Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: "ads not from this site" NUR in Chrome - bisher half nix

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 01.02.2014, 18:02   #1
glubscher
 
"ads not from this site" NUR in Chrome - bisher half nix - Standard

"ads not from this site" NUR in Chrome - bisher half nix



Halo zusammen,
ich hab das im Betreff genannte Problem.
FireFox und IEx sind sauber.

Ich hab

- adwcleaner
- malwarebytes anti Malware
- WinOpimizer (Ashampoo)
- PandaCloudCleaner
- McAfee SecurityScanPlus

benutzt.
Jedes mal wurde mir gesagt : Alles klar, ist nach nem Neustart sauber.
Leider nicht.

Jetzt möchte ich doch Eure Hilfe in Anspruch nehmen.

Habe den FRST64 laufen lassen, siehe Protokolle.

Ich erbitte Hilfe.
Danke vorab

Alt 01.02.2014, 20:33   #2
schrauber
/// the machine
/// TB-Ausbilder
 

"ads not from this site" NUR in Chrome - bisher half nix - Standard

"ads not from this site" NUR in Chrome - bisher half nix



Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.


So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 01.02.2014, 20:47   #3
glubscher
 
"ads not from this site" NUR in Chrome - bisher half nix - Standard

"ads not from this site" NUR in Chrome - bisher half nix



habe die Funktion wegen der Logs nicht gefunden.. sorry..
hier sind sie

FRST

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by admin (administrator) on DIDIQUADPC on 01-02-2014 17:56:22
Running from C:\Users\Dieter\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(1&1 Internet AG) C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
() C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Dropbox, Inc.) C:\Users\Dieter\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [722256 2008-12-12] (CANON INC.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-09-05] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [1&1_1&1 Upload-Manager] - C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE [989264 2011-11-21] (1&1 Internet AG)
HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [Lync] - C:\Program Files\Microsoft Office 15\root\office15\lync.exe [22312608 2014-01-15] (Microsoft Corporation)
HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\MountPoints2: {6d257820-399c-11e3-8250-806e6f6e6963} - "J:\zdata\cobi.exe" 
AppInit_DLLs: C:\PROGRA~2\GS_X64~1.ENA => C:\Program Files (x86)\GS_x64.Enabler [2759168 2014-01-16] ()
AppInit_DLLs-x32: c:\progra~2\gsb779~1.ena => C:\Program Files (x86)\GS.Enabler [3041792 2014-01-16] ()
Startup: C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Dieter\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
SearchScopes: HKLM - DefaultScope {193FC469-1C0E-4F27-9337-44F3743DEB11} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {193FC469-1C0E-4F27-9337-44F3743DEB11} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {05981031-C8A5-43F1-B829-4D69FC0A9B29} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKCU - {193FC469-1C0E-4F27-9337-44F3743DEB11} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {C1208F42-8BF2-4E37-B75F-D580A1C4D5F8} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=72a79f26000000000000801f028a8153&r=906
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\..\Interfaces\{B37694CD-C8CF-455D-A18C-04361AA66989}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

FireFox:
========
FF ProfilePath: C:\Users\Dieter\AppData\Roaming\Mozilla\Firefox\Profiles\bcqbrui4.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-10-13]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-01]
CHR Extension: (Google Drive) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-17]
CHR Extension: (YouTube) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-01]
CHR Extension: (Google-Suche) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-01]
CHR Extension: (TubEAdblocker) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\egjciaipacdhinjoljdnjaagkhbdlggf [2014-01-31]
CHR Extension: (Google Wallet) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-13]
CHR Extension: (Google Mail) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-01]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Dieter\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-01-17]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 1a34a8e0; C:\Program Files (x86)\GSSvc.dll [146768 2014-01-16] ()
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1830768 2013-10-16] (SurfRight B.V.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] ()

