-01 18:21:04.781 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-01 18:21:04.703 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 39% Total physical RAM: 6056.26 MB Available physical RAM: 3640.82 MB Total Pagefile: 12110.7 MB Available Pagefile: 7767 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:238.47 GB) (Free:124.59 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (DATA) (Fixed) (Total:332.7 GB) (Free:329.92 GB) NTFS Drive g: (LS2013) (CDROM) (Total:1.36 GB) (Free:0 GB) CDFS Drive n: (15.0.4420.1017) (CDROM) (Total:0.76 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 343771F7) Partition 1: (Not Active) - (Size=25 GB) - (Type=1C) Partition 2: (Active) - (Size=238 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=333 GB) - (Type=OF Extended) ==================== End Of Log ============================ Baldoius Einige Dateien gehören zum Landwirtschafts-Simulator 2013 (zumbeispiel meinemap). Also nicht erschrecken...!  |
|
06.09.2013, 08:14
| #4 |
| /// the machine /// TB-Ausbilder | Disabled.FolderOption Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
06.09.2013, 15:42
| #5 |
| | Disabled.FolderOption Einmal Malwarebytes: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.06.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16618 Dario :: ASUS-X73S [Administrator] 06.09.2013 12:29:11 mbam-log-2013-09-06 (12-29-11).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 329232 Laufzeit: 6 Minute(n), 10 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\Users\********\Downloads\FlashPlayer__1003_i66628665_il430345.exe (PUP.Optional.Amonetize.AS) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Weitere Logs foglen... AdwCleaner: Code:
ATTFilter # AdwCleaner v3.002 - Bericht erstellt am 06/09/2013 um 12:41:43
# Updated 01/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Dario - ASUS-X73S
# Gestartet von : C:\Users\Dario\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\AlawarWrapper
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jZip
Ordner Gelöscht : C:\Program Files (x86)\jZip
Ordner Gelöscht : C:\Users\Dario\AppData\Local\jZip
Ordner Gelöscht : C:\Users\Dario\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Dario\AppData\LocalLow\jZip
Ordner Gelöscht : C:\Users\Dario\AppData\Roaming\DesktopIconForAmazon
Ordner Gelöscht : C:\Users\Dario\AppData\Roaming\OCS
Ordner Gelöscht : C:\Users\Dario\AppData\Roaming\pdfforge
Datei Gelöscht : C:\Windows\System32\roboot64.exe
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_anvil-studio_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_anvil-studio_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_audio-converter_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_audio-converter_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bus-simulator-2012_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bus-simulator-2012_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_chrono_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_chrono_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_einestoppuhr_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_einestoppuhr_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-rar-extract-frog_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-rar-extract-frog_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-screen-to-video_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-screen-to-video_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gdoc-creator_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gdoc-creator_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gx-transcoder_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gx-transcoder_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hypercam_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hypercam_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_juice-ipodder_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_juice-ipodder_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_total-video-converter_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_total-video-converter_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_tuxguitar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_tuxguitar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3614D305-2DBB-4991-9297-750DD60FFC73}
