| |
| |||||||
Log-Analyse und Auswertung: Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefundenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
09.12.2013, 08:50
| #1 |
 |  Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Hallo, ich habe dasselbe Problem, das ich schon in einem anderen Thread gelesen habe, aber nicht weiß, wie ich es bei mir lösen kann. Beim Hochfahren meines PC kommt diese Meldung: RunDLL Problem beim Start von C:\Users\Benutzername\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll Das angegebene Modul wurde nicht gefunden. In einem anderen Thread habe ich gelesen, daß zunächst FRST64 gestartet werden soll. Habe ich gemacht; hier die LogFiles: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 03
Ran by Benutzername (administrator) on PC on 09-12-2013 08:27:10
Running from G:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Program Files (x86)\FOXIT SOFTWARE\FOXIT READER\Foxit Reader.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] ()
Winlogon\Notify\ScCertProp: C:\Windows\SysWOW64\explorer.exe (Microsoft Corporation)
HKCU\...\Run: [BackgroundContainer] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Benutzername\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [NWEReboot] - [x]
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Up-date\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-21] (AVAST Software)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\da89f187-2013-45e2-8d0a-7564b3210415.exe [180184 2013-11-23] (AVAST Software)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [623376 2013-11-18] (BlueStack Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://media.radiosai.org/www/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE7F40B6E99C0CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.1und1.de/br/ie9_startpage
URLSearchHook: HKLM-x32 - (No Name) - {422f7661-9403-4da4-b4ef-cc3e268817b5} - No File
URLSearchHook: HKCU - (No Name) - {422f7661-9403-4da4-b4ef-cc3e268817b5} - No File
SearchScopes: HKCU - DefaultScope {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKCU - {40064957-18EB-412d-9146-3F57E8D92EEC} URL = hxxp://go.1und1.de/br/ie9_search_pic/?su={searchTerms}
SearchScopes: HKCU - {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.net/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {64A0CF90-33DD-4B42-88A1-4AF10528A62F} URL = hxxp://suche.web.de/search/web/?mc=hp%40suche.suche%40home&mc=hp%40suche.suche%40home&su={searchTerms}&x=37&y=6
SearchScopes: HKCU - {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {8D27B32E-89EE-460e-82D2-5FC354078EAD} URL = hxxp://go.1und1.de/br/ie9_search_produkte/?su={searchTerms}
SearchScopes: HKCU - {94403E0D-8048-42DB-B16B-22B5AA70D423} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3317892&CUI=UN21651529163045011&UM=2
SearchScopes: HKCU - {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL =
SearchScopes: HKCU - {DCE59F23-A446-45a5-9459-E68FDC0DE38D} URL = hxxp://go.1und1.de/br/ie9_search_maps/?su={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Soft-ware\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (Real-Player)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - No Name - {422f7661-9403-4da4-b4ef-cc3e268817b5} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {422F7661-9403-4DA4-B4EF-CC3E268817B5} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524
FF NewTab: about:blank
FF Homepage: hxxp://www.benefind.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silver-light\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vi-sion\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll No File
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\searchplugins\benefind.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Shop-Alarm - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\971d5a0e-9273-487f-b423-ed4d001e437a@73136d87-5f3a-4380-8edb-16a7fa56bbc4.com
FF Extension: Garmin Communicator - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: keyloggerbeater - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\keyloggerbeater@toptip.ca.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKCU\...\Firefox\Extensions: [firejump@firejump.net] - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8jv9no8s.default\extensions\firejump@firejump.net
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: () - C:\Users\Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: () - C:\Users\Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab
CHR Extension: () - C:\Users\Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-21] (AVAST Soft-ware)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [398096 2013-11-18] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-11-18] (BlueStack Systems, Inc.)
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Ser-vice\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [231936 2012-03-23] (Samsung Electronics Co., Ltd.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [993848 2011-04-19] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-04-19] (Secunia)
S2 AcrSch2Svc; "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe" [x]
==================== Drivers (Whitelisted) ====================
R1 27784551; C:\Windows\System32\DRIVERS\27784551.sys [157712 2009-09-25] (Kaspersky Lab)
R0 27784552; C:\Windows\System32\DRIVERS\27784552.sys [40464 2009-10-22] (Kaspersky Lab)
R1 73230381; C:\Windows\System32\DRIVERS\73230381.sys [157712 2009-09-25] (Kaspersky Lab)
R0 73230382; C:\Windows\System32\DRIVERS\73230382.sys [40464 2009-10-22] (Kaspersky Lab)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-01] (Wondershare)
R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-21] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-21] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [77584 2013-11-18] (BlueStack Systems)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
S3 eh100; C:\Windows\System32\DRIVERS\eh100.sys [45568 2009-11-11] (SCM Microsystems Inc.)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S0 snapman; C:\Windows\SysWow64\DRIVERS\snapman.sys [96320 2011-01-30] (Acronis)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST
2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk
2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2013-12-08 10:17 - 2013-12-09 07:54 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-12-08 10:12 - 2013-12-09 07:46 - 00000112 _____ C:\Windows\setupact.log
2013-12-08 10:12 - 2013-12-08 10:12 - 00000000 _____ C:\Windows\setuperr.log
2013-12-08 10:11 - 2013-12-09 07:46 - 00000968 _____ C:\Windows\PFRO.log
2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini
2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B}
2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6}
2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk
2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32
2013-12-01 22:52 - 2013-12-01 22:56 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\FileZilla
2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Benutzername\Desktop\BrccMCtl.exe - Ver-knüpfung.lnk
2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT
2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother
2013-11-27 18:38 - 2009-01-15 19:20 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2013-11-27 18:38 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2013-11-27 18:38 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2013-11-27 18:38 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll
2013-11-27 18:38 - 2003-11-28 18:57 - 00000000 _____ C:\Windows\brdfxspd.dat
2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\InstallShield
2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-27 16:33 - 2013-11-27 16:37 - 00032768 ___SH C:\Users\Benutzername\Documents\Thumbs.db
2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Foxit Reader
2013-11-23 11:58 - 2013-11-23 12:00 - 00000890 _____ C:\Users\Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk
2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk
2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\AVAST Software
2013-11-17 14:40 - 2013-11-17 14:40 - 00000000 ____D C:\Users\Benutzername\AppData\Local\{FB739428-8E54-405C-9996-126A28D53B10}
2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Benutzername\Documents\ProcAlyzer Dumps
2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 07:34 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-11-14 07:34 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-14 07:34 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-14 07:34 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-11-14 07:34 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-11-14 07:34 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-14 07:34 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-14 07:34 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2013-11-14 07:34 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-11-14 07:34 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-11-14 07:34 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-11-14 07:34 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-11-14 07:34 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-11-14 07:34 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-14 07:34 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2013-11-14 07:34 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-11-14 07:34 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-14 07:34 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-11-14 07:28 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2013-11-14 07:28 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2013-11-14 07:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 07:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 07:12 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 07:12 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 07:12 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 07:12 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 07:12 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 07:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 07:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 07:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 07:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 07:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 07:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 07:12 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 07:12 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 07:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 07:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 07:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 07:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 07:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 07:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 07:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 07:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 07:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 07:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 07:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 07:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 07:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 07:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 07:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 06:57 - 2013-09-06 07:55 - 06583664 _____ (AVAST Software) C:\Program1
