Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 14.10.2013, 01:54   #1
Sportler
 
Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



Hallo!

Ich habe seit einigen Tagen das Problem, dass Google Suchergebnisse in Chrome meist (nicht immer) in einem neuen Tab geöffnet wurden. Hab eine Infektion vermutet, diverse Scans und Reinigungen durchlaufen lassen. Jetzt kommt es aber immernoch vereinzelt vor, dass mal nach einem Neustart was gefunden wird (vereinzelte Reg-Einträge, meist im AdwCleaner.
Hatte zwischendurch Chrome (und anderes) mit Revo uninstaller entfernt, außerdem auch mal SpywareBlast installiert (jetzt wieder weg). Bei Neuinstallation war irgendwas versaut und Chrome vermeldete immer, "wurde nicht richtig beendet...", konnte das Problem aber durch löschen der Preferences Datei (versteckt) lösen.
Noch ein ganz wichtiger Punkt: Ich hab zwischendurch einen Ordner "Remote Programs" auf der Platte entdeckt, mit Inhalten, die ich nicht kannte. Deutsche Titel, wie von Büchern/Hörbüchern, aber mit sehr vielen unterschiedlichen Dateien darin. Gleich gelöscht und überprüft: Es gab eine aktivierte Einstellung, dass Remotezugriff auf meinen Rechner erlaubt ist! Kein Scanner hat dazu irgendwas gesagt. Bisher blieb die Option, nach abschalten, deaktiviert. Trotz Neustarts. Hoffe, das passt...
Ich poste jetzt mal die Log-Files (nur die mit Funden plus alle Suchen, die ich laut Anleitung hier machen sollte, also GMER, etc). Danach mache ich einen Neustart und lasse nochmal AdwCleaner laufen (falls er nochmal was findet).
Danke schonmal!
PS: Vermutliche Quelle(n) - JDownloader und/oder Cryptload. Obwohl von sicherer Quelle (ich glaub JD von Chip.de)...

MBAM:
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.10.12.03

Windows 8 x64 NTFS (Abgesichertenmodus/Netzwerkfähig)
Internet Explorer 10.0.9200.16688
Udo :: UDO-PC [Administrator]

12.10.2013 11:31:03
mbam-log-2013-10-12 (11-31-03).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 464693
Laufzeit: 59 Minute(n), 24 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 8
HKCR\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} (PUP.Optional.BrowseFox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{204df522-9a96-4a72-abb0-60f7a216d6d2} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{0131533C-F056-4E64-8A9D-B7C0EF342EFD} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{AB4DA692-F26B-403C-AF8F-FD87D121F8F1} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} (PUP.Optional.BrowseFox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 1
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 2O1R1G2Z1F1G1M -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage.A) -> Bösartig: (hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=C250C2143DC0FEE3&affID=125035&tsp=5028) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 3
C:\Users\Udo\AppData\Local\Temp\mt_ffx\searchgol (PUP.Optional.SearchGolTB.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Udo\AppData\Local\Temp\mt_ffx\searchgol\searchgol (PUP.Optional.SearchGolTB.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Udo\AppData\Local\Temp\mt_ffx\searchgol\searchgol\1.8.16.19 (PUP.Optional.SearchGolTB.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 4
C:\Program Files (x86)\Whilokii\WhilokiiBHO.dll (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Udo\Desktop\Udo Sicherung\Downloads\Downloads\MyPhoneExplorer_Setup_1.8.2.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Udo\Downloads\CryptLoad_1.1.8.rar (PUP.Netcat) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Udo\Downloads\CryptLoad_1.1.8\router\FRITZ!Box\nc.exe (PUP.Netcat) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         
zweiter Check nichts, dann andere Programme durchlaufen lassen, plus Neustart. Dann:
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.10.12.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16688
Udo :: UDO-PC [Administrator]

12.10.2013 17:47:53
mbam-log-2013-10-12 (17-47-53).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 41321
Laufzeit: 5 Minute(n), 8 Sekunde(n) [Abgebrochen]

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKCR\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} (PUP.Optional.BrowseFox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
Seitdem nichts mehr in MBAM. Toi Toi Toi.

Dann also zu ADWCleaner:
Code:
ATTFilter
# AdwCleaner v3.007 - Bericht erstellt am 12/10/2013 um 17:57:46
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gefunden C:\Users\Udo\Documents\PC Speed Maximizer

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16688


-\\ Google Chrome v30.0.1599.69

[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1195 octets] - [12/10/2013 17:57:46]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1255 octets] ##########
         
Ein paar Läufe ohne Funde, dann:
Code:
ATTFilter
# AdwCleaner v3.007 - Bericht erstellt am 12/10/2013 um 21:23:49
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16688


-\\ Google Chrome v30.0.1599.69

[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [974 octets] - [12/10/2013 21:23:49]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]

########## EOF - C:\AdwCleaner\AdwCleaner[R4].txt - [1272 octets] ##########
         
Während dann R5 frei ist, hat S5 wieder den Eintrag:
Code:
ATTFilter
# AdwCleaner v3.007 - Bericht erstellt am 13/10/2013 um 14:34:05
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Google Chrome v30.0.1599.69

