Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Wieder einmal rvzr-a.akamaihd.net - Befall

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 11.01.2014, 00:14   #1
Hawkeye75
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall



Hi,

habe leider wieder Probleme mit akamaihd.
FRST sieht so aus:

FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-01-2014
Ran by Olli at 2014-01-11 00:13:19
Running from C:\Users\Olli\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Bitdefender Antivirus (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
FW: Bitdefender Firewall (Enabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}

==================== Installed Programs ======================

Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acrobat.com (x32 Version: 1.2.443 - Adobe Systems Incorporated)
Adobe Acrobat 9 Pro - English, Français, Deutsch (x32 Version: 9.5.5 - Adobe Systems) Hidden
Adobe Acrobat 9.5.5 - CPSID_83708 (x32 Version:  - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Hidden
Adobe Anchor Service CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Asset Services CS4 (x32 Version: 4 - Adobe Systems Incorporated) Hidden
Adobe Bridge CS4 (x32 Version: 3 - Adobe Systems Incorporated) Hidden
Adobe CMaps CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color - Photoshop Specific CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Recommended Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color Video Profiles CS CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 4 Design Premium (x32 Version: 4.0 - Adobe Systems Incorporated)
Adobe Creative Suite 4 Design Premium (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Device Central CS4 (x32 Version: 2 - Adobe Systems Incorporated) Hidden
Adobe Dreamweaver CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Dynamiclink Support (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit CS4 (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Fireworks CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Flash CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Flash CS4 Extension - Flash Lite STI others (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe Flash CS4 STI-other (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 10 ActiveX (x32 Version: 10.0.2.54 - Adobe Systems, Inc.)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.2.54 - Adobe Systems, Inc.)
Adobe Fonts All (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Illustrator CS4 (x32 Version: 14.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Application Feature Set Files (Roman) (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Common Base Files (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler x64 (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 (x32 Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Encoder CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Media Encoder CS4 Importer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (x32 Version: 1.1 - Adobe Systems Incorporated)
Adobe Output Module (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 Support (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Search for Help (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Service Manager Extension (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Setup (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe SGM CS4 (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe SING CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS4 (x32 Version: 6.0.0 - Adobe Systems Incorporated) Hidden
Adobe Version Cue CS4 Server (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin (x32 Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetCMYK (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetRGB (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ATI Catalyst Install Manager (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2949 - APN, LLC)
Better Surf Plus (x32 Version: 1.1 - Better Surf) <==== ATTENTION
Bitdefender Internet Security (Version: 17.23.0.996 - Bitdefender)
BlueStacks App Player (x32 Version: 0.8.4.3036 - BlueStack Systems, Inc.)
BlueStacks Notification Center (x32 Version: 0.8.4.3036 - BlueStack Systems, Inc.)
Canon Easy-WebPrint EX (x32 Version: 1.3.6.0 - Canon Inc.)
Canon MP Navigator EX 2.0 (x32 Version:  - )
Canon MP540 series MP Drivers (Version:  - )
Canon My Printer (x32 Version: 3.1.0 - Canon Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0630.510.7373 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help English (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help French (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help German (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0630.510.7373 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0630.510.7373 - ATI) Hidden
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
ESU for Microsoft Windows 7 (x32 Version: 1.0.0 - Hewlett-Packard)
FastStone Image Viewer 4.8 (x32 Version: 4.8 - FastStone Soft)
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HP IDF Software (x32 Version: 11.15.1000 - Hewlett-Packard Company)
HTC Driver Installer (x32 Version: 4.10.0.001 - HTC Corporation)
HTC Sync Manager (x32 Version: 2.4.11.0 - HTC)
IPTInstaller (x32 Version: 4.0.8 - HTC)
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Mein CEWE FOTOBUCH (x32 Version: 5.1.2 - CEWE COLOR AG u Co. OHG)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4551.1011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Movavi SWF to Video Converter (x32 Version: 1.0.1.0 - MOVAVI)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
Notepad++ (x32 Version: 6.5.1 - Notepad++ Team)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1011 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Pixel Bender Toolkit (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6196 - Realtek Semiconductor Corp.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Software Version Updater (x32 Version: 1.1.3.8 - ) <==== ATTENTION
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
SUPER © v2013.build.58+Recorder (2013/11/13) Version v2013.buil (x32 Version: v2013.build.58+Recorder - eRightSoft)
Synaptics Pointing Device Driver (Version: 15.1.6.64 - Synaptics Incorporated)
TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer)
Trillian (x32 Version:  - Cerulean Studios, LLC)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Video Player (x32 Version: 1.1 - Video Player)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Winamp (x32 Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc)
XviD MPEG-4 Video Codec (x32 Version: XviD-1.0.3-20122004 - XviD Team (Koepi))

==================== Restore Points  =========================

19-12-2013 20:16:40 Windows Update
21-12-2013 17:30:37 Windows Update
09-01-2014 07:34:31 Installed HTC Sync.
09-01-2014 07:41:18 Removed HTC Sync.
09-01-2014 07:46:04 Removed HTC BMP USB Driver.
09-01-2014 07:46:42 Removed HTC Driver Installer.
10-01-2014 22:22:44 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0C117458-0FDD-4798-8106-AFAC55E1FAE5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\office15\msoia.exe [2013-11-18] (Microsoft Corporation)
Task: {2ACF759D-5560-41DD-9981-DED674D9C2B5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {2C79136F-7B5A-4B9F-B86A-ADF3A52AA4FB} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {51F5281D-10DA-4126-A9D9-4342655596D4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.)
Task: {68B73626-A000-487E-BFC7-7E442B73D29F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.)
Task: {A50DCDA3-9EDD-434A-A327-5BC9D078D747} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-11-02] (Microsoft Corporation)
Task: {AAC88D3E-9C9C-42ED-8BC4-65040B3F8166} - System32\Tasks\AmiUpdXp => C:\Users\Olli\AppData\Local\SwvUpdater\Updater.exe [2013-11-16] (Amonetizé Ltd) <==== ATTENTION
Task: {AC631EC0-1D18-4BDA-9BD3-E97CF31CFC9E} - System32\Tasks\{7F7EBE5C-1EF8-4224-829A-EB0E36F60A1B} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {F7DCDCCF-65C6-4260-9707-949FEA438992} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\office15\msoia.exe [2013-11-18] (Microsoft Corporation)
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\Olli\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-01-10 23:30 - 2013-06-19 11:45 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll
2010-06-10 16:42 - 2010-06-10 16:42 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-11-03 17:45 - 2013-11-03 17:45 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-01-10 23:29 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender\bdmetrics.dll
2013-11-14 21:30 - 2013-11-14 21:30 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2013-11-14 21:31 - 2013-11-14 21:31 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2013-11-14 21:31 - 2013-11-14 21:31 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2013-11-14 21:31 - 2013-11-14 21:31 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2013-11-14 21:31 - 2013-11-14 21:31 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2013-11-14 21:33 - 2013-11-14 21:33 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2013-11-14 21:34 - 2013-11-14 21:34 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2014-01-10 23:29 - 2013-06-19 11:44 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\antispam32\txmlutil.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\trillian.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00003584 _____ () c:\program files (x86)\trillian\languages\en\toolkit.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\events.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00010752 _____ () c:\program files (x86)\trillian\languages\en\buddy.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00007168 _____ () c:\program files (x86)\trillian\languages\en\talk.dll
2013-11-03 22:22 - 2009-02-27 16:39 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.deu
2013-12-07 10:44 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-07 10:44 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-07 10:44 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-07 10:44 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-07 10:44 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-07 10:44 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Olli\Downloads\FRST64.exe:BDU