2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE
2013-11-09 21:13 - 2013-08-16 13:56 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll
2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Benutzername\Desktop\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11
==================== One Month Modified Files and Folders =======
2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST
2013-12-09 08:16 - 2011-02-10 07:48 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-09 08:15 - 2011-01-30 17:08 - 00000947 _____ C:\Windows\Brpfx04a.ini
2013-12-09 07:55 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-09 07:55 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-09 07:54 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-12-09 07:46 - 2013-12-08 10:12 - 00000112 _____ C:\Windows\setupact.log
2013-12-09 07:46 - 2013-12-08 10:11 - 00000968 _____ C:\Windows\PFRO.log
2013-12-09 07:46 - 2011-06-16 19:54 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-09 07:46 - 2011-02-10 07:48 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-09 07:46 - 2011-01-31 20:15 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-12-09 07:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-08 22:09 - 2011-01-30 16:41 - 01954491 _____ C:\Windows\WindowsUpdate.log
2013-12-08 21:58 - 2011-08-13 13:19 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Skype
2013-12-08 21:37 - 2013-01-06 19:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-08 20:49 - 2013-10-18 19:49 - 00000000 ____D C:\Program Files (x86)\File Type Advisor
2013-12-08 15:02 - 2013-10-16 20:24 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk
2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2013-12-08 10:18 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-12-08 10:12 - 2013-12-08 10:12 - 00000000 _____ C:\Windows\setuperr.log
2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini
2013-12-08 09:11 - 2012-11-05 20:59 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-08 08:49 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat
2013-12-08 08:49 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat
2013-12-08 08:49 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B}
2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6}
2013-12-07 23:24 - 2013-03-28 07:25 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-07 23:18 - 2011-01-30 16:45 - 00000000 ____D C:\Users\Benutzername
2013-12-07 23:17 - 2011-06-22 10:38 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\PC-FAX TX
2013-12-07 23:17 - 2011-02-02 22:42 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Google
2013-12-07 23:17 - 2011-01-31 09:05 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\IrfanView
2013-12-07 23:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2013-12-07 23:16 - 2011-06-26 11:32 - 00000000 ____D C:\ProgramData\Real
2013-12-07 23:16 - 2011-02-10 07:48 - 00000000 ____D C:\Program Files\Google
2013-12-07 23:16 - 2011-02-10 07:47 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-07 23:16 - 2011-02-02 22:42 - 00000000 ____D C:\ProgramData\Google
2013-12-07 23:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-06 10:55 - 2011-02-04 19:07 - 00000000 ____D C:\Users\Benutzername\AppData\Local\FreePDF_XP
2013-12-03 18:27 - 2012-10-02 13:42 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\korAccount
2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk
2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32
2013-12-01 22:56 - 2013-12-01 22:52 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\FileZilla
2013-11-30 20:49 - 2013-10-18 19:49 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck
2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk
2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT
2013-11-27 18:39 - 2011-01-30 17:08 - 00000467 _____ C:\Windows\BRWMARK.INI
2013-11-27 18:39 - 2011-01-30 17:08 - 00000169 _____ C:\Windows\brpcfx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother
2013-11-27 18:38 - 2011-01-30 17:01 - 00000050 _____ C:\Windows\system32\bd7420.dat
2013-11-27 18:38 - 2011-01-28 11:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Infor-mation
2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\InstallShield
2013-11-27 18:34 - 2011-01-28 10:59 - 00000000 ____D C:\Windows\Panther
2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-27 16:37 - 2013-11-27 16:33 - 00032768 ___SH C:\Users\Benutzername\Documents\Thumbs.db
2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Foxit Reader
2013-11-26 19:27 - 2012-08-24 06:23 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-26 19:27 - 2011-08-13 13:19 - 00000000 ____D C:\ProgramData\Skype
2013-11-25 20:25 - 2013-05-08 06:08 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-25 20:25 - 2013-03-28 07:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-25 20:25 - 2013-03-28 07:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-25 12:02 - 2011-01-30 20:23 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Microsoft Help
2013-11-25 12:02 - 2011-01-30 20:22 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-23 13:39 - 2011-01-30 19:49 - 00000000 ____D C:\ProgramData\PSYPRCFG
2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\ProgramData\Psyprax32
2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\Program Files (x86)\Psyprax32
2013-11-23 12:00 - 2013-11-23 11:58 - 00000890 _____ C:\Users\Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk
2013-11-22 16:09 - 2011-01-30 23:26 - 00000000 ____D C:\Program Files (x86)\svnet
2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk
2013-11-22 12:00 - 2011-01-31 21:36 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\vlc
2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\AVAST Software
2013-11-21 15:07 - 2013-03-05 07:42 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-11-21 15:07 - 2013-03-05 07:42 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-11-21 15:07 - 2012-11-05 20:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-11-21 15:07 - 2011-06-29 07:56 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-11-21 07:42 - 2013-01-06 19:57 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-21 07:42 - 2012-04-04 14:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-21 07:42 - 2011-05-16 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-21 07:42 - 2011-02-01 11:59 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Adobe
2013-11-21 07:02 - 2013-09-12 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-20 23:20 - 2013-10-12 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-11-19 14:32 - 2013-10-09 21:52 - 00000919 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-17 20:45 - 2013-11-02 08:26 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-11-17 14:58 - 2013-10-19 19:49 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\FileAdvisor
2013-11-17 14:40 - 2013-11-17 14:40 - 00000000 ____D C:\Users\Benutzername\AppData\Local\{FB739428-8E54-405C-9996-126A28D53B10}
2013-11-17 14:40 - 2011-02-01 14:00 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Windows Live
2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Benutzername\Documents\ProcAlyzer Dumps
2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 12:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-14 08:24 - 2013-05-11 06:48 - 00001431 _____ C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-14 08:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 07:34 - 2013-08-14 21:25 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 07:32 - 2011-01-31 21:26 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 14:05 - 2011-01-31 17:25 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-11-13 12:00 - 2011-01-31 17:28 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Yahoo
2013-11-11 05:50 - 2011-01-30 16:59 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-10 11:42 - 2012-12-25 14:30 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Foxit Software
2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE
2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Benutzername\Desktop\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11
2013-11-09 08:59 - 2013-05-21 19:25 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Zeta Producer 11
Some content of TEMP:
====================
C:\Users\Benutzername\AppData\Local\Temp\avgnt.exe
C:\Users\Benutzername\AppData\Local\Temp\Checkupdate.exe
C:\Users\Benutzername\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Benutzername\AppData\Local\Temp\gcapi_dll.dll
C:\Users\Benutzername\AppData\Local\Temp\gtapi_signed.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-20 20:18
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-12-2013 03
Ran by Josef Robrecht at 2013-12-09 08:28:21