[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1533 octets] - [13/10/2013 14:33:32]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]
AdwCleaner[S5].txt - [1454 octets] - [13/10/2013 14:34:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1514 octets] ##########
         
R6:
Code:
ATTFilter
# AdwCleaner v3.007 - Bericht erstellt am 13/10/2013 um 14:33:32
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Google Chrome v30.0.1599.69

[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1094 octets] - [13/10/2013 14:33:32]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]

########## EOF - C:\AdwCleaner\AdwCleaner[R6].txt - [1453 octets] ##########
         
Ein Eintrag, dann aber S6 mit 3:
Code:
ATTFilter
# AdwCleaner v3.007 - Bericht erstellt am 14/10/2013 um 01:27:02
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Google Chrome v30.0.1599.69

[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1533 octets] - [13/10/2013 14:33:32]
AdwCleaner[R7].txt - [1890 octets] - [14/10/2013 01:26:06]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]
AdwCleaner[S5].txt - [1594 octets] - [13/10/2013 14:34:05]
AdwCleaner[S6].txt - [1799 octets] - [14/10/2013 01:27:02]

########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [1859 octets] ##########
         
Ebenso R7:
Code:
ATTFilter
# AdwCleaner v3.007 - Bericht erstellt am 14/10/2013 um 01:26:06
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Google Chrome v30.0.1599.69

[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1533 octets] - [13/10/2013 14:33:32]
AdwCleaner[R7].txt - [1379 octets] - [14/10/2013 01:26:06]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]
AdwCleaner[S5].txt - [1594 octets] - [13/10/2013 14:34:05]

########## EOF - C:\AdwCleaner\AdwCleaner[R7].txt - [1798 octets] ##########
         
Ok, jetzt zu den weiteren:
Defogger:
Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 02:10 on 14/10/2013 (Udo)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
Ist das alles? Hab ich was falsch gemacht?

FRST:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Udo (administrator) on UDO-PC on 14-10-2013 02:11:22
Running from C:\Users\Udo\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE
(CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Users\Udo\Downloads\Defogger.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] ()
HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.)
HKCU\...\Policies\Explorer: [RestrictRun] 0
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = 
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (      "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0
CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:39 - 2013-10-14 01:39 - 00000000 _____ C:\Users\Udo\defogger_reenable
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:19 - 2013-10-14 01:19 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 01:19 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-10-14 01:19 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-10-14 01:19 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-10-14 01:19 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-10-14 01:18 - 2013-10-14 01:29 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 01:18 - 2013-10-14 01:24 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:18 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-10-14 01:18 - 2013-08-30 09:48 - 00204880 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-10-14 01:18 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-10-14 01:18 - 2013-08-30 09:48 - 00065336 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-14 01:18 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-10-14 01:17 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:16 - 2013-10-14 01:17 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:33 - 2013-10-13 14:33 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox
2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:49 - 2013-10-14 01:54 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-13 13:49 - 2013-10-14 01:28 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-14 01:27 - 00000000 ____D C:\AdwCleaner
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:34 - 2013-10-07 19:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-14 22:07 - 2013-09-15 19:30 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2
2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Udo\Downloads\Trine2CompleteStory_Win_1378323763

==================== One Month Modified Files and Folders =======

2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 02:01 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files
2013-10-14 02:00 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-10-14 01:54 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-14 01:48 - 2012-10-18 07:15 - 01917337 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-14 01:39 - 2013-10-14 01:39 - 00000000 _____ C:\Users\Udo\defogger_reenable
2013-10-14 01:39 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job
2013-10-14 01:31 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF
2013-10-14 01:29 - 2013-10-14 01:18 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 01:28 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-14 01:28 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-14 01:27 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner
2013-10-14 01:27 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-14 01:24 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:24 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db
2013-10-14 01:19 - 2013-10-14 01:19 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 01:17 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:17 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001
2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job
2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA
2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox
2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini
2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:47 - 2012-09-13 20:32 - 00936142 _____ C:\WINDOWS\PFRO.log
2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:33 - 2013-10-13 14:33 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 12:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log
2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:33 - 2013-10-07 19:34 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npDeployJava1.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG
2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log
2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC
2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-22 12:07 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag
2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo
2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations
2013-09-15 19:30 - 2013-09-14 22:07 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2
2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Udo\Downloads\Trine2CompleteStory_Win_1378323763

Some content of TEMP:
====================
C:\Users\Udo\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 03:01

==================== End Of Log ============================
         
--- --- ---

Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-14 02:12:01
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.8.0.1430)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC  (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)

==================== Restore Points  =========================

25-09-2013 19:10:14 Windows Update
03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup

==================== Hosts content: ==========================

2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {925293A7-DDD7-44BB-93DB-C7943E4D4897} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-14 01:24 - 2013-10-13 16:24 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101300\algo.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (10/14/2013 01:31:38 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:31:38 AM) (Source: Location Task Manager) (User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:31:35 AM) (Source: Location Task Manager) (User: )
Description: (GetHomepage()): Vorgabendatei für Mozilla Firefox konnte nicht geöffnet werden. Überprüfen Sie die Installation.

