| |
| |||||||
Log-Analyse und Auswertung: CouponDropDown über Firefox eingefangen - rechner wird langsamerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
14.10.2013, 22:54
| #1 |
| |  CouponDropDown über Firefox eingefangen - rechner wird langsamer Hallo, habe mir durch einen unaufmerksamen Klick über Firefox wohl den CouponDropDown-Trojaner eingefangen. Habe einige Scans mit AVIRA (alles o.k), Spyboot, Malewarebytes gemacht und alles Gefundene gelöscht. Leider wurde Firefox immer langsamer und Neuinstallieren konnte ich Firefox auch nicht mehr, weil ich keine Adminrechte hätte. Habe nun einige logfiles erstellt und firefox gelöscht und auf InternetExplorer umgestellt. Könnt mir jemand helfen, den Trojaner wieder zu entfernen? Danke, geravo15 |
|
15.10.2013, 05:47
| #2 |
| /// the machine /// TB-Ausbilder    | CouponDropDown über Firefox eingefangen - rechner wird langsamer Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
15.10.2013, 20:57
| #3 |
| | CouponDropDown über Firefox eingefangen - rechner wird langsamer ...
__________________Geändert von geravo15 (15.10.2013 um 21:05 Uhr) |
|
15.10.2013, 21:01
| #4 |
| | CouponDropDown über Firefox eingefangen - rechner wird langsamer Danke für den Hinweis, es erschien mir soviel... hier die logs: Code:
ATTFilter DEFOGGER geravo |
|
16.10.2013, 10:40
| #5 |
| /// the machine /// TB-Ausbilder | CouponDropDown über Firefox eingefangen - rechner wird langsamer Logs bitte einzeln in Codetags posten, nit alle in eine Box  Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
16.10.2013, 22:15
| #6 |
| | CouponDropDown über Firefox eingefangen - rechner wird langsamer Hallo Schrauber, kann leider die downloads nicht öffnen. Ich habe angeblich keine Berechtigung, auf C zuzugreifen. verzweiflung gross.... geravo HAllo Schrauber, hab im abgesicherten Modus doe Logfiles durchführen können. ADW Cleaner Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 16/10/2013 um 22:47:21
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : geravo - ASUS
# Gestartet von : C:\Users\geravo\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Program Files (x86)\HDvidCodec.com
Ordner Gelöscht : C:\Program Files (x86)\Movie2KDownloader.com
Ordner Gelöscht : C:\Program Files (x86)\openit
Ordner Gelöscht : C:\Users\geravo\AppData\Roaming\digitalsite
Ordner Gelöscht : C:\Users\geravo\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\geravo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com
Ordner Gelöscht : C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\jetpack
Datei Gelöscht : C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\movie2kdownloader@movie2kdownloader.com.xpi
Datei Gelöscht : C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\searchplugins\ask-search.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
Datei Gelöscht : C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\searchplugins\fileconverter-13-customized-web-search.xml
Datei Gelöscht : C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\user.js
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE063412-BEA4-4D76-8ED3-183BE6220D17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063412-BEA4-4D76-8ED3-183BE6220D17}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE063412-BEA4-4D76-8ED3-183BE6220D17}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE063412-BEA4-4D76-8ED3-183BE6220D17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\smartbar
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16720
-\\ Mozilla Firefox v
[ Datei : C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\prefs.js ]
Zeile gelöscht : user_pref("CT3241949_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1356900999983,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Zeile gelöscht : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3241949&SearchSource=13&CUI=SB_CUI");
Zeile gelöscht : user_pref("Smartbar.ConduitSearchEngineList", "FileConverter 1.3 Customized Web Search");
Zeile gelöscht : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3241949&SearchSource=2&CUI=SB_CUI&q=");
Zeile gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxps://isearch.avg.com/search?cid={97476AE2-42D8-46DA-B9F3-2B2D7B1E5BAA}&mid=6cd09cbe0d9447d1a821318208cd0f48-f4c765aa6b935c3dc6437d9472577269779db[...]
Zeile gelöscht : user_pref("Smartbar.keywordURLSelectedCTID", "CT3241949");
[ Datei : C:\Users\bianca\AppData\Roaming\Mozilla\Firefox\Profiles\df5ab9go.default\prefs.js ]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "AVG Secure Search");
[ Datei : C:\Users\Lunis\AppData\Roaming\Mozilla\Firefox\Profiles\hiicp55y.default\prefs.js ]
[ Datei : C:\Users\gerald\AppData\Roaming\Mozilla\Firefox\Profiles\m8x2qmw1.default\prefs.js ]
[ Datei : C:\Users\smilla\AppData\Roaming\Mozilla\Firefox\Profiles\lsc0blph.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [7584 octets] - [16/10/2013 22:16:11]
AdwCleaner[R1].txt - [7644 octets] - [16/10/2013 22:46:35]
AdwCleaner[S0].txt - [7338 octets] - [16/10/2013 22:47:21]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7398 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows 7 Home Premium x64
Ran by geravo on 16.10.2013 at 22:57:23,12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\apn"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.10.2013 at 23:00:36,61
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by geravo (administrator) on ASUS on 16-10-2013 23:01:35
Running from C:\Users\geravo\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Safe Mode (minimal)
==================== Processes (Whitelisted) =================
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [@OnlineArmor GUI] - C:\Program Files (x86)\Online Armor\OAui.exe [2345000 2010-11-03] (Emsi Software GmbH)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)
HKCU\...\Run: [MsgCenterExe] - c:\program files (x86)\real\realplayer\update\RealOneMessageCenter.exe [83072 2013-03-19] (RealNetworks, Inc.)
HKCU\...\RunOnce: [Report] - C:\AdwCleaner\AdwCleaner[S0].txt [7490 2013-10-16] ()
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: {4fbbd04a-e4e0-11df-af69-e0cb4e29e6bb} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Start.hta
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2245120 2009-09-17] (VIA)
HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKU\bianca\...\Policies\system: [LogonHoursAction] 2
HKU\bianca\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\gerald\...\Policies\system: [LogonHoursAction] 2
HKU\gerald\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lunis\...\Policies\system: [LogonHoursAction] 2
HKU\Lunis\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\smilla\...\Policies\system: [LogonHoursAction] 2
HKU\smilla\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\geravo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
URLSearchHook: (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: HKLM-x32 {15BE8BEE-4105-4A79-B385-25068AA967DB} hxxp://dizun95pzobbc.cloudfront.net/VBIMDPlayer.CAB
DPF: HKLM-x32 {32E7B36C-7960-4A42-B83B-D8AFD0AAEF2B} hxxp://dizun95pzobbc.cloudfront.net/INDBrowser.CAB
Handler: fluxhttp\0x00000007 - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: fluxhttp\0x00000007 - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - C:\Program Files (x86)\Common Files\fluxDVD\Lib\XEB\xebnavigation.ax (ACE GmbH)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @fluxdvd.com/NPWMDRMWrapper - C:\Program Files (x86)\Videoload Manager\NPWMDRMWrapper.dll ( )
FF Plugin-x32: @java.com/DTPlugin,version=10.10.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM - C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: @real.com/nppl3260;version=16.0.1.18 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.1.18 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\geravo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: DownloadHelper - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: BonanzaDeals - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\Extensions.rdf
FF Extension: firefox - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\firefox@ghostery.com.xpi
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\installed-extensions.txt
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}.xpi
FF Extension: Skype extension for Firefox - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\Extensions.rdf
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\installed-extensions-processed.txt
FF HKLM-x32\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (BonanzaDeals) - C:\Users\geravo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj\3.5.0.0_0
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
==================== Services (Whitelisted) =================
S2 AAV UpdateService; C:\Program Files (x86)\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
S2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
S2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S2 OAcat; C:\Program Files (x86)\Online Armor\OAcat.exe [380784 2010-11-03] (Emsi Software GmbH)
S2 OberonGameConsoleService; C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe [44312 2009-09-15] ()
S2 Prosieben; C:\Program Files (x86)\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
S2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [266343 2006-09-29] ()
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S2 SvcOnlineArmor; C:\Program Files (x86)\Online Armor\oasrv.exe [3652696 2010-11-03] (Emsi Software GmbH)
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [229520 2011-12-08] (soft Xpansion)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
S2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
S2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-25] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S1 OADevice; C:\Windows\SysWow64\Drivers\OADriver.sys [54864 2010-11-03] ()
S1 OADevice; C:\Windows\SysWow64\Drivers\OADriver.sys [54864 2010-11-03] ()
S1 oahlpXX; C:\Windows\syswow64\drivers\oahlp64.sys [54896 2010-11-03] ()
S1 oahlpXX; C:\Windows\syswow64\drivers\oahlp64.sys [54896 2010-11-03] ()
S1 OAmon; C:\Windows\SysWOW64\Drivers\OAmon.sys [37872 2010-11-03] (Emsisoft)
S1 OAmon; C:\Windows\SysWOW64\Drivers\OAmon.sys [37872 2010-11-03] (Emsisoft)
S3 OAnet; C:\Windows\System32\DRIVERS\oanet.sys [32728 2010-11-03] (Emsisoft)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-05-20] ()
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
S3 FNETTHJM; system32\drivers\fnetthjm.sys [x]
U3 tmlwf;
U3 tmwfp;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-16 23:00 - 2013-10-16 23:00 - 00000681 _____ C:\Users\geravo\Desktop\JRT.txt
2013-10-16 22:57 - 2013-10-16 22:57 - 00000000 ____D C:\Windows\ERUNT
2013-10-16 22:49 - 2013-10-16 22:49 - 00007490 _____ C:\Users\geravo\Desktop\AdwCleaner[S0].txt
2013-10-16 22:43 - 2013-10-16 22:43 - 01048960 _____ C:\Users\gerald\Desktop\adwcleaner.exe
2013-10-16 22:41 - 2013-10-16 22:41 - 00001427 _____ C:\Users\gerald\Desktop\Internet Explorer.lnk
2013-10-16 22:16 - 2013-10-16 22:47 - 00000000 ____D C:\AdwCleaner
2013-10-16 22:09 - 2013-10-16 22:09 - 00002922 _____ C:\Windows\System32\Tasks\{C8073F9F-0C85-4A66-AC4E-E40C85421912}
2013-10-16 22:08 - 2013-10-16 22:09 - 01033335 _____ (Thisisu) C:\Users\geravo\Desktop\JRT.exe
2013-10-16 22:07 - 2013-10-16 22:07 - 01033335 _____ (Thisisu) C:\Users\geravo\Downloads\JRT.exe
2013-10-16 21:59 - 2013-10-16 21:59 - 00007343 _____ C:\Users\geravo\Documents\Dd.odg
2013-10-16 21:52 - 2013-10-16 21:52 - 00001422 _____ C:\Users\geravo\Desktop\FRST64 - Verknüpfung.lnk
2013-10-16 21:48 - 2013-10-16 21:48 - 01048960 _____ C:\Users\geravo\Downloads\adwcleaner.exe
2013-10-16 21:43 - 2013-10-16 21:44 - 01048960 _____ C:\Users\gerald\Downloads\adwcleaner.exe
2013-10-16 21:30 - 2013-10-16 21:30 - 01048960 _____ C:\Users\geravo\Desktop\adwcleaner.exe
