| |
| |||||||
Log-Analyse und Auswertung: Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
29.01.2014, 15:58
| #31 |
 |  Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig!Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.29.05 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16750 Holger-PC :: HOLGER [Administrator] 29.01.2014 15:31:58 mbam-log-2014-01-29 (15-31-58).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 232942 Laufzeit: 5 Minute(n), 50 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\Users\Holger-PC\Downloads\rcpsetup_chip_de_chip_de.exe (PUP.Optional.RegCleanPro) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
|
29.01.2014, 16:02
| #32 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! Frische FRST Logs bitte
__________________
__________________ |
|
29.01.2014, 16:14
| #33 |
| | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig!FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014
Ran by Holger-PC (administrator) on HOLGER on 29-01-2014 16:12:26
Running from C:\Users\Holger-PC\Downloads\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
() C:\Program Files (x86)\OpenVPN\bin\openvpn-gui.exe
(The OpenVPN Project) C:\Program Files (x86)\OpenVPN\bin\openvpn.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [] - [x]
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2608040 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] - C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [SRS Premium Sound HD] - C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-07-27] (SRS Labs, Inc.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-01] (Intel Corporation)
HKLM-x32\...\Run: [ToshibaDynamicIconUtility] - C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [1498624 2012-08-09] (Toshiba)
HKLM-x32\...\Run: [TPUReg(x86)] - "C:\Program Files\TOSHIBA\Password Utility\TosPU.exe" /Retimes
HKLM-x32\...\Run: [TPUReg] - C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [6884352 2012-08-23] (Pegatron Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoSetTaskbar] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKLM\...\Policies\Explorer: [NoDesktop] 0
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
HKCU\...\Policies\system: [DisableCMD] 0
HKCU\...\Policies\system: [NoDispAppearancePage] 0
HKCU\...\Policies\system: [NoDispBackgroundPage] 0
HKCU\...\Policies\system: [NoDispSettingsPage] 0
HKCU\...\Policies\Explorer: [NoViewOnDrive] 0
HKCU\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKCU\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKCU\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKCU\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKCU\...\Policies\Explorer: [NoFile] 0
HKCU\...\Policies\Explorer: [NoTrayContextMenu] 0
HKCU\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKCU\...\Policies\Explorer: [NoSetTaskbar] 0
HKCU\...\Policies\Explorer: [NoDeletePrinter] 0
HKCU\...\Policies\Explorer: [NoDFSTab] 0
HKCU\...\Policies\Explorer: [NoChangeStartMenu] 0
HKCU\...\Policies\Explorer: [NoWindowsUpdate] 0
HKCU\...\Policies\Explorer: [NoEncryptOnMove] 0
HKCU\...\Policies\Explorer: [NoResolveSearch] 0
HKCU\...\Policies\Explorer: [NoSaveSettings] 0
HKCU\...\Policies\Explorer: [NoHardwareTab] 0
HKCU\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\Administrator\...\Run: [] - [x]
Startup: C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {02BDC8D2-198F-4D6D-B4F0-274AA878B635} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {02BDC8D2-198F-4D6D-B4F0-274AA878B635} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKCU - {02BDC8D2-198F-4D6D-B4F0-274AA878B635} URL =
BHO: click-n-mark-5 - {11111111-1111-1111-1111-110411511182} - C:\Program Files (x86)\click-n-mark-5\click-n-mark-5-bho64.dll No File
BHO: Feven 2.2 - {11111111-1111-1111-1111-110411901112} - C:\Program Files (x86)\Feven 2.2\Feven 2.2-bho64.dll No File
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll No File
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
BHO-x32: Citavi Picker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Re-Markable - {bd55172e-59c1-4a93-b19c-633f0d7790ad} - C:\Program Files (x86)\Re-Markable\150.dll ()
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Tcpip\Parameters: [DhcpNameServer] 132.231.51.4 132.231.1.24
FireFox:
========
FF ProfilePath: C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: www.sz.de
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nation-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Widget context - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2014-01-14]
FF Extension: click-n-mark-5 - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\7b2e05c3-4f6b-4f31-b7ed-1d6bf9639e5d@33ff3dbe-011c-4bda-9fc4-a47387c00171.com [2014-01-29]
FF Extension: Websteroids - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\support@websteroidsapp.com [2014-01-09]
FF Extension: Amazon 1Button App for Firefox - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\abb@amazon.com.xpi [2013-09-04]
FF Extension: GutscheinCodes.de GutscheinFinder - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\jid0-hjoQNmABq6jg91jHpQyvgJUouUP@jetpack.xpi [2013-07-12]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2013-11-26]
FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKCU\...\Firefox\Extensions: [{cb1bb3bd-8ce0-4d26-98c4-99f6415a6002}] - C:\Program Files (x86)\Re-Markable\150.xpi
FF Extension: No Name - C:\Program Files (x86)\Re-Markable\150.xpi [2014-01-03]
Chrome:
=======
CHR Extension: (Feven 2.2) - C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdhbagplpkkoeifmpmpdaieomnggppmo [2014-01-07]
CHR Extension: (click-n-mark-5) - C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgiiggndjhacnnhnhmaljgbgcaneehld [2014-01-03]
CHR Extension: (Widget context) - C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombmmloebnfnpehgjnmkcgoegfachobp [2014-01-14]
CHR HKLM-x32\...\Chrome\Extension: [ejdfidgapfiokiphmcjpmmjbdndepoja] - C:\Program Files (x86)\Re-Markable\150.crx [2014-01-03]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-22] (Avira Operations GmbH & Co. KG)
U2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-19] (Avira Operations GmbH & Co. KG)
U2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
U2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-07-16] (Freemake)
U2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-13] ()
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
U2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
U3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32568 2013-08-22] (The OpenVPN Project)
U3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-08-14] (Toshiba Europe GmbH)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
U3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [x]
==================== Drivers (Whitelisted) ====================
U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-22] (Avira Operations GmbH & Co. KG)
U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-19] (Avira Operations GmbH & Co. KG)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
U3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
U3 mbamchameleon; C:\windows\system32\drivers\mbamchameleon.sys [89304 2014-01-21] (Malwarebytes Corporation)
U3 NETwNe64; C:\Windows\system32\DRIVERS\NETwNe64.sys [11400192 2012-06-02] (Intel Corporation)
U2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
U3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-07-11] (Realtek Microelectronics)
U3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1496720 2012-08-13] (Realtek Semiconductor Corporation )
U3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-14] (Synaptics Incorporated)
U3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
U0 SR;
U2 srservice;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-29 16:02 - 2014-01-29 16:02 - 00000358 _____ C:\windows\PFRO.log
2014-01-29 14:19 - 2014-01-29 14:27 - 00000000 ____D C:\AdwCleaner
2014-01-29 13:04 - 2014-01-29 13:16 - 00023212 _____ C:\windows\WindowsUpdate.log
2014-01-28 00:22 - 2014-01-28 00:24 - 00137180 _____ C:\Users\Holger-PC\Downloads\hosts.zip
2014-01-27 12:17 - 2014-01-27 12:17 - 02347384 _____ (ESET) C:\Users\Holger-PC\Downloads\esetsmartinstaller_enu.exe
2014-01-27 12:17 - 2014-01-27 12:17 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 16:02 - 2014-01-24 16:30 - 109707566 _____ C:\Users\Holger-PC\Downloads\84193937629346864.rar
2014-01-23 18:33 - 2014-01-23 18:33 - 00001754 _____ C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 18:32 - 2014-01-23 18:33 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 18:32 - 2014-01-23 18:33 - 00000000 ____D C:\Program Files\iTunes
2014-01-23 18:32 - 2014-01-23 18:33 - 00000000 ____D C:\Program Files (x86)\iTunes
2014-01-23 18:32 - 2014-01-23 18:32 - 00000000 ____D C:\Program Files\iPod
2014-01-22 14:33 - 2014-01-22 14:33 - 00000000 ____D C:\windows\ERUNT
2014-01-21 20:44 - 2014-01-21 20:47 - 100400976 _____ (Apple Inc.) C:\Users\Holger-PC\Downloads\iTunes64Setup(1).exe
2014-01-21 20:31 - 2014-01-19 08:33 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-21 11:51 - 2014-01-21 16:57 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-21 11:48 - 2014-01-21 11:48 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Holger-PC\Downloads\mbar-1.07.0.1008(1).exe
2014-01-21 11:07 - 2014-01-21 11:07 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Holger-PC\Downloads\mbar-1.07.0.1008.exe
2014-01-21 10:58 - 2014-01-21 10:58 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-01-21 02:17 - 2014-01-21 02:34 - 133162906 _____ C:\Users\Holger-PC\Downloads\A_AP_R-LongLi-Del_Edi.rar
2014-01-21 00:27 - 2014-01-17 20:25 - 00379904 _____ C:\Users\Holger-PC\Downloads\gmer.exe
2014-01-21 00:13 - 2014-01-29 16:12 - 00000000 ____D C:\FRST
2014-01-21 00:13 - 2014-01-21 00:14 - 00042225 _____ C:\Users\Holger-PC\Downloads\FRST.txt
2014-01-21 00:13 - 2014-01-21 00:14 - 00016048 _____ C:\Users\Holger-PC\Downloads\Addition.txt
2014-01-21 00:09 - 2014-01-21 00:09 - 01221120 _____ (Farbar) C:\Users\Holger-PC\Downloads\FRST.exe
2014-01-21 00:00 - 2014-01-21 00:00 - 00000480 _____ C:\Users\Holger-PC\Downloads\defogger_disable.log
2014-01-21 00:00 - 2014-01-21 00:00 - 00000000 _____ C:\Users\Holger-PC\defogger_reenable
2014-01-20 23:57 - 2014-01-20 23:57 - 00050477 _____ C:\Users\Holger-PC\Downloads\Defogger.exe
2014-01-20 20:39 - 2014-01-20 20:39 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00001084 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 20:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-01-20 20:37 - 2014-01-20 20:37 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Holger-PC\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-17 14:14 - 2014-01-17 14:35 - 105901979 _____ C:\Users\Holger-PC\Downloads\Dinosaur_Jr__-_I_Bet_On_Sky_(2012)_320.part1.rar
2014-01-15 21:40 - 2013-12-07 07:37 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-01-15 21:40 - 2013-12-07 07:37 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 21:40 - 2013-12-07 06:15 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-01-15 21:40 - 2013-12-07 06:15 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 21:40 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\MPSSVC.dll
2014-01-15 21:40 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\windows\system32\FirewallAPI.dll
2014-01-15 21:40 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\windows\SysWOW64\FirewallAPI.dll
2014-01-15 21:40 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys
2014-01-15 21:40 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-01-15 21:40 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-01-15 21:40 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\disk.sys