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/10/2014 11:35:07 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/09/2014 10:33:22 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Toolbar.exe, Version: 21.5.0.2560, Zeitstempel: 0x5272f72c
Name des fehlerhaften Moduls: so.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5272f720
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0fa88870
ID des fehlerhaften Prozesses: 0x1474
Startzeit der fehlerhaften Anwendung: 0xToolbar.exe0
Pfad der fehlerhaften Anwendung: Toolbar.exe1
Pfad des fehlerhaften Moduls: Toolbar.exe2
Berichtskennung: Toolbar.exe3

Error: (01/09/2014 08:50:15 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/07/2014 07:11:26 PM) (Source: Application Hang) (User: )
Description: Programm Skype.exe, Version 6.11.0.102 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 187c

Startzeit: 01cf0b8bd9382562

Endzeit: 19

Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe

Berichts-ID:

Error: (12/23/2013 09:23:31 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/23/2013 09:22:32 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (12/12/2013 07:01:35 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/12/2013 07:00:40 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (12/09/2013 05:26:42 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/09/2013 05:25:25 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.


System errors:
=============
Error: (01/10/2014 11:35:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (01/10/2014 11:34:04 PM) (Source: BugCheck) (User: )
Description: 0x0000004a (0x0000000076d2132a, 0x0000000000000002, 0x0000000000000000, 0xfffff8800a396ca0)C:\Windows\MEMORY.DMP011014-32947-01

Error: (01/10/2014 11:34:02 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎10.‎01.‎2014 um 23:31:31 unerwartet heruntergefahren.

Error: (01/10/2014 11:08:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "TeamViewer 8" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/10/2014 11:08:41 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst TeamViewer 8 erreicht.

Error: (01/10/2014 07:52:03 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (01/09/2014 06:23:50 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst OfficeSvc erreicht.

Error: (01/08/2014 08:18:48 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (01/08/2014 08:18:48 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (01/08/2014 09:09:13 AM) (Source: ipnathlp) (User: )
Description: 0


Microsoft Office Sessions:
=========================
Error: (01/10/2014 11:35:07 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/09/2014 10:33:22 AM) (Source: Application Error)(User: )
Description: Toolbar.exe21.5.0.25605272f72cso.dll_unloaded0.0.0.05272f720c00000050fa88870147401cf0d12dbf06116C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Toolbar.exeso.dll143ad932-7911-11e3-b928-90fba6a2fb7f

Error: (01/09/2014 08:50:15 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Olli\Downloads\SoftonicDownloader_fuer_super.exe

Error: (01/07/2014 07:11:26 PM) (Source: Application Hang)(User: )
Description: Skype.exe6.11.0.102187c01cf0b8bd938256219C:\Program Files (x86)\Skype\Phone\Skype.exe

Error: (12/23/2013 09:23:31 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Acrobat 9.0\Designer 8.2\FormDesigner.exe

Error: (12/23/2013 09:22:32 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (12/12/2013 07:01:35 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Acrobat 9.0\Designer 8.2\FormDesigner.exe

Error: (12/12/2013 07:00:40 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (12/09/2013 05:26:42 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Acrobat 9.0\Designer 8.2\FormDesigner.exe

Error: (12/09/2013 05:25:25 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 7930.9 MB
Available physical RAM: 4415.89 MB
Total Pagefile: 15859.98 MB
Available Pagefile: 12281.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:207.73 GB) (Free:66.63 GB) NTFS
Drive d: (Volume) (Fixed) (Total:97.66 GB) (Free:95.43 GB) NTFS
Drive e: (Volume) (Fixed) (Total:146.48 GB) (Free:55.38 GB) NTFS
Drive g: (NIKON D90) (Removable) (Total:3.66 GB) (Free:3.57 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: EF83617C)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=208 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=98 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=146 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 002A5835)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)

==================== End Of Log ============================
         
--- --- ---


Gruß,
Hawkeye

Alt 11.01.2014, 10:46   #2
M-K-D-B
/// TB-Ausbilder
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall






Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 4 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
    Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!
    Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
    Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.






Die FRST.txt fehlt, bitte einen Kontrollscan ausführen und beide Logdateien davon posten:


Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.
__________________


Alt 11.01.2014, 14:08   #3
Hawkeye75
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall



Hi,

vielen Dank soweit.
Ich habe die neuste Version von FRST 64 Bit runtergeladen. Aber bei der Ausführung erhalte ich folgende Fehlermeldung:

hxxp://www.myimg.de/?img=screene42c5.jpg

Gruß,
Hawkeye
__________________

Alt 11.01.2014, 14:45   #4
M-K-D-B
/// TB-Ausbilder
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall



Servus,



Ich hab mal eben beim Entwickler angefragt und melde mich bald wieder.

Alt 11.01.2014, 20:30   #5
M-K-D-B
/// TB-Ausbilder
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall



Servus,


FRST neu herunterladen, dann sollte es klappen.


Alt 12.01.2014, 11:47   #6
Hawkeye75
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall



Super, danke.

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-01-2014 05
Ran by Olli at 2014-01-12 11:35:03
Running from C:\Users\Olli\Downloads\frst
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Bitdefender Antivirus (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
FW: Bitdefender Firewall (Enabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}

