| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win7 / JumpFlip eingefangen PC gefriert immer wieder einWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
31.01.2014, 08:00
| #16 |
| /// the machine /// TB-Ausbilder    |  Win7 / JumpFlip eingefangen PC gefriert immer wieder ein Gern Geschehen 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.02.2014, 09:56
| #17 |
 | Win7 / JumpFlip eingefangen PC gefriert immer wieder ein Hi Schrauber,
__________________MBAm hat eine Datei gefunden, oh? Is die Schlimm????? Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.02.18.01 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16518 ****** :: *******-HP [Administrator] 18.02.2014 08:24:09 mbam-log-2014-02-18 (08-24-09).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM | P2P Deaktivierte Suchlaufeinstellungen: Durchsuchte Objekte: 513267 Laufzeit: 1 Stunde(n), 1 Minute(n), 11 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\$RECYCLE.BIN\S-1-5-21-1406027098-4097833323-748478104-1000\$R8F7RIS.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Danke!  |
|
18.02.2014, 17:27
| #18 |
| /// the machine /// TB-Ausbilder | Win7 / JumpFlip eingefangen PC gefriert immer wieder ein Das is nur ein Fund im Papierkorb
__________________
__________________ |
|
23.02.2014, 20:28
| #19 |
| | Win7 / JumpFlip eingefangen PC gefriert immer wieder ein Hallo schrauber, SORRRRY, dass ich dich schon wieder belästigen muss. Ich bin mir total unsicher, habe ein paar Sachen neu installiert (weil up to date, alles) und nu bin ich mir nicht sicher, ob ich mir wieder was eingefangen habe. Habe, als Laie, aber wirklich versucht total aufzupassen. Ist das ok, wenn ich dich nochmals bitte nen Blick drüber zu werfen??? Habe hier für dich: MBAM hat nichts gefunden. AdwCleaner: Code:
ATTFilter # AdwCleaner v3.019 - Bericht erstellt am 23/02/2014 um 19:46:54
# Aktualisiert 17/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : ****** - ******-HP
# Gestartet von : C:\Users\******\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\******\AppData\Roaming\uniblue
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16518
-\\ Mozilla Firefox v27.0.1 (de)
[ Datei : C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\2yqegq4p.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [982 octets] - [23/02/2014 14:02:32]
AdwCleaner[R1].txt - [1010 octets] - [23/02/2014 19:44:38]
AdwCleaner[S0].txt - [994 octets] - [23/02/2014 14:09:25]
AdwCleaner[S1].txt - [935 octets] - [23/02/2014 19:46:54]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [994 octets] ##########
Spy&Bot folgendes: Code:
ATTFilter Search results from Spybot - Search & Destroy
2/23/2014 2:54:33 PM
Scan took 00:27:33.
47 items found.
Win32.Agent.qvo: [SBI $E30D556E] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\Wpm
Win32.Agent.qvo: [SBI $E30D556E] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\Wpm
Win32.Agent.qvo: [SBI $3937A24F] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Wpm
Win32.Agent.qvo: [SBI $3937A24F] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Wpm
Adobe Acrobat Reader 4: [SBI $58E23D78] Recent file #1 (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Adobe\Acrobat Reader\4.0\AdobeViewer\avpRecentFile1
Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\MediaPlayer\Player\Settings\Client ID
MS Direct3D: [SBI $7FB7B83F] Most recent application (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name
MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name
MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Direct3D\MostRecentApplication\Name
MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name
MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name
MS DirectInput: [SBI $9A063C91] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\DirectInput\MostRecentApplication\Name
MS DirectInput: [SBI $7B184199] Most recent application ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\DirectInput\MostRecentApplication\Id
MS Office 10.0: [SBI $98B69A5E] Used cliparts (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Office\10.0\Clip Organizer\Search\Last Query
MS Office 10.0: [SBI $A0473B14] Access recent file (Registry Key, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Office\10.0\Access\Settings
MS Office 10.0: [SBI $A0473B14] Access recent file (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Office\10.0\Access\Settings
MS Office 10.0: [SBI $A0473B14] Access recent file (Registry Key, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Office\10.0\Access\Settings
MS Office 10.0: [SBI $40D97094] Recently used symbol list (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Office\10.0\Common\General\SymbolMRU
MS Office 10.0 (Word): [SBI $51FE086C] Recently used documents list (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Office\10.0\Word\Data\Settings
MS Office 10.0 (PowerPoint): [SBI $69597F08] Used templates history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Office\10.0\PowerPoint\Recent Templates
MS Office 10.0 (PowerPoint): [SBI $1FFA979A] Recently used templates (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Office\10.0\PowerPoint\RecentTemplateList
MS Office 10.0 (PowerPoint): [SBI $B696249A] Recently used fonts (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Office\10.0\PowerPoint\Recent Typeface List
MS Frontpage: [SBI $593CEA98] Default image add folder (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\FrontPage\Editor\Default Add Image Directory
MS Frontpage: [SBI $E9FF3DF7] Image save folders list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\FrontPage\Editor\Per-Web Image Save Directories
MS Frontpage: [SBI $EA3EB68E] Last opened web (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Settings\LastWebOpen
MS Regedit: [SBI $C3B62FC1] Recent open key (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\LastKey
Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources
Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources
Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList
Windows.OpenWith: [SBI $A1C94E79] Open with list - .BMP extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\OpenWithList
Windows.OpenWith: [SBI $9E8D5C8A] Open with list - .CDA extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CDA\OpenWithList
Windows.OpenWith: [SBI $7E93AD81] Open with list - .CSS extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSS\OpenWithList
Windows.OpenWith: [SBI $ECC28BDF] Open with list - .CSV extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSV\OpenWithList
Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU
Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
Windows Explorer: [SBI $85C2C910] Last Copy/MoveTo folder (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\CopyMoveTo\LastFolder
Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-1406027098-4097833323-748478104-1000\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
Cache: [SBI $49804B54] Browser: Cache (16) (Browser: Cache, nothing done)
History: [SBI $49804B54] Browser: History (5) (Browser: History, nothing done)
Cookie: [SBI $49804B54] Browser: Cookie (2) (Browser: Cookie, nothing done)
--- Spybot - Search & Destroy version: 2.1.18.131 DLL (build: 20130516) ---
2013-09-20 blindman.exe (2.2.18.151)
2013-09-20 explorer.exe (2.2.18.177)
2013-09-20 SDBootCD.exe (2.2.18.109)
2013-09-20 SDCleaner.exe (2.2.18.110)
2013-09-20 SDDelFile.exe (2.2.18.94)
2013-06-18 SDDisableProxy.exe
2013-09-20 SDFiles.exe (2.2.18.135)
2013-09-20 SDFileScanHelper.exe (2.2.16.1)
2013-10-15 SDFSSvc.exe (2.2.25.211)
2013-10-10 SDHookHelper.exe (2.3.30.2)
2013-10-10 SDHookInst32.exe (2.3.30.2)
2013-10-10 SDHookInst64.exe (2.3.30.2)
2013-09-20 SDImmunize.exe (2.2.18.130)
2013-05-16 SDLogReport.exe (2.1.18.107)
2013-10-14 SDOnAccess.exe (2.2.25.4)
2013-09-20 SDPESetup.exe (2.2.18.3)
2013-09-20 SDPEStart.exe (2.2.18.86)
2013-09-20 SDPhoneScan.exe (2.2.18.28)
2013-09-20 SDPrepPos.exe (2.2.18.10)
2013-09-20 SDQuarantine.exe (2.2.18.103)
2013-09-20 SDRootAlyzer.exe (2.2.18.116)
2013-09-20 SDScan.exe (2.2.18.177)
2013-10-15 SDSettings.exe (2.2.25.138)
2013-09-20 SDShred.exe (2.2.18.107)
2013-09-20 SDSysRepair.exe (2.2.18.101)
2013-09-20 SDTools.exe (2.2.18.150)
2013-07-25 SDTray.exe (2.1.21.129)
2013-09-20 SDUpdate.exe (2.2.18.91)