Schlüssel Gelöscht : HKCU\Software\ExpressFiles
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\UpdateStar
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\ExpressFiles
Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\Software\jZip
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D85FFE92-BF14-4E9B-BCCD-E5C16069E65F}_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jZip
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16611
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\Dario\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\prefs.js ]
[ Datei : C:\Users\Lea\AppData\Roaming\Mozilla\Firefox\Profiles\sbfcl0ry.default\prefs.js ]
[ Datei : C:\Users\Lea\AppData\Roaming\Mozilla\Firefox\Profiles\sbfcl0ry.default\prefs.js ]
[ Datei : C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\okjzygk4.default\prefs.js ]
[ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\nym0gmae.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [6687 octets] - [06/09/2013 12:40:36]
AdwCleaner[S0].txt - [6335 octets] - [06/09/2013 12:41:43]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6395 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.8 (09.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by ******* on 06.09.2013 at 12:52:09.48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskMan_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskMan_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskMan_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskMan_RASMANCS
~~~ Files
Successfully deleted: [File] "C:\Windows\Tasks\wise care 365.job"
~~~ Folders
Successfully deleted: [Folder] "C:\Users\*******\AppData\Roaming\software informer"
Successfully deleted: [Empty Folder] C:\Users\*******\appdata\local\{D9356431-415E-47B3-8E7C-E09BA4C729AB}
~~~ FireFox
Emptied folder: C:\Users\*******\AppData\Roaming\mozilla\firefox\profiles\koq680jp.default\minidumps [56 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.09.2013 at 13:01:48.95
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-09-2013
Ran by ******** (administrator) on ASUS-X73S on 06-09-2013 16:37:31
Running from C:\Users\********\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Logitech, Inc.) C:\Program Files\Logitech\SolarApp\L4301_Solar.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(hMailServer) C:\Program Files (x86)\hMailServer\Bin\hMailServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\xampp\mysql\bin\mysqld.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Microsoft Corporation) C:\Windows\System32\tcpsvcs.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Windows\Speech\Common\sapisvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2013-05-22] (Realtek Semiconductor)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKCU\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKCU\...\Policies\Explorer: [NoDriveAutorun] 0
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\PROGRAM FILES (X86)\KEEPASS PASSWORD SAFE 2\KeePass.exe [1937920 2013-02-03] (Dominik Reichl)
HKU\Administrator\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKU\Administrator\...\Policies\system: [LogonHoursAction] 2
HKU\Administrator\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Gast\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKU\Gast\...\Policies\system: [LogonHoursAction] 2
HKU\Gast\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lea\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKU\Lea\...\Policies\system: [LogonHoursAction] 2
HKU\Lea\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [245872 2013-04-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-04-08] (NVIDIA Corporation)
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VCDDaemon.lnk