2014-01-15 21:40 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2014-01-15 21:40 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2014-01-15 21:40 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2014-01-15 21:40 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2014-01-11 19:21 - 2014-01-11 19:21 - 00000000 ____D C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-11 19:20 - 2014-01-20 22:52 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-11 16:37 - 2014-01-11 16:37 - 00001122 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-11 16:37 - 2014-01-11 16:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-09 11:33 - 2014-01-20 22:30 - 00000000 ____D C:\ProgramData\Updater
2014-01-09 11:33 - 2014-01-09 11:33 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-07 21:06 - 2014-01-09 18:49 - 00004393 _____ C:\Users\Holger-PC\AppData\Local\Citavi Picker Internet Explorer Protocol.txt
2014-01-07 21:06 - 2014-01-07 21:06 - 00000000 ____D C:\Users\Holger-PC\AppData\Local\AskPartnerNetwork
2014-01-07 20:39 - 2014-01-10 19:57 - 00000594 _____ C:\Users\Holger-PC\daemonprocess.txt
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D C:\Users\Holger-PC\AppData\Local\cache
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D C:\Users\Holger-PC\.android
2014-01-07 20:23 - 2014-01-07 20:23 - 00000000 ____D C:\Users\Holger-PC\SyncFolder
2014-01-03 14:58 - 2014-01-29 16:03 - 00000416 _____ C:\windows\Tasks\Re-Markable Update.job
2014-01-03 14:58 - 2014-01-03 14:58 - 00003064 _____ C:\windows\System32\Tasks\Re-Markable Update
2014-01-03 14:58 - 2014-01-03 14:58 - 00001240 _____ C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2014-01-03 14:58 - 2014-01-03 14:58 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2013-12-30 18:20 - 2013-12-30 18:20 - 00001451 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-12-30 18:20 - 2013-12-30 18:20 - 00001254 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-12-30 18:19 - 2013-12-30 18:20 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\DVDVideoSoft
2013-12-30 18:19 - 2013-12-30 18:20 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-12-30 18:18 - 2013-12-30 18:18 - 32350440 _____ (DVDVideoSoft Ltd. ) C:\Users\Holger-PC\Downloads\Free19YouTubeDownload.exe
==================== One Month Modified Files and Folders =======
2014-01-29 16:13 - 2013-07-11 12:40 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Spotify
2014-01-29 16:12 - 2014-01-21 00:13 - 00000000 ____D C:\FRST
2014-01-29 16:03 - 2014-01-03 14:58 - 00000416 _____ C:\windows\Tasks\Re-Markable Update.job
2014-01-29 16:03 - 2012-07-26 08:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-29 16:02 - 2014-01-29 16:02 - 00000358 _____ C:\windows\PFRO.log
2014-01-29 16:02 - 2012-07-26 06:26 - 00262144 ___SH C:\windows\system32\config\BBI
2014-01-29 16:00 - 2012-07-26 09:12 - 00000000 ____D C:\windows\system32\sru
2014-01-29 15:25 - 2013-09-30 09:30 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-29 14:27 - 2014-01-29 14:19 - 00000000 ____D C:\AdwCleaner
2014-01-29 13:16 - 2014-01-29 13:04 - 00023212 _____ C:\windows\WindowsUpdate.log
2014-01-28 00:24 - 2014-01-28 00:22 - 00137180 _____ C:\Users\Holger-PC\Downloads\hosts.zip
2014-01-27 12:17 - 2014-01-27 12:17 - 02347384 _____ (ESET) C:\Users\Holger-PC\Downloads\esetsmartinstaller_enu.exe
2014-01-27 12:17 - 2014-01-27 12:17 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-26 19:33 - 2013-07-11 12:41 - 00000000 ____D C:\Users\Holger-PC\AppData\Local\Spotify
2014-01-26 01:58 - 2013-07-11 11:48 - 00003600 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2413837752-2537467696-3434217499-1001
2014-01-26 01:44 - 2013-07-11 10:29 - 00001014 _____ C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-24 16:30 - 2014-01-24 16:02 - 109707566 _____ C:\Users\Holger-PC\Downloads\84193937629346864.rar
2014-01-23 18:33 - 2014-01-23 18:33 - 00001754 _____ C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 18:33 - 2014-01-23 18:32 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 18:33 - 2014-01-23 18:32 - 00000000 ____D C:\Program Files\iTunes
2014-01-23 18:33 - 2014-01-23 18:32 - 00000000 ____D C:\Program Files (x86)\iTunes
2014-01-23 18:32 - 2014-01-23 18:32 - 00000000 ____D C:\Program Files\iPod
2014-01-23 18:29 - 2013-07-18 13:49 - 00000000 ____D C:\ProgramData\Apple
2014-01-22 14:33 - 2014-01-22 14:33 - 00000000 ____D C:\windows\ERUNT
2014-01-21 20:47 - 2014-01-21 20:44 - 100400976 _____ (Apple Inc.) C:\Users\Holger-PC\Downloads\iTunes64Setup(1).exe
2014-01-21 16:57 - 2014-01-21 11:51 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-21 11:48 - 2014-01-21 11:48 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Holger-PC\Downloads\mbar-1.07.0.1008(1).exe
2014-01-21 11:07 - 2014-01-21 11:07 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Holger-PC\Downloads\mbar-1.07.0.1008.exe
2014-01-21 10:58 - 2014-01-21 10:58 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-01-21 02:34 - 2014-01-21 02:17 - 133162906 _____ C:\Users\Holger-PC\Downloads\A_AP_R-LongLi-Del_Edi.rar
2014-01-21 00:23 - 2013-07-11 10:24 - 00000000 ____D C:\Users\Holger-PC
2014-01-21 00:14 - 2014-01-21 00:13 - 00042225 _____ C:\Users\Holger-PC\Downloads\FRST.txt
2014-01-21 00:14 - 2014-01-21 00:13 - 00016048 _____ C:\Users\Holger-PC\Downloads\Addition.txt
2014-01-21 00:09 - 2014-01-21 00:09 - 01221120 _____ (Farbar) C:\Users\Holger-PC\Downloads\FRST.exe
2014-01-21 00:00 - 2014-01-21 00:00 - 00000480 _____ C:\Users\Holger-PC\Downloads\defogger_disable.log
2014-01-21 00:00 - 2014-01-21 00:00 - 00000000 _____ C:\Users\Holger-PC\defogger_reenable
2014-01-20 23:57 - 2014-01-20 23:57 - 00050477 _____ C:\Users\Holger-PC\Downloads\Defogger.exe
2014-01-20 22:52 - 2014-01-11 19:20 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-20 22:30 - 2014-01-09 11:33 - 00000000 ____D C:\ProgramData\Updater
2014-01-20 20:39 - 2014-01-20 20:39 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00001084 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 20:37 - 2014-01-20 20:37 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Holger-PC\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-19 08:33 - 2014-01-21 20:31 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-21 00:27 - 00379904 _____ C:\Users\Holger-PC\Downloads\gmer.exe
2014-01-17 14:59 - 2013-10-27 12:18 - 00768688 _____ C:\windows\system32\perfh019.dat
2014-01-17 14:59 - 2013-10-27 12:18 - 00157826 _____ C:\windows\system32\perfc019.dat
2014-01-17 14:59 - 2012-08-01 17:38 - 00753134 _____ C:\windows\system32\perfh007.dat
2014-01-17 14:59 - 2012-08-01 17:38 - 00155826 _____ C:\windows\system32\perfc007.dat
2014-01-17 14:59 - 2012-07-26 08:28 - 02671956 _____ C:\windows\system32\PerfStringBackup.INI
2014-01-17 14:35 - 2014-01-17 14:14 - 105901979 _____ C:\Users\Holger-PC\Downloads\Dinosaur_Jr__-_I_Bet_On_Sky_(2012)_320.part1.rar
2014-01-16 19:47 - 2012-07-26 09:12 - 00000000 ____D C:\windows\rescache
2014-01-16 18:53 - 2013-08-09 14:37 - 00000000 ____D C:\windows\system32\MRT
2014-01-16 18:53 - 2012-07-26 09:12 - 00000000 ____D C:\windows\WinStore
2014-01-16 18:51 - 2013-07-12 21:14 - 86054176 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-01-14 20:28 - 2013-07-11 10:30 - 00000000 ___RD C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-13 16:21 - 2012-07-26 09:12 - 00000000 ____D C:\windows\AUInstallAgent
2014-01-13 13:44 - 2013-10-04 15:05 - 00000000 ____D C:\Users\Holger-PC\Music\Documents\Studium
2014-01-11 19:21 - 2014-01-11 19:21 - 00000000 ____D C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-11 16:37 - 2014-01-11 16:37 - 00001122 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-11 16:37 - 2014-01-11 16:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-11 16:37 - 2013-12-12 15:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-10 19:57 - 2014-01-07 20:39 - 00000594 _____ C:\Users\Holger-PC\daemonprocess.txt
2014-01-10 14:49 - 2013-12-19 05:49 - 00000082 _____ C:\Users\Holger-PC\AppData\Roaming\WB.CFG
2014-01-09 18:49 - 2014-01-07 21:06 - 00004393 _____ C:\Users\Holger-PC\AppData\Local\Citavi Picker Internet Explorer Protocol.txt
2014-01-09 11:33 - 2014-01-09 11:33 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-09 09:02 - 2013-11-14 18:05 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-01-09 09:02 - 2013-11-14 18:05 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-07 21:06 - 2014-01-07 21:06 - 00000000 ____D C:\Users\Holger-PC\AppData\Local\AskPartnerNetwork
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D C:\Users\Holger-PC\AppData\Local\cache
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D C:\Users\Holger-PC\.android
2014-01-07 20:23 - 2014-01-07 20:23 - 00000000 ____D C:\Users\Holger-PC\SyncFolder
2014-01-07 20:15 - 2012-11-07 21:48 - 00000000 ____D C:\Program Files (x86)\TOSHIBA Games
2014-01-07 19:52 - 2013-08-09 18:16 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\WildTangent
2014-01-07 19:52 - 2012-11-07 21:48 - 00000000 ____D C:\ProgramData\WildTangent
2014-01-03 14:58 - 2014-01-03 14:58 - 00003064 _____ C:\windows\System32\Tasks\Re-Markable Update
2014-01-03 14:58 - 2014-01-03 14:58 - 00001240 _____ C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2014-01-03 14:58 - 2014-01-03 14:58 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2013-12-30 18:21 - 2013-10-02 14:36 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-30 18:20 - 2013-12-30 18:20 - 00001451 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-12-30 18:20 - 2013-12-30 18:20 - 00001254 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-12-30 18:20 - 2013-12-30 18:19 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\DVDVideoSoft
2013-12-30 18:20 - 2013-12-30 18:19 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-12-30 18:18 - 2013-12-30 18:18 - 32350440 _____ (DVDVideoSoft Ltd. ) C:\Users\Holger-PC\Downloads\Free19YouTubeDownload.exe
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.8188.dll
Some content of TEMP:
====================
C:\Users\Holger-PC\AppData\Local\Temp\avgnt.exe
C:\Users\Holger-PC\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-27 20:22
==================== End Of Log ============================
FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2014
Ran by Holger-PC at 2014-01-29 16:13:03
Running from C:\Users\Holger-PC\Downloads\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe AIR (x32 Version: 3.8.0.1430 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.8.0.1430 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Amazon Music Importer (x32 Version: 2.1.0 - Amazon Services LLC)
Amazon Music Importer (x32 Version: 2.1.0 - Amazon Services LLC) Hidden
Apple Application Support (x32 Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
AVG 2014 (Version: 14.0.3604 - AVG Technologies) Hidden
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2949 - APN, LLC)
AVS Audio Converter 7 (x32 Version: 7.2.1.528 - Online Media Technologies Ltd.)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
CCleaner (Version: 4.08 - Piriform)
Citavi 4 (x32 Version: 4.2.0.11 - Swiss Academic Software)
DMUninstaller (x32 Version: - )
ESET Online Scanner v3 (x32 Version: - )
Exact Audio Copy 1.0beta3 (x32 Version: 1.0beta3 - Andre Wiethoff)
Free YouTube Download version 3.2.19.1219 (x32 Version: 3.2.19.1219 - DVDVideoSoft Ltd.)
Free Zip Opener (x32 Version: 1.0 - Tripro Limited)
Freemake Audio Converter Version 1.1.0 (x32 Version: 1.1.0 - Ellora Assets Corporation)
Google Update Helper (x32 Version: 1.3.23.0 - DealPly Technologies Ltd) Hidden <==== ATTENTION
Happy Cloud Client (HKCU Version: 3.41 - Happy Cloud, Inc.)