2013-09-20 SDUpdSvc.exe (2.2.18.76)
2013-09-20 SDWelcome.exe (2.2.21.129)
2012-03-22 SDWSCSvc.exe (2.0.8.2)
2013-06-19 spybotsd2-translation-frx.exe
2014-02-23 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2013-05-16 SDAdvancedCheckLibrary.dll (2.1.18.98)
2013-05-16 SDAV.dll
2013-05-16 SDECon32.dll (2.1.18.113)
2013-05-16 SDECon64.dll (2.1.18.113)
2013-04-05 SDEvents.dll (2.1.16.2)
2013-10-14 SDFileScanLibrary.dll (2.2.25.14)
2013-10-10 SDHook32.dll (2.3.30.2)
2013-10-10 SDHook64.dll (2.3.30.2)
2013-05-16 SDImmunizeLibrary.dll (2.1.18.2)
2013-05-16 SDLicense.dll (2.1.18.0)
2013-05-16 SDLists.dll (2.1.18.4)
2013-05-16 SDResources.dll (2.1.18.7)
2013-05-16 SDScanLibrary.dll (2.1.18.131)
2013-05-16 SDTasks.dll (2.1.18.15)
2013-05-16 SDWinLogon.dll (2.1.18.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2013-05-16 Tools.dll (2.1.18.36)
2014-01-08 Includes\Adware-000.sbi (*)
2014-01-08 Includes\Adware-001.sbi (*)
2014-02-19 Includes\Adware-C.sbi (*)
2014-01-13 Includes\Adware.sbi (*)
2014-01-13 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2014-01-08 Includes\Dialer-000.sbi (*)
2014-01-08 Includes\Dialer-001.sbi (*)
2014-01-08 Includes\Dialer-C.sbi (*)
2014-01-13 Includes\Dialer.sbi (*)
2014-01-13 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2014-01-08 Includes\Hijackers-000.sbi (*)
2014-01-08 Includes\Hijackers-001.sbi (*)
2014-01-13 Includes\Hijackers.sbi (*)
2014-01-13 Includes\HijackersC.sbi (*)
2014-01-08 Includes\iPhone-000.sbi (*)
2014-01-08 Includes\iPhone.sbi (*)
2014-01-08 Includes\Keyloggers-000.sbi (*)
2014-01-08 Includes\Keyloggers-C.sbi (*)
2014-01-13 Includes\Keyloggers.sbi (*)
2014-01-13 Includes\KeyloggersC.sbi (*)
2014-01-09 Includes\Malware-001.sbi (*)
2014-01-09 Includes\Malware-002.sbi (*)
2014-02-05 Includes\Malware-003.sbi (*)
2014-01-28 Includes\Malware-004.sbi (*)
2014-01-09 Includes\Malware-005.sbi (*)
2014-01-09 Includes\Malware-006.sbi (*)
2014-01-09 Includes\Malware-007.sbi (*)
2014-02-19 Includes\Malware-C.sbi (*)
2013-12-23 Includes\MalwareC.sbi (*)
2014-01-15 Includes\PUPS-000.sbi (*)
2014-01-15 Includes\PUPS-001.sbi (*)
2014-01-15 Includes\PUPS-002.sbi (*)
2014-02-19 Includes\PUPS-C.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2014-01-07 Includes\PUPSC.sbi (*)
2014-01-08 Includes\Security-000.sbi (*)
2014-01-08 Includes\Security-C.sbi (*)
2014-01-21 Includes\Security.sbi (*)
2014-01-21 Includes\SecurityC.sbi (*)
2014-01-08 Includes\Spyware-000.sbi (*)
2014-01-08 Includes\Spyware-001.sbi (*)
2014-01-08 Includes\Spyware-C.sbi (*)
2014-01-21 Includes\Spyware.sbi (*)
2014-01-21 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2014-01-15 Includes\Trojans-000.sbi (*)
2014-01-15 Includes\Trojans-001.sbi (*)
2014-01-15 Includes\Trojans-002.sbi (*)
2014-01-15 Includes\Trojans-003.sbi (*)
2014-01-15 Includes\Trojans-004.sbi (*)
2014-01-15 Includes\Trojans-005.sbi (*)
2014-01-15 Includes\Trojans-006.sbi (*)
2014-01-15 Includes\Trojans-007.sbi (*)
2014-01-15 Includes\Trojans-008.sbi (*)
2014-01-15 Includes\Trojans-009.sbi (*)
2014-02-19 Includes\Trojans-C.sbi (*)
2014-01-15 Includes\Trojans-OG-000.sbi (*)
2014-01-15 Includes\Trojans-TD-000.sbi (*)
2014-01-15 Includes\Trojans-VM-000.sbi (*)
2014-01-15 Includes\Trojans-VM-001.sbi (*)
2014-01-15 Includes\Trojans-VM-002.sbi (*)
2014-01-15 Includes\Trojans-VM-003.sbi (*)
2014-01-15 Includes\Trojans-VM-004.sbi (*)
2014-01-15 Includes\Trojans-VM-005.sbi (*)
2014-01-15 Includes\Trojans-VM-006.sbi (*)
2014-01-15 Includes\Trojans-VM-007.sbi (*)
2014-01-15 Includes\Trojans-VM-008.sbi (*)
2014-01-15 Includes\Trojans-VM-009.sbi (*)
2014-01-15 Includes\Trojans-VM-010.sbi (*)
2014-01-15 Includes\Trojans-VM-011.sbi (*)
2014-01-15 Includes\Trojans-VM-012.sbi (*)
2014-01-15 Includes\Trojans-VM-013.sbi (*)
2014-01-15 Includes\Trojans-VM-014.sbi (*)
2014-01-15 Includes\Trojans-VM-015.sbi (*)
2014-01-15 Includes\Trojans-VM-016.sbi (*)
2014-01-15 Includes\Trojans-VM-017.sbi (*)
2014-01-15 Includes\Trojans-VM-018.sbi (*)
2014-01-15 Includes\Trojans-VM-019.sbi (*)
2014-01-15 Includes\Trojans-VM-020.sbi (*)
2014-01-15 Includes\Trojans-VM-021.sbi (*)
2014-01-15 Includes\Trojans-VM-022.sbi (*)
2014-01-15 Includes\Trojans-VM-023.sbi (*)
2014-01-15 Includes\Trojans-VM-024.sbi (*)
2014-01-15 Includes\Trojans-ZB-000.sbi (*)
2014-01-15 Includes\Trojans-ZL-000.sbi (*)
2014-01-09 Includes\Trojans.sbi (*)
2014-01-16 Includes\TrojansC-01.sbi (*)
2014-01-16 Includes\TrojansC-02.sbi (*)
2014-01-16 Includes\TrojansC-03.sbi (*)
2014-01-16 Includes\TrojansC-04.sbi (*)
2014-01-16 Includes\TrojansC-05.sbi (*)
2014-01-09 Includes\TrojansC.sbi (*)
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-02-2014 01
Ran by ****** (administrator) on ******-HP on 23-02-2014 19:58:53
Running from C:\Users\******\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(DATA BECKER GmbH & Co KG) C:\Program Files (x86)\Common Files\DATA BECKER Shared\DBService.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDFSSvc.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDUpdSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDTray.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIMain.exe
() C:\Program Files (x86)\1&1 Surf-Stick\CMUpdater.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [139088 2010-09-30] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Magic Desktop for HP notification] - C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-26] (Easybits)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-01-28] (Hewlett-Packard)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1406027098-4097833323-748478104-1000\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [429120 2014-01-24] (BillP Studios)
HKU\S-1-5-21-1406027098-4097833323-748478104-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1406027098-4097833323-748478104-1000\...\Policies\system: [DisableChangePassword] 0
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {82CED959-FCB7-4C12-9BA5-CC0F5259317A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM - {A247EF8E-BE2C-4864-BC8F-C8DF3462CD70} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {82CED959-FCB7-4C12-9BA5-CC0F5259317A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKCU - {82CED959-FCB7-4C12-9BA5-CC0F5259317A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKCU - {8B4FFBF2-FAB2-4699-A53F-CFFA542846D5} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2010-09-03] (EasyBits Software Corp.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
FireFox:
========
FF ProfilePath: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\2yqegq4p.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @protectdisc.com/NPPDLicenseHelper - C:\Users\******\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\2yqegq4p.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-01-29]
FF Extension: NoScript - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\2yqegq4p.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-29]
FF Extension: Adblock Plus - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\2yqegq4p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-29]
==================== Services (Whitelisted) =================
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [896056 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 DBService; C:\Program Files (x86)\Common Files\DATA BECKER Shared\DBService.exe [2650112 2010-05-28] (DATA BECKER GmbH & Co KG)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [635416 2009-10-14] (PDF Complete Inc)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [253264 2010-09-30] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-23 19:58 - 2014-02-23 19:59 - 00014525 _____ () C:\Users\******\Downloads\FRST.txt
2014-02-23 19:58 - 2014-02-23 19:58 - 00000000 ____D () C:\FRST
2014-02-23 19:54 - 2014-02-23 19:54 - 02155520 _____ (Farbar) C:\Users\******\Downloads\FRST64.exe
2014-02-23 19:50 - 2014-02-23 19:50 - 02292066 _____ () C:\Users\******\Desktop\TeamSpybot-20140223-195011.cab
2014-02-23 19:43 - 2014-02-23 19:43 - 01241834 _____ () C:\Users\******\Downloads\adwcleaner.exe
2014-02-23 19:15 - 2014-02-23 19:15 - 00001077 _____ () C:\Users\******\Desktop\RunInteractiveWin - Verknüpfung.lnk
2014-02-23 19:13 - 2014-02-23 19:13 - 00003042 _____ () C:\Windows\System32\Tasks\PandaUSBVaccine