Error: (10/14/2013 01:31:31 AM) (Source: Location Task Manager) (User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 00:16:51 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/13/2013 09:05:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.

Error: (10/13/2013 09:05:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.


System errors:
=============
Error: (10/14/2013 01:48:04 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/14/2013 01:28:13 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/14/2013 01:28:00 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (10/14/2013 01:27:38 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0

Error: (10/14/2013 01:27:13 AM) (Source: DCOM) (User: UDO-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (10/13/2013 02:48:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/13/2013 02:47:54 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (10/13/2013 02:47:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (10/13/2013 02:47:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (10/13/2013 02:44:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.


Microsoft Office Sessions:
=========================
Error: (10/14/2013 01:31:38 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:31:38 AM) (Source: Location Task Manager)(User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:31:35 AM) (Source: Location Task Manager)(User: )
Description: (GetHomepage()): Vorgabendatei für Mozilla Firefox konnte nicht geöffnet werden. Überprüfen Sie die Installation.

Error: (10/14/2013 01:31:31 AM) (Source: Location Task Manager)(User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 00:16:51 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/13/2013 09:05:38 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe

Error: (10/13/2013 09:05:38 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe


CodeIntegrity Errors:
===================================
  Date: 2013-10-13 14:25:33.357
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.504
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.480
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Percentage of memory in use: 26%
Total physical RAM: 7950.22 MB
Available physical RAM: 5849.44 MB
Total Pagefile: 9678.22 MB
Available Pagefile: 7499.21 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:705.58 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)

Partition: GPT Partition Type
==================== End Of Log ============================
         
Falls hilfreich Hijackthis:
Code:
ATTFilter
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:49:52, on 12.10.2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16688)
Boot mode: Normal

Running processes:
C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\WINDOWS\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE
O4 - HKLM\..\Run: [UpdatePPShortCut] "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" update "Software\CyberLink\PowerProducer\5.0"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Unified Remote v2] C:\Program Files (x86)\Unified Remote\RemoteServer.exe
O4 - HKCU\..\Run: [Spybot-S&D Cleaning] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
O4 - Startup: Logitech . Produktregistrierung.lnk = C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe
O4 - Startup: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Auswahl speichern - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Bild ausschneiden - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Diese Seite ausschneiden - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Neue Notiz - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html
O8 - Extra context menu item: URL notieren - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {4FF78044-96B4-4312-A5B7-FDA3CB328095} (ExentInf1 Class) - 
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @oem14.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Radio Control Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: TrueSuiteService (FPLService) - AuthenTec, Inc - C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
O23 - Service: Google Update-Dienst (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem25.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
O23 - Service: Lenovo AVFramework Camera Privacy Controller (LENOVO.CAMMUTE) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
O23 - Service: Lenovo AVFramework Microphone Volume Controller and Dolby Interface (LENOVO.TPKNRSVC) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
O23 - Service: Lenovo AVFramework Control Center and ThinkVantage Virtual Camera Controller (LENOVO.TVTVCAM) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: LnvMHService (LnvHotSpotSvc) - Lenovo - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
O23 - Service: Location Task Manager (LocationTaskManager) - Unknown owner - C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NitroPDFDriverCreatorReadSpool2 (NitroDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: TrueAPI Service component (TrueService) - AuthenTec, Inc. - C:\Program Files\Common Files\AuthenTec\TrueService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Util Whilokii - Unknown owner - C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Cisco AnyConnect Secure Mobility Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14543 bytes
         
Laut einer Online-Auswertung gab es kritische Punkte, dies sind aber alles System-Files, die laut meiner Recherche seit Win7 nicht mehr im System32 sind, daher die Meldung "File missing".

Ich habe, muss ich bekennen, noch Combifix verwendet... Wo finde ich dessen LogFiles, falls vorhanden/nötig?
Eset Onlinescanner gab keine Funde (heute - davor keine Suche durchgeführt).

Habe also jetzt MBAM installiert (scant ja nur nach Aufforderung) und Avast. Irgendwelche Tipps diesbezüglich? Lieber SpyBot oder dergleichen für aktiven Schutz?

Edit: ADWCleaner hat nichts mehr gefunden, nach Neustart. Will nur jedes Mal die Chrome Preferences löschen. Ist das normal? Browser läuft ohne Probleme. Ich mache mal morgen weitere Tests und warte ansonsten auf Tipps.

Geändert von Sportler (14.10.2013 um 02:10 Uhr)

Alt 14.10.2013, 07:31   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



hi,


Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________

__________________

Alt 14.10.2013, 09:58   #3
Sportler
 
Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



Guten Morgen!
JRT hatte ich ganz vergessen. Hier das aktuellste Log von heute:
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.4 (10.06.2013:1)
OS: Windows 8 x64
Ran by Udo on 14.10.2013 at 10:44:25,13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.10.2013 at 10:49:44,26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Das von davor hatte auch keine Funde. Bin nicht 100%ig sicher, wie es bei den vorherigen war. Hat das auch eine Liste, oder überschreibt es alte Logs?