Intel AppUp(SM) center (x32 Version: 3.6.1.33268.15 - Intel)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2828 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.2.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Internet Updater (x32 Version: 2.6.52 - Parallel Lines Development, LLC) <==== ATTENTION
iTunes (Version: 11.1.4.62 - Apple Inc.)
Lightspark 0.5.3-git (x32 Version: 0.5.3-git - Lightspark Team)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft Office (x32 Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Silverlight (x32 Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Nero 12 Essentials Toshiba (x32 Version: 12.0.00400 - Nero AG)
Nero BackItUp (x32 Version: 12.0.1000 - Nero AG) Hidden
Nero BackItUp Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.12600 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero BurnRights (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero BurnRights Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.14800.0.48 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.17600.2.3 - Nero AG) Hidden
Nero Express (x32 Version: 12.0.14001 - Nero AG) Hidden
Nero Express Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 1.18.16800 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (x32 Version: 12.0.4000 - Nero AG) Hidden
Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.1000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.7002 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation)
OpenVPN 2.3.2 UniPassau (x32 Version: 2.3.2 - )
PC Speed Maximizer v3.1 (x32 Version: 3.1 - Smart PC Solutions)
Premium Sound HD (Version: 1.12.4600 - SRS Labs, Inc.)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
Realtek Bluetooth Filter Driver Package (x32 Version: 12.24.2012.0802 - REALTEK Semiconductor Corp)
Realtek Bluetooth Filter Driver Package (x32 Version: 12.24.2012.0802 - REALTEK Semiconductor Corp) Hidden
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6687 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.30136 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (x32 Version: 2.00.0020 - REALTEK Semiconductor Corp.)
Re-Markable (x32 Version: - Re-Markable Software)
Shared C Run-time for x64 (Version: 10.0.0 - McAfee)
Spotify (HKCU Version: 0.9.7.16.g4b197456 - Spotify AB)
Synaptics Pointing Device Driver (Version: 16.2.10.3 - Synaptics Incorporated)
TAP-Windows 9.9.2 (Version: 9.9.2 - )
TOSHIBA Desktop Assist (Version: 1.00.0007.00002 - Toshiba Corporation)
TOSHIBA eco Utility (Version: 2.0.0.6415 - Toshiba Corporation)
TOSHIBA Function Key (Version: 1.00.6425 - Toshiba Corporation)
TOSHIBA Manuals (x32 Version: 10.10 - TOSHIBA)
Toshiba Password Utility (x32 Version: 2.00.910 - Toshiba Corporation)
Toshiba Password Utility (x32 Version: 2.00.910 - Toshiba Corporation) Hidden
TOSHIBA PC Health Monitor (Version: 1.8.17.640104 - Toshiba Corporation)
Toshiba Places Icon Utility (Version: 2.1.1 - TOSHIBA)
TOSHIBA Recovery Media Creator (x32 Version: 2.2.0.54043005 - Toshiba Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (x32 Version: 1.2.2.00 - TOSHIBA Corporation)
TOSHIBA Service Station (Version: 2.4.4 - TOSHIBA)
TOSHIBA System Driver (x32 Version: 1.00.0012 - Toshiba Corporation)
TOSHIBA System Settings (x32 Version: 1.00.0002.32002 - Toshiba Corporation)
Toshiba TEMPRO (x32 Version: 4.2.1 - Toshiba Europe GmbH)
TOSHIBA VIDEO PLAYER (Version: 5.1.0.12-A - Toshiba Corporation)
Updater (x32 Version: 2.6.53 - Creative Island Media, LLC)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VisualBee for Microsoft PowerPoint (HKCU Version: V4.1 - VisualBee.com)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Welcome App (Start-up experience) (x32 Version: 12.0.13000 - Nero AG) Hidden
Windows Driver Package - Realtek Semiconductor Corp. RtkBtFilter Bluetooth (07/11/2012 2.3.13.3) (Version: 07/11/2012 2.3.13.3 - Realtek Semiconductor Corp.)
WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0 - win.rar GmbH)
==================== Restore Points =========================
09-01-2014 10:33:40 Uniblue SpeedUpMyPC installation
16-01-2014 17:35:48 Windows Update
21-01-2014 19:55:14 Installed iTunes
26-01-2014 00:58:19 Windows Update
==================== Hosts content: ==========================
2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {00C107C2-027E-4224-83B4-754CDD462CF5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {0CD45EEE-BA60-402C-83D0-7AE300826A81} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2012-08-14] (Toshiba Europe GmbH)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2807D834-4937-49CF-ABDE-3E9AD3CBDB68} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-14] (Synaptics Incorporated)
Task: {3C34E352-D102-4B2E-A790-FC5D6226257D} - System32\Tasks\Re-Markable Update => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe [2014-01-03] ()
Task: {411A5387-5618-4EE2-A0D0-8ECC6EF5C97B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {4DEAF078-4D55-4C04-8165-FD15AB799510} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2012-07-27] (TOSHIBA Corporation)
Task: {7B4A55C2-0879-44B1-A6BF-1F593C7656A7} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {84962D8B-E8A6-4638-A2C9-DB0ABE38826C} - \EPUpdater No Task File
Task: {92FA85CF-6EAE-4B68-9422-55CA63A44942} - \Desk 365 RunAsStdUser No Task File
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F6C11617-6D62-4525-91D5-00D4CDA3557C} - \LaunchApp No Task File
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\Re-Markable Update.job => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe
==================== Loaded Modules (whitelisted) =============
2013-07-18 14:22 - 2010-12-29 12:24 - 00120320 _____ () C:\Program Files (x86)\Free Zip Opener\contmenu_x64.dll
2013-07-07 22:38 - 2013-07-07 22:39 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2013-12-07 18:49 - 2013-11-22 12:01 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-11-07 21:27 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-08-22 14:10 - 2013-08-22 14:10 - 00161992 _____ () C:\Program Files (x86)\OpenVPN\bin\liblzo2-2.dll
2013-08-22 14:10 - 2013-08-22 14:10 - 00107720 _____ () C:\Program Files (x86)\OpenVPN\bin\libpkcs11-helper-1.dll
2014-01-11 16:37 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-07-11 12:41 - 2014-01-20 23:02 - 36967424 _____ () C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\libcef.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Could not start eventlog service, could not read events.
Der angeforderte Dienst wurde bereits gestartet.
Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben.
==================== Memory info ===========================
Percentage of memory in use: 42%
Total physical RAM: 3979.21 MB
Available physical RAM: 2299.75 MB
Total Pagefile: 5963.21 MB
Available Pagefile: 4053.97 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (TI30992300A) (Fixed) (Total:455.29 GB) (Free:220.34 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 00000000)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
29.01.2014, 16:25
| #34 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter BHO: click-n-mark-5 - {11111111-1111-1111-1111-110411511182} - C:\Program Files (x86)\click-n-mark-5\click-n-mark-5-bho64.dll No File
BHO: Feven 2.2 - {11111111-1111-1111-1111-110411901112} - C:\Program Files (x86)\Feven 2.2\Feven 2.2-bho64.dll No File
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll No File
BHO-x32: Re-Markable - {bd55172e-59c1-4a93-b19c-633f0d7790ad} - C:\Program Files (x86)\Re-Markable\150.dll ()
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nation-secure-search.xml
FF SearchEngineOrder.1: Ask.com
FF Extension: click-n-mark-5 - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\7b2e05c3-4f6b-4f31-b7ed-1d6bf9639e5d@33ff3dbe-011c-4bda-9fc4-a47387c00171.com [2014-01-29]
FF Extension: Websteroids - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\support@websteroidsapp.com [2014-01-09]
FF Extension: Amazon 1Button App for Firefox - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\abb@amazon.com.xpi [2013-09-04]
FF Extension: GutscheinCodes.de GutscheinFinder - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\jid0-hjoQNmABq6jg91jHpQyvgJUouUP@jetpack.xpi [2013-07-12]
FF Extension: No Name - C:\Program Files (x86)\Re-Markable\150.xpi [2014-01-03]
C:\Program Files (x86)\click-n-mark-5
C:\Program Files (x86)\Feven 2.2
C:\Program Files (x86)\AskPartnerNetwork
C:\Program Files\Conduit
C:\Program Files (x86)\Re-Markable
C:\Users\Holger-PC\Downloads\*.exe
C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdhbagplpkkoeifmpmpdaieomnggppmo
C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgiiggndjhacnnhnhmaljgbgcaneehld
C:\Program Files (x86)\Re-Markable\150.crx
C:\Users\Holger-PC\AppData\Local\AskPartnerNetwork
C:\windows\System32\Tasks\Re-Markable Update
C:\Users\Public\AlexaNSISPlugin.8188.dll
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
29.01.2014, 16:35
| #35 |
| | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig!Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-01-2014
Ran by Holger-PC at 2014-01-29 16:34:56 Run:1
Running from C:\Users\Holger-PC\Downloads\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
BHO: click-n-mark-5 - {11111111-1111-1111-1111-110411511182} - C:\Program Files (x86)\click-n-mark-5\click-n-mark-5-bho64.dll No File
BHO: Feven 2.2 - {11111111-1111-1111-1111-110411901112} - C:\Program Files (x86)\Feven 2.2\Feven 2.2-bho64.dll No File
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll No File
BHO-x32: Re-Markable - {bd55172e-59c1-4a93-b19c-633f0d7790ad} - C:\Program Files (x86)\Re-Markable\150.dll ()
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nation-secure-search.xml
FF SearchEngineOrder.1: Ask.com
FF Extension: click-n-mark-5 - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\7b2e05c3-4f6b-4f31-b7ed-1d6bf9639e5d@33ff3dbe-011c-4bda-9fc4-a47387c00171.com [2014-01-29]
FF Extension: Websteroids - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\support@websteroidsapp.com [2014-01-09]
FF Extension: Amazon 1Button App for Firefox - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\abb@amazon.com.xpi [2013-09-04]
FF Extension: GutscheinCodes.de GutscheinFinder - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\jid0-hjoQNmABq6jg91jHpQyvgJUouUP@jetpack.xpi [2013-07-12]
FF Extension: No Name - C:\Program Files (x86)\Re-Markable\150.xpi [2014-01-03]
C:\Program Files (x86)\click-n-mark-5
C:\Program Files (x86)\Feven 2.2
C:\Program Files (x86)\AskPartnerNetwork
C:\Program Files\Conduit
C:\Program Files (x86)\Re-Markable
C:\Users\Holger-PC\Downloads\*.exe
C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdhbagplpkkoeifmpmpdaieomnggppmo
C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgiiggndjhacnnhnhmaljgbgcaneehld
C:\Program Files (x86)\Re-Markable\150.crx
C:\Users\Holger-PC\AppData\Local\AskPartnerNetwork
C:\windows\System32\Tasks\Re-Markable Update
C:\Users\Public\AlexaNSISPlugin.8188.dll
*****************
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411511182} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110411511182} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411901112} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110411901112} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7} => Key deleted successfully.
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{93DBF2BB-A2B3-4683-A92E-57E60751F346} => Key deleted successfully.
HKCR\CLSID\{93DBF2BB-A2B3-4683-A92E-57E60751F346} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bd55172e-59c1-4a93-b19c-633f0d7790ad} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{bd55172e-59c1-4a93-b19c-633f0d7790ad} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Value deleted successfully.
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{41564952-412D-5637-00A7-7A786E7484D7} => Value deleted successfully.
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCR\PROTOCOLS\Filter\application/x-mfe-ipt => Key deleted successfully.
HKCR\CLSID\{3EF5086B-5478-4598-A054-786C45D75692} => Key not found.