2013-10-16 21:26 - 2013-10-16 21:26 - 101406750 _____ C:\Windows\SysWOW64\캅䚊ᵌd
2013-10-14 17:10 - 2013-10-14 17:10 - 00001427 _____ C:\Users\geravo\Desktop\Internet Explorer.lnk
2013-10-14 12:40 - 2013-10-14 12:40 - 00281896 _____ (Mozilla) C:\Users\geravo\Downloads\Firefox Setup Stub 24.0.exe
2013-10-14 12:25 - 2013-10-14 12:25 - 00133220 _____ C:\Users\geravo\Desktop\bookmarks-2013-10-14.json
2013-10-14 12:09 - 2013-10-14 12:09 - 00002960 _____ C:\Windows\System32\Tasks\{5BBAC900-CE0E-4313-83C5-A9CFD2DCA50C}
2013-10-13 23:46 - 2013-10-13 23:46 - 00002627 _____ C:\Users\geravo\Desktop\Checks.131013-2346.txt
2013-10-13 23:29 - 2013-10-13 23:29 - 00002104 _____ C:\Users\geravo\Desktop\Avira Free Antivirus Profil Suche nach Rootkits und aktiver Malware (2).LNK
2013-10-13 18:19 - 2013-10-13 18:19 - 01551008 _____ (Skype Technologies S.A.) C:\Users\geravo\Downloads\SkypeSetup.exe
2013-10-13 18:17 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{C2DC72D3-EEF7-4CA8-9F96-BA7341C01D30}
2013-10-13 18:17 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{84438C17-6002-46C1-8FED-2177E63471D0}
2013-10-13 18:17 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{39D9B6A4-519C-40AE-AAAD-F92E790BD9EC}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{F9C1DF2C-8CDC-42C4-AD27-F7BDCE2E3E28}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{F5950169-222E-4997-BDF1-FC9C96093067}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{AB193407-4337-4D0C-95D4-6FC60408C0AD}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{A4C3905B-0177-4A24-A43A-A11BBEE6D67D}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{6FD93D7E-73E4-4461-BC5F-A9BDBF74AE62}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{5797097E-AF78-455D-994E-5CF073E12256}
2013-10-12 16:03 - 2013-10-12 16:03 - 00000136 _____ C:\Users\Lunis\Desktop\LEGO® Star Wars™ III The Clone Wars™ - Verknüpfung.lnk
2013-10-09 22:50 - 2013-10-09 22:50 - 00002998 _____ C:\Windows\System32\Tasks\{8C84DE9A-97B0-4000-9AC5-543BD3D63E81}
2013-10-09 22:05 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-09 22:05 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-09 22:05 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-09 22:05 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 22:05 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 22:05 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 22:05 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 22:04 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 22:04 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 22:04 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 22:04 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 22:04 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 22:04 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 22:04 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 22:04 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 22:04 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 22:04 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 22:04 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 19:39 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-09 19:39 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 19:39 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-09 19:39 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 19:39 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 19:39 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 19:39 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 19:39 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 19:39 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 19:39 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 19:39 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-09 19:39 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 19:39 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 19:39 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 19:39 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 19:39 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 19:39 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 19:39 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 19:39 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 19:39 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 19:39 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 19:39 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 19:39 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 19:39 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 19:38 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 19:38 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 19:38 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 19:38 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 19:38 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 19:38 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 19:38 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 19:38 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 19:38 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 19:38 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 19:38 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 19:38 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 19:38 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 19:38 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 19:38 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 19:38 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 19:38 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 19:38 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 19:38 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 19:38 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 19:38 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 19:38 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 19:38 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 19:38 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 19:38 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 00:00 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-10-09 00:00 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-10-09 00:00 - 2012-08-23 16:07 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-10-09 00:00 - 2012-08-23 15:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-10-09 00:00 - 2012-08-23 15:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-10-09 00:00 - 2012-08-23 15:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-10-09 00:00 - 2012-08-23 15:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-10-09 00:00 - 2012-08-23 15:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-10-09 00:00 - 2012-08-23 15:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-10-09 00:00 - 2012-08-23 15:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-10-09 00:00 - 2012-08-23 15:17 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-10-09 00:00 - 2012-08-23 15:06 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-10-09 00:00 - 2012-08-23 14:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-10-09 00:00 - 2012-08-23 13:20 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-10-09 00:00 - 2012-08-23 13:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-10-09 00:00 - 2012-08-23 13:14 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-10-09 00:00 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2013-10-09 00:00 - 2012-08-23 12:54 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-10-09 00:00 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-10-09 00:00 - 2012-08-23 12:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-10-09 00:00 - 2012-08-23 12:22 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-10-09 00:00 - 2012-08-23 11:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-10-09 00:00 - 2012-08-23 10:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-10-09 00:00 - 2012-08-23 10:13 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-10-08 23:59 - 2012-08-24 20:13 - 00154480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-10-08 23:59 - 2012-08-24 20:09 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-10-08 23:59 - 2012-08-24 20:05 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-10-08 23:59 - 2012-08-24 20:03 - 01448448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-10-08 23:59 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-10-08 23:59 - 2012-08-24 18:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-10-08 23:59 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-10-08 23:59 - 2012-05-04 13:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-10-08 23:59 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-10-08 23:33 - 2013-10-08 23:33 - 00001609 _____ C:\Users\geravo\Desktop\Scan Results.131008-2331 - Verknüpfung.lnk
2013-10-08 23:33 - 2013-10-08 23:33 - 00001549 _____ C:\Users\geravo\Desktop\Checks.131008-2330 - Verknüpfung.lnk
2013-10-08 23:33 - 2013-10-08 23:33 - 00001549 _____ C:\Users\geravo\Desktop\Checks.130919-2133 - Verknüpfung.lnk
2013-10-08 23:29 - 2013-10-08 23:29 - 00001083 _____ C:\Users\geravo\Desktop\defogger_disable - Verknüpfung.lnk
2013-10-08 23:26 - 2013-10-08 23:26 - 00143664 _____ C:\Users\geravo\Desktop\gmer.txt
2013-10-08 23:26 - 2013-10-08 23:26 - 00001446 _____ C:\Users\geravo\Desktop\Addition - Verknüpfung.lnk
2013-10-08 23:26 - 2013-10-08 23:26 - 00001406 _____ C:\Users\geravo\Desktop\FRST - Verknüpfung.lnk
2013-10-08 23:09 - 2013-10-08 23:09 - 00377856 _____ C:\Users\geravo\Downloads\gmer_2.1.19163.exe
2013-10-08 23:06 - 2013-10-08 23:06 - 00047808 _____ C:\Users\geravo\Downloads\Addition.txt
2013-10-08 23:03 - 2013-10-08 23:03 - 00000000 ____D C:\FRST
2013-10-08 23:02 - 2013-10-08 23:02 - 01954124 _____ (Farbar) C:\Users\geravo\Downloads\FRST64.exe
2013-10-08 23:00 - 2013-10-08 23:01 - 00000474 _____ C:\Users\geravo\Downloads\defogger_disable.log
2013-10-08 22:59 - 2013-10-08 22:59 - 00000000 _____ C:\Users\geravo\defogger_reenable
2013-10-08 22:58 - 2013-10-08 22:58 - 00050477 _____ C:\Users\geravo\Downloads\Defogger.exe
2013-10-08 22:53 - 2013-10-08 22:53 - 00003388 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-10-06 17:39 - 2013-10-06 17:40 - 00000000 ____D C:\Users\geravo\AppData\Local\Microsoft Games
2013-10-06 17:05 - 2013-10-06 17:05 - 00000000 ____D C:\Users\geravo\AppData\Roaming\LucasArts
2013-10-06 16:37 - 2013-10-06 16:37 - 00018292 _____ C:\Users\Lunis\Documents\lunis geb 2013.odp
2013-10-01 11:50 - 2013-10-16 22:49 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-09-29 14:26 - 2013-09-29 14:26 - 00648240 _____ (Unity Technologies ApS) C:\Users\Lunis\Downloads\UnityWebPlayer(1).exe
2013-09-26 19:40 - 2013-10-16 22:49 - 00003224 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-09-25 22:45 - 2013-09-25 22:45 - 00001133 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\Users\geravo\AppData\Roaming\Malwarebytes
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-25 22:45 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-25 22:42 - 2013-09-25 22:42 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\geravo\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-23 07:24 - 2013-09-23 07:24 - 00131496 _____ C:\Users\geravo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-21 14:50 - 2013-09-21 14:50 - 00000136 _____ C:\Users\Lunis\Desktop\LEGO® Harry Potter™ Years 1-4 - Verknüpfung.lnk
2013-09-21 14:46 - 2013-10-16 22:48 - 00004648 _____ C:\Windows\setupact.log
2013-09-21 14:46 - 2013-09-21 14:46 - 00000000 _____ C:\Windows\setuperr.log
2013-09-21 14:45 - 2013-10-15 17:03 - 00026550 _____ C:\Windows\PFRO.log
2013-09-21 14:45 - 2013-10-09 22:15 - 00483928 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-20 18:05 - 2013-09-21 13:15 - 00003100 _____ C:\Windows\System32\Tasks\P4G Sidebar