2014-02-23 19:13 - 2014-02-23 19:13 - 00000000 ____D () C:\ProgramData\Panda Security
2014-02-23 19:13 - 2014-02-23 19:13 - 00000000 ____D () C:\Program Files (x86)\Panda USB Vaccine
2014-02-23 14:57 - 2014-02-23 14:57 - 02313482 _____ () C:\Users\******\Desktop\TeamSpybot-20140223-145751.cab
2014-02-23 14:02 - 2014-02-23 19:46 - 00000000 ____D () C:\AdwCleaner
2014-02-23 14:00 - 2014-02-23 14:00 - 00000000 ____D () C:\FFOutput
2014-02-23 13:59 - 2014-02-23 13:59 - 00001160 _____ () C:\Users\******\Desktop\Format Factory.lnk
2014-02-23 13:59 - 2014-02-23 13:59 - 00000000 ____D () C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2014-02-23 13:53 - 2014-01-21 19:29 - 00450660 _____ () C:\Windows\system32\Drivers\etc\hosts.20140223-135310.backup
2014-02-23 13:47 - 2014-02-23 13:47 - 00000000 ____D () C:\Users\******\Documents\ProcAlyzer Dumps
2014-02-23 13:30 - 2014-02-23 13:40 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-02-23 13:30 - 2014-02-23 13:30 - 00001323 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-02-23 13:30 - 2014-02-23 13:30 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-02-23 13:30 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-02-23 12:38 - 2014-02-23 14:10 - 00003790 _____ () C:\Windows\PFRO.log
2014-02-23 10:26 - 2014-02-23 10:26 - 00000000 ____D () C:\Program Files (x86)\WinSCP
2014-02-22 10:50 - 2014-02-22 10:50 - 00848856 _____ (Panda Security ) C:\Users\******\Downloads\USBVaccineSetup.exe
2014-02-21 08:04 - 2014-02-21 10:44 - 58014512 _____ (Free Time) C:\Users\******\Downloads\FFSetup3.3.1.0.exe
2014-02-19 20:11 - 2014-02-19 20:11 - 00000000 ____D () C:\Users\******\Documents\WBGames
2014-02-19 09:28 - 2014-02-19 11:21 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\******\Downloads\spybot-2.2.exe
2014-02-19 09:11 - 2014-02-23 19:47 - 00002520 _____ () C:\Windows\setupact.log
2014-02-19 09:11 - 2014-02-19 09:11 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-18 20:53 - 2014-02-18 20:53 - 00000000 ____D () C:\Users\******\Documents\BioWare
2014-02-18 20:14 - 2014-02-18 20:27 - 00000000 ____D () C:\Users\******\Documents\Gothic3ForsakenGods
2014-02-17 14:25 - 2014-02-17 14:25 - 00003306 _____ () C:\Users\******\Desktop\****** mit Herz - aktuell - Verknüpfung.lnk
2014-02-17 13:04 - 2014-02-17 13:04 - 00000000 ____D () C:\Users\******\Documents\Programme
2014-02-17 12:47 - 2014-02-17 13:03 - 00000000 ____D () C:\Users\******\Documents\PC - Spiele
2014-02-16 20:54 - 2014-02-16 20:54 - 00000000 ____D () C:\Users\******\AppData\Local\Windows Live
2014-02-16 13:10 - 2014-02-16 13:23 - 00001931 _____ () C:\Users\******\Desktop\Update Checker.lnk
2014-02-16 13:10 - 2014-02-16 13:10 - 00000000 ____D () C:\Program Files (x86)\FileHippo.com
2014-02-16 13:02 - 2014-02-16 13:02 - 00000000 ____D () C:\Users\******\AppData\Roaming\Canneverbe Limited
2014-02-16 13:02 - 2014-02-16 13:02 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-02-16 12:59 - 2014-02-16 12:59 - 00000993 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-02-16 12:59 - 2013-04-09 14:13 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-02-16 12:59 - 2012-05-05 10:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2014-02-16 12:59 - 2012-05-05 10:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2014-02-16 10:25 - 2014-02-18 20:29 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-02-16 09:20 - 2014-02-16 09:35 - 05300360 _____ (Martin Prikryl ) C:\Users\******\Downloads\winscp551setup.exe
2014-02-15 13:46 - 2014-02-15 13:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 21:01 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-14 21:01 - 2013-11-26 23:49 - 06573056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-14 19:38 - 2014-02-14 19:38 - 00003196 _____ () C:\Windows\System32\Tasks\{5A8D4332-AEDF-4980-A2B9-AE036CE5AF9E}
2014-02-14 11:05 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-14 11:05 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-14 11:05 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-14 11:05 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-14 11:05 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-14 11:05 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-14 11:05 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-14 11:05 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-14 11:05 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-14 11:05 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-14 11:05 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-14 11:05 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-14 11:05 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-14 11:05 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-14 11:05 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-14 11:05 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-14 11:04 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 11:04 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 11:04 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 11:04 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 11:04 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 11:04 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 11:04 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 11:04 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 11:04 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 11:04 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 11:04 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 11:04 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 11:04 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 11:04 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 11:04 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 11:04 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 11:04 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 11:04 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 11:04 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 11:04 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 11:04 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 11:04 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 11:04 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 11:04 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 11:04 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 11:04 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 11:04 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 11:04 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 11:04 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 11:04 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 11:04 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 11:04 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 11:04 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 11:04 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 11:04 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 11:04 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 11:04 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 11:04 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 11:04 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-14 09:37 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-14 09:37 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-13 22:08 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 22:08 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 20:41 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 20:41 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 20:41 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-13 20:41 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-13 20:30 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 20:30 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 20:30 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 20:30 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 20:30 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 20:30 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 20:30 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 20:30 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 20:30 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 20:30 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-13 20:30 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-13 20:30 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-13 20:30 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-13 20:30 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 20:30 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-13 20:30 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-13 20:30 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-13 20:30 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-13 19:56 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 19:56 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 19:56 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 19:56 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-13 19:53 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-13 19:53 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-02 19:23 - 2014-02-02 19:23 - 00002125 _____ () C:\Users\******\Desktop\WinPatrol.lnk