Running from G:\
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (x32)
1&1 Upload-Manager (x32 Version: 2.0.676)
Adobe AIR (x32 Version: 3.9.0.1210)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.152)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.5.146)
Apple Application Support (x32 Version: 1.4.1)
Apple Software Update (x32 Version: 2.1.1.116)
avast! Free Antivirus (x32 Version: 9.0.2008)
Avira Free Antivirus (x32 Version: 14.0.1.759)
BlueStacks App Player (x32 Version: 0.8.2.3018)
BlueStacks Notification Center (x32 Version: 0.8.2.3018)
Brother MFL-Pro Suite MFC-7420 (x32 Version: 1.0.1.0)
capella reader 6.0 (x32 Version: 6.0.19.0)
CCleaner (Version: 4.08)
CloudReading (x32 Version: 1.0.27.1025)
Common Desktop Agent (Version: 1.53.0)
CompuGROUP Java 1.6.0.11.1 (x32)
Cool Edit Pro 2.0 (x32)
cyberJack Base Components (x32 Version: 6.10.0)
D3DX10 (x32 Version: 15.4.2368.0902)
DesignPro SE eMedia (x32 Version: 5.0.1056)
Desktop Icon für Amazon (Version: 1.0.1 (de))
eHealth200 BCS Terminal (x32 Version: 1.13)
eHealth500 Terminal (x32 Version: 1.05)
Elevated Installer (x32 Version: 2.1.13)
Fahrtenbuch mmm/fb Version 2008 (x32)
File Type Advisor 1.0 (x32)
FilterFTP (x32 Version: Actual Version)
FireJump (x32 Version: 1.0.2.5)
FormatFactory 3.0.1 (x32 Version: 3.0.1)
Foxit Reader (x32 Version: 6.1.1.1031)
Free M4a to MP3 Converter 8.0 (x32)
Free Video Flip and Rotate version 2.1.6.128 (x32 Version: 2.1.6.128)
Free Video to DVD Converter version 5.0.9.412 (x32 Version: 5.0.9.412)
Free Video to MP3 Converter version 5.0.6.221 (x32 Version: 5.0.6.221)
Free YouTube Download version 3.1.24.412 (x32 Version: 3.1.24.412)
FreeOCR 3.0 (Version: 3.0)
FreePDF (Remove only) (x32)
Garmin Express (x32 Version: 2.1.13)
Garmin Express Tray (x32 Version: 2.1.13)
Garmin Update Service (x32 Version: 2.1.13)
GMX SMS-Manager (x32 Version: 2.7.2)
GMX SMS-Manager (x32 Version: 2.7.2.6)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)
Google Update Helper (x32 Version: 1.3.21.165)
GPL Ghostscript 9.00 (x32)
Helium Audio Converter (build 245) (x32 Version: 1.3.0.245)
IrfanView (remove only) (x32 Version: 4.36)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
korAccount 3 (x32 Version: 3.3.31)
Logitech Webcam Software (Version: 12.10.1113)
Logitech Webcam Software-Treiberpaket (Version: 12.10.1110)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
MediaCoder x64 0.8.21.5392 (Version: 0.8.21.5392)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 24.1.1)
Mozilla Thunderbird 24.1.1 (x86 de) (x32 Version: 24.1.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
MuseScore 1.0 MuseScore score typesetter (x32 Version: 1.0.0)
MyFreeCodec (HKCU)
Nero BurnLite 10 (x32 Version: 10.0.10500.5.100)
Nero BurnLite 10 (x32 Version: 10.0.10600)
Nero Control Center 10 (x32 Version: 10.6.13000.0.11)
Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10700)
Nero Core Components 10 (x32 Version: 2.0.19900.9.11)
Nero Update (x32 Version: 11.0.11500.28.0)
Notepad++ (x32 Version: 5.9)
NVIDIA 3D Vision Treiber 331.65 (Version: 331.65)
NVIDIA Grafiktreiber 331.65 (Version: 331.65)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.133.889)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165)
NVIDIA Systemsteuerung 331.65 (Version: 331.65)
NVIDIA Update 1.15.2 (Version: 1.15.2)
NVIDIA Update Components (Version: 1.15.2)
PaperPort (x32 Version: 9.02.0814)
PDFCreator (x32 Version: 1.1.0)
PL-2303 USB-to-Serial (x32 Version: 1.3.0)
Psyprax (x32)
QuickTime (x32 Version: 7.74.80.86)
RadioTotal1 Toolbar for IE (x32 Version: 6.17.1.25)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6215)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Recuva (Version: 1.42)
RedMon - Redirection Port Monitor
RST-MED / ICD-10-GM 2012 Thesaurus (x32 Version: 4.2.0.0)
Samsung Easy Printer Manager (x32 Version: 1.02.06.10)
Samsung Network PC Fax (x32 Version: 1.05.29.00)
Samsung Printer Live Update (x32 Version: 1.01.00:04(2013-04-22))
Samsung Scan Assistant (x32 Version: 1.04.45.00)
Samsung SCX-472x Series (x32 Version: 1.15 (28.05.2012))
Secunia PSI (2.0.0.3003) (x32)
SkillsTraining für Borderline-Patienten (x32 Version: 1.1.34)
Skype™ 6.11 (x32 Version: 6.11.102)
Spybot - Search & Destroy (x32 Version: 2.1.19)
sv.net (x32 Version: 13.2)
swMSM (x32 Version: 12.0.0.1)
TeamViewer 8 (x32 Version: 8.0.22298)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VideoPad Videobearbeitungs-Software (x32)
VIS (x32)
VLC media player 2.1.1 (x32 Version: 2.1.1)
VR-NetWorld (x32)
WEB.DE MailCheck für Mozilla Firefox (x32 Version: 2.1.4.1420)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3502.0922)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3502.0922)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0)
XMind (x32 Version: 3.2.1)
Yahoo! Messenger (x32)
Zeta Producer 11 11.4.2 (nur entfernen) (HKCU Version: 11.4.2)
==================== Restore Points =========================
07-12-2013 21:55:12 Removed BlueStacks Notification Center
07-12-2013 22:14:17 Wiederherstellungsvorgang
07-12-2013 22:20:04 avast! antivirus system restore point
07-12-2013 22:24:36 Windows Update
07-12-2013 22:56:50 Removed BlueStacks Notification Center
08-12-2013 08:05:55 Removed BlueStacks Notification Center
08-12-2013 11:00:37 Windows-Sicherung
08-12-2013 15:56:04 Windows-Sicherung
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {23DE297F-9CB4-4AB1-B5B3-DD6964E486AD} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-21] (AVAST Software)
Task: {2EAB93CF-3A21-4F66-B329-BD17F87309C5} - System32\Tasks\{E63939F1-0BC4-4D9D-B409-189EA9BA1C9F} => C:\Program Files (x86)\Common Files\microsoft shared\PhotoEd\PHOTOED.EXE [2000-12-15] (Microsoft Corporation)
Task: {3FB40B39-2C0F-43F9-8247-A1462F5A0D28} - System32\Tasks\{7C82D7F2-08EA-4333-8EA7-FE176942F802} => H:\Acronis.True.Image.v9.0.2323\setup.exe
Task: {49A7011E-AD2E-48A3-BD73-C4BDF1A6AA2F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {4D1F6C6D-DD0D-42A0-89B5-2D0627CE8DD3} - System32\Tasks\NeroLaufwerkssicherungC => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {4EFC51CC-B712-4EE1-81C9-4DD8FFF23EAA} - System32\Tasks\FileAdvisorCheck => C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe [2013-07-12] (filetypeadvisor.com )
Task: {553C22DC-08AF-47F7-8D09-BD32CD89EE74} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {59F28BA5-4164-4F83-90F7-63143D9EF39E} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1630602834-2246192719-3532302717-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: {5CBA4D7E-1CEC-4A90-A2C4-BF756C169DC1} - System32\Tasks\NCH Software\videopadShakeIcon => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [2013-11-02] (NCH Software)
Task: {63A241CA-BB1F-4413-8099-431AAC30F690} - System32\Tasks\Josef Robrecht Local Autobackup 5 4 => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {6648226C-F9D8-4E67-B55D-DACDB4E22249} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1630602834-2246192719-3532302717-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: {693D82C2-679C-46B9-903E-EAFB0907DCAA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {6FA8A20F-6C7A-4E56-AFF7-ADD783DDB779} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {7BD61152-2010-45E9-AD36-D7BCF879E2D3} - System32\Tasks\FileAdvisorUpdate => C:\Program Files (x86)\File Type Advisor\fileadvisor.exe [2013-07-12] (File Type Advisor)
Task: {83C76275-584C-4837-96F4-BEC0553849F4} - System32\Tasks\NeroDateisicherungC => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {878ADC9D-572A-4BC1-AAF6-F2E4F5A6CE8B} - System32\Tasks\{59B9C79B-31B4-45F6-840C-30D5C5B7869F} => D:\Nero 7.0 Premium\setupx.exe
Task: {88D8A33A-95ED-415E-B606-DBCD2DB2DEAB} - System32\Tasks\{B0D78F4B-2872-40FD-8324-A2A5E9AC55A0} => C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe [2013-09-05] (Adobe Systems Incorporated)
Task: {8B55C209-CF4F-444C-9016-91710E0BBE20} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {9060B6BE-541E-48F2-80BD-31D2A3D724E7} - System32\Tasks\{EBF376DF-9CC3-4A04-8751-87C323B325D7} => H:\Acronis.True.Image.v9.0.2323\setup.exe
Task: {A2A9CDD7-30A0-4F5A-AE5E-5EEDA98B3802} - System32\Tasks\NeroLaufwerkssicherungCundRecovery => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {A633D176-F4E5-45DF-98DA-9EA0E1FFA8D9} - System32\Tasks\{D289D534-C809-41D8-9387-21EB09910F4E} => C:\Program Files (x86)\svnet\svnet.exe [2013-05-28] (ITSG GmbH)
Task: {BA6F8006-2D57-4D47-8882-212360E1E26F} - System32\Tasks\{395EAFC9-CE5F-46A4-B510-8EAB37D2891B} => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe [2013-10-01] (TeamViewer GmbH)
Task: {BB409853-28D0-49EF-BEF9-AAAACE658C0D} - System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6} => C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe [2013-11-18] (BlueStack Systems, Inc.)
Task: {BB82560E-9A98-4151-BD62-E46D062FE8B9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {BBBEADDD-EA2B-4C38-B6D3-C9D1A4F5B713} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\Josef Robrecht\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION
Task: {C3FC3E86-312D-4E94-AD4A-AE8A8FCBB492} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-10] (Google Inc.)
Task: {CD58EA66-6982-4583-9FB7-1A3CBB781FBC} - System32\Tasks\Josef Robrecht => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {D3A48D0C-CA80-4D5E-B3A3-71112AC837F2} - System32\Tasks\SicherungFestplatteC => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {E34100B2-2A38-4A46-AC87-E91908390C6F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-10] (Google Inc.)
Task: {E77ABB7E-A2CD-40B1-9778-DC283D33DE16} - System32\Tasks\{4DB97B9F-9B7B-4992-A9AC-46E6155AC30B} => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe [2013-10-01] (TeamViewer GmbH)
Task: {F252A275-9B97-46B8-BA6F-5AB478D51560} - System32\Tasks\{BF97051F-EF8D-436D-A0F4-4A23CEE3E943} => C:\Program Files (x86)\Psychoholic Software\Patientenfragebogen\Patientenfragebogen.exe
Task: {F8914082-0FBE-4F81-A21F-77F74A6D716B} - System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B} => C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe [2013-11-18] (BlueStack Systems, Inc.)