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [129536 2013-07-05] (Advanced Micro Devices)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 FsUsbExDisk; C:\WINDOWS\SysWOW64\FsUsbExDisk.SYS [37344 2013-10-30] ()
R2 hmpalert; C:\Windows\system32\drivers\hmpalert.sys [17416 2013-10-16] ()
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation                           )
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 DfSdkS; 
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-01 17:56 - 2014-02-01 17:56 - 00020791 _____ () C:\Users\Dieter\Desktop\FRST.txt
2014-02-01 17:56 - 2014-02-01 17:56 - 00000000 ____D () C:\FRST
2014-02-01 17:44 - 2014-02-01 17:44 - 00001951 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-02-01 17:44 - 2014-02-01 17:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-01 17:43 - 2014-02-01 17:43 - 02080256 _____ (Farbar) C:\Users\Dieter\Downloads\FRST64.exe
2014-02-01 17:43 - 2014-02-01 17:43 - 02080256 _____ (Farbar) C:\Users\Dieter\Desktop\FRST64.exe
2014-02-01 17:38 - 2014-02-01 17:39 - 05179159 _____ (Swearware) C:\Users\Dieter\Downloads\ComboFix.exe
2014-02-01 17:22 - 2014-02-01 17:22 - 01166132 _____ () C:\Users\Dieter\Downloads\adwcleaner.exe
2014-02-01 17:14 - 2014-02-01 17:14 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-02-01 17:13 - 2014-02-01 17:13 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-01 17:12 - 2014-02-01 17:41 - 00009791 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-01 17:10 - 2014-02-01 17:10 - 00000608 _____ () C:\WINDOWS\PFRO.log
2014-02-01 16:54 - 2014-02-01 16:54 - 00003668 _____ () C:\WINDOWS\System32\Tasks\One-Click Optimizer
2014-02-01 16:53 - 2014-02-01 16:54 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-01 16:53 - 2014-02-01 16:53 - 00002268 _____ () C:\Users\Public\Desktop\Ein-Klick-Optimierung (WO10).lnk
2014-02-01 16:53 - 2014-02-01 16:53 - 00001246 _____ () C:\Users\Public\Desktop\Ashampoo WinOptimizer 10.lnk
2014-02-01 16:53 - 2014-02-01 16:53 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
2014-02-01 16:53 - 2009-08-24 21:13 - 00034304 _____ (mst software GmbH, Germany) C:\WINDOWS\system32\DfSdkBt.exe
2014-02-01 16:40 - 2014-02-01 16:40 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-02-01 16:40 - 2014-02-01 16:40 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-02-01 16:40 - 2014-02-01 16:40 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-02-01 16:40 - 2014-02-01 16:40 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-02-01 16:38 - 2014-02-01 16:38 - 35868608 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Dieter\Downloads\7176_2_ashampoo_winoptimizer_10_10_3_0_15172.exe
2014-02-01 15:53 - 2014-02-01 15:53 - 00000000 _____ () C:\autoexec.bat
2014-02-01 15:52 - 2014-02-01 15:52 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-02-01 15:51 - 2014-02-01 17:21 - 00000000 ____D () C:\WINDOWS\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-02-01 15:51 - 2014-02-01 15:51 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dieter\Downloads\SpyHunter-Installer.exe
2014-02-01 15:39 - 2014-02-01 15:39 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Macromedia
2014-02-01 15:37 - 2014-02-01 15:37 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Mozilla
2014-02-01 15:36 - 2014-02-01 15:36 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-01 15:36 - 2014-02-01 15:36 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-01 15:36 - 2014-02-01 15:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-01 15:35 - 2014-02-01 15:35 - 21703480 _____ (Mozilla) C:\Users\Dieter\Downloads\Firefox Setup 22.0.exe
2014-01-31 18:06 - 2014-01-31 18:06 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Malwarebytes
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-31 18:06 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-01-31 17:10 - 2013-04-08 15:30 - 00022752 _____ () C:\WINDOWS\system32\PCloudBroom64.exe
2014-01-31 16:39 - 2014-01-31 16:39 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dieter\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-31 16:37 - 2014-01-31 16:37 - 00000000 ____D () C:\Program Files (x86)\Panda Security
2014-01-31 16:37 - 2013-04-29 08:17 - 00047632 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSKMAD.sys
2014-01-31 16:36 - 2014-01-31 16:37 - 28026504 _____ (Panda Security ) C:\Users\Dieter\Downloads\PandaCloudCleaner.exe
2014-01-31 16:09 - 2014-01-31 16:09 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 16:09 - 2014-01-31 16:09 - 00000000 ____D () C:\ProgramData\egjciaipacdhinjoljdnjaagkhbdlggf
2014-01-30 19:38 - 2014-01-30 19:38 - 00001249 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-01-30 19:38 - 2014-01-30 19:38 - 00000000 ____D () C:\ProgramData\elsterformular
2014-01-30 19:38 - 2014-01-30 19:38 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-01-30 19:37 - 2014-01-30 19:37 - 78303584 _____ (Landesfinanzdirektion Thüringen) C:\Users\Dieter\Downloads\ElsterFormular-15.0.20140117p.exe
2014-01-27 20:17 - 2014-01-27 20:17 - 02038597 _____ () C:\Users\Dieter\Downloads\eXtplorer_2.1.5.zip
2014-01-27 20:02 - 2014-01-27 20:02 - 00666578 _____ () C:\Users\Dieter\Downloads\plg_jcemediabox_1114_joomla25.zip
2014-01-26 17:21 - 2014-01-26 17:21 - 00021698 _____ () C:\Users\Dieter\Downloads\Blank_Joomla_Template_UNZIP_ME_FIRST.zip
2014-01-26 17:08 - 2014-01-26 17:08 - 16851317 _____ () C:\Users\Dieter\Downloads\t3_blank_j32.zip
2014-01-26 17:01 - 2014-01-26 17:01 - 00911974 _____ () C:\Users\Dieter\Downloads\Blank-Template-2.6.1 (1).zip
2014-01-26 13:51 - 2014-01-26 13:51 - 00196885 _____ () C:\Users\Dieter\Downloads\mod_accordeonck_2.0.7_j30.zip
2014-01-26 13:34 - 2014-01-26 13:34 - 00341454 _____ () C:\Users\Dieter\Downloads\mod_maximenuck_7.1.6_j30.zip
2014-01-26 11:33 - 2014-01-26 11:33 - 00031022 _____ () C:\Users\Dieter\Downloads\Gestrandet-im-Dschungel-Die-Urwald-Hits-2014-by-Taekwondo00.nzb
2014-01-26 11:32 - 2014-01-26 11:32 - 00053214 _____ () C:\Users\Dieter\Downloads\Rattenscharf-Vol.71-2014-by-Taekwondo88.nzb
2014-01-25 16:27 - 2014-01-25 16:27 - 00666578 _____ () C:\Users\Dieter\Downloads\plg_jcemediabox_1114_joomla3.zip
2014-01-25 16:26 - 2014-01-25 16:26 - 00064871 _____ () C:\Users\Dieter\Downloads\jce_language_de-DE_234.zip
2014-01-25 15:45 - 2014-01-25 15:45 - 11341429 _____ () C:\Users\Dieter\Downloads\psd.zip
2014-01-25 15:45 - 2014-01-25 15:45 - 00911974 _____ () C:\Users\Dieter\Downloads\Blank-Template-2.6.1.zip