2013-09-19 22:18 - 2013-10-14 12:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-19 21:32 - 2013-09-19 21:37 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-19 21:32 - 2013-09-19 21:32 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-19 21:31 - 2013-10-13 23:50 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-19 21:31 - 2013-09-19 21:31 - 00001403 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-09-19 21:31 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-09-19 21:29 - 2013-09-19 21:29 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\geravo\Downloads\spybotsd-2.1.21-SR2.exe
2013-09-19 07:07 - 2013-09-19 07:07 - 98201083 _____ C:\Windows\SysWOW64\쳴ᵌ;
2013-09-16 19:10 - 2013-09-16 19:10 - 00002104 _____ C:\Users\geravo\Desktop\Avira Free Antivirus Profil Suche nach Rootkits und aktiver Malware.LNK
==================== One Month Modified Files and Folders =======
2013-10-16 23:00 - 2013-10-16 23:00 - 00000681 _____ C:\Users\geravo\Desktop\JRT.txt
2013-10-16 22:57 - 2013-10-16 22:57 - 00000000 ____D C:\Windows\ERUNT
2013-10-16 22:49 - 2013-10-16 22:49 - 00007490 _____ C:\Users\geravo\Desktop\AdwCleaner[S0].txt
2013-10-16 22:49 - 2013-10-01 11:50 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-10-16 22:49 - 2013-09-26 19:40 - 00003224 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-10-16 22:49 - 2010-04-21 14:06 - 00000000 ____D C:\Users\geravo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-16 22:48 - 2013-09-21 14:46 - 00004648 _____ C:\Windows\setupact.log
2013-10-16 22:48 - 2013-03-28 18:38 - 00000292 _____ C:\Windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001.job
2013-10-16 22:48 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-16 22:47 - 2013-10-16 22:16 - 00000000 ____D C:\AdwCleaner
2013-10-16 22:43 - 2013-10-16 22:43 - 01048960 _____ C:\Users\gerald\Desktop\adwcleaner.exe
2013-10-16 22:42 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-16 22:42 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-16 22:41 - 2013-10-16 22:41 - 00001427 _____ C:\Users\gerald\Desktop\Internet Explorer.lnk
2013-10-16 22:38 - 2010-11-26 13:29 - 00000000 ____D C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-16 22:38 - 2009-12-04 16:24 - 01963187 _____ C:\Windows\WindowsUpdate.log
2013-10-16 22:31 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-16 22:27 - 2010-11-26 13:29 - 00000000 ___RD C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-16 22:09 - 2013-10-16 22:09 - 00002922 _____ C:\Windows\System32\Tasks\{C8073F9F-0C85-4A66-AC4E-E40C85421912}
2013-10-16 22:09 - 2013-10-16 22:08 - 01033335 _____ (Thisisu) C:\Users\geravo\Desktop\JRT.exe
2013-10-16 22:09 - 2012-09-01 22:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-16 22:07 - 2013-10-16 22:07 - 01033335 _____ (Thisisu) C:\Users\geravo\Downloads\JRT.exe
2013-10-16 21:59 - 2013-10-16 21:59 - 00007343 _____ C:\Users\geravo\Documents\Dd.odg
2013-10-16 21:52 - 2013-10-16 21:52 - 00001422 _____ C:\Users\geravo\Desktop\FRST64 - Verknüpfung.lnk
2013-10-16 21:48 - 2013-10-16 21:48 - 01048960 _____ C:\Users\geravo\Downloads\adwcleaner.exe
2013-10-16 21:44 - 2013-10-16 21:43 - 01048960 _____ C:\Users\gerald\Downloads\adwcleaner.exe
2013-10-16 21:32 - 2013-03-15 09:43 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CE0FFBDB-F429-4EBD-95C6-71B0311BC769}
2013-10-16 21:30 - 2013-10-16 21:30 - 01048960 _____ C:\Users\geravo\Desktop\adwcleaner.exe
2013-10-16 21:26 - 2013-10-16 21:26 - 101406750 _____ C:\Windows\SysWOW64\캅䚊ᵌd
2013-10-15 17:04 - 2013-05-20 21:14 - 00003354 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1004
2013-10-15 17:04 - 2013-05-20 21:14 - 00003220 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1004
2013-10-15 17:04 - 2010-04-25 13:24 - 00000000 ____D C:\Users\Lunis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-15 17:03 - 2013-09-21 14:45 - 00026550 _____ C:\Windows\PFRO.log
2013-10-15 00:12 - 2010-07-10 23:27 - 00000000 ____D C:\Users\geravo\AppData\Roaming\Skype
2013-10-14 18:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-14 17:10 - 2013-10-14 17:10 - 00001427 _____ C:\Users\geravo\Desktop\Internet Explorer.lnk
2013-10-14 12:40 - 2013-10-14 12:40 - 00281896 _____ (Mozilla) C:\Users\geravo\Downloads\Firefox Setup Stub 24.0.exe
2013-10-14 12:26 - 2013-09-19 22:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-14 12:25 - 2013-10-14 12:25 - 00133220 _____ C:\Users\geravo\Desktop\bookmarks-2013-10-14.json
2013-10-14 12:09 - 2013-10-14 12:09 - 00002960 _____ C:\Windows\System32\Tasks\{5BBAC900-CE0E-4313-83C5-A9CFD2DCA50C}
2013-10-14 12:00 - 2010-04-14 14:52 - 00007649 _____ C:\Users\geravo\AppData\Local\resmon.resmoncfg
2013-10-14 11:55 - 2013-10-13 18:17 - 00002950 _____ C:\Windows\System32\Tasks\{C2DC72D3-EEF7-4CA8-9F96-BA7341C01D30}
2013-10-14 11:55 - 2013-10-13 18:17 - 00002950 _____ C:\Windows\System32\Tasks\{84438C17-6002-46C1-8FED-2177E63471D0}
2013-10-14 11:55 - 2013-10-13 18:17 - 00002950 _____ C:\Windows\System32\Tasks\{39D9B6A4-519C-40AE-AAAD-F92E790BD9EC}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{F9C1DF2C-8CDC-42C4-AD27-F7BDCE2E3E28}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{F5950169-222E-4997-BDF1-FC9C96093067}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{AB193407-4337-4D0C-95D4-6FC60408C0AD}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{A4C3905B-0177-4A24-A43A-A11BBEE6D67D}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{6FD93D7E-73E4-4461-BC5F-A9BDBF74AE62}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{5797097E-AF78-455D-994E-5CF073E12256}
2013-10-14 11:55 - 2010-07-10 23:27 - 00002878 _____ C:\Windows\System32\Tasks\{1DCA477D-47D5-479D-BFCE-B4629A8BAF34}
2013-10-14 11:54 - 2013-03-28 18:37 - 00002964 _____ C:\Windows\System32\Tasks\{82C78279-63F6-44C2-974F-A099C65E94CB}
2013-10-14 11:54 - 2013-03-19 23:00 - 00002964 _____ C:\Windows\System32\Tasks\{00FCCB6D-2504-4967-9054-C26B6E3C8060}
2013-10-14 11:54 - 2013-01-20 23:35 - 00002964 _____ C:\Windows\System32\Tasks\{B163A818-4816-47AD-A98F-1616A01B29AD}
2013-10-14 11:54 - 2011-11-15 23:50 - 00003780 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm
2013-10-14 11:54 - 2010-12-08 00:52 - 00000000 ____D C:\Program Files (x86)\Online Armor
2013-10-14 11:45 - 2012-12-28 01:31 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-14 00:52 - 2009-12-04 16:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-14 00:51 - 2012-12-28 01:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-14 00:48 - 2009-08-04 11:51 - 00662786 _____ C:\Windows\system32\perfh007.dat
2013-10-14 00:48 - 2009-08-04 11:51 - 00133824 _____ C:\Windows\system32\perfc007.dat
2013-10-14 00:48 - 2009-07-14 07:13 - 01543170 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-14 00:03 - 2013-03-28 18:38 - 00000300 _____ C:\Windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001.job
2013-10-13 23:50 - 2013-09-19 21:31 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-10-13 23:46 - 2013-10-13 23:46 - 00002627 _____ C:\Users\geravo\Desktop\Checks.131013-2346.txt
2013-10-13 23:29 - 2013-10-13 23:29 - 00002104 _____ C:\Users\geravo\Desktop\Avira Free Antivirus Profil Suche nach Rootkits und aktiver Malware (2).LNK
2013-10-13 18:19 - 2013-10-13 18:19 - 01551008 _____ (Skype Technologies S.A.) C:\Users\geravo\Downloads\SkypeSetup.exe
2013-10-12 16:03 - 2013-10-12 16:03 - 00000136 _____ C:\Users\Lunis\Desktop\LEGO® Star Wars™ III The Clone Wars™ - Verknüpfung.lnk
2013-10-12 15:58 - 2013-03-16 15:45 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0ECC0906-A305-4ACF-85A1-CC097B150350}
2013-10-11 11:49 - 2010-11-26 13:24 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-11 11:49 - 2010-11-26 13:24 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-10 11:53 - 2010-11-28 14:55 - 00000000 ____D C:\Users\gerald\AppData\Local\Mozilla
2013-10-10 11:52 - 2010-11-26 13:29 - 00000000 ___RD C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-09 22:50 - 2013-10-09 22:50 - 00002998 _____ C:\Windows\System32\Tasks\{8C84DE9A-97B0-4000-9AC5-543BD3D63E81}
2013-10-09 22:17 - 2009-07-29 08:03 - 00000000 ____D C:\Windows\Panther
2013-10-09 22:15 - 2013-09-21 14:45 - 00483928 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 21:58 - 2013-08-23 13:38 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 21:55 - 2010-01-09 22:00 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-09 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-10-08 23:33 - 2013-10-08 23:33 - 00001609 _____ C:\Users\geravo\Desktop\Scan Results.131008-2331 - Verknüpfung.lnk
2013-10-08 23:33 - 2013-10-08 23:33 - 00001549 _____ C:\Users\geravo\Desktop\Checks.131008-2330 - Verknüpfung.lnk
2013-10-08 23:33 - 2013-10-08 23:33 - 00001549 _____ C:\Users\geravo\Desktop\Checks.130919-2133 - Verknüpfung.lnk
2013-10-08 23:29 - 2013-10-08 23:29 - 00001083 _____ C:\Users\geravo\Desktop\defogger_disable - Verknüpfung.lnk
2013-10-08 23:26 - 2013-10-08 23:26 - 00143664 _____ C:\Users\geravo\Desktop\gmer.txt
2013-10-08 23:26 - 2013-10-08 23:26 - 00001446 _____ C:\Users\geravo\Desktop\Addition - Verknüpfung.lnk
2013-10-08 23:26 - 2013-10-08 23:26 - 00001406 _____ C:\Users\geravo\Desktop\FRST - Verknüpfung.lnk
2013-10-08 23:09 - 2013-10-08 23:09 - 00377856 _____ C:\Users\geravo\Downloads\gmer_2.1.19163.exe
2013-10-08 23:09 - 2012-09-01 22:24 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 23:09 - 2012-05-03 21:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-08 23:09 - 2011-05-14 19:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-08 23:06 - 2013-10-08 23:06 - 00047808 _____ C:\Users\geravo\Downloads\Addition.txt
2013-10-08 23:03 - 2013-10-08 23:03 - 00000000 ____D C:\FRST
2013-10-08 23:02 - 2013-10-08 23:02 - 01954124 _____ (Farbar) C:\Users\geravo\Downloads\FRST64.exe
2013-10-08 23:01 - 2013-10-08 23:00 - 00000474 _____ C:\Users\geravo\Downloads\defogger_disable.log
2013-10-08 22:59 - 2013-10-08 22:59 - 00000000 _____ C:\Users\geravo\defogger_reenable
2013-10-08 22:59 - 2010-01-07 20:25 - 00000000 ____D C:\Users\geravo
2013-10-08 22:58 - 2013-10-08 22:58 - 00050477 _____ C:\Users\geravo\Downloads\Defogger.exe
2013-10-08 22:53 - 2013-10-08 22:53 - 00003388 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-10-08 22:53 - 2010-01-08 23:07 - 00000000 ____D C:\Users\geravo\AppData\Local\Google
2013-10-06 18:42 - 2013-07-24 21:57 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-10-06 17:40 - 2013-10-06 17:39 - 00000000 ____D C:\Users\geravo\AppData\Local\Microsoft Games
2013-10-06 17:05 - 2013-10-06 17:05 - 00000000 ____D C:\Users\geravo\AppData\Roaming\LucasArts
2013-10-06 16:37 - 2013-10-06 16:37 - 00018292 _____ C:\Users\Lunis\Documents\lunis geb 2013.odp
2013-09-29 14:26 - 2013-09-29 14:26 - 00648240 _____ (Unity Technologies ApS) C:\Users\Lunis\Downloads\UnityWebPlayer(1).exe
2013-09-29 14:20 - 2010-11-27 16:33 - 00000000 ____D C:\Users\Lunis\AppData\Local\Mozilla
2013-09-25 23:34 - 2009-12-04 17:23 - 00002343 _____ C:\Windows\system32\ServiceFilter.ini
2013-09-25 22:45 - 2013-09-25 22:45 - 00001133 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\Users\geravo\AppData\Roaming\Malwarebytes
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-25 22:42 - 2013-09-25 22:42 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\geravo\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-23 07:24 - 2013-09-23 07:24 - 00131496 _____ C:\Users\geravo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-23 01:28 - 2013-10-09 22:04 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-09 22:04 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-23 01:27 - 2013-10-09 22:04 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 22:04 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 22:04 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 22:04 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-23 00:55 - 2013-10-09 22:05 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:55 - 2013-10-09 22:04 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 22:04 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-23 00:54 - 2013-10-09 22:04 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 22:04 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 22:04 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-21 14:50 - 2013-09-21 14:50 - 00000136 _____ C:\Users\Lunis\Desktop\LEGO® Harry Potter™ Years 1-4 - Verknüpfung.lnk