==================== Installed Programs ======================

Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acrobat.com (x32 Version: 1.2.443 - Adobe Systems Incorporated)
Adobe Acrobat 9 Pro - English, Français, Deutsch (x32 Version: 9.5.5 - Adobe Systems) Hidden
Adobe Acrobat 9.5.5 - CPSID_83708 (x32 Version:  - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Hidden
Adobe Anchor Service CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Asset Services CS4 (x32 Version: 4 - Adobe Systems Incorporated) Hidden
Adobe Bridge CS4 (x32 Version: 3 - Adobe Systems Incorporated) Hidden
Adobe CMaps CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color - Photoshop Specific CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Recommended Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color Video Profiles CS CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 4 Design Premium (x32 Version: 4.0 - Adobe Systems Incorporated)
Adobe Creative Suite 4 Design Premium (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Device Central CS4 (x32 Version: 2 - Adobe Systems Incorporated) Hidden
Adobe Dreamweaver CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Dynamiclink Support (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit CS4 (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Fireworks CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Flash CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Flash CS4 Extension - Flash Lite STI others (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe Flash CS4 STI-other (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 10 ActiveX (x32 Version: 10.0.2.54 - Adobe Systems, Inc.)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.2.54 - Adobe Systems, Inc.)
Adobe Fonts All (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Illustrator CS4 (x32 Version: 14.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Application Feature Set Files (Roman) (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Common Base Files (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler x64 (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 (x32 Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Encoder CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Media Encoder CS4 Importer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (x32 Version: 1.1 - Adobe Systems Incorporated)
Adobe Output Module (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 Support (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Search for Help (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Service Manager Extension (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Setup (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe SGM CS4 (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe SING CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS4 (x32 Version: 6.0.0 - Adobe Systems Incorporated) Hidden
Adobe Version Cue CS4 Server (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin (x32 Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetCMYK (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetRGB (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ATI Catalyst Install Manager (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2949 - APN, LLC)
Bitdefender Internet Security (Version: 17.23.0.996 - Bitdefender)
BlueStacks App Player (x32 Version: 0.8.4.3036 - BlueStack Systems, Inc.)
BlueStacks Notification Center (x32 Version: 0.8.4.3036 - BlueStack Systems, Inc.)
Canon Easy-WebPrint EX (x32 Version: 1.3.6.0 - Canon Inc.)
Canon MP Navigator EX 2.0 (x32 Version:  - )
Canon MP540 series MP Drivers (Version:  - )
Canon My Printer (x32 Version: 3.1.0 - Canon Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0630.510.7373 - ATI) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0630.510.7373 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help English (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help French (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help German (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0630.510.7373 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0630.510.7373 - ATI) Hidden
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
ESU for Microsoft Windows 7 (x32 Version: 1.0.0 - Hewlett-Packard)
FastStone Image Viewer 4.8 (x32 Version: 4.8 - FastStone Soft)
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HP IDF Software (x32 Version: 11.15.1000 - Hewlett-Packard Company)
HTC Driver Installer (x32 Version: 4.10.0.001 - HTC Corporation)
HTC Sync Manager (x32 Version: 2.4.11.0 - HTC)
IPTInstaller (x32 Version: 4.0.8 - HTC)
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Mein CEWE FOTOBUCH (x32 Version: 5.1.2 - CEWE COLOR AG u Co. OHG)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4551.1011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Movavi SWF to Video Converter (x32 Version: 1.0.1.0 - MOVAVI)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
Notepad++ (x32 Version: 6.5.1 - Notepad++ Team)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1011 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Pixel Bender Toolkit (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6196 - Realtek Semiconductor Corp.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Software Version Updater (x32 Version: 1.1.3.8 - ) <==== ATTENTION
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
SUPER © v2013.build.58+Recorder (2013/11/13) Version v2013.buil (x32 Version: v2013.build.58+Recorder - eRightSoft)
Synaptics Pointing Device Driver (Version: 15.1.6.64 - Synaptics Incorporated)
TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer)
Trillian (x32 Version:  - Cerulean Studios, LLC)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Video Player (x32 Version: 1.1 - Video Player)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Winamp (x32 Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc)
XviD MPEG-4 Video Codec (x32 Version: XviD-1.0.3-20122004 - XviD Team (Koepi))

==================== Restore Points  =========================

09-01-2014 07:34:31 Installed HTC Sync.
09-01-2014 07:41:18 Removed HTC Sync.
09-01-2014 07:46:04 Removed HTC BMP USB Driver.
09-01-2014 07:46:42 Removed HTC Driver Installer.
10-01-2014 22:22:44 Windows Update
11-01-2014 15:49:29 Windows Defender Checkpoint

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0C117458-0FDD-4798-8106-AFAC55E1FAE5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-18] (Microsoft Corporation)
Task: {2ACF759D-5560-41DD-9981-DED674D9C2B5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {2C79136F-7B5A-4B9F-B86A-ADF3A52AA4FB} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {51F5281D-10DA-4126-A9D9-4342655596D4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.)
Task: {68B73626-A000-487E-BFC7-7E442B73D29F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.)
Task: {A50DCDA3-9EDD-434A-A327-5BC9D078D747} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-11-02] (Microsoft Corporation)
Task: {AAC88D3E-9C9C-42ED-8BC4-65040B3F8166} - System32\Tasks\AmiUpdXp => C:\Users\Olli\AppData\Local\SwvUpdater\Updater.exe [2013-11-16] (Amonetizé Ltd) <==== ATTENTION
Task: {AC631EC0-1D18-4BDA-9BD3-E97CF31CFC9E} - System32\Tasks\{7F7EBE5C-1EF8-4224-829A-EB0E36F60A1B} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {F7DCDCCF-65C6-4260-9707-949FEA438992} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-18] (Microsoft Corporation)
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\Olli\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-01-10 23:30 - 2013-06-19 11:45 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll
2010-06-10 16:42 - 2010-06-10 16:42 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-11-03 17:45 - 2013-11-03 17:45 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-11-14 21:30 - 2013-11-14 21:30 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2013-11-14 21:31 - 2013-11-14 21:31 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2013-11-14 21:31 - 2013-11-14 21:31 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2013-11-14 21:31 - 2013-11-14 21:31 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2013-11-14 21:31 - 2013-11-14 21:31 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2013-11-14 21:33 - 2013-11-14 21:33 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2013-11-14 21:34 - 2013-11-14 21:34 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2014-01-10 23:29 - 2013-06-19 11:44 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\antispam32\txmlutil.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\trillian.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00003584 _____ () c:\program files (x86)\trillian\languages\en\toolkit.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\events.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00010752 _____ () c:\program files (x86)\trillian\languages\en\buddy.dll
2013-10-21 00:00 - 2013-10-21 00:00 - 00007168 _____ () c:\program files (x86)\trillian\languages\en\talk.dll
2013-11-03 22:22 - 2009-02-27 16:39 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.deu
2013-12-13 19:39 - 2013-12-13 19:39 - 03017840 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-12-13 19:39 - 2013-12-13 19:39 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-12-13 19:39 - 2013-12-13 19:39 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2014-01-10 23:29 - 2013-06-19 11:44 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\Antispam32\txmlutil.dll
2013-12-07 10:44 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-07 10:44 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-07 10:44 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-07 10:44 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-07 10:44 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-07 10:44 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/12/2014 11:15:35 AM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/11/2014 04:49:28 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {b32d9d52-3c18-45c2-8f1a-fa8b2756d720}

Error: (01/11/2014 04:47:34 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/11/2014 02:17:58 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/11/2014 02:15:07 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/11/2014 00:21:26 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/11/2014 00:20:06 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/11/2014 09:40:11 AM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).

Error: (01/11/2014 00:18:36 AM) (Source: Application Hang) (User: )
Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 8fc

Startzeit: 01cf0e58a055bdd9

Endzeit: 17

Anwendungspfad: C:\Users\Olli\Downloads\FRST64.exe

Berichts-ID:

Error: (01/10/2014 11:35:07 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)


System errors:
=============
Error: (01/12/2014 11:24:34 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (01/12/2014 11:15:35 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (01/11/2014 04:47:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (01/11/2014 04:47:18 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (01/11/2014 02:17:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (01/11/2014 02:15:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (01/10/2014 11:35:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (01/10/2014 11:34:04 PM) (Source: BugCheck) (User: )
Description: 0x0000004a (0x0000000076d2132a, 0x0000000000000002, 0x0000000000000000, 0xfffff8800a396ca0)C:\Windows\MEMORY.DMP011014-32947-01

Error: (01/10/2014 11:34:02 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎10.‎01.‎2014 um 23:31:31 unerwartet heruntergefahren.