2014-01-24 19:44 - 2014-01-24 19:44 - 00078785 _____ () C:\Users\Dieter\Downloads\My Special 2014 Vol.01.nzb
2014-01-24 19:44 - 2014-01-24 19:44 - 00061293 _____ () C:\Users\Dieter\Downloads\Hot-Rod-Rockabilly-by-Taekwondo.nzb
2014-01-24 19:43 - 2014-01-24 19:43 - 00118429 _____ () C:\Users\Dieter\Downloads\Bravo-Hits-Vol.84-2CD-2014-by-Taekwondo.nzb
2014-01-24 19:43 - 2014-01-24 19:43 - 00050364 _____ () C:\Users\Dieter\Downloads\Peter-Maffay-Wenn-das-so-ist-Premium-Edition-2014-by-Taekwondo.nzb
2014-01-24 19:42 - 2014-01-24 19:42 - 00267905 _____ () C:\Users\Dieter\Downloads\The Kinks - Kollekted (3CD).nzb
2014-01-24 19:41 - 2014-01-24 19:41 - 00261650 _____ () C:\Users\Dieter\Downloads\l26l26jgtkzhgfgbljzc.par2.nzb
2014-01-24 19:40 - 2014-01-24 19:40 - 00015897 _____ () C:\Users\Dieter\Downloads\k26k26khtzjgvcui7rth.par2.nzb
2014-01-24 19:39 - 2014-01-24 19:39 - 00701266 _____ () C:\Users\Dieter\Downloads\haifischerl7.par2.nzb
2014-01-24 19:39 - 2014-01-24 19:39 - 00495021 _____ () C:\Users\Dieter\Downloads\haifischerl8.par2.nzb
2014-01-24 19:39 - 2014-01-24 19:39 - 00407853 _____ () C:\Users\Dieter\Downloads\haifischerl5.par2.nzb
2014-01-24 19:38 - 2014-01-24 19:38 - 00512531 _____ () C:\Users\Dieter\Downloads\haifischerl10.par2.nzb
2014-01-22 20:42 - 2014-01-22 20:42 - 00642177 _____ () C:\Users\Dieter\Downloads\01-layout.zip
2014-01-22 19:45 - 2014-01-22 19:45 - 00003261 _____ () C:\Users\Dieter\Downloads\Extensoft-Artisteer-v4.2.0-Build-60559a-CRACKED.rar.nzb
2014-01-22 19:36 - 2014-01-22 19:36 - 00069909 _____ () C:\Users\Dieter\Downloads\Extensoft.Artisteer.4.2.0.60559+Keygen+Crack.part0.nzb
2014-01-22 19:32 - 2014-01-22 19:35 - 123768816 _____ () C:\Users\Dieter\Downloads\Artisteer.4.2.0.60623.exe
2014-01-22 19:29 - 2014-01-22 19:29 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Artisteer
2014-01-22 19:25 - 2014-01-22 19:25 - 00076770 _____ () C:\Users\Dieter\Downloads\Artisteer 4.2.nzb
2014-01-22 19:08 - 2014-01-22 19:08 - 09782558 _____ () C:\Users\Dieter\Downloads\Joomla_3.2.1-Stable-Full_Package_German.zip
2014-01-22 17:04 - 2014-01-22 17:04 - 07457004 _____ () C:\Users\Dieter\Downloads\Joomla_3.1.1-Stable-Update_Package.zip
2014-01-22 15:21 - 2014-01-22 15:22 - 11065184 _____ () C:\Users\Dieter\Downloads\usr_web147_10.sql
2014-01-22 12:32 - 2014-01-22 12:32 - 00404735 _____ () C:\Users\Dieter\Downloads\Uploader.Presents-Abhaun.2013.German.AC3D.HDRip.Xvid-IND.nzb
2014-01-20 13:24 - 2014-01-20 13:24 - 00644595 _____ () C:\Users\Dieter\Downloads\e26e26htjku77609ikj.par2.nzb
2014-01-20 13:23 - 2014-01-20 13:23 - 00442967 _____ () C:\Users\Dieter\Downloads\d26d26htjzukuil76oiutfjgh.par2.nzb
2014-01-20 12:57 - 2014-01-20 12:57 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-20 12:57 - 2014-01-20 12:57 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-20 12:57 - 2014-01-20 12:57 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-20 12:57 - 2014-01-20 12:57 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-01-20 12:54 - 2014-01-20 12:54 - 30796712 _____ (Oracle Corporation) C:\Users\Dieter\Downloads\jre-7u51-windows-x64.exe
2014-01-20 12:54 - 2014-01-20 12:54 - 00000843 _____ () C:\Users\Dieter\Downloads\sd (1).jnlp
2014-01-16 18:38 - 2014-01-24 12:13 - 00000000 ____D () C:\ProgramData\SNT
2014-01-16 18:38 - 2014-01-23 13:58 - 00000000 ____D () C:\Program Files (x86)\SNT
2014-01-16 18:37 - 2014-02-01 17:28 - 00000486 ____H () C:\WINDOWS\Tasks\GS.Enabler-S-1824435291.job
2014-01-16 18:37 - 2014-01-31 18:27 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-01-16 18:37 - 2014-01-16 18:37 - 03041792 _____ () C:\Program Files (x86)\GS.Enabler
2014-01-16 18:37 - 2014-01-16 18:37 - 02759168 _____ () C:\Program Files (x86)\GS_x64.Enabler
2014-01-16 18:37 - 2014-01-16 18:37 - 00146768 _____ () C:\Program Files (x86)\GSSvc.dll
2014-01-16 18:37 - 2014-01-16 18:37 - 00002724 _____ () C:\WINDOWS\System32\Tasks\GS.Enabler-S-1824435291
2014-01-16 18:37 - 2014-01-16 18:37 - 00000000 ____D () C:\ProgramData\House Of Soft
2014-01-16 18:36 - 2014-01-31 16:09 - 00000000 ____D () C:\ProgramData\3baab739ab8ff135
2014-01-16 18:36 - 2014-01-18 11:40 - 00000000 ____D () C:\ProgramData\greATsaverr
2014-01-16 18:36 - 2014-01-17 11:05 - 00000000 ____D () C:\Program Files (x86)\greATsaverr
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\diete_000\AppData\Local\Torch
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\diete_000\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator
2014-01-16 18:35 - 2014-01-16 18:35 - 00000000 ____D () C:\ProgramData\InstallMate
2014-01-16 16:27 - 2014-01-16 16:28 - 37479382 _____ () C:\Users\Dieter\Downloads\Microsoft Toolkit.rar
2014-01-16 16:04 - 2013-11-22 11:21 - 00000000 ____D () C:\Users\Dieter\Downloads\Adobe Acrobat XI Pro 11.0.5
2014-01-16 14:49 - 2014-01-16 15:54 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part3.rar
2014-01-16 14:45 - 2014-01-16 15:55 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part2.rar
2014-01-16 14:43 - 2014-01-16 14:44 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part1.rar
2014-01-16 14:14 - 2014-01-16 14:21 - 34002190 _____ () C:\Users\Dieter\Downloads\U10599.part4.rar
2014-01-15 15:56 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 15:56 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 15:56 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 15:56 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 15:56 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 15:56 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 15:56 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 15:56 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 15:56 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 15:56 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 15:56 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-06 20:18 - 2014-01-06 20:18 - 02549916 _____ () C:\Users\Dieter\Downloads\01KMSpico_Install.rar
2014-01-04 14:12 - 2014-01-04 14:12 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools
2014-01-04 14:12 - 2014-01-04 14:12 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Android
2014-01-04 14:08 - 2014-01-04 14:09 - 76520869 _____ (Google Inc.) C:\Users\Dieter\Downloads\installer_r21.0.1-windows.exe
2014-01-04 13:56 - 2014-01-04 13:57 - 272624044 _____ () C:\Users\Dieter\Downloads\III_8188_131108.zip
2014-01-04 13:27 - 2014-01-04 14:30 - 00000000 ____D () C:\Users\Dieter\.android
2014-01-03 12:18 - 2014-01-03 12:18 - 04377740 _____ () C:\Users\Dieter\Downloads\AdobeCC-Amtlib.dll.rar