Task: {F9779B8F-3E39-4708-A3EB-4D238B674CBB} - System32\Tasks\Josef Robrecht NBAgent 5 4 => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2010-12-17 17:13 - 2010-12-17 17:13 - 00050688 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2013-12-09 07:48 - 2013-12-08 17:08 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13120801\algo.dll
2012-09-29 23:29 - 2012-09-19 18:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-09-14 12:49 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-09-14 12:49 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-09-14 12:49 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-11-21 15:07 - 2013-11-21 15:07 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2011-08-08 07:31 - 2007-05-31 06:38 - 00167936 ____N () C:\Windows\SysWOW64\SerialXP.dll
2013-09-14 12:49 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-09-14 12:49 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-10-12 10:58 - 2013-11-20 23:20 - 03008624 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-10-12 10:58 - 2013-11-20 23:20 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-10-12 10:58 - 2013-11-20 23:20 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-11-09 21:13 - 2013-09-27 14:19 - 00561152 _____ () C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\CommentsSummary.fpi
2013-11-09 21:13 - 2013-09-27 15:54 - 01746432 _____ () C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\Speech.fpi
2013-11-27 18:38 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-11-15 20:16 - 2013-11-15 20:16 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Windows:F8671BEAE7CF0F7B
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/08/2013 05:39:55 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: i_view32.exe, Version: 4.3.6.0, Zeitstempel: 0x51cafb1c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x8bfff632
ID des fehlerhaften Prozesses: 0x1190
Startzeit der fehlerhaften Anwendung: 0xi_view32.exe0
Pfad der fehlerhaften Anwendung: i_view32.exe1
Pfad des fehlerhaften Moduls: i_view32.exe2
Berichtskennung: i_view32.exe3
Error: (12/08/2013 10:14:59 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80070002, "file:///G:\__WordPerfect\">.
Error: (12/08/2013 10:14:59 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80070002, "file:///G:\__Personen\">.
Error: (12/08/2013 10:14:59 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80070003, "file:///G:\_Fotos\KunzmannHelga\">.
Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490)
Error: (12/08/2013 10:14:14 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/08/2013 10:14:14 AM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800)
System errors:
=============
Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (12/09/2013 07:49:24 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (12/09/2013 07:49:24 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (12/09/2013 07:49:14 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (12/09/2013 07:49:14 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (12/09/2013 07:49:14 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (12/09/2013 07:48:49 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
snapman
Microsoft Office Sessions:
=========================
Error: (05/30/2013 10:51:01 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3315 seconds with 1200 seconds of active time. This session ended with a crash.
Error: (01/13/2013 05:25:18 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 19 seconds with 0 seconds of active time. This session ended with a crash.
Error: (09/05/2012 09:17:50 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6579 seconds with 120 seconds of active time. This session ended with a crash.
Error: (05/14/2012 09:44:27 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 11075 seconds with 540 seconds of active time. This session ended with a crash.
Error: (05/01/2012 03:11:36 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 83 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/01/2012 02:35:56 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 58 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/01/2012 02:34:26 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 49 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/01/2012 02:33:24 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 15863 seconds with 10800 seconds of active time. This session ended with a crash.
Error: (02/14/2012 08:38:03 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4536 seconds with 180 seconds of active time. This session ended with a crash.
Error: (02/24/2011 01:03:45 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1974 seconds with 0 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 8151.12 MB
Available physical RAM: 5098.43 MB
Total Pagefile: 16300.41 MB
Available Pagefile: 12444.75 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:467.27 GB) (Free:377.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:195.31 GB) (Free:134.84 GB) NTFS
Drive e: (Sicherung) (Fixed) (Total:259.17 GB) (Free:115.85 GB) NTFS
Drive g: (SEA_DISK) (Fixed) (Total:232.83 GB) (Free:172.39 GB) FAT32
Drive h: (DOROJOSE) (Removable) (Total:1.92 GB) (Free:1.52 GB) FAT
Drive i: (JOSEF 08 GB) (Removable) (Total:7.46 GB) (Free:7.41 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 191EBE5D)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=467 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=195 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=259 GB) - (Type=OF Extended)
========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)
========================================================
Disk: 2 (Size: 2 GB) (Disk ID: 004DF91E)
Partition 1: (Active) - (Size=2 GB) - (Type=06)
========================================================
Disk: 3 (Size: 233 GB) (Disk ID: EEF844D8)
Partition 1: (Active) - (Size=233 GB) - (Type=0C)
==================== End Of Log ============================
Danke! |
|
09.12.2013, 09:15
| #2 |
| /// the machine /// TB-Ausbilder    | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
09.12.2013, 10:54
| #3 |
| | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Vielen Dank für die rasche Antwort. Nun habe ich versucht, alles zu befolgen. Hier sind die Ergebnisse:
__________________Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.09.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16428 Josef Benutzername :: PC [Administrator] 09.12.2013 09:24:12 mbam-log-2013-12-09 (09-24-12).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 236970 Laufzeit: 5 Minute(n), 35 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 3 HKCU\SOFTWARE\BI (PUP.Optional.FilesFrog.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT3317892 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 2 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|BackgroundContainer (PUP.Optional.Conduit) -> Daten: "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Josef Benutzerna-me\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\BI|ui_path_filesfrog (PUP.Optional.FilesFrog.A) -> Daten: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker -> Erfolgreich ge-löscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 4 C:\Users\Josef Benutzername\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Josef Benutzername\AppData\Roaming\OpenCandy\FEC282186F784E23974C4207211CAF59 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3317892 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 4 C:\Users\Josef Benutzerna-me\AppData\Roaming\OpenCandy\FEC282186F784E23974C4207211CAF59\EIE10_DE-DE_WOL_Win764.EXE (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3317892\configutaion.json (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3317892\SetupIcon.ico (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3317892\UninstallerUI.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.014 - Bericht erstellt am 09/12/2013 um 10:13:06
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Josef Benutzername - PC
# Gestartet von : G:\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Conduit
Ordner Gelöscht : C:\ProgramData\FreeRIP
Ordner Gelöscht : C:\ProgramData\NCH Software
Ordner Gelöscht : C:\ProgramData\ParetoLogic
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\Uniblue\DriverScanner
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\NCH Software
Ordner Gelöscht : C:\Program Files (x86)\RadioTotal1
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\LocalLow\RadioTotal1
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\DesktopIconForAmazon
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\DriverCure
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\NCH Software
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\ParetoLogic
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\Windows Net Data
Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab
Datei Gelöscht : C:\Windows\System32\Tasks\BackgroundContainer Startup Task
Datei Gelöscht : C:\Windows\System32\Tasks\NCH Software
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [firejump@firejump.net]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\FreeRIP3_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\FreeRIP3_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3317892
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-video-to-dvd-converter_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-video-to-dvd-converter_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freerip-mp3_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freerip-mp3_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gx-transcoder_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gx-transcoder_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mediacoder_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mediacoder_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_midi-to-wav-converter_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_midi-to-wav-converter_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-media-player-plugin_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-media-player-plugin_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ED8F1591-D34F-4B4A-B8BE-7FC3B55536D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Ob-jects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED8F1591-D34F-4B4A-B8BE-7FC3B55536D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F261B3D-A979-49AC-AD16-C09621DB3EF6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E829B10-082E-4829-84B4-4770C93D8411}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{422F7661-9403-4DA4-B4EF-CC3E268817B5}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{422F7661-9403-4DA4-B4EF-CC3E268817B5}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{422F7661-9403-4DA4-B4EF-CC3E268817B5}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{422F7661-9403-4DA4-B4EF-CC3E268817B5}]
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\MGShareware
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\NCH Software
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\ParetoLogic
Schlüssel Gelöscht : HKCU\Software\PIP
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BackgroundContainer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\RadioTotal1
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\MGShareware
Schlüssel Gelöscht : HKLM\Software\Myfree Codec
Schlüssel Gelöscht : HKLM\Software\NCH Software
Schlüssel Gelöscht : HKLM\Software\ParetoLogic
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\RadioTotal1
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D85FFE92-BF14-4E9B-BCCD-E5C16069E65F}_is1
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v25.0.1 (de)
[ Datei : C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\prefs.js ]
Zeile gelöscht : us-er_pref("extensions.a971d5a0e9273487fb423ed4d001e437a73136d875f3a43808edb16a7fa56bbc4com39090.39090.internaldb.Resources_meta.value", "%7B%22HTML/settings.html%22%3A%7B%22id%22%3A309589%2C%22ver%22%[...]