HKCR\Wow6432Node\PROTOCOLS\Filter\application/x-mfe-ipt => Key not found.
HKCR\Wow6432Node\CLSID\{3EF5086B-5478-4598-A054-786C45D75692} => Key not found.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nation-secure-search.xml => Moved successfully.
Firefox SearchEngineOrder.1 deleted successfully.
C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\7b2e05c3-4f6b-4f31-b7ed-1d6bf9639e5d@33ff3dbe-011c-4bda-9fc4-a47387c00171.com => Moved successfully.
C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\support@websteroidsapp.com => Moved successfully.
C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\abb@amazon.com.xpi => Moved successfully.
C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default\Extensions\jid0-hjoQNmABq6jg91jHpQyvgJUouUP@jetpack.xpi => Moved successfully.
C:\Program Files (x86)\Re-Markable\150.xpi => Moved successfully.
"C:\Program Files (x86)\click-n-mark-5" => File/Directory not found.
"C:\Program Files (x86)\Feven 2.2" => File/Directory not found.
C:\Program Files (x86)\AskPartnerNetwork => Moved successfully.
"C:\Program Files\Conduit" => File/Directory not found.
C:\Program Files (x86)\Re-Markable => Moved successfully.
C:\Users\Holger-PC\Downloads\*.exe => Moved successfully.
C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdhbagplpkkoeifmpmpdaieomnggppmo => Moved successfully.
C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgiiggndjhacnnhnhmaljgbgcaneehld => Moved successfully.
"C:\Program Files (x86)\Re-Markable\150.crx" => File/Directory not found.
C:\Users\Holger-PC\AppData\Local\AskPartnerNetwork => Moved successfully.
C:\windows\System32\Tasks\Re-Markable Update => Moved successfully.
C:\Users\Public\AlexaNSISPlugin.8188.dll => Moved successfully.
==== End of Fixlog ====
|
|
29.01.2014, 16:43
| #36 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! Frische FRST Logs büdde
__________________ --> Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! |
|
29.01.2014, 16:48
| #37 |
| | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig!FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014
Ran by Holger-PC (administrator) on HOLGER on 29-01-2014 16:46:45
Running from C:\Users\Holger-PC\Downloads\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
() C:\Program Files (x86)\OpenVPN\bin\openvpn-gui.exe
(The OpenVPN Project) C:\Program Files (x86)\OpenVPN\bin\openvpn.exe
(Spotify Ltd) C:\Users\Holger-PC\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [] - [x]
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2608040 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] - C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [SRS Premium Sound HD] - C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-07-27] (SRS Labs, Inc.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-01] (Intel Corporation)
HKLM-x32\...\Run: [ToshibaDynamicIconUtility] - C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [1498624 2012-08-09] (Toshiba)
HKLM-x32\...\Run: [TPUReg(x86)] - "C:\Program Files\TOSHIBA\Password Utility\TosPU.exe" /Retimes
HKLM-x32\...\Run: [TPUReg] - C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [6884352 2012-08-23] (Pegatron Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoSetTaskbar] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKLM\...\Policies\Explorer: [NoDesktop] 0
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
HKCU\...\Policies\system: [DisableCMD] 0
HKCU\...\Policies\system: [NoDispAppearancePage] 0
HKCU\...\Policies\system: [NoDispBackgroundPage] 0
HKCU\...\Policies\system: [NoDispSettingsPage] 0
HKCU\...\Policies\Explorer: [NoViewOnDrive] 0
HKCU\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKCU\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKCU\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKCU\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKCU\...\Policies\Explorer: [NoFile] 0
HKCU\...\Policies\Explorer: [NoTrayContextMenu] 0
HKCU\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKCU\...\Policies\Explorer: [NoSetTaskbar] 0
HKCU\...\Policies\Explorer: [NoDeletePrinter] 0
HKCU\...\Policies\Explorer: [NoDFSTab] 0
HKCU\...\Policies\Explorer: [NoChangeStartMenu] 0
HKCU\...\Policies\Explorer: [NoWindowsUpdate] 0
HKCU\...\Policies\Explorer: [NoEncryptOnMove] 0
HKCU\...\Policies\Explorer: [NoResolveSearch] 0
HKCU\...\Policies\Explorer: [NoSaveSettings] 0
HKCU\...\Policies\Explorer: [NoHardwareTab] 0
HKCU\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\Administrator\...\Run: [] - [x]
Startup: C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {02BDC8D2-198F-4D6D-B4F0-274AA878B635} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {02BDC8D2-198F-4D6D-B4F0-274AA878B635} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKCU - {02BDC8D2-198F-4D6D-B4F0-274AA878B635} URL =
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
BHO-x32: Citavi Picker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 132.231.221.253
FireFox:
========
FF ProfilePath: C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default
FF SelectedSearchEngine: Google
FF Homepage: www.sz.de
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Widget context - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2014-01-14]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2013-11-26]
FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKCU\...\Firefox\Extensions: [{cb1bb3bd-8ce0-4d26-98c4-99f6415a6002}] - C:\Program Files (x86)\Re-Markable\150.xpi
Chrome:
=======
CHR Extension: (Widget context) - C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombmmloebnfnpehgjnmkcgoegfachobp [2014-01-14]
CHR HKLM-x32\...\Chrome\Extension: [ejdfidgapfiokiphmcjpmmjbdndepoja] - C:\Program Files (x86)\Re-Markable\150.crx [2014-01-14]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-22] (Avira Operations GmbH & Co. KG)
U2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-19] (Avira Operations GmbH & Co. KG)
U2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-07-16] (Freemake)
U2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-13] ()
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
U2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
U3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32568 2013-08-22] (The OpenVPN Project)
U3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-08-14] (Toshiba Europe GmbH)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
U2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [x]
U3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [x]
==================== Drivers (Whitelisted) ====================
U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-22] (Avira Operations GmbH & Co. KG)
U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-19] (Avira Operations GmbH & Co. KG)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
U3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
U3 mbamchameleon; C:\windows\system32\drivers\mbamchameleon.sys [89304 2014-01-21] (Malwarebytes Corporation)
U3 NETwNe64; C:\Windows\system32\DRIVERS\NETwNe64.sys [11400192 2012-06-02] (Intel Corporation)
U2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
U3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-07-11] (Realtek Microelectronics)
U3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1496720 2012-08-13] (Realtek Semiconductor Corporation )
U3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-14] (Synaptics Incorporated)
U3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
U0 SR;
U2 srservice;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-29 16:02 - 2014-01-29 16:02 - 00000358 _____ C:\windows\PFRO.log
2014-01-29 14:19 - 2014-01-29 14:27 - 00000000 ____D C:\AdwCleaner
2014-01-29 13:04 - 2014-01-29 13:16 - 00023212 _____ C:\windows\WindowsUpdate.log
2014-01-28 00:22 - 2014-01-28 00:24 - 00137180 _____ C:\Users\Holger-PC\Downloads\hosts.zip
2014-01-27 12:17 - 2014-01-27 12:17 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 16:02 - 2014-01-24 16:30 - 109707566 _____ C:\Users\Holger-PC\Downloads\84193937629346864.rar
2014-01-23 18:33 - 2014-01-23 18:33 - 00001754 _____ C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 18:32 - 2014-01-23 18:33 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 18:32 - 2014-01-23 18:33 - 00000000 ____D C:\Program Files\iTunes
2014-01-23 18:32 - 2014-01-23 18:33 - 00000000 ____D C:\Program Files (x86)\iTunes
2014-01-23 18:32 - 2014-01-23 18:32 - 00000000 ____D C:\Program Files\iPod
2014-01-22 14:33 - 2014-01-22 14:33 - 00000000 ____D C:\windows\ERUNT
2014-01-21 20:31 - 2014-01-19 08:33 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-21 11:51 - 2014-01-21 16:57 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-21 10:58 - 2014-01-21 10:58 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-01-21 02:17 - 2014-01-21 02:34 - 133162906 _____ C:\Users\Holger-PC\Downloads\A_AP_R-LongLi-Del_Edi.rar
2014-01-21 00:13 - 2014-01-29 16:46 - 00000000 ____D C:\FRST
2014-01-21 00:13 - 2014-01-21 00:14 - 00042225 _____ C:\Users\Holger-PC\Downloads\FRST.txt
2014-01-21 00:13 - 2014-01-21 00:14 - 00016048 _____ C:\Users\Holger-PC\Downloads\Addition.txt
2014-01-21 00:00 - 2014-01-21 00:00 - 00000480 _____ C:\Users\Holger-PC\Downloads\defogger_disable.log
2014-01-21 00:00 - 2014-01-21 00:00 - 00000000 _____ C:\Users\Holger-PC\defogger_reenable
2014-01-20 20:39 - 2014-01-20 20:39 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00001084 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 20:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-01-17 14:14 - 2014-01-17 14:35 - 105901979 _____ C:\Users\Holger-PC\Downloads\Dinosaur_Jr__-_I_Bet_On_Sky_(2012)_320.part1.rar
2014-01-15 21:40 - 2013-12-07 07:37 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-01-15 21:40 - 2013-12-07 07:37 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 21:40 - 2013-12-07 06:15 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-01-15 21:40 - 2013-12-07 06:15 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 21:40 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\MPSSVC.dll
2014-01-15 21:40 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\windows\system32\FirewallAPI.dll
2014-01-15 21:40 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\windows\SysWOW64\FirewallAPI.dll
2014-01-15 21:40 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys
2014-01-15 21:40 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-01-15 21:40 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-01-15 21:40 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\disk.sys
2014-01-15 21:40 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2014-01-15 21:40 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2014-01-15 21:40 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2014-01-15 21:40 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2014-01-11 19:21 - 2014-01-11 19:21 - 00000000 ____D C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-11 19:20 - 2014-01-20 22:52 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-11 16:37 - 2014-01-11 16:37 - 00001122 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-11 16:37 - 2014-01-11 16:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-09 11:33 - 2014-01-20 22:30 - 00000000 ____D C:\ProgramData\Updater
2014-01-09 11:33 - 2014-01-09 11:33 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-07 21:06 - 2014-01-09 18:49 - 00004393 _____ C:\Users\Holger-PC\AppData\Local\Citavi Picker Internet Explorer Protocol.txt
2014-01-07 20:39 - 2014-01-10 19:57 - 00000594 _____ C:\Users\Holger-PC\daemonprocess.txt
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D C:\Users\Holger-PC\AppData\Local\cache
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D C:\Users\Holger-PC\.android
2014-01-07 20:23 - 2014-01-07 20:23 - 00000000 ____D C:\Users\Holger-PC\SyncFolder
2014-01-03 14:58 - 2014-01-29 16:03 - 00000416 _____ C:\windows\Tasks\Re-Markable Update.job