==================== One Month Modified Files and Folders =======

2014-02-01 17:56 - 2014-02-01 17:56 - 00020791 _____ () C:\Users\Dieter\Desktop\FRST.txt
2014-02-01 17:56 - 2014-02-01 17:56 - 00000000 ____D () C:\FRST
2014-02-01 17:50 - 2013-10-13 18:12 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1942426975-168617158-1696248371-1002
2014-02-01 17:46 - 2013-10-17 19:02 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-01 17:45 - 2013-10-13 18:30 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-01 17:44 - 2014-02-01 17:44 - 00001951 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-02-01 17:44 - 2014-02-01 17:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-01 17:43 - 2014-02-01 17:43 - 02080256 _____ (Farbar) C:\Users\Dieter\Downloads\FRST64.exe
2014-02-01 17:43 - 2014-02-01 17:43 - 02080256 _____ (Farbar) C:\Users\Dieter\Desktop\FRST64.exe
2014-02-01 17:41 - 2014-02-01 17:12 - 00009791 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-01 17:41 - 2013-10-17 18:42 - 00005144 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for DidiQuadPC-admin DidiQuadPC
2014-02-01 17:39 - 2014-02-01 17:38 - 05179159 _____ (Swearware) C:\Users\Dieter\Downloads\ComboFix.exe
2014-02-01 17:31 - 2013-10-13 19:00 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Adobe
2014-02-01 17:30 - 2013-10-27 18:45 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Dropbox
2014-02-01 17:30 - 2013-10-13 18:30 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-01 17:28 - 2014-01-16 18:37 - 00000486 ____H () C:\WINDOWS\Tasks\GS.Enabler-S-1824435291.job
2014-02-01 17:28 - 2013-10-13 18:30 - 00001128 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-01 17:27 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-01 17:25 - 2013-12-06 18:45 - 00000000 ____D () C:\AdwCleaner
2014-02-01 17:22 - 2014-02-01 17:22 - 01166132 _____ () C:\Users\Dieter\Downloads\adwcleaner.exe
2014-02-01 17:21 - 2014-02-01 15:51 - 00000000 ____D () C:\WINDOWS\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-02-01 17:17 - 2013-09-30 05:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-01 17:17 - 2013-09-30 04:56 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-01 17:17 - 2013-09-30 04:56 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-01 17:14 - 2014-02-01 17:14 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-02-01 17:14 - 2013-12-21 15:49 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{139BA647-7D28-4AD3-98E8-F28EF8D54402}
2014-02-01 17:13 - 2014-02-01 17:13 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-01 17:13 - 2013-10-17 19:02 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-02-01 17:10 - 2014-02-01 17:10 - 00000608 _____ () C:\WINDOWS\PFRO.log
2014-02-01 17:06 - 2013-10-20 17:29 - 00000000 ___DC () C:\WINDOWS\Panther
2014-02-01 17:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-01 16:55 - 2013-11-01 18:49 - 00000000 ____D () C:\Users\Dieter\Documents\Outlook-Dateien
2014-02-01 16:54 - 2014-02-01 16:54 - 00003668 _____ () C:\WINDOWS\System32\Tasks\One-Click Optimizer
2014-02-01 16:54 - 2014-02-01 16:53 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-01 16:53 - 2014-02-01 16:53 - 00002268 _____ () C:\Users\Public\Desktop\Ein-Klick-Optimierung (WO10).lnk
2014-02-01 16:53 - 2014-02-01 16:53 - 00001246 _____ () C:\Users\Public\Desktop\Ashampoo WinOptimizer 10.lnk
2014-02-01 16:53 - 2014-02-01 16:53 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
2014-02-01 16:40 - 2014-02-01 16:40 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-02-01 16:40 - 2014-02-01 16:40 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-02-01 16:40 - 2014-02-01 16:40 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-02-01 16:40 - 2014-02-01 16:40 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-02-01 16:38 - 2014-02-01 16:38 - 35868608 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Dieter\Downloads\7176_2_ashampoo_winoptimizer_10_10_3_0_15172.exe
2014-02-01 15:53 - 2014-02-01 15:53 - 00000000 _____ () C:\autoexec.bat
2014-02-01 15:52 - 2014-02-01 15:52 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-02-01 15:51 - 2014-02-01 15:51 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dieter\Downloads\SpyHunter-Installer.exe
2014-02-01 15:39 - 2014-02-01 15:39 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Macromedia
2014-02-01 15:37 - 2014-02-01 15:37 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Mozilla
2014-02-01 15:37 - 2013-11-19 19:08 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Mozilla
2014-02-01 15:36 - 2014-02-01 15:36 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-01 15:36 - 2014-02-01 15:36 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-01 15:36 - 2014-02-01 15:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-01 15:36 - 2013-12-01 15:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-01 15:35 - 2014-02-01 15:35 - 21703480 _____ (Mozilla) C:\Users\Dieter\Downloads\Firefox Setup 22.0.exe
2014-01-31 18:52 - 2013-10-26 17:37 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\FileZilla
2014-01-31 18:27 - 2014-01-16 18:37 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-01-31 18:06 - 2014-01-31 18:06 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Malwarebytes