Error: (01/10/2014 11:08:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "TeamViewer 8" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (01/12/2014 11:15:35 AM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/11/2014 04:49:28 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {b32d9d52-3c18-45c2-8f1a-fa8b2756d720}

Error: (01/11/2014 04:47:34 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/11/2014 02:17:58 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/11/2014 02:15:07 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/11/2014 00:21:26 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\Users\Olli\downloads\softonicdownloader_fuer_super.exe

Error: (01/11/2014 00:20:06 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Acrobat 9.0\Designer 8.2\FormDesigner.exe

Error: (01/11/2014 09:40:11 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x81000101

Error: (01/11/2014 00:18:36 AM) (Source: Application Hang)(User: )
Description: FRST64.exe3.3.8.18fc01cf0e58a055bdd917C:\Users\Olli\Downloads\FRST64.exe

Error: (01/10/2014 11:35:07 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)


==================== Memory info =========================== 

Percentage of memory in use: 29%
Total physical RAM: 7930.9 MB
Available physical RAM: 5552.66 MB
Total Pagefile: 15859.98 MB
Available Pagefile: 13165.43 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:207.73 GB) (Free:68.29 GB) NTFS
Drive d: (Volume) (Fixed) (Total:97.66 GB) (Free:95.43 GB) NTFS
Drive e: (Volume) (Fixed) (Total:146.48 GB) (Free:55.38 GB) NTFS
Drive g: (NIKON D90) (Removable) (Total:3.66 GB) (Free:3.57 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: EF83617C)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=208 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=98 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=146 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 002A5835)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)

==================== End Of Log ============================
         

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2014 05
Ran by Olli (administrator) on OLLI-PC on 12-01-2014 11:29:05
Running from C:\Users\Olli\Downloads\frst
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2281256 2010-09-14] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6486120 2010-09-08] (Realtek Semiconductor)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-11] (Bitdefender)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2013-11-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Adobe_ID0ENQBO] - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-06-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-11] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001512 2014-01-11] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-11] (Bitdefender)
MountPoints2: {a34d90e7-59ab-11e3-aa22-90fba6a2fb7f} - G:\HTC_Sync_Manager_PC.exe
Startup: C:\Users\Olli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startfenster.de
SearchScopes: HKLM - DefaultScope {94A69141-E475-4A8F-898D-166E3E01DD1C} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {94A69141-E475-4A8F-898D-166E3E01DD1C} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - DefaultScope {94A69141-E475-4A8F-898D-166E3E01DD1C} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {94A69141-E475-4A8F-898D-166E3E01DD1C} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default
FF SearchEngineOrder.1: SuchMaschine
FF Homepage: hxxp://google.de/
FF Keyword.URL: hxxp://www.sm.de/?q=
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @Bitdefender.com/PasswordManager;version=17.8 - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll (Bitdefender)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-12-20]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2014-01-10]
FF HKLM-x32\...\Firefox\Extensions: [ext@bettersurfplus.com] - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta674.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ff
FF Extension: Video Player - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ff [2014-01-10]
FF HKLM-x32\...\Firefox\Extensions: [ffpwdman@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\ []
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2014-01-10]

Chrome: 
=======
CHR HomePage: hxxp://qip.ru
CHR RestoreOnStartup: "hxxp://www.klamm.de/", "hxxp://facebook.com/"
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\30.1_0 [2013-12-21]
CHR Extension: (HP Product Detection Plugin) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp\2.0.5.6_0 [2013-11-03]
CHR Extension: (Google Docs) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 [2013-11-03]
CHR Extension: (Google Drive) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 [2013-11-03]
CHR Extension: (Brushed) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg\1.0_0 [2013-11-03]
CHR Extension: (YouTube) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 [2013-11-03]
CHR Extension: (Bitdefender Wallet) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl\17.24.0_0 [2014-01-11]
CHR Extension: (Adblock Plus) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0 [2013-12-19]
CHR Extension: (Adblock for Youtube\u2122) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk\2.12_0 [2013-11-10]
CHR Extension: (Hide My Ass! Web Proxy) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmgnmcnlncejehjlnhaglpnoolgbflbd\1.2.5_0 [2013-11-03]
CHR Extension: (Google Search) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 [2013-11-03]
CHR Extension: (SEO Site Tools) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\diahigjngdnkdgajdbpjdeomopbpkjjc\2.91_0 [2013-11-03]
CHR Extension: (Video Player) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\einecjnnfjglbkjjlbekhpcmmegmgbnl\1.1_0 [2014-01-10]
CHR Extension: (DoNotTrackMe: Online Privacy Protection) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\3.1.1040_0 [2014-01-07]
CHR Extension: (Pendule) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkffbkamcejhkcaocmkdeiiccpmjfdi\1.0.0_0 [2013-11-03]
CHR Extension: (Window Resizer) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkelicaakdanhinjdeammmilcgefonfh\1.9.0.1_0 [2013-12-13]
CHR Extension: (Google Wallet) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2013-12-19]
CHR Extension: (Gmail) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 [2013-11-03]
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2013-12-20]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-11]
CHR HKLM-x32\...\Chrome\Extension: [einecjnnfjglbkjjlbekhpcmmegmgbnl] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ch\VideoPlayerV3beta674.crx [2014-01-07]
CHR HKLM-x32\...\Chrome\Extension: [mmifolfpllfdhilecpdpmemhelmanajl] - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ch\BetterSurfPlus.crx [2014-01-07]

==================== Services (Whitelisted) =================

S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [288112 2013-11-03] (Adobe Systems Incorporated)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-10] (Nero AG)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-11-02] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender)