2013-09-21 14:46 - 2013-09-21 14:46 - 00000000 _____ C:\Windows\setuperr.log
2013-09-21 14:34 - 2010-04-20 22:03 - 00000000 ____D C:\Program Files (x86)\Steuer-Sparer 2010
2013-09-21 13:15 - 2013-09-20 18:05 - 00003100 _____ C:\Windows\System32\Tasks\P4G Sidebar
2013-09-21 05:38 - 2013-10-09 22:05 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-21 05:30 - 2013-10-09 22:05 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-21 04:48 - 2013-10-09 22:05 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-21 04:39 - 2013-10-09 22:05 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-20 06:28 - 2010-01-08 22:06 - 00000000 ____D C:\Users\geravo\AppData\Local\Mozilla
2013-09-20 06:24 - 2009-12-04 17:23 - 00002634 _____ C:\Windows\system32\AutoRunFilter.ini
2013-09-19 21:37 - 2013-09-19 21:32 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-19 21:32 - 2013-09-19 21:32 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-19 21:31 - 2013-09-19 21:31 - 00001403 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-09-19 21:29 - 2013-09-19 21:29 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\geravo\Downloads\spybotsd-2.1.21-SR2.exe
2013-09-19 07:14 - 2012-12-28 16:24 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-09-19 07:07 - 2013-09-19 07:07 - 98201083 _____ C:\Windows\SysWOW64\쳴ᵌ;
2013-09-16 19:10 - 2013-09-16 19:10 - 00002104 _____ C:\Users\geravo\Desktop\Avira Free Antivirus Profil Suche nach Rootkits und aktiver Malware.LNK
2013-09-16 00:05 - 2010-01-10 15:25 - 00000000 ____D C:\Users\geravo\AppData\Local\Adobe
2013-09-16 00:03 - 2013-01-15 13:08 - 00002888 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-09-16 00:03 - 2013-01-15 13:08 - 00002578 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001
Some content of TEMP:
====================
C:\Users\bianca\AppData\Local\Temp\AskSLib.dll
C:\Users\bianca\AppData\Local\Temp\drm_dyndata_7400008.dll
C:\Users\gerald\AppData\Local\Temp\AskSLib.dll
C:\Users\gerald\AppData\Local\Temp\extension3565860625240821459.dll
C:\Users\gerald\AppData\Local\Temp\extension3934635038006873656.dll
C:\Users\gerald\AppData\Local\Temp\extension4628673033288865425.dll
C:\Users\gerald\AppData\Local\Temp\extension8543126018309588022.dll
C:\Users\gerald\AppData\Local\Temp\SkypeSetup.exe
C:\Users\geravo\AppData\Local\Temp\Quarantine.exe
C:\Users\Lunis\AppData\Local\Temp\AskSLib.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-14 18:10
==================== End Of Log ============================
--- --- --- --- --- --- danke, geravo15 |
|
17.10.2013, 11:15
| #7 |
| /// the machine /// TB-Ausbilder | CouponDropDown über Firefox eingefangen - rechner wird langsamerESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.10.2013, 19:42
| #8 |
| | CouponDropDown über Firefox eingefangen - rechner wird langsamer Hallo Schrauber, leider funktioniert alles nur im abgesicherten Modus (Service Pack1). ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=58138ba3e0a1d44ab3eedd3692dbe53b
# engine=15527
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-17 09:17:52
# local_time=2013-10-17 11:17:52 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775166 100 94 90217 4599046 85899 0
# compatibility_mode=5893 16776574 100 94 178863 133674522 0 0
# compatibility_mode=6401 16777214 66 100 300196 93252322 0 0
# scanned=146103
# found=0
# cleaned=0
# scan_time=4751
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=58138ba3e0a1d44ab3eedd3692dbe53b
# engine=15539
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-18 06:30:21
# local_time=2013-10-18 08:30:21 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775166 100 94 10991 4675395 4206 0
# compatibility_mode=5893 16776573 100 94 79809 133750871 0 0
# compatibility_mode=6401 16777214 66 100 376545 93328671 0 0
# scanned=221735
# found=0
# cleaned=0
# scan_time=10688
Code:
ATTFilter Results of screen317's Security Check version 0.99.74 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Windows Security Center service is not running! This report may not be accurate! Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Malwarebytes Anti-Malware Version 1.75.0.1300 TuneUp Utilities 2013 TuneUp Utilities Language Pack (de-DE) TuneUp Utilities 2013 TuneUp Utilities Language Pack (de-DE) Adobe Flash Player 11.9.900.117 Adobe Reader XI Mozilla Thunderbird (17.0.8) ````````Process Check: objlist.exe by Laurent```````` `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by geravo (administrator) on ASUS on 18-10-2013 20:34:25
Running from C:\Users\geravo\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Safe Mode (with Networking)
==================== Processes (Whitelisted) =================
() C:\Users\geravo\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [@OnlineArmor GUI] - C:\Program Files (x86)\Online Armor\OAui.exe [2345000 2010-11-03] (Emsi Software GmbH)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: {4fbbd04a-e4e0-11df-af69-e0cb4e29e6bb} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Start.hta
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2245120 2009-09-17] (VIA)
HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\update\realsched.exe [295512 2013-03-19] (RealNetworks, Inc.)
HKU\bianca\...\Policies\system: [LogonHoursAction] 2
HKU\bianca\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\gerald\...\Policies\system: [LogonHoursAction] 2
HKU\gerald\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lunis\...\Policies\system: [LogonHoursAction] 2
HKU\Lunis\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\smilla\...\Policies\system: [LogonHoursAction] 2
HKU\smilla\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\geravo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
URLSearchHook: (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: HKLM-x32 {15BE8BEE-4105-4A79-B385-25068AA967DB} hxxp://dizun95pzobbc.cloudfront.net/VBIMDPlayer.CAB
DPF: HKLM-x32 {32E7B36C-7960-4A42-B83B-D8AFD0AAEF2B} hxxp://dizun95pzobbc.cloudfront.net/INDBrowser.CAB
Handler: fluxhttp\0x00000007 - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: fluxhttp\0x00000007 - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - C:\Program Files (x86)\Common Files\fluxDVD\Lib\XEB\xebnavigation.ax (ACE GmbH)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @fluxdvd.com/NPWMDRMWrapper - C:\Program Files (x86)\Videoload Manager\NPWMDRMWrapper.dll ( )
FF Plugin-x32: @java.com/DTPlugin,version=10.10.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM - C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: @real.com/nppl3260;version=16.0.1.18 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.1.18 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\geravo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: DownloadHelper - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: BonanzaDeals - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\Extensions.rdf
FF Extension: firefox - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\firefox@ghostery.com.xpi
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\installed-extensions.txt
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}.xpi
FF Extension: Skype extension for Firefox - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\Extensions.rdf
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\installed-extensions-processed.txt
FF HKLM-x32\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (BonanzaDeals) - C:\Users\geravo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj\3.5.0.0_0
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
==================== Services (Whitelisted) =================
S2 AAV UpdateService; C:\Program Files (x86)\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
S2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
S2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S2 OAcat; C:\Program Files (x86)\Online Armor\OAcat.exe [380784 2010-11-03] (Emsi Software GmbH)
S2 OberonGameConsoleService; C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe [44312 2009-09-15] ()
S2 Prosieben; C:\Program Files (x86)\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
S2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [266343 2006-09-29] ()
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S2 SvcOnlineArmor; C:\Program Files (x86)\Online Armor\oasrv.exe [3652696 2010-11-03] (Emsi Software GmbH)
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [229520 2011-12-08] (soft Xpansion)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
S2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
S2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-25] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S1 OADevice; C:\Windows\SysWow64\Drivers\OADriver.sys [54864 2010-11-03] ()
S1 OADevice; C:\Windows\SysWow64\Drivers\OADriver.sys [54864 2010-11-03] ()
S1 oahlpXX; C:\Windows\syswow64\drivers\oahlp64.sys [54896 2010-11-03] ()
S1 oahlpXX; C:\Windows\syswow64\drivers\oahlp64.sys [54896 2010-11-03] ()
R1 OAmon; C:\Windows\SysWOW64\Drivers\OAmon.sys [37872 2010-11-03] (Emsisoft)
R1 OAmon; C:\Windows\SysWOW64\Drivers\OAmon.sys [37872 2010-11-03] (Emsisoft)
R3 OAnet; C:\Windows\System32\DRIVERS\oanet.sys [32728 2010-11-03] (Emsisoft)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-05-20] ()
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
S3 FNETTHJM; system32\drivers\fnetthjm.sys [x]
U3 tmlwf;
U3 tmwfp;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-18 17:20 - 2013-10-18 17:20 - 101792164 _____ C:\Windows\SysWOW64\͋ԋᵌ4
2013-10-17 21:45 - 2013-10-17 21:45 - 00000979 _____ C:\Users\geravo\Downloads\checkup.txt
2013-10-17 21:38 - 2013-10-17 21:38 - 00891167 _____ C:\Users\geravo\Desktop\SecurityCheck.exe
2013-10-17 21:22 - 2013-10-17 21:22 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-17 21:17 - 2013-10-17 21:17 - 02347384 _____ (ESET) C:\Users\geravo\Downloads\esetsmartinstaller_enu.exe
2013-10-17 21:17 - 2013-10-17 21:17 - 02347384 _____ (ESET) C:\Users\geravo\Desktop\esetsmartinstaller_enu.exe
2013-10-16 22:57 - 2013-10-16 22:57 - 00000000 ____D C:\Windows\ERUNT
2013-10-16 22:49 - 2013-10-16 22:49 - 00007490 _____ C:\Users\geravo\Desktop\AdwCleaner[S0].txt
2013-10-16 22:43 - 2013-10-16 22:43 - 01048960 _____ C:\Users\gerald\Desktop\adwcleaner.exe
2013-10-16 22:41 - 2013-10-16 22:41 - 00001427 _____ C:\Users\gerald\Desktop\Internet Explorer.lnk
2013-10-16 22:16 - 2013-10-16 22:47 - 00000000 ____D C:\AdwCleaner
2013-10-16 22:09 - 2013-10-16 22:09 - 00002922 _____ C:\Windows\System32\Tasks\{C8073F9F-0C85-4A66-AC4E-E40C85421912}
2013-10-16 22:08 - 2013-10-16 22:09 - 01033335 _____ (Thisisu) C:\Users\geravo\Desktop\JRT.exe
2013-10-16 22:07 - 2013-10-16 22:07 - 01033335 _____ (Thisisu) C:\Users\geravo\Downloads\JRT.exe
2013-10-16 21:59 - 2013-10-16 21:59 - 00007343 _____ C:\Users\geravo\Documents\Dd.odg
2013-10-16 21:52 - 2013-10-16 21:52 - 00001422 _____ C:\Users\geravo\Desktop\FRST64 - Verknüpfung.lnk
2013-10-16 21:48 - 2013-10-16 21:48 - 01048960 _____ C:\Users\geravo\Downloads\adwcleaner.exe
2013-10-16 21:43 - 2013-10-16 21:44 - 01048960 _____ C:\Users\gerald\Downloads\adwcleaner.exe
2013-10-16 21:30 - 2013-10-16 21:30 - 01048960 _____ C:\Users\geravo\Desktop\adwcleaner.exe