2014-01-03 14:58 - 2014-01-03 14:58 - 00001240 _____ C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2013-12-30 18:20 - 2013-12-30 18:20 - 00001451 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-12-30 18:20 - 2013-12-30 18:20 - 00001254 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-12-30 18:19 - 2013-12-30 18:20 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\DVDVideoSoft
2013-12-30 18:19 - 2013-12-30 18:20 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
==================== One Month Modified Files and Folders =======
2014-01-29 16:46 - 2014-01-21 00:13 - 00000000 ____D C:\FRST
2014-01-29 16:32 - 2013-07-11 12:40 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Spotify
2014-01-29 16:25 - 2013-09-30 09:30 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-29 16:03 - 2014-01-03 14:58 - 00000416 _____ C:\windows\Tasks\Re-Markable Update.job
2014-01-29 16:03 - 2012-07-26 08:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-29 16:02 - 2014-01-29 16:02 - 00000358 _____ C:\windows\PFRO.log
2014-01-29 16:02 - 2012-07-26 06:26 - 00262144 ___SH C:\windows\system32\config\BBI
2014-01-29 16:00 - 2012-07-26 09:12 - 00000000 ____D C:\windows\system32\sru
2014-01-29 14:27 - 2014-01-29 14:19 - 00000000 ____D C:\AdwCleaner
2014-01-29 13:16 - 2014-01-29 13:04 - 00023212 _____ C:\windows\WindowsUpdate.log
2014-01-28 00:24 - 2014-01-28 00:22 - 00137180 _____ C:\Users\Holger-PC\Downloads\hosts.zip
2014-01-27 12:17 - 2014-01-27 12:17 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-26 19:33 - 2013-07-11 12:41 - 00000000 ____D C:\Users\Holger-PC\AppData\Local\Spotify
2014-01-26 01:58 - 2013-07-11 11:48 - 00003600 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2413837752-2537467696-3434217499-1001
2014-01-26 01:44 - 2013-07-11 10:29 - 00001014 _____ C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-24 16:30 - 2014-01-24 16:02 - 109707566 _____ C:\Users\Holger-PC\Downloads\84193937629346864.rar
2014-01-23 18:33 - 2014-01-23 18:33 - 00001754 _____ C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 18:33 - 2014-01-23 18:32 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 18:33 - 2014-01-23 18:32 - 00000000 ____D C:\Program Files\iTunes
2014-01-23 18:33 - 2014-01-23 18:32 - 00000000 ____D C:\Program Files (x86)\iTunes
2014-01-23 18:32 - 2014-01-23 18:32 - 00000000 ____D C:\Program Files\iPod
2014-01-23 18:29 - 2013-07-18 13:49 - 00000000 ____D C:\ProgramData\Apple
2014-01-22 14:33 - 2014-01-22 14:33 - 00000000 ____D C:\windows\ERUNT
2014-01-21 16:57 - 2014-01-21 11:51 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-21 10:58 - 2014-01-21 10:58 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-01-21 02:34 - 2014-01-21 02:17 - 133162906 _____ C:\Users\Holger-PC\Downloads\A_AP_R-LongLi-Del_Edi.rar
2014-01-21 00:23 - 2013-07-11 10:24 - 00000000 ____D C:\Users\Holger-PC
2014-01-21 00:14 - 2014-01-21 00:13 - 00042225 _____ C:\Users\Holger-PC\Downloads\FRST.txt
2014-01-21 00:14 - 2014-01-21 00:13 - 00016048 _____ C:\Users\Holger-PC\Downloads\Addition.txt
2014-01-21 00:00 - 2014-01-21 00:00 - 00000480 _____ C:\Users\Holger-PC\Downloads\defogger_disable.log
2014-01-21 00:00 - 2014-01-21 00:00 - 00000000 _____ C:\Users\Holger-PC\defogger_reenable
2014-01-20 22:52 - 2014-01-11 19:20 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-20 22:30 - 2014-01-09 11:33 - 00000000 ____D C:\ProgramData\Updater
2014-01-20 20:39 - 2014-01-20 20:39 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00001084 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-19 08:33 - 2014-01-21 20:31 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-17 14:59 - 2013-10-27 12:18 - 00768688 _____ C:\windows\system32\perfh019.dat
2014-01-17 14:59 - 2013-10-27 12:18 - 00157826 _____ C:\windows\system32\perfc019.dat
2014-01-17 14:59 - 2012-08-01 17:38 - 00753134 _____ C:\windows\system32\perfh007.dat
2014-01-17 14:59 - 2012-08-01 17:38 - 00155826 _____ C:\windows\system32\perfc007.dat
2014-01-17 14:59 - 2012-07-26 08:28 - 02671956 _____ C:\windows\system32\PerfStringBackup.INI
2014-01-17 14:35 - 2014-01-17 14:14 - 105901979 _____ C:\Users\Holger-PC\Downloads\Dinosaur_Jr__-_I_Bet_On_Sky_(2012)_320.part1.rar
2014-01-16 19:47 - 2012-07-26 09:12 - 00000000 ____D C:\windows\rescache
2014-01-16 18:53 - 2013-08-09 14:37 - 00000000 ____D C:\windows\system32\MRT
2014-01-16 18:53 - 2012-07-26 09:12 - 00000000 ____D C:\windows\WinStore
2014-01-16 18:51 - 2013-07-12 21:14 - 86054176 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-01-14 20:28 - 2013-07-11 10:30 - 00000000 ___RD C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-13 16:21 - 2012-07-26 09:12 - 00000000 ____D C:\windows\AUInstallAgent
2014-01-13 13:44 - 2013-10-04 15:05 - 00000000 ____D C:\Users\Holger-PC\Music\Documents\Studium
2014-01-11 19:21 - 2014-01-11 19:21 - 00000000 ____D C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-11 16:37 - 2014-01-11 16:37 - 00001122 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-11 16:37 - 2014-01-11 16:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-11 16:37 - 2013-12-12 15:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-10 19:57 - 2014-01-07 20:39 - 00000594 _____ C:\Users\Holger-PC\daemonprocess.txt
2014-01-10 14:49 - 2013-12-19 05:49 - 00000082 _____ C:\Users\Holger-PC\AppData\Roaming\WB.CFG
2014-01-09 18:49 - 2014-01-07 21:06 - 00004393 _____ C:\Users\Holger-PC\AppData\Local\Citavi Picker Internet Explorer Protocol.txt
2014-01-09 11:33 - 2014-01-09 11:33 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-09 09:02 - 2013-11-14 18:05 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-01-09 09:02 - 2013-11-14 18:05 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D C:\Users\Holger-PC\AppData\Local\cache
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D C:\Users\Holger-PC\.android
2014-01-07 20:23 - 2014-01-07 20:23 - 00000000 ____D C:\Users\Holger-PC\SyncFolder
2014-01-07 20:15 - 2012-11-07 21:48 - 00000000 ____D C:\Program Files (x86)\TOSHIBA Games
2014-01-07 19:52 - 2013-08-09 18:16 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\WildTangent
2014-01-07 19:52 - 2012-11-07 21:48 - 00000000 ____D C:\ProgramData\WildTangent
2014-01-03 14:58 - 2014-01-03 14:58 - 00001240 _____ C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2013-12-30 18:21 - 2013-10-02 14:36 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-30 18:20 - 2013-12-30 18:20 - 00001451 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-12-30 18:20 - 2013-12-30 18:20 - 00001254 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-12-30 18:20 - 2013-12-30 18:19 - 00000000 ____D C:\Users\Holger-PC\AppData\Roaming\DVDVideoSoft
2013-12-30 18:20 - 2013-12-30 18:19 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
Some content of TEMP:
====================
C:\Users\Holger-PC\AppData\Local\Temp\avgnt.exe
C:\Users\Holger-PC\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-27 20:22
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2014
Ran by Holger-PC at 2014-01-29 16:47:07
Running from C:\Users\Holger-PC\Downloads\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe AIR (x32 Version: 3.8.0.1430 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.8.0.1430 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Amazon Music Importer (x32 Version: 2.1.0 - Amazon Services LLC)
Amazon Music Importer (x32 Version: 2.1.0 - Amazon Services LLC) Hidden
Apple Application Support (x32 Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
AVG 2014 (Version: 14.0.3604 - AVG Technologies) Hidden
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2949 - APN, LLC)
AVS Audio Converter 7 (x32 Version: 7.2.1.528 - Online Media Technologies Ltd.)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
CCleaner (Version: 4.08 - Piriform)
Citavi 4 (x32 Version: 4.2.0.11 - Swiss Academic Software)
DMUninstaller (x32 Version: - )
ESET Online Scanner v3 (x32 Version: - )
Exact Audio Copy 1.0beta3 (x32 Version: 1.0beta3 - Andre Wiethoff)
Free YouTube Download version 3.2.19.1219 (x32 Version: 3.2.19.1219 - DVDVideoSoft Ltd.)
Free Zip Opener (x32 Version: 1.0 - Tripro Limited)
Freemake Audio Converter Version 1.1.0 (x32 Version: 1.1.0 - Ellora Assets Corporation)
Google Update Helper (x32 Version: 1.3.23.0 - DealPly Technologies Ltd) Hidden <==== ATTENTION
Happy Cloud Client (HKCU Version: 3.41 - Happy Cloud, Inc.)
Intel AppUp(SM) center (x32 Version: 3.6.1.33268.15 - Intel)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2828 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.2.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Internet Updater (x32 Version: 2.6.52 - Parallel Lines Development, LLC) <==== ATTENTION
iTunes (Version: 11.1.4.62 - Apple Inc.)
Lightspark 0.5.3-git (x32 Version: 0.5.3-git - Lightspark Team)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft Office (x32 Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Silverlight (x32 Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Nero 12 Essentials Toshiba (x32 Version: 12.0.00400 - Nero AG)
Nero BackItUp (x32 Version: 12.0.1000 - Nero AG) Hidden
Nero BackItUp Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.12600 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero BurnRights (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero BurnRights Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.14800.0.48 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.17600.2.3 - Nero AG) Hidden
Nero Express (x32 Version: 12.0.14001 - Nero AG) Hidden
Nero Express Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 1.18.16800 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (x32 Version: 12.0.4000 - Nero AG) Hidden
Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.1000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.7002 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation)
OpenVPN 2.3.2 UniPassau (x32 Version: 2.3.2 - )
PC Speed Maximizer v3.1 (x32 Version: 3.1 - Smart PC Solutions)
Premium Sound HD (Version: 1.12.4600 - SRS Labs, Inc.)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
Realtek Bluetooth Filter Driver Package (x32 Version: 12.24.2012.0802 - REALTEK Semiconductor Corp)
Realtek Bluetooth Filter Driver Package (x32 Version: 12.24.2012.0802 - REALTEK Semiconductor Corp) Hidden
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6687 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.30136 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (x32 Version: 2.00.0020 - REALTEK Semiconductor Corp.)
Re-Markable (x32 Version: - Re-Markable Software)
Shared C Run-time for x64 (Version: 10.0.0 - McAfee)
Spotify (HKCU Version: 0.9.7.16.g4b197456 - Spotify AB)
Synaptics Pointing Device Driver (Version: 16.2.10.3 - Synaptics Incorporated)
TAP-Windows 9.9.2 (Version: 9.9.2 - )
TOSHIBA Desktop Assist (Version: 1.00.0007.00002 - Toshiba Corporation)
TOSHIBA eco Utility (Version: 2.0.0.6415 - Toshiba Corporation)
TOSHIBA Function Key (Version: 1.00.6425 - Toshiba Corporation)
TOSHIBA Manuals (x32 Version: 10.10 - TOSHIBA)
Toshiba Password Utility (x32 Version: 2.00.910 - Toshiba Corporation)
Toshiba Password Utility (x32 Version: 2.00.910 - Toshiba Corporation) Hidden
TOSHIBA PC Health Monitor (Version: 1.8.17.640104 - Toshiba Corporation)
Toshiba Places Icon Utility (Version: 2.1.1 - TOSHIBA)
TOSHIBA Recovery Media Creator (x32 Version: 2.2.0.54043005 - Toshiba Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (x32 Version: 1.2.2.00 - TOSHIBA Corporation)
TOSHIBA Service Station (Version: 2.4.4 - TOSHIBA)
TOSHIBA System Driver (x32 Version: 1.00.0012 - Toshiba Corporation)
TOSHIBA System Settings (x32 Version: 1.00.0002.32002 - Toshiba Corporation)
Toshiba TEMPRO (x32 Version: 4.2.1 - Toshiba Europe GmbH)
TOSHIBA VIDEO PLAYER (Version: 5.1.0.12-A - Toshiba Corporation)
Updater (x32 Version: 2.6.53 - Creative Island Media, LLC)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VisualBee for Microsoft PowerPoint (HKCU Version: V4.1 - VisualBee.com)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Welcome App (Start-up experience) (x32 Version: 12.0.13000 - Nero AG) Hidden
Windows Driver Package - Realtek Semiconductor Corp. RtkBtFilter Bluetooth (07/11/2012 2.3.13.3) (Version: 07/11/2012 2.3.13.3 - Realtek Semiconductor Corp.)
WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0 - win.rar GmbH)
==================== Restore Points =========================
09-01-2014 10:33:40 Uniblue SpeedUpMyPC installation
16-01-2014 17:35:48 Windows Update
21-01-2014 19:55:14 Installed iTunes
26-01-2014 00:58:19 Windows Update
==================== Hosts content: ==========================
2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {00C107C2-027E-4224-83B4-754CDD462CF5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {0CD45EEE-BA60-402C-83D0-7AE300826A81} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2012-08-14] (Toshiba Europe GmbH)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2807D834-4937-49CF-ABDE-3E9AD3CBDB68} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-14] (Synaptics Incorporated)
Task: {3C34E352-D102-4B2E-A790-FC5D6226257D} - \Re-Markable Update No Task File
Task: {411A5387-5618-4EE2-A0D0-8ECC6EF5C97B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {4DEAF078-4D55-4C04-8165-FD15AB799510} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2012-07-27] (TOSHIBA Corporation)
Task: {7B4A55C2-0879-44B1-A6BF-1F593C7656A7} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {84962D8B-E8A6-4638-A2C9-DB0ABE38826C} - \EPUpdater No Task File
Task: {92FA85CF-6EAE-4B68-9422-55CA63A44942} - \Desk 365 RunAsStdUser No Task File
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F6C11617-6D62-4525-91D5-00D4CDA3557C} - \LaunchApp No Task File
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\Re-Markable Update.job => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe
==================== Loaded Modules (whitelisted) =============
2013-07-18 14:22 - 2010-12-29 12:24 - 00120320 _____ () C:\Program Files (x86)\Free Zip Opener\contmenu_x64.dll
2013-07-07 22:38 - 2013-07-07 22:39 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2013-12-07 18:49 - 2013-11-22 12:01 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-11-07 21:27 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-08-22 14:10 - 2013-08-22 14:10 - 00161992 _____ () C:\Program Files (x86)\OpenVPN\bin\liblzo2-2.dll
2013-08-22 14:10 - 2013-08-22 14:10 - 00107720 _____ () C:\Program Files (x86)\OpenVPN\bin\libpkcs11-helper-1.dll
2013-07-11 12:41 - 2014-01-20 23:02 - 36967424 _____ () C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\libcef.dll
2014-01-11 16:37 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Could not start eventlog service, could not read events.
Der angeforderte Dienst wurde bereits gestartet.
Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben.
==================== Memory info ===========================
Percentage of memory in use: 38%
Total physical RAM: 3979.21 MB
Available physical RAM: 2449.29 MB
Total Pagefile: 5963.21 MB
Available Pagefile: 4088.12 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (TI30992300A) (Fixed) (Total:455.29 GB) (Free:220.32 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 00000000)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
29.01.2014, 17:05
| #38 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! Besser  Rechner nun ok?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
29.01.2014, 17:18
| #39 |
| | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! Ich glaube schon! Vielen, vielen Dank schonmal. Aber ich möchte, das mir sowas nicht nochmal passiert, also noch die Frage, was ich noch machen kann ausser des mit den Host files um so etwas zu verhindern  |
|
29.01.2014, 17:26
| #40 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! Die Hostsdatei verhindert sowas auch nicht! In erster Linie musst du mitdenken und nicht einfach wahllos einfach von irgendwo oder dem erstbesten Sichergebnis die gesuchte Software runterladen! Und niemals bei Programmsetups die Expressmethode wählen, IMMER beneutzerdefniert, damit du Müll wie Toolbars und anderes Schrott abwählen kannst!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
29.01.2014, 17:29
| #41 |
| | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! Okidoki. Danke dir! |
|
29.01.2014, 17:30
| #42 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! Dann wären wir durch! Falls du noch Lob oder Kritik loswerden möchtest => Lob, Kritik und Wünsche - Trojaner-Board Die Programme, die hier zum Einsatz kamen, können alle deinstalliert werden. Helfen kann dir dabei delfix: Die Reihenfolge ist hier entscheidend.
Bitte abschließend noch die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden. Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern. Microsoftupdate Windows XP:Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren. Windows Vista/7: Start, Systemsteuerung, Windows-Update PDF-Reader aktualisieren Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast) Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader. Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers: Prüfen => Adobe - Flash Player Downloadlinks findest du hier => Browsers and Plugins - FilePony.de Alle Plugins im Firefox-Browser kannst du auch ganz einfach hier auf Aktualität prüfen => https://www.mozilla.org/de/plugincheck Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind. Java-Update Veraltete Java-Installationen sind ein großes Sicherheitsrisiko, daher solltest Du die alten Versionen deinstallieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software (bzw. Programme und Funktionen) und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
29.01.2014, 19:10
| #43 |
| | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! ok, da sind auch unbekannte Plugins bei. Löschen oder suchen? Und anscheinend ist da noch immer was. Es ist zwar nicht mehr viel, aber es öffnet sich immer noch ein bisl Werbung. Oh man sry :/ |
|
05.02.2014, 11:34
| #44 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
|
05.02.2014, 17:41
| #45 |
| | Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig!FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014
Ran by Holger-PC (administrator) on HOLGER on 05-02-2014 17:37:32
Running from C:\Users\Holger-PC\Downloads\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\OpenVPN\bin\openvpn-gui.exe
(The OpenVPN Project) C:\Program Files (x86)\OpenVPN\bin\openvpn.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [] - [X]
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2608040 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] - C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [SRS Premium Sound HD] - C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-07-27] (SRS Labs, Inc.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-01] (Intel Corporation)
HKLM-x32\...\Run: [ToshibaDynamicIconUtility] - C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [1498624 2012-08-09] (Toshiba)
HKLM-x32\...\Run: [TPUReg(x86)] - "C:\Program Files\TOSHIBA\Password Utility\TosPU.exe" /Retimes
HKLM-x32\...\Run: [TPUReg] - C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [6884352 2012-08-23] (Pegatron Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoSetTaskbar] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKLM\...\Policies\Explorer: [NoDesktop] 0
HKU\.DEFAULT\...\Policies\system: [DisableCMD] 0
HKU\.DEFAULT\...\Policies\system: [NoDispAppearancePage] 0
HKU\.DEFAULT\...\Policies\system: [NoDispBackgroundPage] 0
HKU\.DEFAULT\...\Policies\system: [NoDispSettingsPage] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\.DEFAULT\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\.DEFAULT\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\.DEFAULT\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\.DEFAULT\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoFile] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoDFSTab] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoResolveSearch] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoSaveSettings] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoHardwareTab] 0
HKU\.DEFAULT\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Run: [Spotify Web Helper] - C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-21-2413837752-2537467696-3434217499-1001\...\Policies\Explorer: [NoStartMenuSubFolders] 0
Startup: C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {02BDC8D2-198F-4D6D-B4F0-274AA878B635} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {02BDC8D2-198F-4D6D-B4F0-274AA878B635} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKCU - {02BDC8D2-198F-4D6D-B4F0-274AA878B635} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
BHO-x32: Citavi Picker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 132.231.51.4 132.231.1.24
FireFox:
========
FF ProfilePath: C:\Users\Holger-PC\AppData\Roaming\Mozilla\Firefox\Profiles\h4i2gq0u.default
FF SelectedSearchEngine: Google
FF Homepage: www.sz.de
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Widget context - C:\Users\Holger-PC\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2014-01-14]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2013-11-26]
FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKCU\...\Firefox\Extensions: [{cb1bb3bd-8ce0-4d26-98c4-99f6415a6002}] - C:\Program Files (x86)\Re-Markable\150.xpi
Chrome:
=======
CHR Extension: (Widget context) - C:\Users\Holger-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombmmloebnfnpehgjnmkcgoegfachobp [2014-01-14]
CHR HKLM-x32\...\Chrome\Extension: [ejdfidgapfiokiphmcjpmmjbdndepoja] - C:\Program Files (x86)\Re-Markable\150.crx [2014-01-14]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-07-16] (Freemake)
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-13] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32568 2013-08-22] (The OpenVPN Project)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-08-14] (Toshiba Europe GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [X]
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-22] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-19] (Avira Operations GmbH & Co. KG)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
S3 mbamchameleon; C:\windows\system32\drivers\mbamchameleon.sys [89304 2014-01-21] (Malwarebytes Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwNe64.sys [11400192 2012-06-02] (Intel Corporation)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-07-11] (Realtek Microelectronics)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1496720 2012-08-13] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-14] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
S0 SR;
S2 srservice;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-05 17:37 - 2014-02-05 17:37 - 00000000 ____D () C:\FRST
2014-01-30 13:59 - 2014-01-30 13:59 - 00000000 _____ () C:\Users\Holger-PC\Downloads\Archive_Sitzung__am_27.01.2014.zip
2014-01-29 18:35 - 2014-01-29 18:34 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-01-29 18:35 - 2014-01-29 18:34 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-01-29 18:35 - 2014-01-29 18:34 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-01-29 18:35 - 2014-01-29 18:34 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2014-01-29 18:34 - 2014-01-29 18:34 - 00000000 ____D () C:\Program Files\Java
2014-01-29 18:29 - 2014-01-29 18:35 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-29 18:17 - 2014-01-29 18:17 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-29 18:17 - 2014-01-29 18:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-29 18:04 - 2014-01-29 18:04 - 00000000 ____D () C:\Program Files\Tracker Software
2014-01-29 17:48 - 2014-01-29 17:50 - 00001416 _____ () C:\DelFix.txt
2014-01-29 16:02 - 2014-01-29 16:02 - 00000358 _____ () C:\windows\PFRO.log
2014-01-29 13:04 - 2014-02-05 14:28 - 00502488 _____ () C:\windows\WindowsUpdate.log
2014-01-27 12:17 - 2014-01-27 12:17 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-23 18:33 - 2014-01-23 18:33 - 00001754 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 18:32 - 2014-01-23 18:33 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 18:32 - 2014-01-23 18:33 - 00000000 ____D () C:\Program Files\iTunes
2014-01-23 18:32 - 2014-01-23 18:33 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-23 18:32 - 2014-01-23 18:32 - 00000000 ____D () C:\Program Files\iPod
2014-01-22 14:33 - 2014-01-29 17:48 - 00000000 ____D () C:\windows\ERUNT