FRST:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Udo (administrator) on UDO-PC on 14-10-2013 10:52:36
Running from C:\Users\Udo\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] ()
HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.)
HKCU\...\Policies\Explorer: [RestrictRun] 0
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = 
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (      "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0
CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]

==================== Drivers (Whitelisted) ====================

S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-14 02:12 - 00031119 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:18 - 2013-10-14 01:24 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-14 01:17 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:16 - 2013-10-14 01:17 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox
2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:49 - 2013-10-14 04:54 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-13 13:49 - 2013-10-14 03:05 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-14 03:08 - 00000000 ____D C:\AdwCleaner
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:34 - 2013-10-07 19:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-14 22:07 - 2013-09-15 19:30 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2
2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Udo\Downloads\Trine2CompleteStory_Win_1378323763

==================== One Month Modified Files and Folders =======

2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 10:42 - 2012-10-18 07:15 - 01974912 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-14 10:33 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-10-14 10:31 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db
2013-10-14 04:54 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-14 04:30 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job
2013-10-14 03:36 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files
2013-10-14 03:08 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner
2013-10-14 03:07 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:06 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo
2013-10-14 03:05 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 03:03 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-14 02:12 - 00031119 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:27 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-14 01:24 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:17 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:17 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001
2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job
2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA
2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox
2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini
2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:47 - 2012-09-13 20:32 - 00936142 _____ C:\WINDOWS\PFRO.log
2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 12:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log
2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:33 - 2013-10-07 19:34 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npDeployJava1.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG
2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log
2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC
2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-22 12:07 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag
2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo
2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations
2013-09-15 19:30 - 2013-09-14 22:07 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2
2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Udo\Downloads\Trine2CompleteStory_Win_1378323763

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 03:01

==================== End Of Log ============================
         
--- --- ---


Addition (beim zweiten Durchlauf, hatte den Haken vergessen):
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-14 10:56:40
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.8.0.1430)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC  (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)

==================== Restore Points  =========================

25-09-2013 19:10:14 Windows Update
03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup

==================== Hosts content: ==========================

2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-06-01 12:20 - 2013-06-01 12:20 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (10/14/2013 10:55:49 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FRST64.exe, Version: 3.3.8.1, Zeitstempel: 0x4f25bafd
Name des fehlerhaften Moduls: FRST64.exe, Version: 3.3.8.1, Zeitstempel: 0x4f25bafd
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000014760
ID des fehlerhaften Prozesses: 0x1ec8
Startzeit der fehlerhaften Anwendung: 0xFRST64.exe0
Pfad der fehlerhaften Anwendung: FRST64.exe1
Pfad des fehlerhaften Moduls: FRST64.exe2
Berichtskennung: FRST64.exe3
Vollständiger Name des fehlerhaften Pakets: FRST64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FRST64.exe5


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (10/14/2013 10:55:49 AM) (Source: Application Error)(User: )
Description: FRST64.exe3.3.8.14f25bafdFRST64.exe3.3.8.14f25bafdc000000500000000000147601ec801cec8bab86df458C:\Users\Udo\Downloads\FRST64.exeC:\Users\Udo\Downloads\FRST64.exe6bd42660-34ae-11e3-bea1-3c970e41b885


CodeIntegrity Errors:
===================================
  Date: 2013-10-13 14:25:33.357
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.504
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.480
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 7950.22 MB
Available physical RAM: 5480.95 MB
Total Pagefile: 16142.22 MB
Available Pagefile: 13533.56 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:699.33 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)

Partition: GPT Partition Type
==================== End Of Log ============================
         
Danke!
__________________

Alt 14.10.2013, 19:41   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 15.10.2013, 09:31   #5
Sportler
 
Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



Eset (hatte ich schonmal laufen) hat 0 Funde.

Security Check:
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.74  
   x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
Windows Defender   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 40  
 Adobe Flash Player 	11.6.602.180  
 Google Chrome 30.0.1599.69  
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastUI.exe  
 AVAST Software Avast AvastSvc.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         
FRST:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Udo (administrator) on UDO-PC on 15-10-2013 10:26:55
Running from C:\Users\Udo\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] ()
HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.)
HKCU\...\Policies\Explorer: [RestrictRun] 0
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (      "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0
CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-14 23:59 - 2013-10-14 23:59 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:30 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-10-14 11:29 - 2013-10-14 23:58 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 11:29 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00204880 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00065336 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-10-14 11:29 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-14 10:56 - 00021702 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:18 - 2013-10-14 23:58 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-14 01:17 - 2013-10-14 11:28 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:16 - 2013-10-14 11:28 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox
2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:49 - 2013-10-15 09:54 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-13 13:49 - 2013-10-14 11:27 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-14 03:08 - 00000000 ____D C:\AdwCleaner
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:34 - 2013-10-07 19:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk

==================== One Month Modified Files and Folders =======

2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-15 10:17 - 2012-10-18 07:15 - 01217620 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-15 10:02 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-10-15 09:54 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-15 09:30 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job
2013-10-15 04:28 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-14 23:59 - 2013-10-14 23:59 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-14 23:58 - 2013-10-14 11:29 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 23:58 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 11:58 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:30 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF
2013-10-14 11:28 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 11:28 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 11:27 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-14 11:27 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-14 11:26 - 2012-09-13 20:32 - 00936888 _____ C:\WINDOWS\PFRO.log
2013-10-14 11:26 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-10-14 10:56 - 2013-10-14 02:12 - 00021702 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 10:55 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 10:31 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db
2013-10-14 03:08 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:06 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001
2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job
2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA
2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox
2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini
2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log
2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:33 - 2013-10-07 19:34 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npDeployJava1.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG
2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log
2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC
2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag
2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo
2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations
2013-09-15 19:30 - 2013-09-14 22:07 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 03:01

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---


Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-15 10:27:43
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.8.0.1430)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC  (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)

==================== Restore Points  =========================

25-09-2013 19:10:14 Windows Update
03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup

==================== Hosts content: ==========================

2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {08D4F941-144B-4F09-8D74-5978D88B8D26} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-10-15 10:17 - 2013-10-15 08:07 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101500\algo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (10/14/2013 11:59:40 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.

Error: (10/14/2013 11:59:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.

Error: (10/14/2013 11:57:46 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:57:42 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:30:42 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:30:42 AM) (Source: Location Task Manager) (User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:30:32 AM) (Source: Location Task Manager) (User: )
Description: (GetHomepage()): Vorgabendatei für Mozilla Firefox konnte nicht geöffnet werden. Überprüfen Sie die Installation.


System errors:
=============
Error: (10/15/2013 02:15:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/15/2013 01:17:09 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/14/2013 11:27:23 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/14/2013 11:27:10 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar


Microsoft Office Sessions:
=========================
Error: (10/14/2013 11:59:40 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe

Error: (10/14/2013 11:59:38 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe

Error: (10/14/2013 11:57:46 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:57:42 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:30:42 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:30:42 AM) (Source: Location Task Manager)(User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/14/2013 11:30:32 AM) (Source: Location Task Manager)(User: )
Description: (GetHomepage()): Vorgabendatei für Mozilla Firefox konnte nicht geöffnet werden. Überprüfen Sie die Installation.


CodeIntegrity Errors:
===================================
  Date: 2013-10-13 14:25:33.357
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.504
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.480
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 7950.22 MB
Available physical RAM: 5355.99 MB
Total Pagefile: 16142.22 MB
Available Pagefile: 13321.02 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:697.79 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)

Partition: GPT Partition Type
==================== End Of Log ============================
         
Problem: Avast lässt sich nicht wirklich pausieren/beenden. Habe die Schutzfunktionen deaktiviert für Eset. Hoffe, das hat gereicht.
Browser verhält sich wieder normal. FRST findet aber noch Whilokii (und evtl. weitere?). Mist...
Dieser komische Ordner "Remote programs". Muss ich mir da Sorgen machen? Hat da jemand Zugriff gehabt, evtl. Daten ausgelesen? Remotezugriff ist jetzt abgestellt (hatte ich auch nie selbst aktiviert)...

Danke für die Hilfe!!

Aktueller ADWCleaner (S7):
Code:
ATTFilter
# AdwCleaner v3.007 - Bericht erstellt am 15/10/2013 um 10:36:00
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Google Chrome v30.0.1599.69

[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1533 octets] - [13/10/2013 14:33:32]
AdwCleaner[R7].txt - [1890 octets] - [14/10/2013 01:26:06]
AdwCleaner[R8].txt - [1655 octets] - [14/10/2013 03:07:26]
AdwCleaner[R9].txt - [2070 octets] - [15/10/2013 10:34:37]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]
AdwCleaner[S5].txt - [1594 octets] - [13/10/2013 14:34:05]
AdwCleaner[S6].txt - [1951 octets] - [14/10/2013 01:27:02]
AdwCleaner[S7].txt - [1979 octets] - [15/10/2013 10:36:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S7].txt - [2039 octets] ##########
         


Geändert von Sportler (15.10.2013 um 10:24 Uhr)

Alt 15.10.2013, 18:37   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
--> Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...

Alt 15.10.2013, 23:17   #7
Sportler
 
Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



Probleme nicht mehr. Nur die Funde im AdwCleaner (sind das überhaupt Funde?).