ShortcutTarget: VCDDaemon.lnk -> C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {5F519B46-96EF-499F-BF24-C9E1548FA56B} hxxp://sonycam/program/SonySncDf70View.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.210 88.84.16.108
Tcpip\..\Interfaces\{52ACCD0C-CD6E-4B80-B520-286DEEC015E3}: [NameServer]192.168.0.220,192.168.0.210
Tcpip\..\Interfaces\{CC6F69AF-BEC2-436E-AA09-0D9DE562E21B}: [NameServer]127.0.0.1
Tcpip\..\Interfaces\{E3B07140-174D-4590-A16C-E4C23E71385D}: [NameServer]192.168.0.220,192.168.0.210
FireFox:
========
FF ProfilePath: C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default
FF DefaultSearchEngine: DuckDuckGo
FF SelectedSearchEngine: DuckDuckGo
FF Homepage: google.ch
FF NetworkProxy: "backup.ftp", "5.9.203.92"
FF NetworkProxy: "backup.ftp_port", 3128
FF NetworkProxy: "backup.socks", "5.9.203.92"
FF NetworkProxy: "backup.socks_port", 3128
FF NetworkProxy: "backup.ssl", "5.9.203.92"
FF NetworkProxy: "backup.ssl_port", 3128
FF NetworkProxy: "ftp", "91.228.53.28"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "91.228.53.28"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "91.228.53.28"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "91.228.53.28"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0-git-20121231-0404 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @greentube.com/GreenWebPlayer - C:\Games\GreenWebPlayer\npgreenwebplayer.dll (Greentube Internet Entertainment Solutions GmbH)
FF Plugin HKCU: @stonetrip.com/ShiVaWebPlayer,version=1.8.0.0 - C:\Users\********\AppData\Roaming\..\LocalLow\StoneTrip\Web Player\npShiVa3D.dll (StoneTrip)
FF SearchPlugin: C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\searchplugins\anderes-wortde.xml
FF SearchPlugin: C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DoNotTrackMe - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\donottrackplus@abine.com
FF Extension: HTTPS-Everywhere - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\https-everywhere@eff.org
FF Extension: MaskMe - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\idme@abine.com
FF Extension: iMacros for Firefox - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}
FF Extension: WOT - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: Flash and Video Download - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
FF Extension: adblockpopups - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: admin - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\admin@proxy-listen.de.xpi
FF Extension: elemhidehelper - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: extension - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\extension@preispilot.com.xpi
FF Extension: fox - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\fox@replace.fx.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] C:\Program Files (x86)\Steganos Password Manager 2012\spmplugin3
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKCU\...\Firefox\Extensions: [extension@preispilot.com] C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\extensions\extension@preispilot.com
==================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-07-11] (SUPERAntiSpyware.com)
R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22016 2012-08-18] (Apache Software Foundation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
S3 DCMessages; C:\Windows\SysWOW64\DCMessages.exe [99720 2009-11-24] (Global Graphics Software Ltd)
S2 FileZilla Server; c:\xampp\filezillaftp\filezillaserver.exe [632320 2012-05-11] (FileZilla Project)
R2 hMailServer; C:\Program Files (x86)\hMailServer\Bin\hMailServer.exe [5395968 2010-06-07] (hMailServer)
R2 L4301_Solar; C:\Program Files\Logitech\SolarApp\L4301_Solar.exe [403536 2010-10-26] (Logitech, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22072 2012-09-12] (Microsoft Corporation)
R2 mysql; C:\xampp\mysql\bin\mysqld.exe [8186368 2012-07-20] ()
S3 PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
S3 PortReporter; C:\Program Files (x86)\PortReporter\portreporter.exe [90183 2004-03-30] ()