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-31 16:39 - 2014-01-31 16:39 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dieter\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-31 16:37 - 2014-01-31 16:37 - 00000000 ____D () C:\Program Files (x86)\Panda Security
2014-01-31 16:37 - 2014-01-31 16:36 - 28026504 _____ (Panda Security ) C:\Users\Dieter\Downloads\PandaCloudCleaner.exe
2014-01-31 16:09 - 2014-01-31 16:09 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 16:09 - 2014-01-31 16:09 - 00000000 ____D () C:\ProgramData\egjciaipacdhinjoljdnjaagkhbdlggf
2014-01-31 16:09 - 2014-01-16 18:36 - 00000000 ____D () C:\ProgramData\3baab739ab8ff135
2014-01-31 16:09 - 2013-08-22 16:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2014-01-31 16:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2014-01-30 20:43 - 2013-10-13 18:03 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Packages
2014-01-30 19:38 - 2014-01-30 19:38 - 00001249 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-01-30 19:38 - 2014-01-30 19:38 - 00000000 ____D () C:\ProgramData\elsterformular
2014-01-30 19:38 - 2014-01-30 19:38 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-01-30 19:37 - 2014-01-30 19:37 - 78303584 _____ (Landesfinanzdirektion Thüringen) C:\Users\Dieter\Downloads\ElsterFormular-15.0.20140117p.exe
2014-01-29 16:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2014-01-27 20:42 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-01-27 20:17 - 2014-01-27 20:17 - 02038597 _____ () C:\Users\Dieter\Downloads\eXtplorer_2.1.5.zip
2014-01-27 20:02 - 2014-01-27 20:02 - 00666578 _____ () C:\Users\Dieter\Downloads\plg_jcemediabox_1114_joomla25.zip
2014-01-27 18:28 - 2013-12-19 17:41 - 00000000 ____D () C:\Users\Dieter\AppData\Local\FRITZ!
2014-01-26 17:33 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-01-26 17:21 - 2014-01-26 17:21 - 00021698 _____ () C:\Users\Dieter\Downloads\Blank_Joomla_Template_UNZIP_ME_FIRST.zip
2014-01-26 17:08 - 2014-01-26 17:08 - 16851317 _____ () C:\Users\Dieter\Downloads\t3_blank_j32.zip
2014-01-26 17:01 - 2014-01-26 17:01 - 00911974 _____ () C:\Users\Dieter\Downloads\Blank-Template-2.6.1 (1).zip
2014-01-26 13:51 - 2014-01-26 13:51 - 00196885 _____ () C:\Users\Dieter\Downloads\mod_accordeonck_2.0.7_j30.zip
2014-01-26 13:34 - 2014-01-26 13:34 - 00341454 _____ () C:\Users\Dieter\Downloads\mod_maximenuck_7.1.6_j30.zip
2014-01-26 11:33 - 2014-01-26 11:33 - 00031022 _____ () C:\Users\Dieter\Downloads\Gestrandet-im-Dschungel-Die-Urwald-Hits-2014-by-Taekwondo00.nzb
2014-01-26 11:32 - 2014-01-26 11:32 - 00053214 _____ () C:\Users\Dieter\Downloads\Rattenscharf-Vol.71-2014-by-Taekwondo88.nzb
2014-01-25 16:27 - 2014-01-25 16:27 - 00666578 _____ () C:\Users\Dieter\Downloads\plg_jcemediabox_1114_joomla3.zip
2014-01-25 16:26 - 2014-01-25 16:26 - 00064871 _____ () C:\Users\Dieter\Downloads\jce_language_de-DE_234.zip
2014-01-25 15:45 - 2014-01-25 15:45 - 11341429 _____ () C:\Users\Dieter\Downloads\psd.zip
2014-01-25 15:45 - 2014-01-25 15:45 - 00911974 _____ () C:\Users\Dieter\Downloads\Blank-Template-2.6.1.zip
2014-01-25 13:51 - 2013-10-26 19:17 - 00005120 _____ () C:\Users\Dieter\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-25 12:53 - 2013-10-20 18:46 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\vlc
2014-01-24 19:44 - 2014-01-24 19:44 - 00078785 _____ () C:\Users\Dieter\Downloads\My Special 2014 Vol.01.nzb
2014-01-24 19:44 - 2014-01-24 19:44 - 00061293 _____ () C:\Users\Dieter\Downloads\Hot-Rod-Rockabilly-by-Taekwondo.nzb
2014-01-24 19:43 - 2014-01-24 19:43 - 00118429 _____ () C:\Users\Dieter\Downloads\Bravo-Hits-Vol.84-2CD-2014-by-Taekwondo.nzb
2014-01-24 19:43 - 2014-01-24 19:43 - 00050364 _____ () C:\Users\Dieter\Downloads\Peter-Maffay-Wenn-das-so-ist-Premium-Edition-2014-by-Taekwondo.nzb
2014-01-24 19:42 - 2014-01-24 19:42 - 00267905 _____ () C:\Users\Dieter\Downloads\The Kinks - Kollekted (3CD).nzb
2014-01-24 19:41 - 2014-01-24 19:41 - 00261650 _____ () C:\Users\Dieter\Downloads\l26l26jgtkzhgfgbljzc.par2.nzb
2014-01-24 19:40 - 2014-01-24 19:40 - 00015897 _____ () C:\Users\Dieter\Downloads\k26k26khtzjgvcui7rth.par2.nzb
2014-01-24 19:39 - 2014-01-24 19:39 - 00701266 _____ () C:\Users\Dieter\Downloads\haifischerl7.par2.nzb
2014-01-24 19:39 - 2014-01-24 19:39 - 00495021 _____ () C:\Users\Dieter\Downloads\haifischerl8.par2.nzb
2014-01-24 19:39 - 2014-01-24 19:39 - 00407853 _____ () C:\Users\Dieter\Downloads\haifischerl5.par2.nzb
2014-01-24 19:38 - 2014-01-24 19:38 - 00512531 _____ () C:\Users\Dieter\Downloads\haifischerl10.par2.nzb
2014-01-24 12:13 - 2014-01-16 18:38 - 00000000 ____D () C:\ProgramData\SNT
2014-01-23 13:58 - 2014-01-16 18:38 - 00000000 ____D () C:\Program Files (x86)\SNT
2014-01-23 13:33 - 2013-11-11 20:09 - 00000000 ____D () C:\Users\Dieter\Documents\Mein Steuer-Sparbuch Heute
2014-01-22 20:54 - 2013-10-23 17:07 - 00004028 _____ () C:\Users\Dieter\Sti_Trace.log
2014-01-22 20:42 - 2014-01-22 20:42 - 00642177 _____ () C:\Users\Dieter\Downloads\01-layout.zip
2014-01-22 19:45 - 2014-01-22 19:45 - 00003261 _____ () C:\Users\Dieter\Downloads\Extensoft-Artisteer-v4.2.0-Build-60559a-CRACKED.rar.nzb
2014-01-22 19:36 - 2014-01-22 19:36 - 00069909 _____ () C:\Users\Dieter\Downloads\Extensoft.Artisteer.4.2.0.60559+Keygen+Crack.part0.nzb