Zeile gelöscht : us-er_pref("extensions.a971d5a0e9273487fb423ed4d001e437a73136d875f3a43808edb16a7fa56bbc4com39090.39090.internaldb.Resources_resource_309595.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "14290b7ee057a0ca08daea4f6c946e47");
*************************
AdwCleaner[R0].txt - [10528 octets] - [09/12/2013 09:42:33]
AdwCleaner[R1].txt - [10589 octets] - [09/12/2013 10:11:00]
AdwCleaner[S0].txt - [9668 octets] - [09/12/2013 10:13:06]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9728 octets] ##########
Trotzdem habe ich die weiteren Schritte noch gemacht. Hier die Ergebnisse: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Josef Benutzername on 09.12.2013 at 10:25:24,04
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explor-er\SearchScopes\{94403E0D-8048-42DB-B16B-22B5AA70D423}
~~~ Files
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{0A7F4117-05E8-4CFE-AE2E-F37F8D3289C5}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{14BE0A64-D6CC-4189-9B79-41D7C42E8F1B}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{1BD7E5A1-6AE2-4115-96A3-80545C109A49}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{20A8F60E-FD13-43CB-84A3-919CD0DB604C}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{2B09A172-683E-49D1-8E55-3107355D47DD}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{378FB7DC-7FFD-480F-9ACD-B72877B7FBF3}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{51659BB6-95D2-4D56-918C-9B343CEC4ED1}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{562464D4-ACC4-49D2-AD6A-851707B33785}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{5A3164C6-5299-4E34-A4C2-80E63DAE18C2}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{5E381246-19F3-4474-8073-F6AA5CB4388F}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{8DD50F3C-1C50-40E8-98DA-3DE63AB406B1}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{98082DEE-07AB-4418-A4D6-20C177CED34E}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{B41BFBC4-A01B-4CDA-BA3B-E1B7E062603F}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{B706C288-B590-4790-AE91-FC5BFCDBC0B6}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{B94D2AD4-4D12-47BC-BC6D-2BA0FE82FF9B}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{C80310E5-56E1-4613-9D64-9C99B5A4053B}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{DD6A5472-009D-458E-8AA8-C703B63B6ACB}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{F26BC96D-9110-4998-A73A-ADFD4E365C08}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{FB739428-8E54-405C-9996-126A28D53B10}
Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{FE870E0A-AA67-4D43-B372-44631B89B8EE}
~~~ FireFox
Successfully deleted: [Folder] C:\Users\Josef Benutzername\AppData\Roaming\mozilla\firefox\profiles\fp6pkvew.default-1385202844524\extensions\971d5a0e-9273-487f-b423-ed4d001e437a@73136d87-5f3a-4380-8edb-16a7fa56bbc4.com
Successfully deleted the following from C:\Users\Josef Benutzername\AppData\Roaming\mozilla\firefox\profiles\fp6pkvew.default-1385202844524\prefs.js
us-er_pref("extensions.a971d5a0e9273487fb423ed4d001e437a73136d875f3a43808edb16a7fa56bbc4com39090.39090.internaldb.Resources_resource_309597.value", "%22data%3Aimage/png%3Bbase6
Emptied folder: C:\Users\Josef Benutzername\AppData\Roaming\mozilla\firefox\profiles\fp6pkvew.default-1385202844524\minidumps [3 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.12.2013 at 10:31:00,13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 03
Ran by Josef Benutzername (administrator) on PC on 09-12-2013 10:46:16
Running from G:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] ()
Winlogon\Notify\ScCertProp: C:\Windows\SysWOW64\explorer.exe (Microsoft Corporation)
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [NWEReboot] - [x]
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Up-date\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-21] (AVAST Software)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\da89f187-2013-45e2-8d0a-7564b3210415.exe [180184 2013-11-23] (AVAST Software)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [623376 2013-11-18] (BlueStack Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://media.radiosai.org/www/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE7F40B6E99C0CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.1und1.de/br/ie9_startpage
SearchScopes: HKCU - {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {40064957-18EB-412d-9146-3F57E8D92EEC} URL = hxxp://go.1und1.de/br/ie9_search_pic/?su={searchTerms}
SearchScopes: HKCU - {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.net/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {64A0CF90-33DD-4B42-88A1-4AF10528A62F} URL = hxxp://suche.web.de/search/web/?mc=hp%40suche.suche%40home&mc=hp%40suche.suche%40home&su={searchTerms}&x=37&y=6
SearchScopes: HKCU - {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {8D27B32E-89EE-460e-82D2-5FC354078EAD} URL = hxxp://go.1und1.de/br/ie9_search_produkte/?su={searchTerms}
SearchScopes: HKCU - {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {DCE59F23-A446-45a5-9459-E68FDC0DE38D} URL = hxxp://go.1und1.de/br/ie9_search_maps/?su={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Soft-ware\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (Real-Player)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524
FF NewTab: about:blank
FF Homepage: hxxp://www.benefind.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silver-light\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vi-sion\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll No File
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\searchplugins\benefind.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: keyloggerbeater - C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\keyloggerbeater@toptip.ca.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: () - C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: () - C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-21] (AVAST Soft-ware)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [398096 2013-11-18] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-11-18] (BlueStack Systems, Inc.)
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Ser-vice\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [231936 2012-03-23] (Samsung Electronics Co., Ltd.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [993848 2011-04-19] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-04-19] (Secunia)
S2 AcrSch2Svc; "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe" [x]
==================== Drivers (Whitelisted) ====================
R1 27784551; C:\Windows\System32\DRIVERS\27784551.sys [157712 2009-09-25] (Kaspersky Lab)
R0 27784552; C:\Windows\System32\DRIVERS\27784552.sys [40464 2009-10-22] (Kaspersky Lab)
R1 73230381; C:\Windows\System32\DRIVERS\73230381.sys [157712 2009-09-25] (Kaspersky Lab)
R0 73230382; C:\Windows\System32\DRIVERS\73230382.sys [40464 2009-10-22] (Kaspersky Lab)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-01] (Wondershare)
R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-21] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-21] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [77584 2013-11-18] (BlueStack Systems)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
S3 eh100; C:\Windows\System32\DRIVERS\eh100.sys [45568 2009-11-11] (SCM Microsystems Inc.)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S0 snapman; C:\Windows\SysWow64\DRIVERS\snapman.sys [96320 2011-01-30] (Acronis)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-09 10:35 - 2013-12-09 10:35 - 00002024 _____ C:\Users\Josef Benutzername\Desktop\Avira Free Antivirus starten.lnk
2013-12-09 10:31 - 2013-12-09 10:31 - 00003779 _____ C:\Users\Josef Benutzername\Desktop\JRT.txt
2013-12-09 10:25 - 2013-12-09 10:25 - 00000000 ____D C:\Windows\ERUNT
2013-12-09 10:21 - 2013-12-09 10:21 - 00000579 _____ C:\Users\Josef Benutzername\Desktop\JRT.exe - Verknüpfung.lnk
2013-12-09 10:10 - 2013-12-09 10:10 - 00000634 _____ C:\Users\Josef Benutzername\Desktop\adwcleaner.exe - Verknüpfung.lnk
2013-12-09 09:42 - 2013-12-09 10:13 - 00000000 ____D C:\AdwCleaner
2013-12-09 09:36 - 2013-12-09 10:37 - 00000168 _____ C:\Windows\setupact.log
2013-12-09 09:36 - 2013-12-09 10:36 - 00005678 _____ C:\Windows\PFRO.log
2013-12-09 09:36 - 2013-12-09 09:36 - 00000000 _____ C:\Windows\setuperr.log
2013-12-09 09:19 - 2013-12-09 09:19 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST
2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk
2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2013-12-08 10:17 - 2013-12-09 07:54 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini
2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B}
2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6}
2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Josef Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk
2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32
2013-12-01 22:52 - 2013-12-01 22:56 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileZilla
2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Josef Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk
2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT
2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother
2013-11-27 18:38 - 2009-01-15 19:20 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2013-11-27 18:38 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2013-11-27 18:38 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2013-11-27 18:38 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll
2013-11-27 18:38 - 2003-11-28 18:57 - 00000000 _____ C:\Windows\brdfxspd.dat
2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\InstallShield
2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-27 16:33 - 2013-11-27 16:37 - 00032768 ___SH C:\Users\Josef Benutzername\Documents\Thumbs.db
2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Foxit Reader
2013-11-23 11:58 - 2013-11-23 12:00 - 00000890 _____ C:\Users\Josef Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk
2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Josef Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk
2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\AVAST Software
2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Josef Benutzername\Documents\ProcAlyzer Dumps
2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 07:34 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-11-14 07:34 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-14 07:34 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-14 07:34 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-11-14 07:34 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-11-14 07:34 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-14 07:34 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-14 07:34 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2013-11-14 07:34 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-11-14 07:34 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-11-14 07:34 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-11-14 07:34 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-11-14 07:34 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-11-14 07:34 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-14 07:34 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2013-11-14 07:34 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-11-14 07:34 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-14 07:34 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-11-14 07:28 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2013-11-14 07:28 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2013-11-14 07:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 07:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 07:12 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 07:12 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 07:12 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 07:12 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 07:12 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 07:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 07:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 07:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 07:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 07:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 07:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 07:12 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 07:12 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 07:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 07:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 07:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 07:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 07:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 07:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 07:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 07:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 07:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 07:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 07:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 07:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 07:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 07:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 07:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 06:57 - 2013-09-06 07:55 - 06583664 _____ (AVAST Software) C:\Program1
2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE
2013-11-09 21:13 - 2013-08-16 13:56 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll
2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Josef Benutzername\Desktop\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11
==================== One Month Modified Files and Folders =======
2013-12-09 10:43 - 2011-01-30 16:41 - 01985984 _____ C:\Windows\WindowsUpdate.log
2013-12-09 10:38 - 2012-11-05 20:59 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-09 10:37 - 2013-12-09 09:36 - 00000168 _____ C:\Windows\setupact.log
2013-12-09 10:37 - 2011-06-16 19:54 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-09 10:37 - 2011-02-10 07:48 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-09 10:37 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-09 10:36 - 2013-12-09 09:36 - 00005678 _____ C:\Windows\PFRO.log
2013-12-09 10:36 - 2011-01-31 20:15 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-12-09 10:35 - 2013-12-09 10:35 - 00002024 _____ C:\Users\Josef Benutzername\Desktop\Avira Free Antivirus starten.lnk
2013-12-09 10:31 - 2013-12-09 10:31 - 00003779 _____ C:\Users\Josef Benutzername\Desktop\JRT.txt
2013-12-09 10:25 - 2013-12-09 10:25 - 00000000 ____D C:\Windows\ERUNT
2013-12-09 10:24 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-09 10:24 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-09 10:21 - 2013-12-09 10:21 - 00000579 _____ C:\Users\Josef Benutzername\Desktop\JRT.exe - Verknüpfung.lnk
2013-12-09 10:16 - 2011-02-10 07:48 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-09 10:13 - 2013-12-09 09:42 - 00000000 ____D C:\AdwCleaner
2013-12-09 10:13 - 2013-11-02 08:26 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-12-09 10:13 - 2013-09-11 11:10 - 00000000 ____D C:\ProgramData\Uniblue
2013-12-09 10:10 - 2013-12-09 10:10 - 00000634 _____ C:\Users\Josef Benutzername\Desktop\adwcleaner.exe - Verknüpfung.lnk
2013-12-09 10:03 - 2013-10-16 20:24 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-12-09 09:57 - 2011-08-13 13:19 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Skype
2013-12-09 09:37 - 2013-01-06 19:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-09 09:36 - 2013-12-09 09:36 - 00000000 _____ C:\Windows\setuperr.log
2013-12-09 09:36 - 2011-02-10 07:48 - 00000000 ____D C:\Program Files\Google
2013-12-09 09:36 - 2011-02-10 07:47 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-09 09:19 - 2013-12-09 09:19 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-09 09:19 - 2013-09-14 10:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-09 08:52 - 2011-02-02 22:42 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Google
2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST
2013-12-09 08:15 - 2011-01-30 17:08 - 00000947 _____ C:\Windows\Brpfx04a.ini
2013-12-09 07:54 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-12-08 20:49 - 2013-10-18 19:49 - 00000000 ____D C:\Program Files (x86)\File Type Advisor
2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk
2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2013-12-08 10:18 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini
2013-12-08 08:49 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat
2013-12-08 08:49 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat
2013-12-08 08:49 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B}
2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6}
2013-12-07 23:24 - 2013-03-28 07:25 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-07 23:18 - 2011-01-30 16:45 - 00000000 ____D C:\Users\Josef Benutzername
2013-12-07 23:17 - 2011-06-22 10:38 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\PC-FAX TX
2013-12-07 23:17 - 2011-01-31 09:05 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\IrfanView
2013-12-07 23:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2013-12-07 23:16 - 2011-06-26 11:32 - 00000000 ____D C:\ProgramData\Real
2013-12-07 23:16 - 2011-02-02 22:42 - 00000000 ____D C:\ProgramData\Google
2013-12-07 23:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-06 10:55 - 2011-02-04 19:07 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\FreePDF_XP
2013-12-03 18:27 - 2012-10-02 13:42 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\korAccount
2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Josef Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk
2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32
2013-12-01 22:56 - 2013-12-01 22:52 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileZilla
2013-11-30 20:49 - 2013-10-18 19:49 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck
2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Josef Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk
2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT
2013-11-27 18:39 - 2011-01-30 17:08 - 00000467 _____ C:\Windows\BRWMARK.INI
2013-11-27 18:39 - 2011-01-30 17:08 - 00000169 _____ C:\Windows\brpcfx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother
2013-11-27 18:38 - 2011-01-30 17:01 - 00000050 _____ C:\Windows\system32\bd7420.dat
2013-11-27 18:38 - 2011-01-28 11:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Infor-mation
2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\InstallShield
2013-11-27 18:34 - 2011-01-28 10:59 - 00000000 ____D C:\Windows\Panther
2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-27 16:37 - 2013-11-27 16:33 - 00032768 ___SH C:\Users\Josef Benutzername\Documents\Thumbs.db
2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Foxit Reader
2013-11-26 19:27 - 2012-08-24 06:23 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-26 19:27 - 2011-08-13 13:19 - 00000000 ____D C:\ProgramData\Skype
2013-11-25 20:25 - 2013-05-08 06:08 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-25 20:25 - 2013-03-28 07:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-25 20:25 - 2013-03-28 07:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-25 12:02 - 2011-01-30 20:23 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Microsoft Help
2013-11-25 12:02 - 2011-01-30 20:22 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-23 13:39 - 2011-01-30 19:49 - 00000000 ____D C:\ProgramData\PSYPRCFG
2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\ProgramData\Psyprax32
2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\Program Files (x86)\Psyprax32
2013-11-23 12:00 - 2013-11-23 11:58 - 00000890 _____ C:\Users\Josef Benutzerna-me\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk
2013-11-22 16:09 - 2011-01-30 23:26 - 00000000 ____D C:\Program Files (x86)\svnet
2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Josef Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk
2013-11-22 12:00 - 2011-01-31 21:36 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\vlc
2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\AVAST Software
2013-11-21 15:07 - 2013-03-05 07:42 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-11-21 15:07 - 2013-03-05 07:42 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-11-21 15:07 - 2012-11-05 20:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-11-21 15:07 - 2011-06-29 07:56 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-11-21 07:42 - 2013-01-06 19:57 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-21 07:42 - 2012-04-04 14:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-21 07:42 - 2011-05-16 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-21 07:42 - 2011-02-01 11:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Adobe
2013-11-21 07:02 - 2013-09-12 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-20 23:20 - 2013-10-12 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-11-19 14:32 - 2013-10-09 21:52 - 00000919 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-17 14:58 - 2013-10-19 19:49 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileAdvisor
2013-11-17 14:40 - 2011-02-01 14:00 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Windows Live
2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Josef Benutzername\Documents\ProcAlyzer Dumps
2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 12:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-14 08:24 - 2013-05-11 06:48 - 00001431 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-14 08:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 07:34 - 2013-08-14 21:25 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 07:32 - 2011-01-31 21:26 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 14:05 - 2011-01-31 17:25 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-11-13 12:00 - 2011-01-31 17:28 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Yahoo
2013-11-11 05:50 - 2011-01-30 16:59 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-10 11:42 - 2012-12-25 14:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Foxit Software
2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE
2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Josef Benutzername\Desktop\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11
2013-11-09 08:59 - 2013-05-21 19:25 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Zeta Producer 11
Some content of TEMP:
====================
C:\Users\Josef Benutzername\AppData\Local\Temp\avgnt.exe
C:\Users\Josef Benutzername\AppData\Local\Temp\Checkupdate.exe
C:\Users\Josef Benutzername\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Josef Benutzername\AppData\Local\Temp\gcapi_dll.dll
C:\Users\Josef Benutzername\AppData\Local\Temp\gtapi_signed.dll
C:\Users\Josef Benutzername\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-20 20:18
==================== End Of Log ============================
--- --- --- Ist damit das Problem offenbar bei mir gelöst, oder? Und was war eigentlich passiert?? Vielen Dank!!! |
|
09.12.2013, 16:04
| #4 |
| /// the machine /// TB-Ausbilder | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden nen Haufen Adware  ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.12.2013, 23:24
| #5 |
| | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden So sehen jetzt die weiteren Ergebnisse aus: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=5c37d30ed360f94aa6770e2d0d1d0e04
# engine=16199
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-09 10:01:53
# local_time=2013-12-09 11:01:53 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 83 175208 163336385 0 0
# compatibility_mode=1799 16775165 100 96 58189 252049803 47773 0
# compatibility_mode=5893 16776573 100 94 175008 138256363 0 0
# scanned=280684
# found=0
# cleaned=0
# scan_time=12490
Code:
ATTFilter Results of screen317's Security Check version 0.99.76 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Secunia PSI (2.0.0.3003) Malwarebytes Anti-Malware Version 1.75.0.1300 CompuGROUP Java 1.6.0.11.1 Java 7 Update 45 Adobe Flash Player 11.9.900.152 Adobe Reader XI Mozilla Firefox (25.0.1) Mozilla Thunderbird (24.1.1) ````````Process Check: objlist.exe by Laurent```````` Spybot Teatimer.exe is disabled! Avira Antivir avgnt.exe Avira Antivir avguard.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-12-2013
Ran by Josef Benutzername (administrator) on PC on 09-12-2013 23:17:29
Running from G:\Downloads_Josef\ComputerSicherheitEtc\TrojanerBoard
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] ()
Winlogon\Notify\ScCertProp: C:\Windows\SysWOW64\explorer.exe (Microsoft Corporation)
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [NWEReboot] - [x]
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Up-date\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-21] (AVAST Software)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\da89f187-2013-45e2-8d0a-7564b3210415.exe [180184 2013-11-23] (AVAST Software)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [811792 2013-12-05] (BlueStack Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://media.radiosai.org/www/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE7F40B6E99C0CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.1und1.de/br/ie9_startpage
SearchScopes: HKCU - {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {40064957-18EB-412d-9146-3F57E8D92EEC} URL = hxxp://go.1und1.de/br/ie9_search_pic/?su={searchTerms}
SearchScopes: HKCU - {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.net/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {64A0CF90-33DD-4B42-88A1-4AF10528A62F} URL = hxxp://suche.web.de/search/web/?mc=hp%40suche.suche%40home&mc=hp%40suche.suche%40home&su={searchTerms}&x=37&y=6
SearchScopes: HKCU - {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {8D27B32E-89EE-460e-82D2-5FC354078EAD} URL = hxxp://go.1und1.de/br/ie9_search_produkte/?su={searchTerms}
SearchScopes: HKCU - {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {DCE59F23-A446-45a5-9459-E68FDC0DE38D} URL = hxxp://go.1und1.de/br/ie9_search_maps/?su={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Soft-ware\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (Real-Player)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524
FF NewTab: about:blank
FF Homepage: hxxp://www.benefind.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1206147.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silver-light\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vi-sion\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll No File
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\searchplugins\benefind.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: keyloggerbeater - C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\keyloggerbeater@toptip.ca.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: () - C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: () - C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-21] (AVAST Soft-ware)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-05] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-05] (BlueStack Systems, Inc.)