2013-10-16 21:26 - 2013-10-16 21:26 - 101406750 _____ C:\Windows\SysWOW64\캅䚊ᵌd
2013-10-14 17:10 - 2013-10-14 17:10 - 00001427 _____ C:\Users\geravo\Desktop\Internet Explorer.lnk
2013-10-14 12:40 - 2013-10-14 12:40 - 00281896 _____ (Mozilla) C:\Users\geravo\Downloads\Firefox Setup Stub 24.0.exe
2013-10-14 12:25 - 2013-10-14 12:25 - 00133220 _____ C:\Users\geravo\Desktop\bookmarks-2013-10-14.json
2013-10-14 12:09 - 2013-10-14 12:09 - 00002960 _____ C:\Windows\System32\Tasks\{5BBAC900-CE0E-4313-83C5-A9CFD2DCA50C}
2013-10-13 23:29 - 2013-10-13 23:29 - 00002104 _____ C:\Users\geravo\Desktop\Avira Free Antivirus Profil Suche nach Rootkits und aktiver Malware (2).LNK
2013-10-13 18:19 - 2013-10-13 18:19 - 01551008 _____ (Skype Technologies S.A.) C:\Users\geravo\Downloads\SkypeSetup.exe
2013-10-13 18:17 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{C2DC72D3-EEF7-4CA8-9F96-BA7341C01D30}
2013-10-13 18:17 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{84438C17-6002-46C1-8FED-2177E63471D0}
2013-10-13 18:17 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{39D9B6A4-519C-40AE-AAAD-F92E790BD9EC}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{F9C1DF2C-8CDC-42C4-AD27-F7BDCE2E3E28}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{F5950169-222E-4997-BDF1-FC9C96093067}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{AB193407-4337-4D0C-95D4-6FC60408C0AD}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{A4C3905B-0177-4A24-A43A-A11BBEE6D67D}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{6FD93D7E-73E4-4461-BC5F-A9BDBF74AE62}
2013-10-13 18:16 - 2013-10-14 11:55 - 00002950 _____ C:\Windows\System32\Tasks\{5797097E-AF78-455D-994E-5CF073E12256}
2013-10-12 16:03 - 2013-10-12 16:03 - 00000136 _____ C:\Users\Lunis\Desktop\LEGO® Star Wars™ III The Clone Wars™ - Verknüpfung.lnk
2013-10-09 22:50 - 2013-10-09 22:50 - 00002998 _____ C:\Windows\System32\Tasks\{8C84DE9A-97B0-4000-9AC5-543BD3D63E81}
2013-10-09 22:05 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-09 22:05 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-09 22:05 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-09 22:05 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-09 22:05 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-09 22:05 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 22:05 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 22:05 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 22:05 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 22:04 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 22:04 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 22:04 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 22:04 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 22:04 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 22:04 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 22:04 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 22:04 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 22:04 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 22:04 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 22:04 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 19:39 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-09 19:39 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 19:39 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-09 19:39 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 19:39 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 19:39 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 19:39 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 19:39 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 19:39 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 19:39 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 19:39 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-09 19:39 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 19:39 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 19:39 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 19:39 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 19:39 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 19:39 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 19:39 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 19:39 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 19:39 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 19:39 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 19:39 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 19:39 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 19:39 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 19:38 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 19:38 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 19:38 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 19:38 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 19:38 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 19:38 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 19:38 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 19:38 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 19:38 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 19:38 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 19:38 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 19:38 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 19:38 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 19:38 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 19:38 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 19:38 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 19:38 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 19:38 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 19:38 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 19:38 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 19:38 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 19:38 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 19:38 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 19:38 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 19:38 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 19:38 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 00:00 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-10-09 00:00 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-10-09 00:00 - 2012-08-23 16:07 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-10-09 00:00 - 2012-08-23 15:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-10-09 00:00 - 2012-08-23 15:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-10-09 00:00 - 2012-08-23 15:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-10-09 00:00 - 2012-08-23 15:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-10-09 00:00 - 2012-08-23 15:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-10-09 00:00 - 2012-08-23 15:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-10-09 00:00 - 2012-08-23 15:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-10-09 00:00 - 2012-08-23 15:17 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-10-09 00:00 - 2012-08-23 15:06 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-10-09 00:00 - 2012-08-23 14:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-10-09 00:00 - 2012-08-23 13:20 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-10-09 00:00 - 2012-08-23 13:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-10-09 00:00 - 2012-08-23 13:14 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-10-09 00:00 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2013-10-09 00:00 - 2012-08-23 12:54 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-10-09 00:00 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-10-09 00:00 - 2012-08-23 12:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-10-09 00:00 - 2012-08-23 12:22 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-10-09 00:00 - 2012-08-23 11:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-10-09 00:00 - 2012-08-23 10:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-10-09 00:00 - 2012-08-23 10:13 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-10-08 23:59 - 2012-08-24 20:13 - 00154480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-10-08 23:59 - 2012-08-24 20:09 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-10-08 23:59 - 2012-08-24 20:05 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-10-08 23:59 - 2012-08-24 20:03 - 01448448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-10-08 23:59 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-10-08 23:59 - 2012-08-24 18:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-10-08 23:59 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-10-08 23:59 - 2012-05-04 13:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-10-08 23:59 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-10-08 23:33 - 2013-10-08 23:33 - 00001609 _____ C:\Users\geravo\Desktop\Scan Results.131008-2331 - Verknüpfung.lnk
2013-10-08 23:29 - 2013-10-08 23:29 - 00001083 _____ C:\Users\geravo\Desktop\defogger_disable - Verknüpfung.lnk
2013-10-08 23:26 - 2013-10-08 23:26 - 00143664 _____ C:\Users\geravo\Desktop\gmer.txt
2013-10-08 23:26 - 2013-10-08 23:26 - 00001446 _____ C:\Users\geravo\Desktop\Addition - Verknüpfung.lnk
2013-10-08 23:26 - 2013-10-08 23:26 - 00001406 _____ C:\Users\geravo\Desktop\FRST - Verknüpfung.lnk
2013-10-08 23:09 - 2013-10-08 23:09 - 00377856 _____ C:\Users\geravo\Downloads\gmer_2.1.19163.exe
2013-10-08 23:06 - 2013-10-08 23:06 - 00047808 _____ C:\Users\geravo\Downloads\Addition.txt
2013-10-08 23:03 - 2013-10-08 23:03 - 00000000 ____D C:\FRST
2013-10-08 23:02 - 2013-10-08 23:02 - 01954124 _____ (Farbar) C:\Users\geravo\Downloads\FRST64.exe
2013-10-08 23:00 - 2013-10-08 23:01 - 00000474 _____ C:\Users\geravo\Downloads\defogger_disable.log
2013-10-08 22:59 - 2013-10-08 22:59 - 00000000 _____ C:\Users\geravo\defogger_reenable
2013-10-08 22:58 - 2013-10-08 22:58 - 00050477 _____ C:\Users\geravo\Downloads\Defogger.exe
2013-10-08 22:53 - 2013-10-08 22:53 - 00003388 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-10-06 17:39 - 2013-10-06 17:40 - 00000000 ____D C:\Users\geravo\AppData\Local\Microsoft Games
2013-10-06 17:05 - 2013-10-06 17:05 - 00000000 ____D C:\Users\geravo\AppData\Roaming\LucasArts
2013-10-06 16:37 - 2013-10-06 16:37 - 00018292 _____ C:\Users\Lunis\Documents\lunis geb 2013.odp
2013-10-01 11:50 - 2013-10-18 17:20 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-09-29 14:26 - 2013-09-29 14:26 - 00648240 _____ (Unity Technologies ApS) C:\Users\Lunis\Downloads\UnityWebPlayer(1).exe
2013-09-26 19:40 - 2013-10-18 17:20 - 00003224 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-09-25 22:45 - 2013-09-25 22:45 - 00001133 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\Users\geravo\AppData\Roaming\Malwarebytes
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-25 22:45 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-25 22:42 - 2013-09-25 22:42 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\geravo\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-23 07:24 - 2013-09-23 07:24 - 00131496 _____ C:\Users\geravo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-21 14:50 - 2013-09-21 14:50 - 00000136 _____ C:\Users\Lunis\Desktop\LEGO® Harry Potter™ Years 1-4 - Verknüpfung.lnk
2013-09-21 14:46 - 2013-10-18 17:17 - 00004984 _____ C:\Windows\setupact.log
2013-09-21 14:46 - 2013-09-21 14:46 - 00000000 _____ C:\Windows\setuperr.log
2013-09-21 14:45 - 2013-10-17 18:49 - 00033960 _____ C:\Windows\PFRO.log
2013-09-21 14:45 - 2013-10-09 22:15 - 00483928 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-20 18:05 - 2013-09-21 13:15 - 00003100 _____ C:\Windows\System32\Tasks\P4G Sidebar