==================== Drivers (Whitelisted) ====================

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-11 14:03 - 2014-01-12 11:29 - 00000000 ____D C:\Users\Olli\Downloads\frst
2014-01-11 09:40 - 2014-01-11 09:41 - 00260476 _____ C:\Windows\msxml4-KB2758694-enu.LOG
2014-01-11 00:13 - 2014-01-11 00:15 - 00033346 _____ C:\Users\Olli\Downloads\Addition.txt
2014-01-11 00:07 - 2014-01-11 14:17 - 00000000 ____D C:\FRST
2014-01-11 00:06 - 2014-01-11 00:06 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2014-01-11 00:06 - 2014-01-11 00:06 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2014-01-10 23:33 - 2014-01-10 23:33 - 574520016 _____ C:\Windows\MEMORY.DMP
2014-01-10 23:33 - 2014-01-10 23:33 - 00278672 _____ C:\Windows\Minidump\011014-32947-01.dmp
2014-01-10 23:33 - 2014-01-10 23:33 - 00000000 ____D C:\Windows\Minidump
2014-01-10 23:31 - 2014-01-10 23:36 - 00000385 _____ C:\Users\Olli\AppData\Roaminguser_gensett.xml
2014-01-10 23:31 - 2014-01-10 23:31 - 00773550 _____ C:\ProgramData\1389392186.bdinstall.bin
2014-01-10 23:30 - 2014-01-11 00:06 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2014-01-10 23:30 - 2014-01-10 23:30 - 00002186 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-10 23:30 - 2014-01-10 23:30 - 00002067 _____ C:\Users\Public\Desktop\Bitdefender Internet Security.lnk
2014-01-10 23:30 - 2014-01-10 23:30 - 00000684 ____H C:\bdr-cf01
2014-01-10 23:30 - 2014-01-10 23:30 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2014-01-10 23:30 - 2014-01-10 23:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-10 23:30 - 2014-01-10 23:30 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-10 23:30 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2014-01-10 23:30 - 2013-02-22 18:46 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys
2014-01-10 23:30 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2014-01-10 23:29 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2014-01-10 23:29 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2014-01-10 23:29 - 2012-11-02 13:17 - 00261056 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys
2014-01-10 23:20 - 2014-01-10 23:20 - 00000000 ____D C:\Users\Olli\AppData\Roaming\Bitdefender
2014-01-10 23:19 - 2014-01-10 23:30 - 00253404 ____H C:\bdr-ld01
2014-01-10 23:19 - 2014-01-10 23:30 - 00009216 ____H C:\bdr-ld01.mbr
2014-01-10 23:19 - 2013-09-24 15:38 - 46879860 ____H C:\bdr-im01.gz
2014-01-10 23:19 - 2013-08-13 12:38 - 03271472 ____H C:\bdr-bz01
2014-01-10 23:16 - 2014-01-11 00:06 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-10 23:16 - 2014-01-10 23:16 - 00000000 ____D C:\Users\Olli\AppData\Roaming\QuickScan
2014-01-10 23:16 - 2014-01-10 23:16 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-10 23:16 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUISkin.dll
2014-01-10 23:16 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUH.dll
2014-01-10 23:16 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2014-01-10 23:16 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2014-01-10 23:11 - 2014-01-10 23:16 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-10 21:16 - 2014-01-10 21:16 - 05701712 _____ C:\Users\Olli\Downloads\bitdefender_14isecurity.exe
2014-01-10 19:50 - 2014-01-10 19:50 - 00000000 ____D C:\Program Files (x86)\VideoPlayerV3
2014-01-09 08:59 - 2014-01-09 09:03 - 00000000 ____D C:\Users\Olli\AppData\Roaming\HTC
2014-01-09 08:58 - 2014-01-12 11:16 - 00000000 ____D C:\Users\Olli\AppData\Local\HTC MediaHub
2014-01-09 08:58 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\Documents\HTC
2014-01-09 08:58 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\.android
2014-01-09 08:57 - 2014-01-09 08:57 - 00002031 _____ C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-01-09 08:56 - 2014-01-09 08:56 - 00000000 ____D C:\Program Files (x86)\Spirent Communications
2014-01-09 08:50 - 2014-01-09 08:50 - 00000000 ____D C:\ProgramData\HTC
2014-01-09 08:35 - 2014-01-09 08:35 - 00003610 _____ C:\Windows\System32\Tasks\Launch HTC Sync Loader
2014-01-09 08:33 - 2014-01-09 08:54 - 00000000 ____D C:\Users\Olli\AppData\Local\Downloaded Installations
2014-01-09 08:32 - 2014-01-09 08:57 - 00000000 ____D C:\Program Files (x86)\HTC
2014-01-09 08:32 - 2014-01-09 08:32 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2014-01-09 08:32 - 2014-01-09 08:32 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2014-01-09 08:31 - 2014-01-09 08:31 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2014-01-09 08:23 - 2014-01-09 08:29 - 165708080 _____ (HTC Corporation                                              ) C:\Users\Olli\Downloads\setup_3.3.63.exe
2014-01-08 10:10 - 2014-01-08 10:52 - 00000000 ____D C:\Users\Olli\Desktop\Fotobuch London
2014-01-08 09:49 - 2014-01-09 21:26 - 00088455 _____ C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH.mcf
2014-01-08 09:49 - 2014-01-09 19:57 - 00088455 _____ C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH.mcf~
2014-01-08 09:49 - 2014-01-09 18:56 - 00000000 ____D C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH_mcf-Dateien
2014-01-07 19:05 - 2014-01-07 19:05 - 00002950 _____ C:\Windows\System32\Tasks\{7F7EBE5C-1EF8-4224-829A-EB0E36F60A1B}
2014-01-07 09:09 - 2014-01-07 09:09 - 00001817 _____ C:\Users\Public\Desktop\Apps.lnk
2014-01-07 09:09 - 2014-01-07 09:09 - 00001807 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-01-07 09:03 - 2014-01-07 09:03 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-12-21 18:31 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-21 18:31 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-21 18:31 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-21 18:31 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-21 18:31 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-21 18:31 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-21 18:31 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-21 18:31 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-21 18:31 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-21 18:31 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-21 18:31 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-21 18:31 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-21 18:31 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-21 18:31 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-21 18:31 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-21 18:31 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-21 18:31 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-21 18:30 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-21 18:30 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-21 18:30 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-21 18:30 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-21 18:30 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-21 18:30 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-21 18:30 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-21 18:30 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-21 18:30 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-21 18:30 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-21 18:30 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-21 18:30 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-21 18:30 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-21 18:30 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-19 21:24 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-19 21:20 - 2013-12-19 21:20 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-19 21:20 - 2013-12-19 21:20 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-19 21:19 - 2013-12-19 21:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-19 21:19 - 2013-12-19 21:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-19 21:19 - 2013-12-19 21:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-19 21:19 - 2013-12-19 21:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-19 21:19 - 2013-12-19 21:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-19 21:19 - 2013-12-19 21:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-19 21:18 - 2013-12-19 21:24 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-13 19:45 - 2013-12-13 19:45 - 07628951 _____ C:\Users\Olli\Desktop\DSC_6815.psd
2013-12-13 19:39 - 2013-12-13 20:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