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1225312 2012-11-26] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659040 2012-11-26] (Secunia)
S3 SPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation)
==================== Drivers (Whitelisted) ====================
S1 acedrv05; C:\Windows\system32\drivers\acedrv05.sys [136192 2011-09-27] ()
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [39248 2013-03-15] (Paragon Software Group)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [228768 2012-08-30] (Microsoft Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S2 ASInsHelp; \??\C:\Windows\SysWow64\drivers\AsInsHelp64.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U3 DfSdkS;
S3 getbus; \??\C:\Users\********\AppData\Local\Temp\getbus.sys [x]
S3 meddmrr; system32\DRIVERS\meddmrr.sys [x]
S3 MEMSWEEP2; No ImagePath
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-06 13:01 - 2013-09-06 16:36 - 00001455 _____ C:\Users\********\Desktop\JRT.txt
2013-09-06 12:51 - 2013-09-06 12:51 - 01028823 _____ (Thisisu) C:\Users\********\Desktop\JRT.exe
2013-09-06 12:40 - 2013-09-06 12:41 - 00000000 ____D C:\AdwCleaner
2013-09-06 12:39 - 2013-09-06 12:40 - 01037222 _____ C:\Users\********\adwcleaner.exe
2013-09-06 12:38 - 2013-09-06 12:38 - 01037222 _____ C:\Users\********\Downloads\adwcleaner.exe.part
2013-09-05 20:11 - 2013-09-05 20:11 - 00000000 ____D C:\Windows\system32\MRT
2013-09-05 18:30 - 2013-09-05 18:30 - 00056661 _____ C:\Users\********\Downloads\Addition.txt
2013-09-05 18:29 - 2013-09-05 18:29 - 00000000 ____D C:\FRST
2013-09-05 18:28 - 2013-09-05 18:29 - 01947160 _____ (Farbar) C:\Users\********\Downloads\FRST64.exe
2013-09-02 18:13 - 2013-09-02 18:15 - 05828350 _____ C:\Users\********\Downloads\Elektronik_204109610718.pptx
2013-09-02 17:58 - 2013-09-02 17:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Sublime Text 2
2013-09-02 17:38 - 2013-09-02 17:42 - 23003252 _____ C:\Users\Administrator\Downloads\vlc-2.0.8-win32.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Administrator\Downloads\Shockwave_Installer_Slim.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 01069032 _____ (Solid State Networks) C:\Users\Administrator\Downloads\install_flashplayer11x32_mssd_aaa_aih.exe
2013-09-02 17:22 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-09-02 17:22 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-02 17:22 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-09-02 17:22 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-09-02 17:21 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-09-02 17:21 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-09-02 17:21 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-09-02 17:18 - 2013-09-02 17:18 - 00000000 ____D C:\Program Files (x86)\Canon
2013-09-02 17:06 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\Windows\system32\CNMLMA7.DLL
2013-09-02 15:41 - 2013-09-02 17:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-02 12:27 - 2013-09-02 12:27 - 00000000 ____D C:\Users\Administrator\Desktop\Freigabeordner - Büro-PC
2013-09-02 12:25 - 2013-09-06 16:26 - 00000560 _____ C:\Windows\setupact.log
2013-09-02 12:25 - 2013-09-06 12:43 - 00051248 _____ C:\Windows\PFRO.log
2013-09-02 12:25 - 2013-09-06 06:38 - 00556480 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-02 12:25 - 2013-09-02 12:25 - 00000000 _____ C:\Windows\setuperr.log
2013-09-01 20:02 - 2013-09-06 13:21 - 01607269 _____ C:\Windows\WindowsUpdate.log
2013-09-01 18:36 - 2009-09-10 09:00 - 00245760 _____ (CANON INC.) C:\Windows\system32\CNMIUA7.DLL
2013-09-01 18:35 - 2013-09-01 18:35 - 00000000 ___HD C:\Program Files\CanonBJ
2013-09-01 17:58 - 2013-09-01 17:58 - 00000000 ____D C:\Users\********\Downloads\CANON_MX870
2013-08-16 19:09 - 2013-08-16 19:16 - 820998144 _____ C:\Users\********\Desktop\OfficeProfessionalPlus_x64_de-de.img
2013-08-16 19:08 - 2013-08-16 19:16 - 00000000 ____D C:\Users\********\AppData\Roaming\Download Manager
2013-08-15 19:21 - 2013-08-16 06:35 - 00000000 ____D C:\Users\********\Downloads\die_drei_fragezeichen