2014-02-02 19:20 - 2014-02-06 21:28 - 00000000 ____D () C:\Users\******\AppData\Roaming\WinPatrol
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\ProgramData\InstallMate
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\BillP Studios
2014-02-02 19:17 - 2014-02-02 19:17 - 00001146 _____ () C:\Users\******\Desktop\TFC.exe - Verknüpfung.lnk
2014-02-02 19:16 - 2014-02-02 19:16 - 00001512 _____ () C:\Users\******\Desktop\spywareblaster.exe - Verknüpfung.lnk
2014-02-02 19:14 - 2014-02-23 10:00 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-02-02 19:14 - 2014-02-02 19:14 - 00000000 ____D () C:\ProgramData\Licenses
2014-02-02 12:54 - 2014-02-02 12:54 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-02-02 12:42 - 2014-02-02 12:42 - 00000000 ____D () C:\Users\******\AppData\Local\Secunia PSI
2014-02-02 10:13 - 2014-02-02 10:13 - 00448512 _____ (OldTimer Tools) C:\Users\******\Downloads\TFC.exe
2014-01-29 19:33 - 2014-01-21 19:29 - 00450660 _____ () C:\Windows\system32\Drivers\etc\hosts.20140129-193346.backup
2014-01-29 18:53 - 2014-01-29 18:53 - 00002784 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-29 18:53 - 2014-01-29 18:53 - 00000824 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-29 18:52 - 2014-01-29 18:53 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 21:30 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-27 21:30 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-27 21:30 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-27 21:30 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-27 21:30 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-27 21:30 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-26 20:25 - 2014-02-23 19:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-26 20:25 - 2014-02-23 10:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-26 13:09 - 2014-01-26 13:10 - 00000000 ____D () C:\Users\******\AppData\Local\NVIDIA Corporation
2014-01-26 13:08 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-26 13:08 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-24 12:51 - 2014-01-28 19:59 - 00000000 ____D () C:\Windows\erdnt
==================== One Month Modified Files and Folders =======
2014-02-23 19:59 - 2014-02-23 19:58 - 00014525 _____ () C:\Users\******\Downloads\FRST.txt
2014-02-23 19:58 - 2014-02-23 19:58 - 00000000 ____D () C:\FRST
2014-02-23 19:58 - 2014-01-22 19:48 - 01502526 _____ () C:\Windows\WindowsUpdate.log
2014-02-23 19:55 - 2009-07-14 05:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-23 19:55 - 2009-07-14 05:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-23 19:54 - 2014-02-23 19:54 - 02155520 _____ (Farbar) C:\Users\******\Downloads\FRST64.exe
2014-02-23 19:50 - 2014-02-23 19:50 - 02292066 _____ () C:\Users\******\Desktop\TeamSpybot-20140223-195011.cab
2014-02-23 19:47 - 2014-02-19 09:11 - 00002520 _____ () C:\Windows\setupact.log
2014-02-23 19:47 - 2011-02-25 20:22 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-23 19:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-23 19:46 - 2014-02-23 14:02 - 00000000 ____D () C:\AdwCleaner
2014-02-23 19:43 - 2014-02-23 19:43 - 01241834 _____ () C:\Users\******\Downloads\adwcleaner.exe
2014-02-23 19:31 - 2012-04-24 08:14 - 00000600 _____ () C:\Users\******\AppData\Roaming\winscp.rnd
2014-02-23 19:15 - 2014-02-23 19:15 - 00001077 _____ () C:\Users\******\Desktop\RunInteractiveWin - Verknüpfung.lnk
2014-02-23 19:13 - 2014-02-23 19:13 - 00003042 _____ () C:\Windows\System32\Tasks\PandaUSBVaccine
2014-02-23 19:13 - 2014-02-23 19:13 - 00000000 ____D () C:\ProgramData\Panda Security
2014-02-23 19:13 - 2014-02-23 19:13 - 00000000 ____D () C:\Program Files (x86)\Panda USB Vaccine
2014-02-23 19:11 - 2014-01-26 20:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-23 14:57 - 2014-02-23 14:57 - 02313482 _____ () C:\Users\******\Desktop\TeamSpybot-20140223-145751.cab
2014-02-23 14:57 - 2012-05-22 08:09 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-02-23 14:10 - 2014-02-23 12:38 - 00003790 _____ () C:\Windows\PFRO.log
2014-02-23 14:00 - 2014-02-23 14:00 - 00000000 ____D () C:\FFOutput
2014-02-23 13:59 - 2014-02-23 13:59 - 00001160 _____ () C:\Users\******\Desktop\Format Factory.lnk
2014-02-23 13:59 - 2014-02-23 13:59 - 00000000 ____D () C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2014-02-23 13:59 - 2012-05-20 20:43 - 00000000 ____D () C:\Program Files (x86)\FreeTime
2014-02-23 13:47 - 2014-02-23 13:47 - 00000000 ____D () C:\Users\******\Documents\ProcAlyzer Dumps
2014-02-23 13:40 - 2014-02-23 13:30 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-02-23 13:30 - 2014-02-23 13:30 - 00001323 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-02-23 13:30 - 2014-02-23 13:30 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-02-23 10:32 - 2012-04-24 08:14 - 00000000 ____D () C:\Program Files (x86)\WinSCP_alt
2014-02-23 10:26 - 2014-02-23 10:26 - 00000000 ____D () C:\Program Files (x86)\WinSCP
2014-02-23 10:26 - 2012-04-24 08:14 - 00000941 _____ () C:\Users\******\Desktop\WinSCP.lnk
2014-02-23 10:11 - 2014-01-26 20:25 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-23 10:11 - 2012-05-11 07:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-23 10:11 - 2011-06-09 07:48 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-23 10:00 - 2014-02-02 19:14 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-02-23 09:54 - 2014-01-18 13:43 - 00000356 _____ () C:\Windows\Tasks\HPCeeScheduleFor******.job
2014-02-22 10:50 - 2014-02-22 10:50 - 00848856 _____ (Panda Security ) C:\Users\******\Downloads\USBVaccineSetup.exe
2014-02-21 13:46 - 2011-11-20 09:03 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-02-21 13:46 - 2011-02-20 09:49 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-02-21 13:34 - 2010-12-20 19:06 - 00000000 ____D () C:\Users\******\AppData\Roaming\HpUpdate
2014-02-21 10:44 - 2014-02-21 08:04 - 58014512 _____ (Free Time) C:\Users\******\Downloads\FFSetup3.3.1.0.exe
2014-02-20 09:16 - 2010-09-03 20:58 - 00000000 ____D () C:\ProgramData\PDFC
2014-02-19 20:11 - 2014-02-19 20:11 - 00000000 ____D () C:\Users\******\Documents\WBGames
2014-02-19 11:21 - 2014-02-19 09:28 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\******\Downloads\spybot-2.2.exe
2014-02-19 09:11 - 2014-02-19 09:11 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-18 20:53 - 2014-02-18 20:53 - 00000000 ____D () C:\Users\******\Documents\BioWare
2014-02-18 20:29 - 2014-02-16 10:25 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-02-18 20:27 - 2014-02-18 20:14 - 00000000 ____D () C:\Users\******\Documents\Gothic3ForsakenGods
2014-02-18 20:07 - 2010-09-03 21:30 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-02-18 20:07 - 2010-09-03 21:30 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-02-18 20:07 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-17 14:25 - 2014-02-17 14:25 - 00003306 _____ () C:\Users\******\Desktop\************ - aktuell - Verknüpfung.lnk
2014-02-17 13:50 - 2011-01-05 07:20 - 00000000 ____D () C:\Users\******\Documents\alle Dokumente
2014-02-17 13:04 - 2014-02-17 13:04 - 00000000 ____D () C:\Users\******\Documents\Programme
2014-02-17 13:03 - 2014-02-17 12:47 - 00000000 ____D () C:\Users\******\Documents\PC - Spiele
2014-02-17 13:03 - 2011-01-22 10:38 - 00000000 ____D () C:\Users\******\Documents\web to date Projekte
2014-02-17 12:48 - 2010-12-18 20:33 - 00000000 ___SD () C:\Users\******\Documents\Eigene Webs