2014-01-21 20:31 - 2014-01-19 08:33 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-21 11:51 - 2014-01-21 16:57 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-21 10:58 - 2014-01-21 10:58 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-01-20 20:39 - 2014-01-20 20:39 - 00000000 ____D () C:\Users\Holger-PC\AppData\Roaming\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00001084 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 20:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-01-15 21:40 - 2013-12-07 07:37 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-01-15 21:40 - 2013-12-07 07:37 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 21:40 - 2013-12-07 06:15 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-01-15 21:40 - 2013-12-07 06:15 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 21:40 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\MPSSVC.dll
2014-01-15 21:40 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\windows\system32\FirewallAPI.dll
2014-01-15 21:40 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\windows\SysWOW64\FirewallAPI.dll
2014-01-15 21:40 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys
2014-01-15 21:40 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-01-15 21:40 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-01-15 21:40 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\disk.sys
2014-01-15 21:40 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2014-01-15 21:40 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2014-01-15 21:40 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2014-01-15 21:40 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2014-01-11 19:21 - 2014-01-11 19:21 - 00000000 ____D () C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-11 19:20 - 2014-01-20 22:52 - 00000000 ____D () C:\Program Files (x86)\AmiExt
2014-01-11 16:37 - 2014-01-11 16:37 - 00001122 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-11 16:37 - 2014-01-11 16:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-09 11:33 - 2014-01-20 22:30 - 00000000 ____D () C:\ProgramData\Updater
2014-01-09 11:33 - 2014-01-09 11:33 - 00000000 ____D () C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-07 21:06 - 2014-01-09 18:49 - 00004393 _____ () C:\Users\Holger-PC\AppData\Local\Citavi Picker Internet Explorer Protocol.txt
2014-01-07 20:39 - 2014-01-10 19:57 - 00000594 _____ () C:\Users\Holger-PC\daemonprocess.txt
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D () C:\Users\Holger-PC\AppData\Local\cache
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D () C:\Users\Holger-PC\.android
2014-01-07 20:23 - 2014-01-07 20:23 - 00000000 ____D () C:\Users\Holger-PC\SyncFolder
==================== One Month Modified Files and Folders =======
2014-02-05 17:37 - 2014-02-05 17:37 - 00000000 ____D () C:\FRST
2014-02-05 17:33 - 2013-07-11 11:48 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2413837752-2537467696-3434217499-1001
2014-02-05 17:28 - 2014-01-03 14:58 - 00000416 _____ () C:\windows\Tasks\Re-Markable Update.job
2014-02-05 17:28 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\sru
2014-02-05 16:35 - 2013-07-11 12:40 - 00000000 ____D () C:\Users\Holger-PC\AppData\Roaming\Spotify
2014-02-05 16:25 - 2013-09-30 09:30 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-02-05 15:54 - 2013-07-11 12:41 - 00000000 ____D () C:\Users\Holger-PC\AppData\Local\Spotify
2014-02-05 14:28 - 2014-01-29 13:04 - 00502488 _____ () C:\windows\WindowsUpdate.log
2014-02-05 12:57 - 2012-07-26 08:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-02-05 12:57 - 2012-07-26 06:26 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-02-04 20:25 - 2013-09-30 09:30 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-02-04 17:00 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-02-02 12:00 - 2013-10-04 15:05 - 00000000 ____D () C:\Users\Holger-PC\Music\Documents\Studium
2014-01-30 22:10 - 2013-11-14 18:05 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-01-30 22:10 - 2013-11-14 18:05 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 13:59 - 2014-01-30 13:59 - 00000000 _____ () C:\Users\Holger-PC\Downloads\Archive_Sitzung__am_27.01.2014.zip
2014-01-29 18:35 - 2014-01-29 18:29 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-29 18:34 - 2014-01-29 18:35 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-01-29 18:34 - 2014-01-29 18:35 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-01-29 18:34 - 2014-01-29 18:35 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-01-29 18:34 - 2014-01-29 18:35 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2014-01-29 18:34 - 2014-01-29 18:34 - 00000000 ____D () C:\Program Files\Java
2014-01-29 18:17 - 2014-01-29 18:17 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-29 18:17 - 2014-01-29 18:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-29 18:15 - 2013-07-11 14:07 - 00000000 ____D () C:\Users\Holger-PC\AppData\Local\Adobe
2014-01-29 18:04 - 2014-01-29 18:04 - 00000000 ____D () C:\Program Files\Tracker Software
2014-01-29 17:50 - 2014-01-29 17:48 - 00001416 _____ () C:\DelFix.txt
2014-01-29 17:48 - 2014-01-22 14:33 - 00000000 ____D () C:\windows\ERUNT
2014-01-29 17:47 - 2013-07-11 10:24 - 00000000 ____D () C:\Users\Holger-PC
2014-01-29 16:02 - 2014-01-29 16:02 - 00000358 _____ () C:\windows\PFRO.log
2014-01-27 12:17 - 2014-01-27 12:17 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-26 01:44 - 2013-07-11 10:29 - 00001014 _____ () C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-23 18:33 - 2014-01-23 18:33 - 00001754 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 18:33 - 2014-01-23 18:32 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 18:33 - 2014-01-23 18:32 - 00000000 ____D () C:\Program Files\iTunes
2014-01-23 18:33 - 2014-01-23 18:32 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-23 18:32 - 2014-01-23 18:32 - 00000000 ____D () C:\Program Files\iPod
2014-01-23 18:29 - 2013-07-18 13:49 - 00000000 ____D () C:\ProgramData\Apple
2014-01-21 16:57 - 2014-01-21 11:51 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-21 10:58 - 2014-01-21 10:58 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-01-20 22:52 - 2014-01-11 19:20 - 00000000 ____D () C:\Program Files (x86)\AmiExt
2014-01-20 22:30 - 2014-01-09 11:33 - 00000000 ____D () C:\ProgramData\Updater
2014-01-20 20:39 - 2014-01-20 20:39 - 00000000 ____D () C:\Users\Holger-PC\AppData\Roaming\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00001084 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-20 20:38 - 2014-01-20 20:38 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-19 08:33 - 2014-01-21 20:31 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-17 14:59 - 2013-10-27 12:18 - 00768688 _____ () C:\windows\system32\perfh019.dat
2014-01-17 14:59 - 2013-10-27 12:18 - 00157826 _____ () C:\windows\system32\perfc019.dat
2014-01-17 14:59 - 2012-08-01 17:38 - 00753134 _____ () C:\windows\system32\perfh007.dat
2014-01-17 14:59 - 2012-08-01 17:38 - 00155826 _____ () C:\windows\system32\perfc007.dat
2014-01-17 14:59 - 2012-07-26 08:28 - 02671956 _____ () C:\windows\system32\PerfStringBackup.INI
2014-01-16 19:47 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\rescache
2014-01-16 18:53 - 2013-08-09 14:37 - 00000000 ____D () C:\windows\system32\MRT
2014-01-16 18:53 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\WinStore
2014-01-16 18:51 - 2013-07-12 21:14 - 86054176 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-01-14 20:28 - 2013-07-11 10:30 - 00000000 ___RD () C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-11 19:21 - 2014-01-11 19:21 - 00000000 ____D () C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-11 16:37 - 2014-01-11 16:37 - 00001122 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-11 16:37 - 2014-01-11 16:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-11 16:37 - 2013-12-12 15:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-10 19:57 - 2014-01-07 20:39 - 00000594 _____ () C:\Users\Holger-PC\daemonprocess.txt
2014-01-10 14:49 - 2013-12-19 05:49 - 00000082 _____ () C:\Users\Holger-PC\AppData\Roaming\WB.CFG
2014-01-09 18:49 - 2014-01-07 21:06 - 00004393 _____ () C:\Users\Holger-PC\AppData\Local\Citavi Picker Internet Explorer Protocol.txt
2014-01-09 11:33 - 2014-01-09 11:33 - 00000000 ____D () C:\Users\Holger-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D () C:\Users\Holger-PC\AppData\Local\cache
2014-01-07 20:39 - 2014-01-07 20:39 - 00000000 ____D () C:\Users\Holger-PC\.android
2014-01-07 20:23 - 2014-01-07 20:23 - 00000000 ____D () C:\Users\Holger-PC\SyncFolder
2014-01-07 20:15 - 2012-11-07 21:48 - 00000000 ____D () C:\Program Files (x86)\TOSHIBA Games
2014-01-07 19:52 - 2013-08-09 18:16 - 00000000 ____D () C:\Users\Holger-PC\AppData\Roaming\WildTangent
2014-01-07 19:52 - 2012-11-07 21:48 - 00000000 ____D () C:\ProgramData\WildTangent
Some content of TEMP:
====================
C:\Users\Holger-PC\AppData\Local\Temp\avgnt.exe
C:\Users\Holger-PC\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-27 20:22
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014
Ran by Holger-PC at 2014-02-05 17:38:26
Running from C:\Users\Holger-PC\Downloads\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe AIR (x32 Version: 3.8.0.1430 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.8.0.1430 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Amazon Music Importer (x32 Version: 2.1.0 - Amazon Services LLC)
Amazon Music Importer (x32 Version: 2.1.0 - Amazon Services LLC) Hidden
Apple Application Support (x32 Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
AVG 2014 (Version: 14.0.3604 - AVG Technologies) Hidden
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2949 - APN, LLC)
AVS Audio Converter 7 (x32 Version: 7.2.1.528 - Online Media Technologies Ltd.)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
CCleaner (Version: 4.08 - Piriform)
Citavi 4 (x32 Version: 4.2.0.11 - Swiss Academic Software)
DMUninstaller (x32 Version: - )
ESET Online Scanner v3 (x32 Version: - )
Exact Audio Copy 1.0beta3 (x32 Version: 1.0beta3 - Andre Wiethoff)
Free YouTube Download version 3.2.19.1219 (x32 Version: 3.2.19.1219 - DVDVideoSoft Ltd.)
Free Zip Opener (x32 Version: 1.0 - Tripro Limited)
Freemake Audio Converter Version 1.1.0 (x32 Version: 1.1.0 - Ellora Assets Corporation)
Google Update Helper (x32 Version: 1.3.23.0 - DealPly Technologies Ltd) Hidden <==== ATTENTION
Happy Cloud Client (HKCU Version: 3.41 - Happy Cloud, Inc.)
Intel AppUp(SM) center (x32 Version: 3.6.1.33268.15 - Intel)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2828 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.2.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Internet Updater (x32 Version: 2.6.52 - Parallel Lines Development, LLC) <==== ATTENTION
iTunes (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)
Lightspark 0.5.3-git (x32 Version: 0.5.3-git - Lightspark Team)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft Office (x32 Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Nero 12 Essentials Toshiba (x32 Version: 12.0.00400 - Nero AG)
Nero BackItUp (x32 Version: 12.0.1000 - Nero AG) Hidden
Nero BackItUp Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.12600 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero BurnRights (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero BurnRights Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.14800.0.48 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.17600.2.3 - Nero AG) Hidden
Nero Express (x32 Version: 12.0.14001 - Nero AG) Hidden
Nero Express Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 1.18.16800 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (x32 Version: 12.0.4000 - Nero AG) Hidden
Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.1000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.7002 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation)
OpenVPN 2.3.2 UniPassau (x32 Version: 2.3.2 - )
PC Speed Maximizer v3.1 (x32 Version: 3.1 - Smart PC Solutions)
PDF-Viewer (Version: 2.5.214.0 - Tracker Software Products Ltd)
Premium Sound HD (Version: 1.12.4600 - SRS Labs, Inc.)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
Realtek Bluetooth Filter Driver Package (x32 Version: 12.24.2012.0802 - REALTEK Semiconductor Corp)
Realtek Bluetooth Filter Driver Package (x32 Version: 12.24.2012.0802 - REALTEK Semiconductor Corp) Hidden
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6687 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.30136 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (x32 Version: 2.00.0020 - REALTEK Semiconductor Corp.)