2013-08-15 16:10 - 2013-08-15 16:10 - 08435712 _____ C:\Users\********\Downloads\archpr454_setup_en.msi und wofür. A.
2013-08-15 12:08 - 2013-09-01 19:51 - 00176776 _____ C:\Users\********\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-15 06:44 - 2013-08-15 06:44 - 00000941 _____ C:\Users\********\Desktop\FMS.lnk
2013-08-15 06:44 - 2013-08-15 06:44 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flug-Model-Simulator
2013-08-15 06:37 - 2013-08-15 06:44 - 00000000 ____D C:\Program Files (x86)\FMS
2013-08-15 06:35 - 2013-08-15 06:35 - 00000000 ____D C:\Users\********\Downloads\sim_easyglider_e
2013-08-14 12:29 - 2013-08-14 12:29 - 00000000 ____D C:\Program Files (x86)\logisch6
2013-08-12 16:00 - 2013-08-12 16:00 - 00000000 ____D C:\Users\********\Downloads\sendmail
2013-08-12 15:57 - 2013-08-12 15:57 - 00011940 _____ C:\Users\********\Downloads\phpmailscript_v4.zip
2013-08-09 17:31 - 2013-08-14 15:42 - 00013257 _____ C:\Users\********\Downloads\diewelt.sublime-workspace
2013-08-09 12:22 - 2013-08-09 12:22 - 00000000 ____D C:\Users\********\Downloads\gebaeude
2013-08-09 12:18 - 2013-08-09 12:22 - 10698799 _____ C:\Users\********\Downloads\gebaeude.7z
2013-08-09 08:19 - 2013-08-09 08:19 - 00000000 ____D C:\Users\********\Downloads\MapAmpeln
2013-08-09 08:13 - 2013-08-09 08:13 - 00670909 _____ C:\Users\********\Downloads\Ampel_Kit_Mapper.zip
2013-08-09 08:12 - 2013-08-09 08:12 - 00080835 _____ C:\Users\********\Downloads\MapAmpeln.zip
2013-08-08 11:52 - 2013-08-08 11:54 - 00000000 ____D C:\Users\********\Downloads\Baldos_Map
2013-08-08 11:11 - 2013-08-08 11:11 - 00000000 ____D C:\Users\********\Downloads\STRASSEN_BAUKASTEN_1
2013-08-08 11:08 - 2013-08-08 11:08 - 00000000 ____D C:\Users\********\Downloads\Schilderset
2013-08-07 18:48 - 2013-08-07 18:48 - 00000000 ____D C:\Users\********\Desktop\.mayaSwatches
==================== One Month Modified Files and Folders =======
2013-09-06 16:36 - 2013-09-06 13:01 - 00001455 _____ C:\Users\********\Desktop\JRT.txt
2013-09-06 16:33 - 2013-09-01 20:02 - 01607269 _____ C:\Windows\WindowsUpdate.log
2013-09-06 16:29 - 2013-06-12 06:37 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-06 16:28 - 2012-03-29 12:17 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-06 16:26 - 2013-09-02 12:25 - 00000560 _____ C:\Windows\setupact.log
2013-09-06 16:26 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-06 13:08 - 2012-09-14 18:23 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-06 12:53 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-06 12:53 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-06 12:51 - 2013-09-06 12:51 - 01028823 _____ (Thisisu) C:\Users\********\Desktop\JRT.exe
2013-09-06 12:43 - 2013-09-02 12:25 - 00051248 _____ C:\Windows\PFRO.log
2013-09-06 12:41 - 2013-09-06 12:40 - 00000000 ____D C:\AdwCleaner
2013-09-06 12:40 - 2013-09-06 12:39 - 01037222 _____ C:\Users\********\adwcleaner.exe
2013-09-06 12:40 - 2012-12-12 18:46 - 00260608 ___SH C:\Users\********\Thumbs.db
2013-09-06 12:40 - 2011-08-07 11:00 - 00000000 ____D C:\Users\********
2013-09-06 12:38 - 2013-09-06 12:38 - 01037222 _____ C:\Users\********\Downloads\adwcleaner.exe.part
2013-09-06 12:30 - 2013-02-25 20:41 - 00000000 ____D C:\Users\********\Desktop\Thunderbird
2013-09-06 06:41 - 2011-06-22 12:40 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-09-06 06:41 - 2011-06-22 12:40 - 00000000 ____D C:\Windows\system32\NV
2013-09-06 06:41 - 2011-06-22 12:39 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-06 06:38 - 2013-09-02 12:25 - 00556480 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-06 06:36 - 2009-07-14 09:45 - 00000000 ___HD C:\Program Files\Windows Journal
2013-09-05 20:11 - 2013-09-05 20:11 - 00000000 ____D C:\Windows\system32\MRT
2013-09-05 20:08 - 2011-02-19 06:24 - 00723122 _____ C:\Windows\system32\perfh007.dat
2013-09-05 20:08 - 2011-02-19 06:24 - 00156670 _____ C:\Windows\system32\perfc007.dat
2013-09-05 20:08 - 2009-07-14 07:13 - 01694424 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-05 20:05 - 2013-02-18 18:53 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-09-05 20:05 - 2013-02-18 18:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-09-05 18:30 - 2013-09-05 18:30 - 00056661 _____ C:\Users\********\Downloads\Addition.txt