2014-02-17 12:34 - 2011-02-20 09:36 - 00000000 ____D () C:\Users\******\AppData\Roaming\HP Support Assistant
2014-02-16 20:54 - 2014-02-16 20:54 - 00000000 ____D () C:\Users\******\AppData\Local\Windows Live
2014-02-16 20:01 - 2010-12-17 20:57 - 00000000 ____D () C:\Users\******
2014-02-16 20:00 - 2012-02-02 09:32 - 00000000 ____D () C:\Program Files (x86)\1&1 Surf-Stick
2014-02-16 20:00 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-16 13:23 - 2014-02-16 13:10 - 00001931 _____ () C:\Users\******\Desktop\Update Checker.lnk
2014-02-16 13:10 - 2014-02-16 13:10 - 00000000 ____D () C:\Program Files (x86)\FileHippo.com
2014-02-16 13:02 - 2014-02-16 13:02 - 00000000 ____D () C:\Users\******\AppData\Roaming\Canneverbe Limited
2014-02-16 13:02 - 2014-02-16 13:02 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-02-16 12:59 - 2014-02-16 12:59 - 00000993 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-02-16 09:35 - 2014-02-16 09:20 - 05300360 _____ (Martin Prikryl ) C:\Users\******\Downloads\winscp551setup.exe
2014-02-16 09:30 - 2011-01-29 09:52 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-16 08:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 19:18 - 2012-04-24 08:13 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-02-15 19:04 - 2012-06-09 08:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 13:46 - 2014-02-15 13:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 19:38 - 2014-02-14 19:38 - 00003196 _____ () C:\Windows\System32\Tasks\{5A8D4332-AEDF-4980-A2B9-AE036CE5AF9E}
2014-02-13 22:15 - 2013-07-23 09:10 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-13 22:13 - 2010-12-30 20:01 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-13 22:09 - 2012-04-23 13:35 - 01594028 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-11 09:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-10 13:44 - 2011-01-31 13:04 - 00007650 _____ () C:\Users\******\AppData\Local\resmon.resmoncfg
2014-02-06 21:28 - 2014-02-02 19:20 - 00000000 ____D () C:\Users\******\AppData\Roaming\WinPatrol
2014-02-06 13:16 - 2014-02-14 11:04 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 11:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 11:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 11:04 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 11:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 11:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 11:04 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 11:04 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 11:04 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 11:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 11:04 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 11:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 11:04 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 11:04 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 11:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 11:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 11:04 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 11:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 11:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 11:04 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 11:04 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 11:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 11:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 11:04 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 11:04 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 11:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 11:04 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 11:04 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 11:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 11:04 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 11:04 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 11:04 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 11:04 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 11:04 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 11:04 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 11:04 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 11:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 11:04 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 11:04 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 09:37 - 2013-12-12 10:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-04 09:56 - 2012-04-18 19:12 - 00000000 ____D () C:\Users\******\AppData\Local\Apps\2.0
2014-02-02 19:23 - 2014-02-02 19:23 - 00002125 _____ () C:\Users\******\Desktop\WinPatrol.lnk
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\ProgramData\InstallMate
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\BillP Studios
2014-02-02 19:17 - 2014-02-02 19:17 - 00001146 _____ () C:\Users\******\Desktop\TFC.exe - Verknüpfung.lnk
2014-02-02 19:16 - 2014-02-02 19:16 - 00001512 _____ () C:\Users\******\Desktop\spywareblaster.exe - Verknüpfung.lnk
2014-02-02 19:14 - 2014-02-02 19:14 - 00000000 ____D () C:\ProgramData\Licenses
2014-02-02 12:54 - 2014-02-02 12:54 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-02-02 12:42 - 2014-02-02 12:42 - 00000000 ____D () C:\Users\******\AppData\Local\Secunia PSI
2014-02-02 10:13 - 2014-02-02 10:13 - 00448512 _____ (OldTimer Tools) C:\Users\******\Downloads\TFC.exe
2014-02-02 09:54 - 2014-01-18 13:43 - 00003222 _____ () C:\Windows\System32\Tasks\HPCeeScheduleFor******
2014-01-30 20:49 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-01-29 18:53 - 2014-01-29 18:53 - 00002784 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-29 18:53 - 2014-01-29 18:53 - 00000824 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-29 18:53 - 2014-01-29 18:52 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-29 18:42 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-28 20:07 - 2014-01-22 14:38 - 00000000 ____D () C:\Windows\ERUNT
2014-01-28 19:59 - 2014-01-24 12:51 - 00000000 ____D () C:\Windows\erdnt
2014-01-28 12:55 - 2009-07-14 08:44 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-01-27 21:32 - 2011-01-29 20:26 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-27 13:24 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-01-26 20:26 - 2011-02-01 08:54 - 00000000 ____D () C:\Users\******\AppData\Local\Adobe
2014-01-26 13:11 - 2013-12-20 13:02 - 00000000 ____D () C:\Users\******\AppData\Local\NVIDIA
2014-01-26 13:10 - 2014-01-26 13:09 - 00000000 ____D () C:\Users\******\AppData\Local\NVIDIA Corporation
2014-01-26 13:10 - 2011-01-21 09:22 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-26 13:09 - 2010-09-03 20:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
Some content of TEMP:
====================
C:\Users\******\AppData\Local\Temp\avgnt.exe
C:\Users\******\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-19 10:00
==================== End Of Log ============================
--- --- --- FRST 2: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-02-2014 01
Ran by ****** at 2014-02-23 19:59:41
Running from C:\Users\******\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
1&1 Surf-Stick (HKLM-x32\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.2 - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.95 - WildTangent) Hidden
ArcaniA - Gothic 4 (HKLM-x32\...\ArcaniA) (Version: - JoWooD Entertainment AG)
Avira Antivirus Premium (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.2.286 - Avira)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Borderlands (HKLM-x32\...\{52B65911-1559-4ED5-9461-46957FDD48CD}) (Version: 1.0.295 - 2K Games)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.2823 - CyberLink Corp.)
CyberLink DVD Suite Deluxe (x32 Version: 7.0.2823 - CyberLink Corp.) Hidden
Dark Messiah (HKLM-x32\...\{A8E2EF8F-73EF-4DD8-BB38-31FCCAF50103}) (Version: 1.0 - Ubisoft)
DATA BECKER web to date 7 (HKLM-x32\...\web to date 7_is1) (Version: 7.0.0.1589 - DATA BECKER GmbH & Co. KG)
Diablo II (HKLM-x32\...\Diablo II) (Version: - Blizzard Entertainment)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
Dragon Age II (HKLM-x32\...\{F2E23139-3404-4E3C-9855-7724415D62A5}) (Version: 1.04 - Electronic Arts, Inc.)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.00 - Electronic Arts, Inc.)
DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4030 - Hewlett-Packard)
DVD Menu Pack for HP MediaSmart Video (x32 Version: 4.1.4030 - Hewlett-Packard) Hidden
F.E.A.R. 3 (HKLM-x32\...\Steam App 21100) (Version: - Day 1 Studios)
F.E.A.R. Ultimate Shooter Edition - F.E.A.R. 2 (HKLM-x32\...\{8C06EE31-AE51-4589-B53F-1406F6BBA229}) (Version: 1.00.0000 - WB Games)
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
FileHippo.com Update Checker (HKLM-x32\...\FileHippo.com) (Version: - )
FormatFactory 3.3.1.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.1.0 - Format Factory)
Free YouTube Download version 3.2.1.320 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.1.320 - DVDVideoSoft Ltd.)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Gothic 1 (HKLM-x32\...\Gothic 1_is1) (Version: - piranha bytes / Pluto 13 GmbH)
Gothic 2 Gold (HKLM-x32\...\{40FE74B5-71A1-4393-A0AB-21D6E1DA5A66}) (Version: 1.0.0 - JoWood)
Gothic 3 - Götterdämmerung (HKLM-x32\...\{4538055F-EBC6-4E67-9365-F55B1DEFE9DE}) (Version: 1.0.0 - JoWooD)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.10262.3295 - Hewlett-Packard)
HP Customer Experience Enhancements (x32 Version: 6.0.1.4 - Hewlett-Packard) Hidden
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.3 - WildTangent)
HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 4.1.4229 - Hewlett-Packard)
HP MediaSmart DVD (x32 Version: 4.1.4229 - Hewlett-Packard) Hidden
HP MediaSmart Music (HKLM-x32\...\InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}) (Version: 4.1.4301 - Hewlett-Packard)
HP MediaSmart Music (x32 Version: 4.1.4301 - Hewlett-Packard) Hidden
HP MediaSmart Photo (HKLM-x32\...\InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}) (Version: 4.1.4211 - Hewlett-Packard)
HP MediaSmart Photo (x32 Version: 4.1.4211 - Hewlett-Packard) Hidden
HP MediaSmart SmartMenu (HKLM\...\{5B08AF35-B699-4A44-BB89-3E51E70611E8}) (Version: 3.1.1.12 - Hewlett-Packard)
HP MediaSmart Video (HKLM-x32\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.1.4214 - Hewlett-Packard)
HP MediaSmart Video (x32 Version: 4.1.4214 - Hewlett-Packard) Hidden
HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}) (Version: 10.1.0002 - Hewlett-Packard)
HP Update (HKLM-x32\...\{DE77FE3F-A33D-499A-87AD-5FC406617B40}) (Version: 5.002.003.003 - Hewlett-Packard)
HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.1.2.27173 - Hewlett-Packard)
Insaniquarium Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Jewel Quest II (x32 Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Killing Floor (HKLM-x32\...\Steam App 1250) (Version: - Tripwire Interactive)
L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version: - )
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2823 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.2823 - CyberLink Corp.) Hidden
LightScribe System Software (HKLM-x32\...\{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}) (Version: 1.18.15.1 - LightScribe)
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: - EasyBits Software AS)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Marine Sharpshooter 4 (HKLM-x32\...\Marine Sharpshooter 4/DE-German_is1) (Version: - City Interactive)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office XP Developer - German (HKLM-x32\...\Microsoft Office XP Developer - German) (Version: - )
Microsoft Office XP Developer - German (x32 Version: 7.00.9177 - Microsoft) Hidden
Microsoft Office XP Media Content (HKLM-x32\...\{90300407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.2619.0 - Microsoft Corporation)
Microsoft Office XP Professional mit FrontPage (HKLM-x32\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Publisher 2002 (HKLM-x32\...\{90190407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MOD 10.0 Baseline (English-x86-CD) (x32 Version: 7.00.9177 - Microsoft) Hidden
Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.1.4030 - Hewlett-Packard)
Movie Theme Pack for HP MediaSmart Video (x32 Version: 4.1.4030 - Hewlett-Packard) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
Mozilla Thunderbird 24.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.3.0 (x86 de)) (Version: 24.3.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MusicStation (HKLM-x32\...\MusicStationNetstaller) (Version: 1.0.1.5 - Hewlett-Packard)
NVIDIA 3D Vision Controller Driver (x32 Version: 275.33 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 332.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 332.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 332.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 332.21 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.21 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3221 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)
Panda USB Vaccine 1.0.1.4 (HKLM-x32\...\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1) (Version: - Panda Security)
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 3.5.111 - PDF Complete, Inc)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.2 - pdfforge)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
PictureMover (HKLM-x32\...\{264FE20A-757B-492a-B0C3-4009E2997D8A}) (Version: 3.5.0.28 - Hewlett-Packard Company)
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4022 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.4022 - CyberLink Corp.) Hidden
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2906 - CyberLink Corp.)
PowerDirector (x32 Version: 8.0.2906 - CyberLink Corp.) Hidden
Protect Disc License Helper 1.0.125 (IE) (HKCU\...\Protect Disc License Helper) (Version: 1.0.125 - Protect Disc)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6463 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.2926 - CyberLink Corp.) Hidden
RESIDENT EVIL 5 (HKLM-x32\...\{AC08BBA0-96B9-431A-A7D0-D8598E493775}) (Version: 1.0.0.129 - CAPCOM CO., LTD.)
SAS Secure Tomorrow (HKLM-x32\...\SAS Secure Tomorrow/DE-German_is1) (Version: - City Interactive)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Shockwave (HKLM-x32\...\Shockwave) (Version: - )
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Sniper: Ghost Warrior (HKLM-x32\...\Steam App 34830) (Version: - City Interactive S.A.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)
SpywareBlaster 5.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Terrorist Takedown 2 (HKLM-x32\...\Terrorist Takedown 2/DE-German_is1) (Version: - City Interactive)
The Darkness II (HKLM-x32\...\Steam App 67370) (Version: - Digital Extremes)
The Witcher Enhanced Edition Version 1.6 (HKLM-x32\...\The Witcher Enhanced Edition_is1) (Version: 1.6 - CD Projekt RED)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Venetica (HKLM-x32\...\Venetica_is1) (Version: - dtp)
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp) (Version: 4.0.9.7 - WildTangent)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)
WinSCP 5.5.1 (HKLM-x32\...\winscp3_is1) (Version: 5.5.1 - Martin Prikryl)
WISO EÜR & Kasse 2013 (HKCU\...\{85517AFF-D393-49B1-9159-4AB88ED2D6FA}) (Version: 20.01.8152 - Buhl Data Service GmbH)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
==================== Restore Points =========================
20-02-2014 10:53:38 Geplanter Prüfpunkt
23-02-2014 08:59:34 Vor Neuinstallationen
==================== Hosts content: ==========================
2009-07-14 03:34 - 2014-01-21 19:29 - 00450660 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {0104FB87-9F17-4942-A1C3-E4F06FC2B5B2} - System32\Tasks\{B4D23838-687A-458B-BB3E-7CB3433BDD6F} => C:\Program Files (x86)\PiranhaBytes\Gothic1\system\GOTHIC.EXE [2001-06-12] (Piranha Bytes Software GmbH)
Task: {089E80CA-60CF-4BE3-B963-ED9F304108C1} - System32\Tasks\{64765578-398A-4BE5-9D91-0B42BAC1FDEB} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.1.0.179.161/de/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;notincluded
Task: {12C2FBB3-335A-42AD-B752-CD4E92A4E410} - System32\Tasks\{E13E83B4-3536-4FB2-8692-3F85535234FB} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {136F61B4-64C9-4A2F-A747-323B414D5CAE} - System32\Tasks\{D0E03372-A594-41C6-819F-8E4C4EBFB045} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {1C457700-1738-4FD5-9BAD-D74B8DC49765} - System32\Tasks\{53BAE7CE-AD5B-4AE9-816D-ABA752B304F6} => C:\Program Files (x86)\PiranhaBytes\Gothic1\system\GOTHIC.EXE [2001-06-12] (Piranha Bytes Software GmbH)
Task: {252F8333-016C-49F9-9316-893CE6C425DE} - System32\Tasks\{85AEF176-0571-4F6A-BDCA-E2D9E416573D} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {26AA0D8E-E825-4DF2-BB04-50EC415D2E2F} - System32\Tasks\HPCeeScheduleFor****** => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-01-05] (Hewlett-Packard)
Task: {26B3074D-BA4A-405C-9688-2598E6120D9D} - System32\Tasks\{374583B4-AEAC-4A4D-AEF1-6A7516D9A291} => C:\Program Files (x86)\PiranhaBytes\Gothic1\system\GOTHIC.EXE [2001-06-12] (Piranha Bytes Software GmbH)