Re-Markable (x32 Version: - Re-Markable Software)
Shared C Run-time for x64 (Version: 10.0.0 - McAfee)
Spotify (HKCU Version: 0.9.7.16.g4b197456 - Spotify AB)
Synaptics Pointing Device Driver (Version: 16.2.10.3 - Synaptics Incorporated)
TAP-Windows 9.9.2 (Version: 9.9.2 - )
TOSHIBA Desktop Assist (Version: 1.00.0007.00002 - Toshiba Corporation)
TOSHIBA eco Utility (Version: 2.0.0.6415 - Toshiba Corporation)
TOSHIBA Function Key (Version: 1.00.6425 - Toshiba Corporation)
TOSHIBA Manuals (x32 Version: 10.10 - TOSHIBA)
Toshiba Password Utility (x32 Version: 2.00.910 - Toshiba Corporation)
Toshiba Password Utility (x32 Version: 2.00.910 - Toshiba Corporation) Hidden
TOSHIBA PC Health Monitor (Version: 1.8.17.640104 - Toshiba Corporation)
Toshiba Places Icon Utility (Version: 2.1.1 - TOSHIBA)
TOSHIBA Recovery Media Creator (x32 Version: 2.2.0.54043005 - Toshiba Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (x32 Version: 1.2.2.00 - TOSHIBA Corporation)
TOSHIBA Service Station (Version: 2.4.4 - TOSHIBA)
TOSHIBA System Driver (x32 Version: 1.00.0012 - Toshiba Corporation)
TOSHIBA System Settings (x32 Version: 1.00.0002.32002 - Toshiba Corporation)
Toshiba TEMPRO (x32 Version: 4.2.1 - Toshiba Europe GmbH)
TOSHIBA VIDEO PLAYER (Version: 5.1.0.12-A - Toshiba Corporation)
Updater (x32 Version: 2.6.53 - Creative Island Media, LLC)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VisualBee for Microsoft PowerPoint (HKCU Version: V4.1 - VisualBee.com)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Welcome App (Start-up experience) (x32 Version: 12.0.13000 - Nero AG) Hidden
Windows Driver Package - Realtek Semiconductor Corp. RtkBtFilter Bluetooth (07/11/2012 2.3.13.3) (Version: 07/11/2012 2.3.13.3 - Realtek Semiconductor Corp.)
WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0 - win.rar GmbH)
==================== Restore Points =========================
29-01-2014 16:49:28 Ende der Bereinigung
05-02-2014 11:55:46 Windows Update
==================== Hosts content: ==========================
2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {00C107C2-027E-4224-83B4-754CDD462CF5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {0CD45EEE-BA60-402C-83D0-7AE300826A81} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2012-08-14] (Toshiba Europe GmbH)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2807D834-4937-49CF-ABDE-3E9AD3CBDB68} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-14] (Synaptics Incorporated)
Task: {3C34E352-D102-4B2E-A790-FC5D6226257D} - \Re-Markable Update No Task File
Task: {411A5387-5618-4EE2-A0D0-8ECC6EF5C97B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {4DEAF078-4D55-4C04-8165-FD15AB799510} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2012-07-27] (TOSHIBA Corporation)
Task: {7B4A55C2-0879-44B1-A6BF-1F593C7656A7} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-04] (Adobe Systems Incorporated)
Task: {84962D8B-E8A6-4638-A2C9-DB0ABE38826C} - \EPUpdater No Task File
Task: {92FA85CF-6EAE-4B68-9422-55CA63A44942} - \Desk 365 RunAsStdUser No Task File
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F6C11617-6D62-4525-91D5-00D4CDA3557C} - \LaunchApp No Task File
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\Re-Markable Update.job => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe
==================== Loaded Modules (whitelisted) =============
2013-07-18 14:22 - 2010-12-29 12:24 - 00120320 _____ () C:\Program Files (x86)\Free Zip Opener\contmenu_x64.dll
2013-07-07 22:38 - 2013-07-07 22:39 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2013-12-07 18:49 - 2013-11-22 12:01 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-11-07 21:27 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-08-22 14:10 - 2013-08-22 14:10 - 00161992 _____ () C:\Program Files (x86)\OpenVPN\bin\liblzo2-2.dll
2013-08-22 14:10 - 2013-08-22 14:10 - 00107720 _____ () C:\Program Files (x86)\OpenVPN\bin\libpkcs11-helper-1.dll
2014-01-11 16:37 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/05/2014 04:24:06 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x52aad71c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x5b4
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Vollständiger Name des fehlerhaften Pakets: SpotifyHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpotifyHelper.exe5
Error: (02/05/2014 04:00:12 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x52aad71c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x11b0
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Vollständiger Name des fehlerhaften Pakets: SpotifyHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpotifyHelper.exe5
Error: (02/05/2014 03:55:46 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x52aad71c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x6dc
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Vollständiger Name des fehlerhaften Pakets: SpotifyHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpotifyHelper.exe5
Error: (02/05/2014 00:55:24 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 26.0.0.5087, Zeitstempel: 0x52a0d273
Name des fehlerhaften Moduls: xul.dll, Version: 26.0.0.5087, Zeitstempel: 0x52a0d20a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0014e1a8
ID des fehlerhaften Prozesses: 0xcc
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Vollständiger Name des fehlerhaften Pakets: firefox.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: firefox.exe5
Error: (02/05/2014 00:40:56 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x52aad71c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x1568
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Vollständiger Name des fehlerhaften Pakets: SpotifyHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpotifyHelper.exe5
Error: (02/05/2014 00:20:03 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x52aad71c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x9d0
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Vollständiger Name des fehlerhaften Pakets: SpotifyHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpotifyHelper.exe5
Error: (02/05/2014 00:19:55 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x52aad71c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x110c
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Vollständiger Name des fehlerhaften Pakets: SpotifyHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpotifyHelper.exe5
Error: (02/04/2014 08:18:08 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x52aad71c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0xe28
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Vollständiger Name des fehlerhaften Pakets: SpotifyHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpotifyHelper.exe5
Error: (02/04/2014 08:17:48 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x52aad71c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x2fa0
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Vollständiger Name des fehlerhaften Pakets: SpotifyHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpotifyHelper.exe5
Error: (02/04/2014 08:17:33 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyHelper.exe, Version: 0.0.0.0, Zeitstempel: 0x52aad71c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x2dbc
Startzeit der fehlerhaften Anwendung: 0xSpotifyHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyHelper.exe2
Berichtskennung: SpotifyHelper.exe3
Vollständiger Name des fehlerhaften Pakets: SpotifyHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpotifyHelper.exe5
System errors:
=============
Error: (02/05/2014 03:22:19 PM) (Source: Schannel) (User: Holger)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.
Error: (02/05/2014 03:22:19 PM) (Source: Schannel) (User: Holger)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
Error: (02/05/2014 03:22:10 PM) (Source: Schannel) (User: Holger)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.
Error: (02/05/2014 03:22:10 PM) (Source: Schannel) (User: Holger)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
Error: (02/05/2014 03:21:56 PM) (Source: Schannel) (User: Holger)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.
Error: (02/05/2014 03:21:56 PM) (Source: Schannel) (User: Holger)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
Error: (02/05/2014 03:21:45 PM) (Source: Schannel) (User: Holger)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.
Error: (02/05/2014 03:21:45 PM) (Source: Schannel) (User: Holger)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
Error: (02/05/2014 03:21:35 PM) (Source: Schannel) (User: Holger)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.
Error: (02/05/2014 03:21:35 PM) (Source: Schannel) (User: Holger)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
Microsoft Office Sessions:
=========================
Error: (02/05/2014 04:24:06 PM) (Source: Application Error)(User: )
Description: SpotifyHelper.exe0.0.0.052aad71cntdll.dll6.2.9200.16578515fac6ec0000374000daa3c5b401cf22864e94c088C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exeC:\windows\SYSTEM32\ntdll.dll8c866484-8e79-11e3-bec3-2016d8065076
Error: (02/05/2014 04:00:12 PM) (Source: Application Error)(User: )
Description: SpotifyHelper.exe0.0.0.052aad71cntdll.dll6.2.9200.16578515fac6ec0000374000daa3c11b001cf2282f7f35d08C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exeC:\windows\SYSTEM32\ntdll.dll35e4cd4d-8e76-11e3-bec3-2016d8065076
Error: (02/05/2014 03:55:46 PM) (Source: Application Error)(User: )
Description: SpotifyHelper.exe0.0.0.052aad71cntdll.dll6.2.9200.16578515fac6ec0000374000daa3c6dc01cf2282578965d2C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exeC:\windows\SYSTEM32\ntdll.dll9747c316-8e75-11e3-bec3-2016d8065076
Error: (02/05/2014 00:55:24 PM) (Source: Application Error)(User: )
Description: firefox.exe26.0.0.508752a0d273xul.dll26.0.0.508752a0d20ac00000050014e1a8cc01cf226121ac6356C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll64fafa3d-8e5c-11e3-bec2-2016d8065076
Error: (02/05/2014 00:40:56 PM) (Source: Application Error)(User: )
Description: SpotifyHelper.exe0.0.0.052aad71cntdll.dll6.2.9200.16578515fac6ec0000374000daa3c156801cf226721b12a3cC:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exeC:\windows\SYSTEM32\ntdll.dll5fa0eda0-8e5a-11e3-bec2-2016d8065076
Error: (02/05/2014 00:20:03 PM) (Source: Application Error)(User: )
Description: SpotifyHelper.exe0.0.0.052aad71cntdll.dll6.2.9200.16578515fac6ec0000374000daa3c9d001cf226436bfdd4cC:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exeC:\windows\SYSTEM32\ntdll.dll749ae2d4-8e57-11e3-bec2-2016d8065076
Error: (02/05/2014 00:19:55 PM) (Source: Application Error)(User: )
Description: SpotifyHelper.exe0.0.0.052aad71cntdll.dll6.2.9200.16578515fac6ec0000374000daa3c110c01cf22642fb9cc63C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exeC:\windows\SYSTEM32\ntdll.dll70395f1e-8e57-11e3-bec2-2016d8065076
Error: (02/04/2014 08:18:08 PM) (Source: Application Error)(User: )
Description: SpotifyHelper.exe0.0.0.052aad71cntdll.dll6.2.9200.16578515fac6ec0000374000daa3ce2801cf21ddd5e5ee39C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exeC:\windows\SYSTEM32\ntdll.dll13cb7430-8dd1-11e3-bec1-2016d8065076
Error: (02/04/2014 08:17:48 PM) (Source: Application Error)(User: )
Description: SpotifyHelper.exe0.0.0.052aad71cntdll.dll6.2.9200.16578515fac6ec0000374000daa3c2fa001cf21ddc9fafd95C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exeC:\windows\SYSTEM32\ntdll.dll07df4b12-8dd1-11e3-bec1-2016d8065076
Error: (02/04/2014 08:17:33 PM) (Source: Application Error)(User: )
Description: SpotifyHelper.exe0.0.0.052aad71cntdll.dll6.2.9200.16578515fac6ec0000374000daa3c2dbc01cf21ddbdd6c404C:\Users\Holger-PC\AppData\Roaming\Spotify\Data\SpotifyHelper.exeC:\windows\SYSTEM32\ntdll.dllff1bf93a-8dd0-11e3-bec1-2016d8065076
CodeIntegrity Errors:
===================================
Date: 2014-01-18 15:29:49.498
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe with signing level Unsigned while the system requires signing level 6 or better to load.
==================== Memory info ===========================
Percentage of memory in use: 38%
Total physical RAM: 3979.21 MB
Available physical RAM: 2444.83 MB
Total Pagefile: 6155.21 MB
Available Pagefile: 4316.54 MB
Total Virtual: 8192 MB
Available Virtual: 8191.76 MB
==================== Drives ================================
Drive c: (TI30992300A) (Fixed) (Total:455.29 GB) (Free:271.95 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 00000000)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
| Themen zu Firefox öffnet sowohl neue Tabs als auch Werbe-Videos selbstständig! |
| adware/adware.a.4402, adware/domaiq.6144, adware/ibryte.l, adware/ibryte.spl.1, eingestellt, fehlerhaft, firefox, folge, gestellt, immer wieder, mobogenie, mobogenie entfernen, nationzoom, nationzoom entfernen, neue tabs, problem, seiten, selbstständig, startet, tagen, werbung, öffnet |
Linear-Darstellung