==================== One Month Modified Files and Folders =======

2014-01-12 11:29 - 2014-01-11 14:03 - 00000000 ____D C:\Users\Olli\Downloads\frst
2014-01-12 11:24 - 2013-11-03 10:18 - 01658573 _____ C:\Windows\WindowsUpdate.log
2014-01-12 11:22 - 2009-07-14 05:45 - 00015600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-12 11:22 - 2009-07-14 05:45 - 00015600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-12 11:16 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\AppData\Local\HTC MediaHub
2014-01-12 11:16 - 2013-11-16 09:53 - 00000352 _____ C:\Windows\Tasks\AmiUpdXp.job
2014-01-12 11:15 - 2013-11-30 14:25 - 00000434 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2014-01-12 11:15 - 2013-11-03 11:47 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-12 11:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-12 11:15 - 2009-07-14 05:51 - 00035201 _____ C:\Windows\setupact.log
2014-01-11 16:47 - 2013-11-03 11:47 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-11 14:17 - 2014-01-11 00:07 - 00000000 ____D C:\FRST
2014-01-11 14:13 - 2013-11-03 14:11 - 00176838 _____ C:\Windows\PFRO.log
2014-01-11 14:07 - 2013-11-03 22:47 - 00000000 ____D C:\Users\Olli\AppData\Roaming\Skype
2014-01-11 09:41 - 2014-01-11 09:40 - 00260476 _____ C:\Windows\msxml4-KB2758694-enu.LOG
2014-01-11 00:15 - 2014-01-11 00:13 - 00033346 _____ C:\Users\Olli\Downloads\Addition.txt
2014-01-11 00:06 - 2014-01-11 00:06 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2014-01-11 00:06 - 2014-01-11 00:06 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2014-01-11 00:06 - 2014-01-10 23:30 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2014-01-11 00:06 - 2014-01-10 23:16 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-10 23:36 - 2014-01-10 23:31 - 00000385 _____ C:\Users\Olli\AppData\Roaminguser_gensett.xml
2014-01-10 23:33 - 2014-01-10 23:33 - 574520016 _____ C:\Windows\MEMORY.DMP
2014-01-10 23:33 - 2014-01-10 23:33 - 00278672 _____ C:\Windows\Minidump\011014-32947-01.dmp
2014-01-10 23:33 - 2014-01-10 23:33 - 00000000 ____D C:\Windows\Minidump
2014-01-10 23:31 - 2014-01-10 23:31 - 00773550 _____ C:\ProgramData\1389392186.bdinstall.bin
2014-01-10 23:30 - 2014-01-10 23:30 - 00002186 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-10 23:30 - 2014-01-10 23:30 - 00002067 _____ C:\Users\Public\Desktop\Bitdefender Internet Security.lnk
2014-01-10 23:30 - 2014-01-10 23:30 - 00000684 ____H C:\bdr-cf01
2014-01-10 23:30 - 2014-01-10 23:30 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2014-01-10 23:30 - 2014-01-10 23:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-10 23:30 - 2014-01-10 23:30 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-10 23:30 - 2014-01-10 23:19 - 00253404 ____H C:\bdr-ld01
2014-01-10 23:30 - 2014-01-10 23:19 - 00009216 ____H C:\bdr-ld01.mbr
2014-01-10 23:20 - 2014-01-10 23:20 - 00000000 ____D C:\Users\Olli\AppData\Roaming\Bitdefender
2014-01-10 23:16 - 2014-01-10 23:16 - 00000000 ____D C:\Users\Olli\AppData\Roaming\QuickScan
2014-01-10 23:16 - 2014-01-10 23:16 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-10 23:16 - 2014-01-10 23:11 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-10 21:16 - 2014-01-10 21:16 - 05701712 _____ C:\Users\Olli\Downloads\bitdefender_14isecurity.exe
2014-01-10 19:51 - 2013-11-17 12:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-10 19:50 - 2014-01-10 19:50 - 00000000 ____D C:\Program Files (x86)\VideoPlayerV3
2014-01-09 21:26 - 2014-01-08 09:49 - 00088455 _____ C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH.mcf
2014-01-09 21:26 - 2013-11-19 20:54 - 00000000 ____D C:\ProgramData\tmp
2014-01-09 19:57 - 2014-01-08 09:49 - 00088455 _____ C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH.mcf~
2014-01-09 18:56 - 2014-01-08 09:49 - 00000000 ____D C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH_mcf-Dateien
2014-01-09 18:23 - 2009-07-14 05:45 - 03083704 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-09 09:03 - 2014-01-09 08:59 - 00000000 ____D C:\Users\Olli\AppData\Roaming\HTC
2014-01-09 08:58 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\Documents\HTC
2014-01-09 08:58 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\.android
2014-01-09 08:58 - 2013-11-16 15:26 - 00000000 ____D C:\Users\Olli\AppData\Local\Apple Computer
2014-01-09 08:58 - 2013-11-16 15:25 - 00000000 ____D C:\Users\Olli\AppData\Roaming\Apple Computer
2014-01-09 08:58 - 2013-11-03 11:47 - 00122064 _____ C:\Users\Olli\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-09 08:58 - 2013-11-03 10:32 - 00000000 ____D C:\Users\Olli
2014-01-09 08:57 - 2014-01-09 08:57 - 00002031 _____ C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-01-09 08:57 - 2014-01-09 08:32 - 00000000 ____D C:\Program Files (x86)\HTC
2014-01-09 08:57 - 2013-11-03 16:31 - 00052170 _____ C:\Windows\DPINST.LOG
2014-01-09 08:56 - 2014-01-09 08:56 - 00000000 ____D C:\Program Files (x86)\Spirent Communications
2014-01-09 08:54 - 2014-01-09 08:33 - 00000000 ____D C:\Users\Olli\AppData\Local\Downloaded Installations
2014-01-09 08:50 - 2014-01-09 08:50 - 00000000 ____D C:\ProgramData\HTC
2014-01-09 08:41 - 2009-07-14 18:58 - 00654166 _____ C:\Windows\system32\perfh007.dat
2014-01-09 08:41 - 2009-07-14 18:58 - 00130006 _____ C:\Windows\system32\perfc007.dat
2014-01-09 08:41 - 2009-07-14 06:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-09 08:35 - 2014-01-09 08:35 - 00003610 _____ C:\Windows\System32\Tasks\Launch HTC Sync Loader
2014-01-09 08:32 - 2014-01-09 08:32 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2014-01-09 08:32 - 2014-01-09 08:32 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2014-01-09 08:32 - 2013-11-03 12:02 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-09 08:32 - 2013-11-03 12:00 - 00000000 ____D C:\Users\Olli\AppData\Local\Adobe
2014-01-09 08:31 - 2014-01-09 08:31 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2014-01-09 08:29 - 2014-01-09 08:23 - 165708080 _____ (HTC Corporation                                              ) C:\Users\Olli\Downloads\setup_3.3.63.exe
2014-01-08 10:52 - 2014-01-08 10:10 - 00000000 ____D C:\Users\Olli\Desktop\Fotobuch London
2014-01-07 20:10 - 2013-11-14 21:51 - 00000000 ____D C:\Users\Olli\AppData\Roaming\vlc
2014-01-07 20:00 - 2013-11-14 21:50 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-07 19:05 - 2014-01-07 19:05 - 00002950 _____ C:\Windows\System32\Tasks\{7F7EBE5C-1EF8-4224-829A-EB0E36F60A1B}
2014-01-07 18:54 - 2013-11-03 17:29 - 00000000 ____D C:\Users\Olli\AppData\Roaming\FileZilla
2014-01-07 10:35 - 2013-11-03 22:47 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-07 10:35 - 2013-11-03 22:47 - 00000000 ____D C:\ProgramData\Skype
2014-01-07 09:15 - 2013-11-03 12:34 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2014-01-07 09:09 - 2014-01-07 09:09 - 00001817 _____ C:\Users\Public\Desktop\Apps.lnk
2014-01-07 09:09 - 2014-01-07 09:09 - 00001807 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-01-07 09:09 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2014-01-07 09:03 - 2014-01-07 09:03 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2014-01-07 09:03 - 2013-11-03 12:34 - 00000000 ____D C:\ProgramData\BlueStacks
2013-12-23 09:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-21 17:06 - 2013-11-03 10:33 - 00001421 _____ C:\Users\Olli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-21 17:04 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-19 21:24 - 2013-12-19 21:18 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-19 21:20 - 2013-12-19 21:20 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-19 21:20 - 2013-12-19 21:20 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-19 21:19 - 2013-12-19 21:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-19 21:19 - 2013-12-19 21:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-19 21:19 - 2013-12-19 21:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-19 21:19 - 2013-12-19 21:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-19 21:19 - 2013-12-19 21:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-19 21:19 - 2013-12-19 21:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-19 21:19 - 2013-12-19 21:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-19 21:19 - 2013-12-19 21:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-19 21:18 - 2013-11-03 12:32 - 00000000 ____D C:\Windows\system32\MRT
2013-12-19 21:17 - 2013-11-03 12:32 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-19 16:54 - 2013-11-03 12:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-13 20:57 - 2013-12-13 19:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-13 19:45 - 2013-12-13 19:45 - 07628951 _____ C:\Users\Olli\Desktop\DSC_6815.psd