Security Check:
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.74  
   x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
Windows Defender   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 40  
 Adobe Flash Player 	11.6.602.180  
 Google Chrome 30.0.1599.69  
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         
Eset
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b7bef78bf500104c898fb9cde0717610
# engine=15497
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-15 10:05:14
# local_time=2013-10-16 12:05:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=774 16777213 85 91 86819 158584586 0 0
# compatibility_mode=5893 16776574 100 94 210393 9158189 0 0
# scanned=273271
# found=0
# cleaned=0
# scan_time=7359
         
FRST

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Udo (administrator) on UDO-PC on 16-10-2013 00:08:18
Running from C:\Users\Udo\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] ()
HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.)
HKCU\...\Policies\Explorer: [RestrictRun] 0
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = 
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (      "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0
CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-15 21:55 - 2013-10-15 21:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:30 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-10-14 11:29 - 2013-10-14 23:58 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 11:29 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00204880 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00065336 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-10-14 11:29 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-15 10:28 - 00029758 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:18 - 2013-10-14 23:58 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-14 01:17 - 2013-10-14 11:28 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:16 - 2013-10-14 11:28 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox
2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:49 - 2013-10-16 00:01 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-13 13:49 - 2013-10-15 12:00 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-13 13:49 - 2013-10-15 11:56 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-15 11:55 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-15 10:36 - 00000000 ____D C:\AdwCleaner
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:34 - 2013-10-07 19:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk

==================== One Month Modified Files and Folders =======

2013-10-16 00:02 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-10-16 00:01 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-15 23:45 - 2012-10-18 07:15 - 01312728 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-15 23:30 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job
2013-10-15 21:55 - 2013-10-15 21:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-15 12:00 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-15 11:56 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-15 11:55 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-15 11:53 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files
2013-10-15 11:24 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF
2013-10-15 11:20 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-15 10:36 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner
2013-10-15 10:36 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-10-15 10:28 - 2013-10-14 02:12 - 00029758 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-15 04:28 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-14 23:58 - 2013-10-14 11:29 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 23:58 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:28 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 11:28 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 11:26 - 2012-09-13 20:32 - 00936888 _____ C:\WINDOWS\PFRO.log
2013-10-14 10:55 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 10:31 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:06 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001
2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job
2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA
2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox
2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini
2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log
2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:33 - 2013-10-07 19:34 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npDeployJava1.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG
2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log
2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC
2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag
2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo
2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations

Some content of TEMP:
====================
C:\Users\Udo\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 03:01

==================== End Of Log ============================
         
--- --- ---


Addition
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-16 00:09:09
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.8.0.1430)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
ESET Online Scanner v3 (x32)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Google Update Helper (x32 Version: 1.3.21.165)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC  (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)

==================== Restore Points  =========================

25-09-2013 19:10:14 Windows Update
03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup

==================== Hosts content: ==========================

2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {08D4F941-144B-4F09-8D74-5978D88B8D26} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2013-06-01 12:20 - 2013-06-01 12:20 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-15 21:59 - 2013-10-15 19:04 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101501\algo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (10/16/2013 00:06:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.

Error: (10/15/2013 09:55:50 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.

Error: (10/15/2013 09:55:48 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.

Error: (10/15/2013 09:50:46 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:46 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml


System errors:
=============
Error: (10/15/2013 09:58:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/15/2013 11:22:19 AM) (Source: DCOM) (User: UDO-PC)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Udo-PCUdoS-1-5-21-2131803641-2614642185-218673870-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (10/15/2013 11:21:21 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/15/2013 11:20:30 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (10/15/2013 11:20:24 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎15.‎10.‎2013 um 11:17:10 unerwartet heruntergefahren.

Error: (10/15/2013 11:20:05 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0

Error: (10/15/2013 10:37:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/15/2013 10:37:10 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (10/15/2013 10:36:35 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0

Error: (10/15/2013 10:36:13 AM) (Source: DCOM) (User: UDO-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}


Microsoft Office Sessions:
=========================
Error: (10/16/2013 00:06:34 AM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (10/15/2013 09:55:50 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe

Error: (10/15/2013 09:55:48 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe

Error: (10/15/2013 09:50:46 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:46 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml


CodeIntegrity Errors:
===================================
  Date: 2013-10-13 14:25:33.357
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.504
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.480
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 7950.22 MB
Available physical RAM: 5346.74 MB
Total Pagefile: 16142.22 MB
Available Pagefile: 13310.53 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:697.3 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)

Partition: GPT Partition Type
==================== End Of Log ============================
         
Sehe ich das richtig, dass im FRST noch ein Whilokii Eintrag steht?

Alt 16.10.2013, 10:59   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



Zitat:
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]
Du meinst den:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Sollte jetzt weg sein
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.10.2013, 21:30   #9
Sportler
 
Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



Fixlog:
Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2013
Ran by Udo at 2013-10-16 22:11:07 Run:1
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]
*****************

Util Whilokii => Service deleted successfully.

==== End of Fixlog ====
         
Ich lasse gleich nochmal FRST drüber laufen und poste das am Ende. Ansonsten läuft alles rund hier. Einzig die Sorge über den Remotezugriff. Gibt es dazu Infos? Google hat nix ergeben. Kann Adware die Remote-Einstellungen ändern oder war das evtl. eine Grundeinstellung in Win8?