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Ser-vice\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [231936 2012-03-23] (Samsung Electronics Co., Ltd.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [993848 2011-04-19] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-04-19] (Secunia)
S2 AcrSch2Svc; "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe" [x]
==================== Drivers (Whitelisted) ====================
R1 27784551; C:\Windows\System32\DRIVERS\27784551.sys [157712 2009-09-25] (Kaspersky Lab)
R0 27784552; C:\Windows\System32\DRIVERS\27784552.sys [40464 2009-10-22] (Kaspersky Lab)
R1 73230381; C:\Windows\System32\DRIVERS\73230381.sys [157712 2009-09-25] (Kaspersky Lab)
R0 73230382; C:\Windows\System32\DRIVERS\73230382.sys [40464 2009-10-22] (Kaspersky Lab)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-01] (Wondershare)
R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-21] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-21] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [113424 2013-12-05] (BlueStack Systems)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
S3 eh100; C:\Windows\System32\DRIVERS\eh100.sys [45568 2009-11-11] (SCM Microsystems Inc.)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S0 snapman; C:\Windows\SysWow64\DRIVERS\snapman.sys [96320 2011-01-30] (Acronis)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-09 14:27 - 2013-12-09 14:27 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk
2013-12-09 14:27 - 2013-12-09 14:27 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2013-12-09 14:26 - 2013-12-09 14:26 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-12-09 13:29 - 2013-12-09 16:13 - 00000470 ____H C:\Windows\Tasks\Norton Security Scan for Josef Benutzername.job
2013-12-09 13:29 - 2013-12-09 13:29 - 00003634 _____ C:\Windows\System32\Tasks\Norton Security Scan for Josef Benutzername
2013-12-09 13:29 - 2013-12-09 13:29 - 00001463 _____ C:\Users\Public\Desktop\Norton Security Scan.LNK
2013-12-09 13:29 - 2013-12-09 13:29 - 00000000 ____D C:\ProgramData\Symantec
2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\Windows\system32\Drivers\NSSx64
2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\ProgramData\Norton
2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\Program Files (x86)\Norton Security Scan
2013-12-09 10:35 - 2013-12-09 10:35 - 00002024 _____ C:\Users\Josef Benutzername\Desktop\Avira Free Antivirus starten.lnk
2013-12-09 10:25 - 2013-12-09 10:25 - 00000000 ____D C:\Windows\ERUNT
2013-12-09 10:21 - 2013-12-09 10:21 - 00000579 _____ C:\Users\Josef Benutzername\Desktop\JRT.exe - Verknüpfung.lnk
2013-12-09 10:10 - 2013-12-09 10:10 - 00000634 _____ C:\Users\Josef Benutzername\Desktop\adwcleaner.exe - Verknüpfung.lnk
2013-12-09 09:42 - 2013-12-09 10:13 - 00000000 ____D C:\AdwCleaner
2013-12-09 09:36 - 2013-12-09 13:32 - 00000224 _____ C:\Windows\setupact.log
2013-12-09 09:36 - 2013-12-09 13:31 - 00005976 _____ C:\Windows\PFRO.log
2013-12-09 09:36 - 2013-12-09 09:36 - 00000000 _____ C:\Windows\setuperr.log
2013-12-09 09:19 - 2013-12-09 09:19 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-09 08:27 - 2013-12-09 23:17 - 00000000 ____D C:\FRST
2013-12-08 10:17 - 2013-12-09 14:36 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-12-08 10:17 - 2013-12-09 14:26 - 00000000 ____D C:\ProgramData\BlueStacks
2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini
2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B}
2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6}
2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Josef Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk
2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32
2013-12-01 22:52 - 2013-12-01 22:56 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileZilla
2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Josef Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk
2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT
2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother
2013-11-27 18:38 - 2009-01-15 19:20 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2013-11-27 18:38 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2013-11-27 18:38 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2013-11-27 18:38 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll
2013-11-27 18:38 - 2003-11-28 18:57 - 00000000 _____ C:\Windows\brdfxspd.dat
2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\InstallShield
2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-27 16:33 - 2013-11-27 16:37 - 00032768 ___SH C:\Users\Josef Benutzername\Documents\Thumbs.db
2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Foxit Reader
2013-11-23 11:58 - 2013-11-23 12:00 - 00000890 _____ C:\Users\Josef Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk
2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Josef Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk
2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\AVAST Software
2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Josef Benutzername\Documents\ProcAlyzer Dumps
2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 07:34 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-11-14 07:34 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-14 07:34 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-14 07:34 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-11-14 07:34 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-11-14 07:34 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-14 07:34 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-14 07:34 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2013-11-14 07:34 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-11-14 07:34 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-11-14 07:34 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-11-14 07:34 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-11-14 07:34 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-11-14 07:34 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-14 07:34 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2013-11-14 07:34 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-11-14 07:34 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-14 07:34 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-11-14 07:28 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2013-11-14 07:28 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2013-11-14 07:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 07:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 07:12 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 07:12 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 07:12 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 07:12 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 07:12 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 07:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 07:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 07:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 07:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 07:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 07:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 07:12 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 07:12 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 07:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 07:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 07:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 07:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 07:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 07:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 07:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 07:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 07:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 07:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 07:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 07:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 07:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 07:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 07:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 06:57 - 2013-09-06 07:55 - 06583664 _____ (AVAST Software) C:\Program1
2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE
2013-11-09 21:13 - 2013-08-16 13:56 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll
2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Josef Benutzername\Desktop\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11
==================== One Month Modified Files and Folders =======
2013-12-09 23:17 - 2013-12-09 08:27 - 00000000 ____D C:\FRST
2013-12-09 23:16 - 2011-02-10 07:48 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-09 22:37 - 2013-01-06 19:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-09 20:49 - 2013-10-18 19:49 - 00000000 ____D C:\Program Files (x86)\File Type Advisor
2013-12-09 19:27 - 2013-10-16 20:24 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-12-09 19:21 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat
2013-12-09 19:21 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat
2013-12-09 19:21 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-09 19:20 - 2011-08-13 13:19 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Skype
2013-12-09 18:22 - 2011-02-10 07:48 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-09 16:13 - 2013-12-09 13:29 - 00000470 ____H C:\Windows\Tasks\Norton Security Scan for Josef Benutzername.job
2013-12-09 15:34 - 2011-02-04 19:07 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\FreePDF_XP
2013-12-09 14:36 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-12-09 14:27 - 2013-12-09 14:27 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk
2013-12-09 14:27 - 2013-12-09 14:27 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2013-12-09 14:27 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-09 14:26 - 2013-12-09 14:26 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-12-09 14:26 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks
2013-12-09 13:41 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-09 13:41 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-09 13:32 - 2013-12-09 09:36 - 00000224 _____ C:\Windows\setupact.log