Task: {26F3AE55-E860-4C43-9A2A-BFF09BB69651} - System32\Tasks\{2D870DDB-08A2-493C-87C9-9CB5D67B2845} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {29CCF380-62B0-497A-BE9F-B219D2D55373} - System32\Tasks\{177F67E1-7035-4A56-8A83-9022F1800790} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {2C3BF1F2-CE5D-46A2-9AA6-355924B4CD17} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {31A1D963-FF57-43FB-A6D7-89921A3D5C74} - System32\Tasks\{A0C74402-EDDE-4698-8695-EEFA7726AB0B} => C:\Program Files (x86)\Ubisoft\Dark Messiah of Might and Magic\mm.exe [2006-10-25] ()
Task: {35DA2F7B-67BD-408D-99B6-211A7FBE56CE} - System32\Tasks\{35D03123-9DE9-4BFD-8933-6AB38E3EC7D7} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {3746A984-93C1-4D2A-BF82-DAA408F31442} - System32\Tasks\{FCA78B29-9EA7-402F-98FB-9BBF19AA83C4} => C:\Program Files (x86)\PiranhaBytes\Gothic1\system\GOTHIC.EXE [2001-06-12] (Piranha Bytes Software GmbH)
Task: {41427D5B-015E-4C8E-BC90-7A986D63C3E6} - System32\Tasks\{17A4D395-359C-4F45-9F27-9D18D93CE389} => C:\Program Files\Micrografx\Picture Publisher 8\Register\Itp32.exe
Task: {428E3390-135B-47BC-818F-29347572E3B5} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy\SDImmunize.exe
Task: {48797702-DF9E-4B01-99CC-25EF6A67460D} - System32\Tasks\{53DE48E4-272F-4771-9BE6-183564DA061A} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {49F5244A-168F-4FAD-8061-F61A2249F9D3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy\SDScan.exe
Task: {4A463196-1995-4B16-A25A-51FBE7351F3F} - System32\Tasks\{2E1ED4B0-23FA-4C92-BDDD-051113D2344B} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {4D610FD9-2146-4221-84F6-C784B29880AC} - System32\Tasks\{DCA8C91E-39A5-4C26-A837-A2B94C872849} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {4F98A0DD-F8F6-4DA0-86EE-555791A148DB} - System32\Tasks\{1B50C0AA-4675-44E6-B9FF-E46E0CE6DB1B} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {52985F38-71B7-4AAB-B90D-4EC1C67C9C8A} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {537BFFF5-F5AD-440A-AA1F-690344B80852} - System32\Tasks\{668742DB-358A-41A9-A594-BA1AEA3D7C4B} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {54A28C14-786C-4D47-A016-CFB132692521} - System32\Tasks\PandaUSBVaccine => C:\Program Files (x86)\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] ()
Task: {55E7DEA1-4A1A-4C83-BBEF-BC11983F45C6} - System32\Tasks\{60814AED-31E7-4CC6-933F-7858C1660B32} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {57222B2B-5CFE-4252-8CA1-46C03D6D72BE} - System32\Tasks\{AE2EA777-BDAD-4478-8D6A-F73CF81BAA3F} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {5C29117D-6A02-40FF-9D4B-032FCBC158AE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {5DE7A566-60B8-438A-A0FE-B288FE57543A} - System32\Tasks\{D7D4E916-253D-4CD9-81D2-B2811981005B} => F:\Micrografx\Picture Publisher 8\pp80.exe
Task: {6563D599-2690-41E8-91A5-79DDCA6B84A3} - System32\Tasks\{2D112D53-504D-44EA-9FB9-6874C1599942} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {67EBE81C-D1EC-4760-8529-FD0BF13FDE61} - System32\Tasks\Go for FilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATTENTION
Task: {6A4FB5D7-6C78-4B0F-AD51-2A6403848739} - System32\Tasks\{7AC36171-D427-40DE-A4E6-51C0E2546AAD} => C:\Program Files (x86)\PiranhaBytes\Gothic1\system\GOTHIC.EXE [2001-06-12] (Piranha Bytes Software GmbH)
Task: {6C61589D-53EC-44C7-B0C2-C34B230C86F8} - System32\Tasks\{A926D806-303F-4D7B-B69E-5DF0B46F8D23} => C:\Program Files (x86)\Microsoft Office\Office10\MSPUB.EXE [2010-10-04] (Microsoft Corporation)
Task: {71578158-63ED-4E92-88A6-F3AF4EDCE31A} - System32\Tasks\{7A6FB0E0-5251-449F-98B5-9E749C6CEE7C} => C:\Program Files (x86)\PiranhaBytes\Gothic1\system\GOTHIC.EXE [2001-06-12] (Piranha Bytes Software GmbH)
Task: {72365E7F-D9F3-4739-919C-5CC83B7AAE87} - System32\Tasks\{F8A45E15-B959-443A-BD76-9DEEC18B1082} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {76FC9A16-D551-46AA-8085-AF09C46EB031} - System32\Tasks\{26C31D6A-AD28-4C06-B0CE-86011BA3B239} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {7A5D1F0B-523A-4BDC-9836-35FA7CD7C605} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-11-22] (Hewlett-Packard)
Task: {7C41AED9-D7DE-4BC1-842E-3EF7F6062B0A} - System32\Tasks\{B7173482-B909-4496-9D83-9F1E0EB169EF} => C:\Program Files (x86)\DATA BECKER\web to date 7\web2date.exe [2011-06-17] (Thomas Henrichs Softwareentwicklung)
Task: {8030ED84-C835-4716-9F05-6C96F95D9D1E} - System32\Tasks\{67FFA537-B90B-408D-A469-DBB20AD6B410} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {821D6784-7FF3-41E3-B909-7B04734E5558} - System32\Tasks\{D1949633-BBA2-4D4F-AE99-480CE2E79E56} => C:\Program Files (x86)\Ubisoft\Dark Messiah of Might and Magic\mm.exe [2006-10-25] ()
Task: {8BE03158-092C-4C5C-95B9-25E5291EC259} - System32\Tasks\{463262C0-FD7B-4440-AC5B-1BB39162847D} => C:\Program Files (x86)\Ubisoft\Dark Messiah of Might and Magic\mm.exe [2006-10-25] ()
Task: {8C31E0C2-AC8B-41BB-B685-76D5BF4AA906} - System32\Tasks\{7AE0B4C1-9DA6-4CA5-A654-5CA9C98F5262} => E:\Autorun.exe [2004-10-21] (Macrovision Corporation)
Task: {9275AB79-2878-444C-BB50-E322E7E9A57A} - System32\Tasks\{CC3168C5-9EF1-42C0-AA49-3CFD3A2186B0} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {95E7E0B7-4485-426E-8DE9-E6B70B28EAEF} - System32\Tasks\{7EEE23E2-D075-4520-A08B-44DA04DC86B7} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {A4949CB0-3C9C-489A-BE98-142D35F2CF38} - System32\Tasks\{73766375-6B2A-4C26-AA7E-E89A8A9D15B9} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {A5583D0D-059C-46D8-B76E-7D085F21722D} - System32\Tasks\{C054BBEC-7BE1-4995-8EAD-E2C3370C08D6} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {AF6BB433-51F6-4D88-9034-4E4A64C55C6C} - System32\Tasks\{0484ECDE-7441-4C32-A519-ACBE78F6F924} => C:\Program Files (x86)\Ubisoft\Dark Messiah of Might and Magic\mm.exe [2006-10-25] ()
Task: {B949163D-F0F0-4131-921F-503E4DB38D95} - System32\Tasks\{92A1893A-47DC-4BD0-B079-4F025F2C23E0} => C:\Program Files (x86)\Ubisoft\Dark Messiah of Might and Magic\mm.exe [2006-10-25] ()
Task: {BA1FDE1E-57C2-44A3-95F4-B1F947560D50} - System32\Tasks\{7434B411-467C-4BB9-BAE7-485432138845} => C:\Program Files (x86)\PiranhaBytes\Gothic1\system\GOTHIC.EXE [2001-06-12] (Piranha Bytes Software GmbH)
Task: {BE4B654E-1065-4F96-AE4E-183DB2A6B5DD} - System32\Tasks\{EE5D36C5-0CEF-4431-8F83-8A9DDFAA1BE5} => C:\Program Files (x86)\Ubisoft\Dark Messiah of Might and Magic\mm.exe [2006-10-25] ()
Task: {BEF64C6A-0626-4D99-B0F9-FFA11938ACF2} - System32\Tasks\{322077CF-DFD8-42E3-9135-D23295F87423} => C:\Program Files (x86)\Ubisoft\Dark Messiah of Might and Magic\mm.exe [2006-10-25] ()
Task: {CFE1019B-2CDB-4FBD-9746-0CF9A7C34CC9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {D3DC9ABC-36F1-483D-8294-BD46054EBD17} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {DB73356C-97D4-4499-BB2C-A760CFC04274} - System32\Tasks\{5CB3B19E-67C3-420D-8BCD-75C591F1A9A1} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {DB8EA5F6-B367-4573-AD8A-A0B321467563} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-04-01] (Hewlett-Packard Company)
Task: {DF9DD45E-EE9F-426A-BB23-40E03A8F18BA} - System32\Tasks\{F0C932EF-8BB0-478E-9A73-F0E396569249} => C:\Program Files (x86)\Ubisoft\Dark Messiah of Might and Magic\mm.exe [2006-10-25] ()
Task: {E0CDEF3F-E759-4551-B810-46A76F321267} - System32\Tasks\{D7C24612-20AD-4BC0-ADA7-22243928EC9A} => C:\Program Files (x86)\JoWooD\Gothic II Gold\System\Gothic2.exe [2003-10-26] (Piranha Bytes)
Task: {E6ABAAEF-C97D-439C-859F-54339EC32975} - System32\Tasks\{01652846-DA3C-4B6D-BD70-013A4BDE75D5} => C:\Program Files (x86)\Ubisoft\Dark Messiah of Might and Magic\mm.exe [2006-10-25] ()
Task: {E778A7A4-2918-485A-82A0-63C7855D43EA} - System32\Tasks\{E7FDA40C-1260-49F4-949C-221FD8D8715A} => C:\Program Files (x86)\Microsoft Office\Office10\POWERPNT.EXE [2011-04-26] (Microsoft Corporation)
Task: {EE3D1204-FB86-4033-9251-51D4A1ACFACA} - System32\Tasks\{A8EE1305-5BC9-415C-9D0D-4D2DBDBBDD9B} => C:\Program Files (x86)\PiranhaBytes\Gothic1\system\GOTHIC.EXE [2001-06-12] (Piranha Bytes Software GmbH)
Task: {F1809B92-B26B-48A2-8A2C-08454AFDB572} - System32\Tasks\{FFFA68C5-7285-4ED7-B006-8B422B20FEAF} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {F29CDC8A-AD4A-42ED-AAB3-0EE927DCE840} - System32\Tasks\{CD43BFEB-FA23-468D-A294-0FC565291B96} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {F5330761-91BE-4890-AC4B-A90B89BDC7D5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-23] (Adobe Systems Incorporated)
Task: {F737E074-F859-4BF1-95CC-700D78E0B7C1} - System32\Tasks\{4A67BC48-9F17-42B7-958B-0AEE97EECB6F} => C:\Program Files (x86)\JoWooD\Gothic 3 - Götterdämmerung\Gothic III - Götterdämmerung.exe [2011-03-11] (Pluto 13 GmbH)
Task: {F788AB0F-7996-4FD3-BDED-FE701B7D8AD6} - System32\Tasks\{2F084270-1811-4EC5-93DF-678AACDE32EB} => C:\Program Files (x86)\PiranhaBytes\Gothic1\system\GOTHIC.EXE [2001-06-12] (Piranha Bytes Software GmbH)