FRST (hier ist noch ein Eintrag Whilokii):
Code:
ATTFilter
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
         
Volles Log darunter. Hier genauso verfahren, also Fixlist erstellen? Eintrag komplett (so wie im Code oben) rein pasten, Fix drücken?

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Udo (administrator) on UDO-PC on 16-10-2013 22:13:34
Running from C:\Users\Udo\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] ()
HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.)
HKCU\...\Policies\Explorer: [RestrictRun] 0
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = 
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (      "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0
CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-16 21:29 - 2013-10-16 21:29 - 00004278 _____ C:\WINDOWS\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-16 21:29 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-16 21:29 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-16 21:29 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-16 21:29 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-16 00:30 - 2013-10-16 00:30 - 18080872 _____ (Adobe Systems Inc.) C:\Users\Udo\Downloads\AdobeAIRInstaller.exe
2013-10-15 21:55 - 2013-10-15 21:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:30 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-10-14 11:29 - 2013-10-14 23:58 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 11:29 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00204880 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00065336 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-10-14 11:29 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-16 00:09 - 00032079 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:18 - 2013-10-14 23:58 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-14 01:17 - 2013-10-14 11:28 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:16 - 2013-10-14 11:28 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox
2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:49 - 2013-10-16 22:01 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-13 13:49 - 2013-10-15 12:00 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-13 13:49 - 2013-10-15 11:56 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-15 11:55 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-15 10:36 - 00000000 ____D C:\AdwCleaner
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-16 21:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk

==================== One Month Modified Files and Folders =======

2013-10-16 22:01 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-16 22:00 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-10-16 21:40 - 2012-10-18 07:15 - 01545094 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-16 21:30 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-16 21:30 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job
2013-10-16 21:29 - 2013-10-16 21:29 - 00004278 _____ C:\WINDOWS\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-16 21:29 - 2013-06-24 20:42 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-16 00:30 - 2013-10-16 00:30 - 18080872 _____ (Adobe Systems Inc.) C:\Users\Udo\Downloads\AdobeAIRInstaller.exe
2013-10-16 00:09 - 2013-10-14 02:12 - 00032079 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-15 21:55 - 2013-10-15 21:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-15 12:00 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-15 11:56 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-15 11:55 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-15 11:53 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files
2013-10-15 11:24 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF
2013-10-15 11:20 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-15 10:36 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner
2013-10-15 10:36 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-15 04:28 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-14 23:58 - 2013-10-14 11:29 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 23:58 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:28 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 11:28 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 11:26 - 2012-09-13 20:32 - 00936888 _____ C:\WINDOWS\PFRO.log
2013-10-14 10:55 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 10:31 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:06 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001
2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job
2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA
2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox
2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini
2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC                                              ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log
2013-10-08 07:50 - 2013-10-16 21:29 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-08 07:46 - 2013-10-16 21:29 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-08 07:46 - 2013-10-16 21:29 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-08 07:46 - 2013-10-16 21:29 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG
2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log
2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC
2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag
2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo
2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations

Some content of TEMP:
====================
C:\Users\Udo\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Udo\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 03:01

==================== End Of Log ============================
         
--- --- ---


Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-16 22:14:21
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.9.0.1030)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
ESET Online Scanner v3 (x32)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Google Update Helper (x32 Version: 1.3.21.165)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC  (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)

==================== Restore Points  =========================

03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup
16-10-2013 19:28:51 Installed Java 7 Update 45

==================== Hosts content: ==========================

2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {08D4F941-144B-4F09-8D74-5978D88B8D26} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2013-06-01 12:20 - 2013-06-01 12:20 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2011-03-17 01:11 - 2011-03-17 01:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-15 21:59 - 2013-10-15 19:04 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101501\algo.dll
2013-10-15 05:57 - 2013-10-15 05:57 - 13584776 _____ () C:\Users\Udo\AppData\Local\Google\Chrome\User Data\PepperFlash\11.9.900.117\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (10/16/2013 08:49:09 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:49:09 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:54 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:54 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 03:27:37 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.

Error: (10/16/2013 00:06:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.

Error: (10/15/2013 09:55:50 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.


System errors:
=============
Error: (10/15/2013 09:58:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/15/2013 11:22:19 AM) (Source: DCOM) (User: UDO-PC)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Udo-PCUdoS-1-5-21-2131803641-2614642185-218673870-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (10/15/2013 11:21:21 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/15/2013 11:20:30 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (10/15/2013 11:20:24 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎15.‎10.‎2013 um 11:17:10 unerwartet heruntergefahren.