2014-01-22 19:35 - 2014-01-22 19:32 - 123768816 _____ () C:\Users\Dieter\Downloads\Artisteer.4.2.0.60623.exe
2014-01-22 19:29 - 2014-01-22 19:29 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Artisteer
2014-01-22 19:29 - 2013-11-30 18:48 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Apple Computer
2014-01-22 19:25 - 2014-01-22 19:25 - 00076770 _____ () C:\Users\Dieter\Downloads\Artisteer 4.2.nzb
2014-01-22 19:08 - 2014-01-22 19:08 - 09782558 _____ () C:\Users\Dieter\Downloads\Joomla_3.2.1-Stable-Full_Package_German.zip
2014-01-22 17:04 - 2014-01-22 17:04 - 07457004 _____ () C:\Users\Dieter\Downloads\Joomla_3.1.1-Stable-Update_Package.zip
2014-01-22 15:22 - 2014-01-22 15:21 - 11065184 _____ () C:\Users\Dieter\Downloads\usr_web147_10.sql
2014-01-22 12:32 - 2014-01-22 12:32 - 00404735 _____ () C:\Users\Dieter\Downloads\Uploader.Presents-Abhaun.2013.German.AC3D.HDRip.Xvid-IND.nzb
2014-01-22 11:21 - 2013-11-11 19:37 - 00000547 _____ () C:\WINDOWS\wiso.ini
2014-01-22 11:16 - 2013-10-20 17:14 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-01-20 13:24 - 2014-01-20 13:24 - 00644595 _____ () C:\Users\Dieter\Downloads\e26e26htjku77609ikj.par2.nzb
2014-01-20 13:23 - 2014-01-20 13:23 - 00442967 _____ () C:\Users\Dieter\Downloads\d26d26htjzukuil76oiutfjgh.par2.nzb
2014-01-20 12:57 - 2014-01-20 12:57 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-20 12:57 - 2014-01-20 12:57 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-20 12:57 - 2014-01-20 12:57 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-20 12:57 - 2014-01-20 12:57 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-01-20 12:54 - 2014-01-20 12:54 - 30796712 _____ (Oracle Corporation) C:\Users\Dieter\Downloads\jre-7u51-windows-x64.exe
2014-01-20 12:54 - 2014-01-20 12:54 - 00000843 _____ () C:\Users\Dieter\Downloads\sd (1).jnlp
2014-01-19 08:38 - 2013-10-15 06:15 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-18 11:40 - 2014-01-16 18:36 - 00000000 ____D () C:\ProgramData\greATsaverr
2014-01-17 11:06 - 2013-10-13 18:05 - 00000000 ___RD () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 11:05 - 2014-01-16 18:36 - 00000000 ____D () C:\Program Files (x86)\greATsaverr
2014-01-17 11:05 - 2013-10-27 18:48 - 00001076 _____ () C:\Users\Dieter\Desktop\Dropbox.lnk
2014-01-17 11:05 - 2013-10-27 18:46 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 18:41 - 2013-11-24 18:01 - 00002084 _____ () C:\Users\Dieter\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-16 18:41 - 2013-11-24 18:01 - 00002028 _____ () C:\Users\Dieter\Desktop\Avira EU-Cleaner.lnk
2014-01-16 18:37 - 2014-01-16 18:37 - 03041792 _____ () C:\Program Files (x86)\GS.Enabler
2014-01-16 18:37 - 2014-01-16 18:37 - 02759168 _____ () C:\Program Files (x86)\GS_x64.Enabler
2014-01-16 18:37 - 2014-01-16 18:37 - 00146768 _____ () C:\Program Files (x86)\GSSvc.dll
2014-01-16 18:37 - 2014-01-16 18:37 - 00002724 _____ () C:\WINDOWS\System32\Tasks\GS.Enabler-S-1824435291
2014-01-16 18:37 - 2014-01-16 18:37 - 00000000 ____D () C:\ProgramData\House Of Soft
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\diete_000\AppData\Local\Torch
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\diete_000\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator
2014-01-16 18:36 - 2013-10-13 18:30 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Google
2014-01-16 18:35 - 2014-01-16 18:35 - 00000000 ____D () C:\ProgramData\InstallMate
2014-01-16 16:28 - 2014-01-16 16:27 - 37479382 _____ () C:\Users\Dieter\Downloads\Microsoft Toolkit.rar
2014-01-16 15:55 - 2014-01-16 14:45 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part2.rar
2014-01-16 15:54 - 2014-01-16 14:49 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part3.rar
2014-01-16 14:44 - 2014-01-16 14:43 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part1.rar
2014-01-16 14:21 - 2014-01-16 14:14 - 34002190 _____ () C:\Users\Dieter\Downloads\U10599.part4.rar
2014-01-16 13:26 - 2013-10-14 22:17 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-16 13:25 - 2012-11-09 09:35 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-15 18:52 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:18 - 2014-01-06 20:18 - 02549916 _____ () C:\Users\Dieter\Downloads\01KMSpico_Install.rar
2014-01-04 14:30 - 2014-01-04 13:27 - 00000000 ____D () C:\Users\Dieter\.android
2014-01-04 14:12 - 2014-01-04 14:12 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools
2014-01-04 14:12 - 2014-01-04 14:12 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Android
2014-01-04 14:09 - 2014-01-04 14:08 - 76520869 _____ (Google Inc.) C:\Users\Dieter\Downloads\installer_r21.0.1-windows.exe
2014-01-04 13:57 - 2014-01-04 13:56 - 272624044 _____ () C:\Users\Dieter\Downloads\III_8188_131108.zip
2014-01-04 13:27 - 2013-10-20 16:35 - 00000000 ____D () C:\Users\Dieter
2014-01-03 12:24 - 2013-10-13 19:41 - 00000000 ____D () C:\Program Files\Adobe
2014-01-03 12:23 - 2013-10-13 19:01 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-01-03 12:18 - 2014-01-03 12:18 - 04377740 _____ () C:\Users\Dieter\Downloads\AdobeCC-Amtlib.dll.rar
2014-01-03 12:16 - 2013-10-13 19:20 - 00001321 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk

Some content of TEMP:
====================
C:\Users\Dieter\AppData\Local\Temp\Quarantine.exe
C:\Users\Dieter\AppData\Local\Temp\TsuA35E60FB.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-27 18:34

==================== End Of Log ============================
         
--- --- ---

--- --- ---


Additions.txt
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04
Ran by admin at 2014-02-01 17:57:13
Running from C:\Users\Dieter\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

1&1 Upload-Manager (x32 Version: 2.0.676 - 1&1 Internet AG)
Adobe Acrobat XI Pro (x32 Version: 11.0 - Adobe Systems Incorporated)
Adobe Acrobat XI Pro (x32 Version: 11.0.05 - Adobe Systems)
Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated) Hidden
Adobe Creative Cloud (x32 Version: 2.3.0.322 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe InDesign CC (x32 Version: 9.0 - Adobe Systems Incorporated)
Adobe Photoshop CC (x32 Version: 14.0 - Adobe Systems Incorporated)
Adobe® Content Viewer (x32 Version: 3.3.0 - Adobe Systems Incorporated)
Adobe® Content Viewer (x32 Version: 3.3.0 - Adobe Systems Incorporated) Hidden
AMD Accelerated Video Transcoding (Version: 13.15.100.30830 - Advanced Micro Devices, Inc.) Hidden
AMD Accelerated Video Transcoding (Version: 2.00.0002 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Catalyst Install Manager (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.0830.1944.33589 - Ihr Firmenname) Hidden
AMD VISION Engine Control Center (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
Android SDK Tools (x32 Version: 1.16 - Google Inc.)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Ashampoo AppLauncher (Medion) v.1.0.0 (x32 Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer 10 v.10.3.0 (x32 Version: 10.03.00 - Ashampoo GmbH & Co. KG)
AVM FRITZ!fax für FRITZ!Box (x32 Version:  - AVM Berlin)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Canon MP Navigator EX 2.1 (x32 Version:  - )
Canon Utilities Solution Menu (x32 Version:  - )
CanoScan LiDE 700F Scanner Driver (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
CDBurnerXP (x32 Version: 4.5.2.4291 - CDBurnerXP)
CloneDVD2 (x32 Version: 2.9.3.0 - Elaborate Bytes)
CrystalDiskInfo 6.0.1 (x32 Version: 6.0.1 - Crystal Dew World)
CyberLink LabelPrint 2.5 (x32 Version: 2.5.5415 - CyberLink Corp.) Hidden
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3111_44883 - CyberLink Corp.) Hidden
CyberLink PhotoDirector 3 (x32 Version: 3.0.3124 - CyberLink Corp.)
CyberLink PhotoDirector 3 (x32 Version: 3.0.3124 - CyberLink Corp.) Hidden
CyberLink PhotoNow (x32 Version: 1.1.7717 - CyberLink Corp.)
CyberLink PhotoNow (x32 Version: 1.1.7717 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (x32 Version: 8.0.0.1920 - CyberLink Corp.) Hidden
CyberLink PowerDirector (Version: 9.0.0.3815c - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (x32 Version: 10.0.4125.02 - CyberLink Corp.) Hidden
CyberLink PowerDVD Copy 1.5 (x32 Version: 1.5.2715b - CyberLink Corp.) Hidden
CyberLink PowerRecover (Version: 5.7.0.0913 - CyberLink Corp.) Hidden
CyberLink PowerRecover (x32 Version: 5.7.0.0913 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Deutschland Digital 1.0.0 (x32 Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
ElsterFormular (x32 Version: 15.0.20140117 - Landesfinanzdirektion Thüringen)
FileZilla Client 3.7.3 (x32 Version: 3.7.3 - Tim Kosse)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galeria de Fotografias (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.)
Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
GS.Supporter 1.80 (x32 Version:  - Verified Publisher) <==== ATTENTION
HitmanPro.Alert (Version: 2.0.10.45 - SurfRight B.V.)
IrfanView (remove only) (x32 Version: 4.36 - Irfan Skiljan)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
Mediathek (x32 Version: 1.4.0 - Medion)
Medion Home Cinema 10 (x32 Version: 10.0 - CyberLink Corp.)
Medion Home Cinema 10 (x32 Version: 10.1924 - CyberLink Corp.) Hidden
Mein Verein (x32 Version: 13.0 - Buhl Data Service GmbH)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4551.1512 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Silverlight (x32 Version: 4.1.10329.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 22.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Nero Backup Drivers (Version: 1.0.11100.8.0 - Nero AG)
NewsLeecher v5.0 Final (x32 Version:  - )
Notepad++ (x32 Version: 6.5 - Notepad++ Team)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
QuickLaunch (x32 Version: 1.00.0019 - Lenovo Group Limited)
QuickPar 0.9 (x32 Version: 0.9 - Peter B. Clements)
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710 - Realtek Semiconductor Corp.)
Samsung Kies (x32 Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.) Hidden
VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)
WinDFT (x32 Version: 1.0.0 - HGST)
Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2014 (x32 Version: 21.00.8480 - Buhl Data Service GmbH)
Your Software Deals 1.0.0 (x32 Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Συλλογή φωτογραφιών (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

16-01-2014 17:43:37 Avira EU-Cleaner - 16.01.2014 18:43
20-01-2014 11:56:22 Installed Java 7 Update 51 (64-bit)
27-01-2014 17:40:22 Geplanter Prüfpunkt
01-02-2014 14:52:06 Installed SpyHunter