2013-09-19 22:18 - 2013-10-14 12:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-19 21:32 - 2013-09-19 21:37 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-19 21:32 - 2013-09-19 21:32 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-19 21:31 - 2013-10-13 23:50 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-19 21:31 - 2013-09-19 21:31 - 00001403 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-09-19 21:31 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-09-19 21:29 - 2013-09-19 21:29 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\geravo\Downloads\spybotsd-2.1.21-SR2.exe
2013-09-19 07:07 - 2013-09-19 07:07 - 98201083 _____ C:\Windows\SysWOW64\쳴ᵌ;
==================== One Month Modified Files and Folders =======
2013-10-18 20:13 - 2013-08-25 21:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-10-18 17:30 - 2009-08-04 11:51 - 00662536 _____ C:\Windows\system32\perfh007.dat
2013-10-18 17:30 - 2009-08-04 11:51 - 00133606 _____ C:\Windows\system32\perfc007.dat
2013-10-18 17:30 - 2009-07-14 07:13 - 01521178 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-18 17:25 - 2013-03-15 09:43 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CE0FFBDB-F429-4EBD-95C6-71B0311BC769}
2013-10-18 17:25 - 2009-12-04 16:24 - 02013247 _____ C:\Windows\WindowsUpdate.log
2013-10-18 17:20 - 2013-10-18 17:20 - 101792164 _____ C:\Windows\SysWOW64\͋ԋᵌ4
2013-10-18 17:20 - 2013-10-01 11:50 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-10-18 17:20 - 2013-09-26 19:40 - 00003224 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-10-18 17:19 - 2010-04-21 14:06 - 00000000 ____D C:\Users\geravo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-18 17:18 - 2013-03-28 18:38 - 00000292 _____ C:\Windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001.job
2013-10-18 17:18 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-18 17:17 - 2013-09-21 14:46 - 00004984 _____ C:\Windows\setupact.log
2013-10-17 21:45 - 2013-10-17 21:45 - 00000979 _____ C:\Users\geravo\Downloads\checkup.txt
2013-10-17 21:41 - 2010-01-07 20:25 - 00000000 ____D C:\Users\geravo
2013-10-17 21:38 - 2013-10-17 21:38 - 00891167 _____ C:\Users\geravo\Desktop\SecurityCheck.exe
2013-10-17 21:22 - 2013-10-17 21:22 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-17 21:17 - 2013-10-17 21:17 - 02347384 _____ (ESET) C:\Users\geravo\Downloads\esetsmartinstaller_enu.exe
2013-10-17 21:17 - 2013-10-17 21:17 - 02347384 _____ (ESET) C:\Users\geravo\Desktop\esetsmartinstaller_enu.exe
2013-10-17 21:09 - 2012-09-01 22:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-17 21:09 - 2010-07-10 23:27 - 00000000 ____D C:\Users\geravo\AppData\Roaming\Skype
2013-10-17 18:58 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-17 18:58 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-17 18:49 - 2013-09-21 14:45 - 00033960 _____ C:\Windows\PFRO.log
2013-10-17 18:49 - 2013-03-28 18:38 - 00000300 _____ C:\Windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001.job
2013-10-16 23:32 - 2013-01-15 13:08 - 00002888 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-10-16 23:32 - 2013-01-15 13:08 - 00002578 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-10-16 22:57 - 2013-10-16 22:57 - 00000000 ____D C:\Windows\ERUNT
2013-10-16 22:49 - 2013-10-16 22:49 - 00007490 _____ C:\Users\geravo\Desktop\AdwCleaner[S0].txt
2013-10-16 22:47 - 2013-10-16 22:16 - 00000000 ____D C:\AdwCleaner
2013-10-16 22:43 - 2013-10-16 22:43 - 01048960 _____ C:\Users\gerald\Desktop\adwcleaner.exe
2013-10-16 22:41 - 2013-10-16 22:41 - 00001427 _____ C:\Users\gerald\Desktop\Internet Explorer.lnk
2013-10-16 22:38 - 2010-11-26 13:29 - 00000000 ____D C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-16 22:31 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-16 22:27 - 2010-11-26 13:29 - 00000000 ___RD C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-16 22:09 - 2013-10-16 22:09 - 00002922 _____ C:\Windows\System32\Tasks\{C8073F9F-0C85-4A66-AC4E-E40C85421912}
2013-10-16 22:09 - 2013-10-16 22:08 - 01033335 _____ (Thisisu) C:\Users\geravo\Desktop\JRT.exe
2013-10-16 22:07 - 2013-10-16 22:07 - 01033335 _____ (Thisisu) C:\Users\geravo\Downloads\JRT.exe
2013-10-16 21:59 - 2013-10-16 21:59 - 00007343 _____ C:\Users\geravo\Documents\Dd.odg
2013-10-16 21:52 - 2013-10-16 21:52 - 00001422 _____ C:\Users\geravo\Desktop\FRST64 - Verknüpfung.lnk
2013-10-16 21:48 - 2013-10-16 21:48 - 01048960 _____ C:\Users\geravo\Downloads\adwcleaner.exe
2013-10-16 21:44 - 2013-10-16 21:43 - 01048960 _____ C:\Users\gerald\Downloads\adwcleaner.exe
2013-10-16 21:30 - 2013-10-16 21:30 - 01048960 _____ C:\Users\geravo\Desktop\adwcleaner.exe
2013-10-16 21:26 - 2013-10-16 21:26 - 101406750 _____ C:\Windows\SysWOW64\캅䚊ᵌd
2013-10-15 17:04 - 2013-05-20 21:14 - 00003354 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1004
2013-10-15 17:04 - 2013-05-20 21:14 - 00003220 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1004
2013-10-15 17:04 - 2010-04-25 13:24 - 00000000 ____D C:\Users\Lunis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-14 18:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-14 17:10 - 2013-10-14 17:10 - 00001427 _____ C:\Users\geravo\Desktop\Internet Explorer.lnk
2013-10-14 12:40 - 2013-10-14 12:40 - 00281896 _____ (Mozilla) C:\Users\geravo\Downloads\Firefox Setup Stub 24.0.exe
2013-10-14 12:26 - 2013-09-19 22:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-14 12:25 - 2013-10-14 12:25 - 00133220 _____ C:\Users\geravo\Desktop\bookmarks-2013-10-14.json
2013-10-14 12:09 - 2013-10-14 12:09 - 00002960 _____ C:\Windows\System32\Tasks\{5BBAC900-CE0E-4313-83C5-A9CFD2DCA50C}
2013-10-14 12:00 - 2010-04-14 14:52 - 00007649 _____ C:\Users\geravo\AppData\Local\resmon.resmoncfg
2013-10-14 11:55 - 2013-10-13 18:17 - 00002950 _____ C:\Windows\System32\Tasks\{C2DC72D3-EEF7-4CA8-9F96-BA7341C01D30}
2013-10-14 11:55 - 2013-10-13 18:17 - 00002950 _____ C:\Windows\System32\Tasks\{84438C17-6002-46C1-8FED-2177E63471D0}
2013-10-14 11:55 - 2013-10-13 18:17 - 00002950 _____ C:\Windows\System32\Tasks\{39D9B6A4-519C-40AE-AAAD-F92E790BD9EC}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{F9C1DF2C-8CDC-42C4-AD27-F7BDCE2E3E28}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{F5950169-222E-4997-BDF1-FC9C96093067}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{AB193407-4337-4D0C-95D4-6FC60408C0AD}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{A4C3905B-0177-4A24-A43A-A11BBEE6D67D}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{6FD93D7E-73E4-4461-BC5F-A9BDBF74AE62}
2013-10-14 11:55 - 2013-10-13 18:16 - 00002950 _____ C:\Windows\System32\Tasks\{5797097E-AF78-455D-994E-5CF073E12256}
2013-10-14 11:55 - 2010-07-10 23:27 - 00002878 _____ C:\Windows\System32\Tasks\{1DCA477D-47D5-479D-BFCE-B4629A8BAF34}
2013-10-14 11:54 - 2013-03-28 18:37 - 00002964 _____ C:\Windows\System32\Tasks\{82C78279-63F6-44C2-974F-A099C65E94CB}
2013-10-14 11:54 - 2013-03-19 23:00 - 00002964 _____ C:\Windows\System32\Tasks\{00FCCB6D-2504-4967-9054-C26B6E3C8060}
2013-10-14 11:54 - 2013-01-20 23:35 - 00002964 _____ C:\Windows\System32\Tasks\{B163A818-4816-47AD-A98F-1616A01B29AD}
2013-10-14 11:54 - 2011-11-15 23:50 - 00003780 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm
2013-10-14 11:54 - 2010-12-08 00:52 - 00000000 ____D C:\Program Files (x86)\Online Armor
2013-10-14 11:45 - 2012-12-28 01:31 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-14 11:45 - 2012-12-28 01:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-14 00:52 - 2009-12-04 16:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 23:50 - 2013-09-19 21:31 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-10-13 23:29 - 2013-10-13 23:29 - 00002104 _____ C:\Users\geravo\Desktop\Avira Free Antivirus Profil Suche nach Rootkits und aktiver Malware (2).LNK
2013-10-13 18:19 - 2013-10-13 18:19 - 01551008 _____ (Skype Technologies S.A.) C:\Users\geravo\Downloads\SkypeSetup.exe
2013-10-12 16:03 - 2013-10-12 16:03 - 00000136 _____ C:\Users\Lunis\Desktop\LEGO® Star Wars™ III The Clone Wars™ - Verknüpfung.lnk
2013-10-12 15:58 - 2013-03-16 15:45 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0ECC0906-A305-4ACF-85A1-CC097B150350}
2013-10-11 11:49 - 2010-11-26 13:24 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-11 11:49 - 2010-11-26 13:24 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-10-10 11:53 - 2010-11-28 14:55 - 00000000 ____D C:\Users\gerald\AppData\Local\Mozilla
2013-10-10 11:52 - 2010-11-26 13:29 - 00000000 ___RD C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-09 22:50 - 2013-10-09 22:50 - 00002998 _____ C:\Windows\System32\Tasks\{8C84DE9A-97B0-4000-9AC5-543BD3D63E81}
2013-10-09 22:17 - 2009-07-29 08:03 - 00000000 ____D C:\Windows\Panther
2013-10-09 22:15 - 2013-09-21 14:45 - 00483928 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 21:58 - 2013-08-23 13:38 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 21:55 - 2010-01-09 22:00 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-09 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-10-08 23:33 - 2013-10-08 23:33 - 00001609 _____ C:\Users\geravo\Desktop\Scan Results.131008-2331 - Verknüpfung.lnk
2013-10-08 23:29 - 2013-10-08 23:29 - 00001083 _____ C:\Users\geravo\Desktop\defogger_disable - Verknüpfung.lnk
2013-10-08 23:26 - 2013-10-08 23:26 - 00143664 _____ C:\Users\geravo\Desktop\gmer.txt
2013-10-08 23:26 - 2013-10-08 23:26 - 00001446 _____ C:\Users\geravo\Desktop\Addition - Verknüpfung.lnk
2013-10-08 23:26 - 2013-10-08 23:26 - 00001406 _____ C:\Users\geravo\Desktop\FRST - Verknüpfung.lnk
2013-10-08 23:09 - 2013-10-08 23:09 - 00377856 _____ C:\Users\geravo\Downloads\gmer_2.1.19163.exe
2013-10-08 23:09 - 2012-09-01 22:24 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 23:09 - 2012-05-03 21:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-08 23:09 - 2011-05-14 19:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-08 23:06 - 2013-10-08 23:06 - 00047808 _____ C:\Users\geravo\Downloads\Addition.txt
2013-10-08 23:03 - 2013-10-08 23:03 - 00000000 ____D C:\FRST
2013-10-08 23:02 - 2013-10-08 23:02 - 01954124 _____ (Farbar) C:\Users\geravo\Downloads\FRST64.exe
2013-10-08 23:01 - 2013-10-08 23:00 - 00000474 _____ C:\Users\geravo\Downloads\defogger_disable.log
2013-10-08 22:59 - 2013-10-08 22:59 - 00000000 _____ C:\Users\geravo\defogger_reenable
2013-10-08 22:58 - 2013-10-08 22:58 - 00050477 _____ C:\Users\geravo\Downloads\Defogger.exe
2013-10-08 22:53 - 2013-10-08 22:53 - 00003388 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-10-08 22:53 - 2010-01-08 23:07 - 00000000 ____D C:\Users\geravo\AppData\Local\Google
2013-10-06 18:42 - 2013-07-24 21:57 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-10-06 17:40 - 2013-10-06 17:39 - 00000000 ____D C:\Users\geravo\AppData\Local\Microsoft Games
2013-10-06 17:05 - 2013-10-06 17:05 - 00000000 ____D C:\Users\geravo\AppData\Roaming\LucasArts
2013-10-06 16:37 - 2013-10-06 16:37 - 00018292 _____ C:\Users\Lunis\Documents\lunis geb 2013.odp
2013-09-29 14:26 - 2013-09-29 14:26 - 00648240 _____ (Unity Technologies ApS) C:\Users\Lunis\Downloads\UnityWebPlayer(1).exe
2013-09-29 14:20 - 2010-11-27 16:33 - 00000000 ____D C:\Users\Lunis\AppData\Local\Mozilla
2013-09-25 23:34 - 2009-12-04 17:23 - 00002343 _____ C:\Windows\system32\ServiceFilter.ini
2013-09-25 22:45 - 2013-09-25 22:45 - 00001133 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\Users\geravo\AppData\Roaming\Malwarebytes