Some content of TEMP:
====================
C:\Users\Olli\AppData\Local\Temp\avgnt.exe
C:\Users\Olli\AppData\Local\Temp\BunndleOfferManager.dll
C:\Users\Olli\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\Olli\AppData\Local\Temp\FP_PL_MSI_INSTALLER.exe
C:\Users\Olli\AppData\Local\Temp\OfficeSetup.exe
C:\Users\Olli\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\Olli\AppData\Local\Temp\sqlite3.exe
C:\Users\Olli\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Olli\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-11 12:15

==================== End Of Log ============================
         
--- --- ---

Alt 12.01.2014, 12:59   #7
M-K-D-B
/// TB-Ausbilder
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall



Servus,


ich habe dich doch darum gebeten, FRST auf dem Desktop abzuspeichern und von dort zu starten... was machst du?
Zitat:
Running from C:\Users\Olli\Downloads\frst
Du startest es vom Unterordner FRST aus dem Downloadbereich.

Sei so nett und verschiebe bitte die FRST.exe auf dem Desktop.


Alle weiteren Tools auch bitte dort abspeichern bzw. dann eben dorthin verschieben.




Servus,




Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).





Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.






Schritt 3
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.







Schritt 4
Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/
  • Bitte deaktiviere während des Scans alle Virenscanner, da sie das Ergebnis beeinflussen
  • Starte Zoek.exe mit einem Doppelklick.
  • Achtung: Das folgende Skript wurde nur für diesen speziellen Fall geschrieben und könnte andere Computer beschädigen.
  • Kopiere den Text der folgenden Box in das Skriptfenster von zoek:
    Code:
    ATTFilter
    FFdefaults;
    CHRdefaults;
    iedefaults;
    emptyclsid;
    autoclean;
             
  • Nun klicke auf "Run script" und sei geduldig bis das Skript durchläuft.
  • Wenn das Tool fertig ist wird sich Notepad mit dem Logfile öffnen (ggf. erst nach einem Neustart). Das Log befindet sich aber auch noch unter c:
  • Bitte poste mir das ZOEK-Log (möglichst in CODE-Tags - #-Symbol im Antwortfenster klicken)





Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von JRT,
  • die Logdatei von MBAM,
  • die Logdatei von Zoek.

Alt 12.01.2014, 14:26   #8
Hawkeye75
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall



Code:
ATTFilter
# AdwCleaner v3.016 - Bericht erstellt am 12/01/2014 um 13:27:08
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Olli - OLLI-PC
# Gestartet von : C:\Users\Olli\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : APNMCP

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork
Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork
Ordner Gelöscht : C:\Users\Olli\AppData\Local\AskPartnerNetwork
Ordner Gelöscht : C:\Users\Olli\AppData\Local\SwvUpdater
Ordner Gelöscht : C:\Users\Olli\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Datei Gelöscht : C:\Users\Olli\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
Datei Gelöscht : C:\Windows\Tasks\AmiUpdXp.job
Datei Gelöscht : C:\Windows\System32\Tasks\AmiUpdXp

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{41564952-412D-5637-00A7-7A786E7484D7}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKLM\Software\BetterSurf
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\AskPartnerNetwork

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v25.0.1 (de)

[ Datei : C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\prefs.js ]


-\\ Google Chrome v31.0.1650.63

[ Datei : C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : homepage

*************************

AdwCleaner[R0].txt - [5176 octets] - [12/01/2014 13:25:17]
AdwCleaner[S0].txt - [4950 octets] - [12/01/2014 13:27:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5010 octets] ##########
         
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x64
Ran by Olli on 12.01.2014 at 13:40:02,68
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] "C:\Users\Olli\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\startmenu\startfenster.lnk"
Successfully deleted: [File] "C:\Users\Olli\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\taskbar\startfenster.lnk"



~~~ Folders



~~~ FireFox

Successfully deleted: [File] C:\Users\Olli\AppData\Roaming\mozilla\firefox\profiles\w462gjcg.default\extensions\toolbar_avira-v7@apn.ask.com.xpi



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.01.2014 at 13:47:58,68
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Code:
ATTFilter
 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.12.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Olli :: OLLI-PC [Administrator]

Schutz: Aktiviert

12.01.2014 13:54:34
mbam-log-2014-01-12 (13-54-34).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 226322
Laufzeit: 6 Minute(n), 

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 4
C:\$Recycle.Bin\S-1-5-21-208497957-186071530-2916542652-1001\$RY0LC37.exe (PUP.Optional.Spigot.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Olli\Downloads\freemakevideoconvertersetup.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Olli\Downloads\SoftonicDownloader_fuer_super.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Olli\Downloads\winamp565_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         
Code:
ATTFilter
Zoek.exe v5.0.0.0 Updated 09-Januari-2014
Tool run by Olli on 12.01.2014 at 14:05:29,16.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Olli\Desktop\zoek.exe [Scan all users] [Script inserted] 

==== System Restore Info ======================

12.01.2014 14:07:00 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-208497957-186071530-2916542652-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{41564952-412D-5637-00A7-7A786E7484D7} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ext@bettersurfplus.com deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\prefs.js:
user_pref("browser.startup.homepage", "hxxp://google.de/");
user_pref("browser.search.order.1", "SuchMaschine");
user_pref("keyword.URL", "hxxp://www.sm.de/?q=");

Added to C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\prefs.js:
user_pref("browser.startup.homepage", "hxxp://www.google.com");
user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "hxxp://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default

user.js not found
---- Lines ask.com modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"ext@VideoPlayerV3beta674.net\":{\"descriptor\":\"C:\\\\Program Fi
---- FireFox user.js and prefs.js backups ---- 

prefs__1417_.backup

==== Deleting Files \ Folders ======================

C:\Users\Olli\.android deleted
C:\PROGRA~2\VideoPlayerV3 deleted
C:\Users\Olli\Favorites\Startfenster.lnk deleted
C:\Users\Olli\Favorites\Links\Startfenster.lnk deleted
C:\Users\Olli\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Startfenster.lnk deleted
C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\searchplugins\search_engine.xml deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"ext@VideoPlayerV3beta674.net"="C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ff" []