2013-09-05 18:29 - 2013-09-05 18:29 - 00000000 ____D C:\FRST
2013-09-05 18:29 - 2013-09-05 18:28 - 01947160 _____ (Farbar) C:\Users\********\Downloads\FRST64.exe
2013-09-05 17:10 - 2013-06-08 09:10 - 00000000 ____D C:\Users\********\Downloads\badragaz
2013-09-04 17:32 - 2013-06-12 06:37 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-04 13:40 - 2013-09-04 13:40 - 00118300 _____ (MATCODE Software, www.matcode.com) C:\Users\********\Downloads\remshutdn.exe
2013-09-04 06:30 - 2011-08-08 17:05 - 00000000 ____D C:\Users\********\AppData\Local\Paint.NET
2013-09-02 18:28 - 2012-03-29 12:17 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-02 18:28 - 2012-03-29 12:17 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-02 18:28 - 2011-08-08 15:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-02 18:15 - 2013-09-02 18:13 - 05828350 _____ C:\Users\********\Downloads\Elektronik_204109610718.pptx
2013-09-02 17:58 - 2013-09-02 17:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Sublime Text 2
2013-09-02 17:58 - 2013-06-24 12:40 - 00000000 ____D C:\Program Files (x86)\Sublime Text 2
2013-09-02 17:42 - 2013-09-02 17:38 - 23003252 _____ C:\Users\Administrator\Downloads\vlc-2.0.8-win32.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Administrator\Downloads\Shockwave_Installer_Slim.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 01069032 _____ (Solid State Networks) C:\Users\Administrator\Downloads\install_flashplayer11x32_mssd_aaa_aih.exe
2013-09-02 17:18 - 2013-09-02 17:18 - 00000000 ____D C:\Program Files (x86)\Canon
2013-09-02 17:05 - 2013-09-02 15:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-02 17:05 - 2012-05-06 09:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-02 17:04 - 2013-04-25 18:56 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-09-02 16:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-02 12:27 - 2013-09-02 12:27 - 00000000 ____D C:\Users\Administrator\Desktop\Freigabeordner - Büro-PC
2013-09-02 12:26 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-02 12:25 - 2013-09-02 12:25 - 00000000 _____ C:\Windows\setuperr.log
2013-09-02 12:25 - 2013-05-16 06:38 - 00000000 ____D C:\Program Files (x86)\OXXOGames
2013-09-01 20:05 - 2011-09-25 08:45 - 00000000 ____D C:\Users\********\AppData\Roaming\Notepad++
2013-09-01 20:02 - 2013-04-28 08:28 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-09-01 20:01 - 2011-08-07 11:35 - 00000000 ____D C:\Users\********\AppData\Local\Google
2013-09-01 20:01 - 2011-04-13 04:33 - 00000000 ___HD C:\Program Files (x86)\Google
2013-09-01 19:59 - 2011-08-07 13:03 - 00000000 ____D C:\Users\********\AppData\Roaming\Mozilla
2013-09-01 19:56 - 2013-05-05 18:52 - 00000000 ____D C:\Program Files (x86)\DVDStyler
2013-09-01 19:56 - 2011-08-07 11:00 - 00000000 ___HD C:\ASUS.DAT
2013-09-01 19:53 - 2012-01-05 23:07 - 00000000 ___HD C:\Program Files (x86)\Abloadtool
2013-09-01 19:52 - 2013-04-26 07:11 - 00000000 ____D C:\Program Files (x86)\AF Signal Generator
2013-09-01 19:51 - 2013-08-15 12:08 - 00176776 _____ C:\Users\********\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-01 19:39 - 2013-06-27 19:42 - 00176776 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-01 18:56 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-01 18:35 - 2013-09-01 18:35 - 00000000 ___HD C:\Program Files\CanonBJ
2013-09-01 18:21 - 2011-06-22 12:42 - 00003456 _____ C:\Windows\system32\AutoRunFilter.ini
2013-09-01 17:58 - 2013-09-01 17:58 - 00000000 ____D C:\Users\********\Downloads\CANON_MX870
2013-09-01 17:23 - 2011-08-18 16:57 - 00007663 _____ C:\Users\********\AppData\Local\Resmon.ResmonCfg
2013-08-30 09:48 - 2013-06-12 06:37 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-06-12 06:37 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 09:47 - 2013-06-12 06:37 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-17 07:08 - 2012-06-02 18:50 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-17 07:08 - 2011-04-13 04:25 - 00000000 ___HD C:\Program Files (x86)\Microsoft Office