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-25 22:45 - 2013-09-25 22:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-25 22:42 - 2013-09-25 22:42 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\geravo\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-23 07:24 - 2013-09-23 07:24 - 00131496 _____ C:\Users\geravo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-23 01:28 - 2013-10-09 22:04 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-09 22:04 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-23 01:27 - 2013-10-09 22:05 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-23 01:27 - 2013-10-09 22:04 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 22:04 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 22:04 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 22:04 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-23 00:55 - 2013-10-09 22:05 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:55 - 2013-10-09 22:04 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 22:04 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-23 00:54 - 2013-10-09 22:05 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-23 00:54 - 2013-10-09 22:04 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 22:04 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 22:04 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-21 14:50 - 2013-09-21 14:50 - 00000136 _____ C:\Users\Lunis\Desktop\LEGO® Harry Potter™ Years 1-4 - Verknüpfung.lnk
2013-09-21 14:46 - 2013-09-21 14:46 - 00000000 _____ C:\Windows\setuperr.log
2013-09-21 14:34 - 2010-04-20 22:03 - 00000000 ____D C:\Program Files (x86)\Steuer-Sparer 2010
2013-09-21 13:15 - 2013-09-20 18:05 - 00003100 _____ C:\Windows\System32\Tasks\P4G Sidebar
2013-09-21 05:38 - 2013-10-09 22:05 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-21 05:30 - 2013-10-09 22:05 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-21 04:48 - 2013-10-09 22:05 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-21 04:39 - 2013-10-09 22:05 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-20 06:28 - 2010-01-08 22:06 - 00000000 ____D C:\Users\geravo\AppData\Local\Mozilla
2013-09-20 06:24 - 2009-12-04 17:23 - 00002634 _____ C:\Windows\system32\AutoRunFilter.ini
2013-09-19 21:37 - 2013-09-19 21:32 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-19 21:32 - 2013-09-19 21:32 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-19 21:31 - 2013-09-19 21:31 - 00001403 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-09-19 21:29 - 2013-09-19 21:29 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\geravo\Downloads\spybotsd-2.1.21-SR2.exe
2013-09-19 07:14 - 2012-12-28 16:24 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-09-19 07:07 - 2013-09-19 07:07 - 98201083 _____ C:\Windows\SysWOW64\쳴ᵌ;
Some content of TEMP:
====================
C:\Users\bianca\AppData\Local\Temp\AskSLib.dll
C:\Users\bianca\AppData\Local\Temp\drm_dyndata_7400008.dll
C:\Users\gerald\AppData\Local\Temp\AskSLib.dll
C:\Users\gerald\AppData\Local\Temp\extension3565860625240821459.dll
C:\Users\gerald\AppData\Local\Temp\extension3934635038006873656.dll
C:\Users\gerald\AppData\Local\Temp\extension4628673033288865425.dll
C:\Users\gerald\AppData\Local\Temp\extension8543126018309588022.dll
C:\Users\gerald\AppData\Local\Temp\SkypeSetup.exe
C:\Users\geravo\AppData\Local\Temp\Quarantine.exe
C:\Users\Lunis\AppData\Local\Temp\AskSLib.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-14 18:10
==================== End Of Log ============================
--- --- --- Dank für deine mühen, geravo |
|
19.10.2013, 14:36
| #9 |
| /// the machine /// TB-Ausbilder | CouponDropDown über Firefox eingefangen - rechner wird langsamer Downloade dir bitte Windows Repair (All In One) von hier.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.10.2013, 21:03
| #10 |
| | CouponDropDown über Firefox eingefangen - rechner wird langsamer HAllo Schrauber, habe alles ausgeführt, funktionierte aber nur im abgesicherten Modus von Windows, deshalb bin ich mir nicht sicher, ob ich alles habe... Auf jeden Fall ist vom CouponDropDown nix mehr zu sehen. und die programme zeigten auch nix infiziertes mehr. Es könnte jedoch sein, dass meine admin-kennung verändert wurde, so dass ich nix mehr installieren bzw. ändern kann... kann man (außer alles NEU) da noch was machen? danke für deine mühen und zeit, geravo15 |
|
23.10.2013, 14:22
| #11 | |
| /// the machine /// TB-Ausbilder | CouponDropDown über Firefox eingefangen - rechner wird langsamerZitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.10.2013, 21:47
| #12 |
| | CouponDropDown über Firefox eingefangen - rechner wird langsamer Hallo Schrauber, nun es ist so, dass ich keine ausreichenden Berechtigungen habe, um Anwendungen zu installieren. Egal, ob die Anwendungen imn den Ordnern vom "admin" oder anderen Nutzern sind. Warum das so ist, kann ich Dir leider nicht sagen bzw. irgendwo die entsprechenden Änderungen erkennen. ich bin die nächsten 6 Tage nicht am Platz - melde mich dann wieder... geravo15 |
|
24.10.2013, 10:45
| #13 |
| /// the machine /// TB-Ausbilder | CouponDropDown über Firefox eingefangen - rechner wird langsamer Was genau kommt an Fehlermeldung? Bitte noch en frisches FRST log posten.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.11.2013, 16:07
| #14 |
| | CouponDropDown über Firefox eingefangen - rechner wird langsamer HAllo Schrauber, Entschuldigung wegen der Pause - ein paar Tage Urlaub und wieder Verzweiflung hinsichtl. des Rechners... Nix neues, viele Anwendungen sind über eine Admin-Kennung geschützt, so dass die Meldung erscheint: Auf das angegebene Gerät bzw. den Pfad oder die Datei kann nicht zugegriffen werden. Sie verfügen evtl. nicht über ausreichende Berechtigungen, um auf das Element zugreifen zu können. Dies ist z.B. bei FRST.exe so und bei anderen Anwendungen, die ich eigentlich als admin geladen habe. Im abgesicherten Modus ist aber alles o.k. und ich kann auf alle "meine" Programme als admin zugreifen. Hier noch ein neues FRST-Log FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-11-2013
Ran by geravo (administrator) on ASUS on 20-11-2013 15:44:06
Running from C:\Users\geravo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VOCX7CHJ
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Safe Mode (with Networking)
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [@OnlineArmor GUI] - C:\Program Files (x86)\Online Armor\oaui.exe [2345000 2010-11-03] (Emsi Software GmbH)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2779024 2011-03-14] (CANON INC.)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe -update activex [829832 2013-10-08] (Adobe Systems Incorporated)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: {4fbbd04a-e4e0-11df-af69-e0cb4e29e6bb} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Start.hta
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDECK.EXE [2245120 2009-09-17] (VIA)
HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKU\bianca\...\Policies\system: [LogonHoursAction] 2
HKU\bianca\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\gerald\...\Policies\system: [LogonHoursAction] 2
HKU\gerald\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lunis\...\Policies\system: [LogonHoursAction] 2
HKU\Lunis\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\smilla\...\Policies\system: [LogonHoursAction] 2
HKU\smilla\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\geravo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Lunis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
URLSearchHook: HKCU - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: HKLM-x32 {15BE8BEE-4105-4A79-B385-25068AA967DB} hxxp://dizun95pzobbc.cloudfront.net/VBIMDPlayer.CAB
DPF: HKLM-x32 {32E7B36C-7960-4A42-B83B-D8AFD0AAEF2B} hxxp://dizun95pzobbc.cloudfront.net/INDBrowser.CAB
Handler: fluxhttp\0x00000007 - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: fluxhttp\0x00000007 - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - C:\Program Files (x86)\Common Files\fluxDVD\Lib\XEB\xebnavigation.ax (ACE GmbH)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @fluxdvd.com/NPWMDRMWrapper - C:\Program Files (x86)\Videoload Manager\NPWMDRMWrapper.dll ( )
FF Plugin-x32: @java.com/DTPlugin,version=10.10.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM - C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: @real.com/nppl3260;version=16.0.1.18 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.1.18 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\geravo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: DownloadHelper - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: BonanzaDeals - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\Extensions.rdf
FF Extension: firefox - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\firefox@ghostery.com.xpi
FF Extension: No Name - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\installed-extensions.txt
FF Extension: Adblock Plus - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: computerbildabzockschutz - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi
FF Extension: downloadmgr - C:\Users\geravo\AppData\Roaming\Mozilla\Firefox\Profiles\k1uipqg5.default\Extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}.xpi
FF Extension: Skype extension for Firefox - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\Extensions.rdf
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\installed-extensions-processed.txt
FF HKLM-x32\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
==================== Services (Whitelisted) =================
S2 AAV UpdateService; C:\Program Files (x86)\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
S2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
S2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S2 OAcat; C:\Program Files (x86)\Online Armor\OAcat.exe [380784 2010-11-03] (Emsi Software GmbH)
S2 OberonGameConsoleService; C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe [44312 2009-09-15] ()
S2 Prosieben; C:\Program Files (x86)\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
S2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [266343 2006-09-29] ()
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S2 SvcOnlineArmor; C:\Program Files (x86)\Online Armor\oasrv.exe [3652696 2010-11-03] (Emsi Software GmbH)
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [229520 2011-12-08] (soft Xpansion)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
S2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-25] (Avira Operations GmbH & Co. KG)
S3 FNETTHJM; C:\Windows\SysWow64\drivers\fnetthjm.sys [24448 2011-09-21] (FNet Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S1 OADevice; C:\Windows\SysWow64\Drivers\OADriver.sys [54864 2010-11-03] ()
S1 oahlpXX; C:\Windows\syswow64\drivers\oahlp64.sys [54896 2010-11-03] ()
R1 OAmon; C:\Windows\SysWOW64\Drivers\OAmon.sys [37872 2010-11-03] (Emsisoft)
R3 OAnet; C:\Windows\System32\DRIVERS\oanet.sys [32728 2010-11-03] (Emsisoft)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-05-20] ()
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
U3 tmlwf;
U3 tmwfp;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-18 16:25 - 2013-11-18 16:25 - 00003354 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1004
2013-11-14 07:23 - 2013-11-14 07:23 - 04318040 _____ (Systweak Inc ) C:\Users\geravo\Downloads\sysrc_trial_25044.exe