==== Firefox Extensions ======================

ProfilePath: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default
- Undetermined - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ff
- Undetermined - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default
D6ED6EB98E759460AD8C66DE23070132	- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll -	Microsoft Office 2013
18CF51689186AEB9D1D149AEB0E92D03	- C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL -	Microsoft Office 2013
77B645B655759F574B2555276FA111D9	- C:\Windows\system32\Macromed\Flash\NPSWF32.dll -	Shockwave Flash


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
einecjnnfjglbkjjlbekhpcmmegmgbnl - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ch\VideoPlayerV3beta674.crx[]
mmifolfpllfdhilecpdpmemhelmanajl - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ch\BetterSurfPlus.crx[]

HP Product Detection Plugin - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp
Hide My Ass Web Proxy - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmgnmcnlncejehjlnhaglpnoolgbflbd
SEO Site Tools - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\diahigjngdnkdgajdbpjdeomopbpkjjc
Video Player - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\einecjnnfjglbkjjlbekhpcmmegmgbnl
DoNotTrackMe Online Privacy Protection - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd
Pendule - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkffbkamcejhkcaocmkdeiiccpmjfdi
Window Resizer - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkelicaakdanhinjdeammmilcgefonfh

==== Chrome Fix ======================

C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\einecjnnfjglbkjjlbekhpcmmegmgbnl deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{94A69141-E475-4A8F-898D-166E3E01DD1C} SuchMaschine  Url="hxxp://www.sm.de/?q={searchTerms}"

==== Reset Google Chrome ======================

C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ext@VideoPlayerV3beta674.net deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\einecjnnfjglbkjjlbekhpcmmegmgbnl deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mmifolfpllfdhilecpdpmemhelmanajl deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Olli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Olli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Olli\AppData\Local\Mozilla\Firefox\Profiles\w462gjcg.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=25 folders=13 832097 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Users\Olli\AppData\Local\Temp  will be emptied at reboot
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Olli\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 12.01.2014 at 14:23:00,66 ======================
         
Was ist denn rvzr-a.akamaihd.net für ein Mist, wie kommt der trotz aktueller Antivir auf meinen Rechner und warum finden und beseitigen ihn weder antivir noch bitdefender?

Gruß,
Hawkeye

Alt 12.01.2014, 20:36   #9
M-K-D-B
/// TB-Ausbilder
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall



Servus,


Zitat:
Zitat von Hawkeye75 Beitrag anzeigen
Was ist denn rvzr-a.akamaihd.net für ein Mist, wie kommt der trotz aktueller Antivir auf meinen Rechner und warum finden und beseitigen ihn weder antivir noch bitdefender?
gehört zum Bereich unerwünschter Software... sowas erkennen AV-Programme kaum bzw. gar nicht.




Wir spüren die letzten Reste auf, damit wir sie später entfernen können:





Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.





Schritt 2
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

    Code:
    ATTFilter
    :filefind
    *BetterSurf*
    *AmiUpdXp*
    
    :folderfind
    *BetterSurf*
    *AmiUpdXp*
    
    :regfind
    BetterSurf
    AmiUpdXp
             
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.








Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?






Bitte poste mit deiner nächsten Antwort
  • die beiden Logdateien von FRST,
  • die Logdatei von SystemLook,
  • die Beantwortung der gestellten Fragen.

Alt 16.01.2014, 17:28   #10
M-K-D-B
/// TB-Ausbilder
 
Wieder einmal rvzr-a.akamaihd.net - Befall - Standard

Wieder einmal rvzr-a.akamaihd.net - Befall



Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!

Antwort

Themen zu Wieder einmal rvzr-a.akamaihd.net - Befall
acrobat, administrator, adobe, avira, bitdefender, branding, browser, defender, device driver, google, homepage, launch, memory.dmp, microsoft, probleme, pup.optional.opencandy, pup.optional.softonic.a, pup.optional.spigot.a, realtek, registry, richtlinie, server, software, system32



Ähnliche Themen: Wieder einmal rvzr-a.akamaihd.net - Befall


  1. Wie von Mac rvzr-a.akamaihd Virus entfernen?
    Plagegeister aller Art und deren Bekämpfung - 08.04.2014 (1)
  2. Windows 7 64bit: rvzr-a.akamaihd
    Log-Analyse und Auswertung - 17.01.2014 (9)
  3. Virus (http://rvzr-a.akamaihd.net)
    Log-Analyse und Auswertung - 15.01.2014 (14)
  4. rvzr-a.akamaihd.net
    Plagegeister aller Art und deren Bekämpfung - 12.01.2014 (19)
  5. Rvzr-a.akamaihd.net Infektion
    Log-Analyse und Auswertung - 03.12.2013 (11)
  6. rvzr-a.akamaihd.net entfernen
    Plagegeister aller Art und deren Bekämpfung - 03.12.2013 (5)
  7. Windows7: rvzr-a.akamaihd.net im Firefox
    Plagegeister aller Art und deren Bekämpfung - 30.11.2013 (9)
  8. rvzr-a.akamaihd.net entfernen
    Plagegeister aller Art und deren Bekämpfung - 23.11.2013 (7)
  9. rvzr-a.akamaihd.net/
    Plagegeister aller Art und deren Bekämpfung - 22.11.2013 (3)
  10. http //rvzr-a.akamaihd.net auf dem Laptop
    Plagegeister aller Art und deren Bekämpfung - 21.11.2013 (11)
  11. rvzr-a.akamaihd auf Windows 7 64-bit
    Log-Analyse und Auswertung - 20.11.2013 (1)
  12. rvzr-a.akamaihd.net snapdo.com
    Plagegeister aller Art und deren Bekämpfung - 18.11.2013 (3)
  13. rvzr-a.akamaihd.net - Werbung im Browser und Pop-Ups
    Plagegeister aller Art und deren Bekämpfung - 16.11.2013 (6)
  14. http://rvzr-a.akamaihd.net/
    Plagegeister aller Art und deren Bekämpfung - 15.11.2013 (10)
  15. Win7: rvzr-a.akamaihd.net
    Log-Analyse und Auswertung - 15.11.2013 (9)
  16. rvzr-a.akamaihd
    Log-Analyse und Auswertung - 11.11.2013 (7)
  17. rvzr-a.akamaihd.net
    Plagegeister aller Art und deren Bekämpfung - 10.11.2013 (24)

Zum Thema Wieder einmal rvzr-a.akamaihd.net - Befall - Hi, habe leider wieder Probleme mit akamaihd. FRST sieht so aus: FRST Additions Logfile: Code: Alles auswählen Aufklappen ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-01-2014 - Wieder einmal rvzr-a.akamaihd.net - Befall...
Archiv
Du betrachtest: Wieder einmal rvzr-a.akamaihd.net - Befall auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.