2013-08-17 07:08 - 2009-07-14 09:45 - 00000000 ____D C:\Windows\ShellNew
2013-08-17 07:08 - 2009-07-14 05:20 - 00000000 ___HD C:\Program Files\Common Files\Microsoft Shared
2013-08-16 19:16 - 2013-08-16 19:09 - 820998144 _____ C:\Users\********\Desktop\OfficeProfessionalPlus_x64_de-de.img
2013-08-16 19:16 - 2013-08-16 19:08 - 00000000 ____D C:\Users\********\AppData\Roaming\Download Manager
2013-08-16 17:57 - 2012-10-01 07:40 - 00000000 ____D C:\Users\********\AppData\Roaming\Skype
2013-08-16 17:34 - 2013-05-19 18:09 - 00022528 _____ C:\Users\********\AppData\Local\WebpageIcons.db
2013-08-16 06:35 - 2013-08-15 19:21 - 00000000 ____D C:\Users\********\Downloads\die_drei_fragezeichen
2013-08-15 19:30 - 2011-10-09 14:44 - 00000000 ____D C:\Users\********\AppData\Local\Windows Live
2013-08-15 16:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources
2013-08-15 16:10 - 2013-08-15 16:10 - 08435712 _____ C:\Users\********\Downloads\archpr454_setup_en.msi
2013-08-15 06:48 - 2013-05-04 08:06 - 00000000 ____D C:\Users\********\AppData\Roaming\Media Player Classic
2013-08-15 06:48 - 2009-07-29 08:03 - 00000000 ____D C:\Windows\Panther
2013-08-15 06:44 - 2013-08-15 06:44 - 00000941 _____ C:\Users\********\Desktop\FMS.lnk
2013-08-15 06:44 - 2013-08-15 06:44 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flug-Model-Simulator
2013-08-15 06:44 - 2013-08-15 06:37 - 00000000 ____D C:\Program Files (x86)\FMS
2013-08-15 06:35 - 2013-08-15 06:35 - 00000000 ____D C:\Users\********\Downloads\sim_easyglider_e
2013-08-14 15:42 - 2013-08-09 17:31 - 00013257 _____ C:\Users\********\Downloads\diewelt.sublime-workspace
2013-08-14 12:29 - 2013-08-14 12:29 - 00000000 ____D C:\Program Files (x86)\logisch6
2013-08-12 16:00 - 2013-08-12 16:00 - 00000000 ____D C:\Users\********\Downloads\sendmail
2013-08-12 15:57 - 2013-08-12 15:57 - 00011940 _____ C:\Users\********\Downloads\phpmailscript_v4.zip
2013-08-09 17:58 - 2012-08-21 12:31 - 00000000 ____D C:\Users\********\.gimp-2.8
2013-08-09 17:57 - 2013-08-06 18:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-09 12:22 - 2013-08-09 12:22 - 00000000 ____D C:\Users\********\Downloads\gebaeude
2013-08-09 12:22 - 2013-08-09 12:18 - 10698799 _____ C:\Users\********\Downloads\gebaeude.7z
2013-08-09 08:19 - 2013-08-09 08:19 - 00000000 ____D C:\Users\********\Downloads\MapAmpeln
2013-08-09 08:13 - 2013-08-09 08:13 - 00670909 _____ C:\Users\********\Downloads\Ampel_Kit_Mapper.zip
2013-08-09 08:12 - 2013-08-09 08:12 - 00080835 _____ C:\Users\********\Downloads\MapAmpeln.zip
2013-08-08 11:54 - 2013-08-08 11:52 - 00000000 ____D C:\Users\********\Downloads\Baldos_Map
2013-08-08 11:11 - 2013-08-08 11:11 - 00000000 ____D C:\Users\********\Downloads\STRASSEN_BAUKASTEN_1
2013-08-08 11:08 - 2013-08-08 11:08 - 00000000 ____D C:\Users\********\Downloads\Schilderset
2013-08-08 09:42 - 2013-08-05 18:08 - 00000000 ____D C:\Users\********\Downloads\map
2013-08-07 18:48 - 2013-08-07 18:48 - 00000000 ____D C:\Users\********\Desktop\.mayaSwatches
2013-08-07 04:22 - 2011-09-18 09:01 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
Files to move or delete:
====================
C:\Users\********\adwcleaner.exe
C:\Users\********\AppData\Local\Temp\gert0.exe
C:\Users\********\AppData\Local\Temp\Quarantine.exe
C:\Users\********\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit ASA
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-13 18:10
==================== End Of Log ============================
--- --- --- |
|
07.09.2013, 07:18
| #6 |
| /// the machine /// TB-Ausbilder | Disabled.FolderOptionESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> Disabled.FolderOption |
|
| Themen zu Disabled.FolderOption |
| advanced, appdata, automatisch, browser, code, cookies, detected, einfach, explorer, firefox, home, log, microsoft, mozilla, quick, roaming, scan, schlimmes, service, software, superantispyware, surfen, system, trojaner, version |
Linear-Darstellung