2013-11-13 20:08 - 2013-11-20 14:30 - 00003224 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-11-12 22:16 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-12 22:16 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-12 22:16 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-12 22:16 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-12 22:16 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-12 22:16 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-12 22:16 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-12 22:16 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-12 22:16 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-12 22:16 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-12 22:16 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-12 22:16 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-12 22:16 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-12 22:16 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-12 22:16 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-12 22:16 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-12 22:16 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-12 22:16 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-12 22:16 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-12 22:16 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-12 22:16 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-12 22:16 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-12 22:16 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-12 22:15 - 2013-11-12 22:15 - 00000000 ____D C:\Users\geravo\AppData\Local\Microsoft Help
2013-11-12 22:15 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-12 22:15 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-12 22:15 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-12 22:15 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-12 22:15 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-12 22:15 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-12 22:15 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-12 22:15 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-12 22:07 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-12 22:07 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-12 22:07 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-12 22:07 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-12 22:07 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-12 22:07 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-12 22:07 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-12 22:07 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-12 22:07 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-12 22:07 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-12 22:07 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-12 22:07 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-12 22:07 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-12 22:07 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-12 22:07 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-12 22:07 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-12 22:07 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-12 22:07 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-12 22:07 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-12 22:07 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-12 22:07 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-12 22:07 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-12 22:07 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-12 22:07 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-12 22:07 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-12 22:07 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-12 22:06 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-12 22:06 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-12 22:06 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-12 22:06 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-11 17:21 - 2013-11-18 18:13 - 01102835 _____ C:\Users\Lunis\Documents\einsiedelMappe.odt
2013-11-09 20:32 - 2013-11-09 20:32 - 00000000 ____D C:\Users\smilla\AppData\Roaming\Avira
2013-11-09 20:29 - 2013-11-09 20:29 - 00000000 ____D C:\Users\smilla\AppData\Roaming\RealNetworks
2013-11-09 20:26 - 2013-11-09 20:26 - 00000000 ____D C:\Users\smilla\AppData\Roaming\Canon
2013-11-05 18:28 - 2013-11-05 19:19 - 00018650 _____ C:\Users\Lunis\Documents\einsiedel.odt
2013-11-05 16:46 - 2013-11-05 16:46 - 00000000 ____D C:\Users\Lunis\AppData\Roaming\OpenOffice.org
2013-11-04 14:46 - 2013-11-04 14:46 - 00000000 ____D C:\Users\bianca\AppData\Roaming\Avira
2013-11-04 14:41 - 2013-11-04 14:41 - 00000000 ____D C:\Users\bianca\AppData\Roaming\Canon
2013-11-03 14:50 - 2013-11-03 14:50 - 00000000 ____D C:\Users\gerald\AppData\Roaming\Malwarebytes
2013-10-24 04:51 - 2013-10-24 04:51 - 102749940 _____ C:\Windows\SysWOW64\伟�ᵌ”
2013-10-22 20:36 - 2013-10-22 20:36 - 01071584 _____ (Solid State Networks) C:\Users\geravo\Downloads\install_flashplayer11x32ax_gtbd_chrd_dn_awc_aih.exe
==================== One Month Modified Files and Folders =======
2013-11-20 14:58 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-20 14:57 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-20 14:56 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-20 14:55 - 2013-09-21 13:46 - 00009464 _____ C:\Windows\setupact.log
2013-11-20 14:53 - 2009-12-04 15:24 - 01224373 _____ C:\Windows\WindowsUpdate.log
2013-11-20 14:30 - 2013-11-13 20:08 - 00003224 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-11-20 14:30 - 2013-10-20 22:21 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-11-20 14:30 - 2013-03-28 17:38 - 00000292 _____ C:\Windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001.job
2013-11-20 14:29 - 2010-04-21 13:06 - 00000000 ____D C:\Users\geravo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-11-19 23:47 - 2009-12-04 15:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-19 23:42 - 2013-03-15 08:43 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CE0FFBDB-F429-4EBD-95C6-71B0311BC769}
2013-11-19 23:09 - 2012-09-01 21:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-19 19:50 - 2013-02-02 19:51 - 00001151 _____ C:\Users\geravo\Desktop\CyberLink PowerDVD.lnk
2013-11-19 17:06 - 2010-04-25 12:24 - 00000000 ____D C:\Users\Lunis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-11-18 20:04 - 2013-03-16 14:45 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0ECC0906-A305-4ACF-85A1-CC097B150350}
2013-11-18 18:13 - 2013-11-11 17:21 - 01102835 _____ C:\Users\Lunis\Documents\einsiedelMappe.odt
2013-11-18 16:25 - 2013-11-18 16:25 - 00003354 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1004
2013-11-18 16:25 - 2013-05-20 20:14 - 00003220 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1004
2013-11-17 14:43 - 2013-09-21 13:45 - 00069662 _____ C:\Windows\PFRO.log
2013-11-17 14:43 - 2013-03-28 17:38 - 00000300 _____ C:\Windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001.job
2013-11-17 13:35 - 2011-11-15 22:50 - 00003758 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm
2013-11-17 12:24 - 2013-01-15 12:08 - 00002888 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-11-17 12:24 - 2013-01-15 12:08 - 00002578 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2829201447-1278458584-3682469480-1001
2013-11-16 14:26 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-16 10:07 - 2010-11-26 12:29 - 00000000 ____D C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-11-14 11:54 - 2009-08-04 10:51 - 00648924 _____ C:\Windows\system32\perfh007.dat
2013-11-14 11:54 - 2009-08-04 10:51 - 00129654 _____ C:\Windows\system32\perfc007.dat
2013-11-14 11:54 - 2009-07-14 06:13 - 01521178 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-14 07:23 - 2013-11-14 07:23 - 04318040 _____ (Systweak Inc ) C:\Users\geravo\Downloads\sysrc_trial_25044.exe
2013-11-14 07:13 - 2010-01-07 19:25 - 00000000 ____D C:\Users\geravo
2013-11-12 22:15 - 2013-11-12 22:15 - 00000000 ____D C:\Users\geravo\AppData\Local\Microsoft Help
2013-11-12 22:13 - 2013-08-23 12:38 - 00000000 ____D C:\Windows\system32\MRT
2013-11-12 22:09 - 2010-01-09 21:00 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-12 00:00 - 2013-08-25 20:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-11-10 21:12 - 2010-11-26 12:30 - 00131496 _____ C:\Users\gerald\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-09 20:32 - 2013-11-09 20:32 - 00000000 ____D C:\Users\smilla\AppData\Roaming\Avira
2013-11-09 20:29 - 2013-11-09 20:29 - 00000000 ____D C:\Users\smilla\AppData\Roaming\RealNetworks
2013-11-09 20:27 - 2011-07-03 13:52 - 00131496 _____ C:\Users\smilla\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-09 20:26 - 2013-11-09 20:26 - 00000000 ____D C:\Users\smilla\AppData\Roaming\Canon
2013-11-09 20:26 - 2011-07-03 13:52 - 00000000 ___RD C:\Users\smilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-09 20:26 - 2011-07-03 13:52 - 00000000 ___RD C:\Users\smilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-09 20:26 - 2011-07-03 13:50 - 00000000 ____D C:\Users\smilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-11-09 20:25 - 2011-07-03 13:52 - 00001427 _____ C:\Users\smilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-06 23:12 - 2010-11-26 12:29 - 00000000 ___RD C:\Users\gerald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-05 21:45 - 2013-07-24 20:57 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-11-05 19:19 - 2013-11-05 18:28 - 00018650 _____ C:\Users\Lunis\Documents\einsiedel.odt
2013-11-05 16:56 - 2011-05-28 15:24 - 00000000 ____D C:\Users\Lunis\AppData\Local\Microsoft Games
2013-11-05 16:47 - 2010-02-07 12:09 - 00000000 ___RD C:\Users\Lunis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-05 16:46 - 2013-11-05 16:46 - 00000000 ____D C:\Users\Lunis\AppData\Roaming\OpenOffice.org
2013-11-04 15:16 - 2013-03-17 17:00 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{4E47ECB9-BE3C-4742-98A3-60D33280BC7C}
2013-11-04 14:46 - 2013-11-04 14:46 - 00000000 ____D C:\Users\bianca\AppData\Roaming\Avira
2013-11-04 14:41 - 2013-11-04 14:41 - 00000000 ____D C:\Users\bianca\AppData\Roaming\Canon
2013-11-04 14:41 - 2010-10-23 19:58 - 00000000 ____D C:\Users\bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-11-04 14:41 - 2010-02-22 19:39 - 00131496 _____ C:\Users\bianca\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-04 14:40 - 2010-02-22 19:38 - 00000000 ___RD C:\Users\bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-04 14:40 - 2010-02-22 19:38 - 00000000 ___RD C:\Users\bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-03 19:09 - 2010-02-07 12:09 - 00131496 _____ C:\Users\Lunis\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-03 14:50 - 2013-11-03 14:50 - 00000000 ____D C:\Users\gerald\AppData\Roaming\Malwarebytes
2013-10-24 04:51 - 2013-10-24 04:51 - 102749940 _____ C:\Windows\SysWOW64\伟�ᵌ”
2013-10-23 20:31 - 2013-09-23 06:24 - 00131496 _____ C:\Users\geravo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-22 20:36 - 2013-10-22 20:36 - 01071584 _____ (Solid State Networks) C:\Users\geravo\Downloads\install_flashplayer11x32ax_gtbd_chrd_dn_awc_aih.exe
Some content of TEMP:
====================
C:\Users\bianca\AppData\Local\Temp\AskSLib.dll
C:\Users\bianca\AppData\Local\Temp\drm_dyndata_7400008.dll
C:\Users\gerald\AppData\Local\Temp\AskSLib.dll
C:\Users\gerald\AppData\Local\Temp\extension3565860625240821459.dll
C:\Users\gerald\AppData\Local\Temp\extension3934635038006873656.dll
C:\Users\gerald\AppData\Local\Temp\extension4628673033288865425.dll
C:\Users\gerald\AppData\Local\Temp\extension8543126018309588022.dll
C:\Users\gerald\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Lunis\AppData\Local\Temp\AskSLib.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-11 18:02
==================== End Of Log ============================
hast Du eine Idee, was ich weiter machen könnte? danke |
|
21.11.2013, 11:46
| #15 |
| /// the machine /// TB-Ausbilder | CouponDropDown über Firefox eingefangen - rechner wird langsamer Win7 DVD zur Hand?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu CouponDropDown über Firefox eingefangen - rechner wird langsamer |
| adminrechte, avira, eingefangen, entferne, entfernen, erstellt, explorer, gefangen, gefundene, internetexplorer, konnte, langsamer, neuinstallieren, nicht mehr, pup.optional.digitalsite.a, pup.optional.installcore, pup.optional.installcore.a, pup.optional.pcfixspeed.a, pup.optional.wajam, rechner, spyboot |
Linear-Darstellung