2013-12-09 13:32 - 2011-06-16 19:54 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-09 13:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-09 13:31 - 2013-12-09 09:36 - 00005976 _____ C:\Windows\PFRO.log
2013-12-09 13:31 - 2011-01-31 20:15 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-12-09 13:30 - 2011-01-30 16:41 - 02017593 _____ C:\Windows\WindowsUpdate.log
2013-12-09 13:29 - 2013-12-09 13:29 - 00003634 _____ C:\Windows\System32\Tasks\Norton Security Scan for Josef Benutzername
2013-12-09 13:29 - 2013-12-09 13:29 - 00001463 _____ C:\Users\Public\Desktop\Norton Security Scan.LNK
2013-12-09 13:29 - 2013-12-09 13:29 - 00000000 ____D C:\ProgramData\Symantec
2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\Windows\system32\Drivers\NSSx64
2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\ProgramData\Norton
2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\Program Files (x86)\Norton Security Scan
2013-12-09 10:38 - 2012-11-05 20:59 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-09 10:35 - 2013-12-09 10:35 - 00002024 _____ C:\Users\Josef Benutzername\Desktop\Avira Free Antivirus starten.lnk
2013-12-09 10:25 - 2013-12-09 10:25 - 00000000 ____D C:\Windows\ERUNT
2013-12-09 10:21 - 2013-12-09 10:21 - 00000579 _____ C:\Users\Josef Benutzername\Desktop\JRT.exe - Verknüpfung.lnk
2013-12-09 10:13 - 2013-12-09 09:42 - 00000000 ____D C:\AdwCleaner
2013-12-09 10:13 - 2013-11-02 08:26 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-12-09 10:13 - 2013-09-11 11:10 - 00000000 ____D C:\ProgramData\Uniblue
2013-12-09 10:10 - 2013-12-09 10:10 - 00000634 _____ C:\Users\Josef Benutzername\Desktop\adwcleaner.exe - Verknüpfung.lnk
2013-12-09 09:36 - 2013-12-09 09:36 - 00000000 _____ C:\Windows\setuperr.log
2013-12-09 09:36 - 2011-02-10 07:48 - 00000000 ____D C:\Program Files\Google
2013-12-09 09:36 - 2011-02-10 07:47 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-09 09:19 - 2013-12-09 09:19 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-09 09:19 - 2013-09-14 10:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-09 08:52 - 2011-02-02 22:42 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Google
2013-12-09 08:15 - 2011-01-30 17:08 - 00000947 _____ C:\Windows\Brpfx04a.ini
2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini
2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B}
2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6}
2013-12-07 23:24 - 2013-03-28 07:25 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-07 23:18 - 2011-01-30 16:45 - 00000000 ____D C:\Users\Josef Benutzername
2013-12-07 23:17 - 2011-06-22 10:38 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\PC-FAX TX
2013-12-07 23:17 - 2011-01-31 09:05 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\IrfanView
2013-12-07 23:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2013-12-07 23:16 - 2011-06-26 11:32 - 00000000 ____D C:\ProgramData\Real
2013-12-07 23:16 - 2011-02-02 22:42 - 00000000 ____D C:\ProgramData\Google
2013-12-07 23:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-03 18:27 - 2012-10-02 13:42 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\korAccount
2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Josef Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk
2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32
2013-12-01 22:56 - 2013-12-01 22:52 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileZilla
2013-11-30 20:49 - 2013-10-18 19:49 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck
2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Josef Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk
2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT
2013-11-27 18:39 - 2011-01-30 17:08 - 00000467 _____ C:\Windows\BRWMARK.INI
2013-11-27 18:39 - 2011-01-30 17:08 - 00000169 _____ C:\Windows\brpcfx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother
2013-11-27 18:38 - 2011-01-30 17:01 - 00000050 _____ C:\Windows\system32\bd7420.dat
2013-11-27 18:38 - 2011-01-28 11:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Infor-mation
2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\InstallShield
2013-11-27 18:34 - 2011-01-28 10:59 - 00000000 ____D C:\Windows\Panther
2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-27 16:37 - 2013-11-27 16:33 - 00032768 ___SH C:\Users\Josef Benutzername\Documents\Thumbs.db
2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Foxit Reader
2013-11-26 19:27 - 2012-08-24 06:23 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-26 19:27 - 2011-08-13 13:19 - 00000000 ____D C:\ProgramData\Skype
2013-11-25 20:25 - 2013-05-08 06:08 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-25 20:25 - 2013-03-28 07:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-25 20:25 - 2013-03-28 07:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-25 12:02 - 2011-01-30 20:23 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Microsoft Help
2013-11-25 12:02 - 2011-01-30 20:22 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-23 13:39 - 2011-01-30 19:49 - 00000000 ____D C:\ProgramData\PSYPRCFG
2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\ProgramData\Psyprax32
2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\Program Files (x86)\Psyprax32
2013-11-23 12:00 - 2013-11-23 11:58 - 00000890 _____ C:\Users\Josef Benutzerna-me\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk
2013-11-22 16:09 - 2011-01-30 23:26 - 00000000 ____D C:\Program Files (x86)\svnet
2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Josef Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk
2013-11-22 12:00 - 2011-01-31 21:36 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\vlc
2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\AVAST Software
2013-11-21 15:07 - 2013-03-05 07:42 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-11-21 15:07 - 2013-03-05 07:42 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-11-21 15:07 - 2012-11-05 20:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-11-21 15:07 - 2011-06-29 07:56 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-11-21 07:42 - 2013-01-06 19:57 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-21 07:42 - 2012-04-04 14:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-21 07:42 - 2011-05-16 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-21 07:42 - 2011-02-01 11:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Adobe
2013-11-21 07:02 - 2013-09-12 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-20 23:20 - 2013-10-12 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-11-19 14:32 - 2013-10-09 21:52 - 00000919 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-17 14:58 - 2013-10-19 19:49 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileAdvisor
2013-11-17 14:40 - 2011-02-01 14:00 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Windows Live
2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Josef Benutzername\Documents\ProcAlyzer Dumps
2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 12:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-14 08:24 - 2013-05-11 06:48 - 00001431 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-14 08:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 07:34 - 2013-08-14 21:25 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 07:32 - 2011-01-31 21:26 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 14:05 - 2011-01-31 17:25 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-11-13 12:00 - 2011-01-31 17:28 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Yahoo
2013-11-11 05:50 - 2011-01-30 16:59 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-10 11:42 - 2012-12-25 14:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Foxit Software
2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE
2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Josef Benutzername\Desktop\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11
2013-11-09 08:59 - 2013-05-21 19:25 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Zeta Producer 11
Some content of TEMP:
====================
C:\Users\Josef Benutzername\AppData\Local\Temp\avgnt.exe
C:\Users\Josef Benutzername\AppData\Local\Temp\Checkupdate.exe
C:\Users\Josef Benutzername\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Josef Benutzername\AppData\Local\Temp\gcapi_dll.dll
C:\Users\Josef Benutzername\AppData\Local\Temp\gtapi_signed.dll
C:\Users\Josef Benutzername\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-20 20:18
==================== End Of Log ============================
--- --- --- Irgendwie fühlt sich jetzt alles sehr sauber an!!! Stimmt das? DANKE! |
|
10.12.2013, 12:06
| #6 |
| /// the machine /// TB-Ausbilder | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyServer: localhost:21320
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden |
|
10.12.2013, 19:59
| #7 |
| | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Hier die Fixlog.txt Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-12-2013
Ran by Josef Benutzername at 2013-12-10 14:53:17 Run:1
Running from G:\Downloads_Josef\ComputerSicherheitEtc\TrojanerBoard
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
ProxyServer: localhost:21320
*****************
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
==== End of Fixlog ====
Deine Hinweise für sicheres Surfen werde ich umsetzen. Möchte mich ganz herzlich für die umfassende und superkompetente Hilfe bedanken! Frohe Feiertag und guten Rutsch! Josef Nachtragen möchte ich noch, daß ich zur Bereinigung der Temp Files den TFC heruntergeladen und gestartet hatte, was allerdings zum Sofort-Crash des gesamten PC geführt hat!! Aber ich habe auch den CCleaner, den ich benutzen kann (ohne Registry Cleaning). |
|
11.12.2013, 12:15
| #8 |
| /// the machine /// TB-Ausbilder | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Dann benutz den Ccleaner
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden |
| antivir, antivirus, backgroundcontainer, bluestacks, converter, entfernen, flash player, homepage, installation, kaspersky, mozilla, newtab, plug-in, problem, pup.optional.conduit, pup.optional.conduit.a, pup.optional.filesfrog.a, pup.optional.opencandy, refresh, registry, secunia psi, security, services.exe, software, starten, svchost.exe, system |