Error: (10/15/2013 11:20:05 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0

Error: (10/15/2013 10:37:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/15/2013 10:37:10 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (10/15/2013 10:36:35 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0

Error: (10/15/2013 10:36:13 AM) (Source: DCOM) (User: UDO-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}


Microsoft Office Sessions:
=========================
Error: (10/16/2013 08:49:09 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:49:09 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:54 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 08:48:54 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml

Error: (10/16/2013 03:27:37 AM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (10/16/2013 00:06:34 AM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (10/15/2013 09:55:50 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe


CodeIntegrity Errors:
===================================
  Date: 2013-10-13 14:25:33.357
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.504
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-07 19:32:17.480
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Percentage of memory in use: 54%
Total physical RAM: 7950.22 MB
Available physical RAM: 3634.91 MB
Total Pagefile: 16142.22 MB
Available Pagefile: 11606.11 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:699.02 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)

Partition: GPT Partition Type
==================== End Of Log ============================
         
Also, wie gesagt, Probleme gibt es keine mehr. So lange diese Einträge jetzt nur inaktive Reste sind, habe ich kein Problem damit. Danke auf jeden Fall schonmal für die Hilfe! Kann es gar nicht oft genug sagen.

Alt 17.10.2013, 11:02   #10
schrauber
/// the machine
/// TB-Ausbilder
 

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



Genau, die Zeile so noch fixen. Adware ändert nix an Remote Einstellungen.


Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 02.11.2013, 18:27   #11
Sportler
 
Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



Zitat:
Zitat von schrauber Beitrag anzeigen

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
Sorry, zu spät gesehen... Scheint alles sauber zu sein und hab seitdem keine Probleme mehr

Alt 03.11.2013, 08:01   #12
schrauber
/// the machine
/// TB-Ausbilder
 

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Standard

Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...



alles klar
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...
4d36e972-e325-11ce-bfc1-08002be10318, adblock, adware.whilokii, antivirus, antivirus se, chip.de, combofix, device driver, farbar, farbar recovery scan tool, feedback, flash player, google, hilfreich, homepage, hotspot, iexplore.exe, mozilla, myphoneexplorer, nicht möglich, plug-in, preferences, pup.netcat, pup.optional.browsefox.a, pup.optional.installcore.a, pup.optional.opencandy, pup.optional.searchgoltb.a, pup.optional.startpage.a, registrierungsdatenbank, required, revo uninstaller, richtlinie, software, svchost.exe, whilokii, windowsapps



Ähnliche Themen: Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...


  1. ADWARE/Browsefox.apa und viele mehr loswerden
    Plagegeister aller Art und deren Bekämpfung - 05.02.2015 (9)
  2. Win8/ Firefox voller Werbung nach Avira installation/ evtl. mehr?
    Plagegeister aller Art und deren Bekämpfung - 06.12.2014 (14)
  3. babylon search und delta search als startseite im browser
    Plagegeister aller Art und deren Bekämpfung - 06.06.2014 (9)
  4. Search d.p Engine. Ist das Delta-Search? Wenn nein, egal ich werde es nicht mehr los
    Log-Analyse und Auswertung - 27.01.2014 (11)
  5. Wegen Delta Search Log gemacht - nun etwas angst das hier noch mehr im Busch ist :/
    Log-Analyse und Auswertung - 02.11.2013 (15)
  6. Whilokii und evtl weitere PC Probleme
    Plagegeister aller Art und deren Bekämpfung - 28.10.2013 (15)
  7. Firefox-Download mit Doko Search, Wajam, Whilokii, Bonanza Deals, qvo6 u. wsys control
    Plagegeister aller Art und deren Bekämpfung - 24.10.2013 (11)
  8. komme nach delta search problem nicht mehr ins netz
    Plagegeister aller Art und deren Bekämpfung - 13.08.2013 (11)
  9. Delta Search
    Log-Analyse und Auswertung - 10.08.2013 (20)
  10. Win8 / Firefox: Befall mit Delta-Search-Virus
    Plagegeister aller Art und deren Bekämpfung - 05.08.2013 (13)
  11. Delta Search und Babylon search - Malware durch Freeware, Windows Vista
    Plagegeister aller Art und deren Bekämpfung - 16.07.2013 (37)
  12. delta-search.com
    Plagegeister aller Art und deren Bekämpfung - 05.06.2013 (37)
  13. Programme nicht löschbar - Delta Search evtl. nicht sicher entfernt.
    Plagegeister aller Art und deren Bekämpfung - 26.05.2013 (17)
  14. Delta Search mit Spybot entfernt; Delta Search taucht jedoch in neuen Tab trotzdem auf
    Plagegeister aller Art und deren Bekämpfung - 16.04.2013 (10)
  15. Delta Search in Chrome geht nicht mehr weg und Avira meldete 8 Funde
    Log-Analyse und Auswertung - 13.04.2013 (15)
  16. delta search
    Log-Analyse und Auswertung - 01.04.2013 (9)
  17. Delta Search und Babylon Search entfernt - Ist nun alles weg?
    Log-Analyse und Auswertung - 16.03.2013 (18)

Zum Thema Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... - Hallo! Ich habe seit einigen Tagen das Problem, dass Google Suchergebnisse in Chrome meist (nicht immer) in einem neuen Tab geöffnet wurden. Hab eine Infektion vermutet, diverse Scans und Reinigungen - Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr......
Archiv
Du betrachtest: Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.