Task: {FED2989A-5E6B-45F7-82A0-C48EF396F18C} - System32\Tasks\{8847C317-EB82-41D4-8D8B-F3ABA4B14C73} => E:\setup.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\HPCeeScheduleFor******.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Loaded Modules (whitelisted) =============
2011-11-09 20:43 - 2013-12-19 19:53 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00253264 _____ () C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
2012-02-02 09:32 - 2010-09-30 14:00 - 00139088 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
2012-02-02 09:32 - 2010-09-30 14:00 - 01193808 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIMain.exe
2012-02-02 09:32 - 2010-09-30 14:00 - 00687440 _____ () C:\Program Files (x86)\1&1 Surf-Stick\CMUpdater.exe
2013-07-29 09:27 - 2013-07-29 09:14 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-02-23 13:30 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy\sqlite3.dll
2014-02-23 13:30 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy\snlThirdParty150.bpl
2014-02-23 13:30 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy\DEC150.bpl
2014-02-23 13:30 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy\snlFileFormats150.bpl
2014-02-02 19:20 - 2013-12-24 23:14 - 00642016 ____N () C:\Program Files (x86)\BillP Studios\WinPatrol\sqlite3.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00245072 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UICommonDlg.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00371536 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UISkin.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00090448 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\SysService.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00162128 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIService.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00228176 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BISetting.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00125264 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BILog.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00141648 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIDevManager.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00268112 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIDataBase.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00124752 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIConnectRecord.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00089936 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BICallRecord.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00096080 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIVoice.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00183632 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BICodec.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00150352 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIRas.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00221520 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BISms.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00098128 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIStk.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00095568 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIUssd.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00235344 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIConfig.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00168784 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIXml.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00175440 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIPhoneBook.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00234320 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BKService.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00154960 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\CMCOMService.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00134992 _____ () C:\Program Files (x86)\1&1 Surf-Stick\Component\BIOptimizationClient.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00691536 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIPlugIn\UISms.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00565584 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIPlugIn\UIConnectRecord.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 01304912 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIPlugIn\UISetting.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00677200 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIPlugIn\UIPhoneBook.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00309584 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIPlugIn\UIStk.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00323920 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIPlugIn\UIUssd.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00564048 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIPlugIn\UIMms.dll
2012-02-02 09:32 - 2010-09-30 14:00 - 00617808 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UpdateAgent.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk => C:\Windows\pss\Microsoft Office.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Snapfish PictureMover.lnk => C:\Windows\pss\Snapfish PictureMover.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: Easybits Recovery => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
MSCONFIG\startupreg: HP Software Update => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: HPAdvisorDock => C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe
MSCONFIG\startupreg: hpsysdrv => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
MSCONFIG\startupreg: MSC => "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: PDF Complete => C:\Program Files (x86)\PDF Complete\pdfsty.exe
MSCONFIG\startupreg: SearchSettings => "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
MSCONFIG\startupreg: SmartMenu => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/23/2014 07:20:32 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "F:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (02/23/2014 00:47:03 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
Error: (02/20/2014 09:38:46 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (02/23/2014 07:48:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (02/23/2014 07:11:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (02/23/2014 02:11:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (02/23/2014 01:25:38 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (02/23/2014 00:39:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (02/23/2014 09:22:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (02/22/2014 07:57:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (02/22/2014 00:32:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (02/22/2014 09:20:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (02/21/2014 07:29:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Microsoft Office Sessions:
=========================
Error: (02/23/2014 07:20:32 PM) (Source: Windows Backup)(User: )
Description: F:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
Error: (02/23/2014 00:47:03 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
Error: (02/20/2014 09:38:46 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service)(User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800)
Error: (02/19/2014 09:12:15 AM) (Source: Windows Search Service)(User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt
CodeIntegrity Errors:
===================================
Date: 2014-01-24 13:00:17.849
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-01-24 13:00:17.787
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 32%
Total physical RAM: 4095.24 MB
Available physical RAM: 2757.55 MB
Total Pagefile: 8188.66 MB
Available Pagefile: 6451.14 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:452.37 GB) (Free:178.36 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:13.29 GB) (Free:1.63 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (DMOMMNGNC) (CDROM) (Total:6.32 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 38857C8A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=452 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Dennoch LG Mimi |
|
24.02.2014, 18:30
| #20 |
| /// the machine /// TB-Ausbilder | Win7 / JumpFlip eingefangen PC gefriert immer wieder ein Alles gut. Die paar Funde von Spybot kannste löschen lassen, alles nur inaktiver Kram.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win7 / JumpFlip eingefangen PC gefriert immer wieder ein |
| avast, bildschirm, entfernen, frage, internetverbindung, logfiles, mozilla, programme, pup.optional.installcore.a, pup.optional.jumpflip.a, pup.optional.qone8, pup.optional.sweetpage.a, seite, sicherheit, startseite, sweet-page, sweet-page entfernen, sweetpage, sweetpage entfernen, taskmanager, windows |
Linear-Darstellung