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {10BAB471-EF1E-4D67-8275-A3DD0DBBB549} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-10-31] (Microsoft Corporation)
Task: {1F40C80D-BD07-423D-8463-ABE89A73072C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-13] (Microsoft Corporation)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {36074F83-49BD-4244-AC1B-0BF740DC7A1D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {3964E442-3E22-4F52-8CBB-CFDAB548883A} - System32\Tasks\Microsoft Office 15 Sync Maintenance for DidiQuadPC-admin DidiQuadPC => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-01-15] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4E97D71E-57FE-4DB6-9D0F-064F02A988F8} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-dieter.kampf@gmx.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {629F94E8-74D6-4858-843C-662CC618BFD9} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-01-16] (Microsoft Corporation)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {7265AC63-9FEC-4891-8187-3E9EFB7666EA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9CE5B567-0C81-4521-A20D-050779D16CE3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-13] (Microsoft Corporation)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A1079AE0-C302-485C-8625-DFA61B3D8017} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-01] (Adobe Systems Incorporated)
Task: {BAEDDA2C-D0B2-4015-915C-FB798BD9139E} - System32\Tasks\GS.Enabler-S-1824435291 => c:\programdata\house of soft\gs.enabler\GS.Enabler.exe <==== ATTENTION
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E275C4AF-D374-4522-9B1F-B367BB37CD0F} - System32\Tasks\One-Click Optimizer => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-11-19] (Ashampoo Development GmbH & Co. KG)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GS.Enabler-S-1824435291.job => c:\programdata\house of soft\gs.enabler\GS.Enabler.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-12-13 12:20 - 2013-12-13 12:20 - 03359600 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2012-08-06 13:08 - 2012-08-06 13:08 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-01-16 18:37 - 2014-01-16 18:37 - 00146768 _____ () C:\Program Files (x86)\GSSvc.dll
2014-01-16 18:37 - 2014-01-16 18:37 - 03041792 _____ () C:\Program Files (x86)\GS.Enabler
2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-02-01 17:28 - 2014-02-01 17:28 - 00098816 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32api.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00110080 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\pywintypes27.dll
2014-02-01 17:28 - 2014-02-01 17:28 - 00364544 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\pythoncom27.dll
2014-02-01 17:28 - 2014-02-01 17:28 - 00044032 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_socket.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 01153024 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_ssl.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00320512 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32com.shell.shell.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00711680 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_hashlib.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 01175040 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._core_.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00805888 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._gdi_.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00811008 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._windows_.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 01062400 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._controls_.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00735232 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._misc_.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00128512 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_elementtree.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00127488 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\pyexpat.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00557056 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\pysqlite2._sqlite.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00087040 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_ctypes.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00119808 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32file.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00108544 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32security.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00018432 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32event.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00038912 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32inet.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00122368 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._wizard.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00026624 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_multiprocessing.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00070656 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._html2.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00010240 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\select.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00686080 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\unicodedata.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00025600 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32pdh.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00521680 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\windows._lib_cacheinvalidation.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00011264 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32crypt.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00024064 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32pipe.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00035840 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32process.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00017408 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32profile.pyd
2014-02-01 17:28 - 2014-02-01 17:28 - 00022528 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32ts.pyd
2013-12-19 10:49 - 2013-12-19 10:49 - 32733080 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libcef.dll
2013-08-07 20:25 - 2013-08-07 20:25 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-11-11 19:36 - 2013-12-19 14:45 - 09618736 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wgui14.dll
2013-11-11 19:36 - 2013-12-19 14:45 - 03698992 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wcore14.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 00035120 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsdcom48.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 00309040 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rscorewinapi48.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 00321840 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsguiwinapi48.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 02573104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wfvie14.dll
2013-11-11 19:36 - 2013-10-30 17:37 - 01043456 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-core.dll
2013-11-11 19:36 - 2013-10-30 17:37 - 00250368 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-contribs-lib.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 00136496 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsodbc48.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01886000 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wsteu14.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01905456 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wreli14.dll
2013-11-11 19:36 - 2013-10-30 17:37 - 00094720 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-shared.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 04274992 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wauff14.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01468208 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wmain14.dll
2013-11-11 19:36 - 2013-12-19 14:45 - 05055792 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae114.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01678640 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae214.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01804080 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae314.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01626416 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae414.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01126704 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\whau114.dll
2013-11-11 19:36 - 2013-12-19 14:45 - 01313072 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\whau214.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01281840 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wwerb14.dll
2013-11-11 19:36 - 2013-12-19 14:45 - 07274288 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wkont14.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01274672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wimp14.dll
2013-11-11 19:36 - 2013-12-19 14:44 - 01330480 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wfabu14.dll
2012-09-23 19:43 - 2012-09-23 19:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Dieter\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-19 10:49 - 2013-12-19 10:49 - 00742808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libglesv2.dll
2013-12-19 10:49 - 2013-12-19 10:49 - 00136600 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libegl.dll
2014-02-01 15:36 - 2013-06-18 15:21 - 03285912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Realtek RTL8188CU Wireless LAN 802.11n-USB 2.0-Netzwerkadapter
Description: Realtek RTL8188CU Wireless LAN 802.11n-USB 2.0-Netzwerkadapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek Semiconductor Corp.
Service: RtlWlanu
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Could not start eventlog service, could not read events.

Der angeforderte Dienst wurde bereits gestartet.

Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben.


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 3542.76 MB
Available physical RAM: 1982.19 MB
Total Pagefile: 4182.76 MB
Available Pagefile: 2336.05 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:447.44 GB) (Free:385.63 GB) NTFS
Drive d: (PrivateDaten) (Fixed) (Total:422.02 GB) (Free:392.03 GB) NTFS
Drive e: (Recover) (Fixed) (Total:60 GB) (Free:43.9 GB) NTFS
Drive f: (Musik) (Fixed) (Total:931.51 GB) (Free:123.94 GB) NTFS
Drive g: (leer1TB) (Fixed) (Total:931.51 GB) (Free:871.87 GB) NTFS
Drive j: (MY_WEEK_WITH_MARILYN) (CDROM) (Total:5.53 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 00000000)

Partition: GPT Partition Type
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 639A875E)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 932 GB) (Disk ID: 034F4965)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
__________________

Alt 02.02.2014, 07:24   #4
schrauber
/// the machine
/// TB-Ausbilder
 

"ads not from this site" NUR in Chrome - bisher half nix - Standard

"ads not from this site" NUR in Chrome - bisher half nix



Chrome deinstallieren, keine DAten behalten, neu installieren. Verbindest Du mit einem Google Konto?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 02.02.2014, 09:19   #5
glubscher
 
"ads not from this site" NUR in Chrome - bisher half nix - Standard

"ads not from this site" NUR in Chrome - bisher half nix



Ja, ich verbinde mit Google
Was gäbe es bei einer Neuinstallation zu beachten?


Alt 03.02.2014, 10:23   #6
schrauber
/// the machine
/// TB-Ausbilder
 

"ads not from this site" NUR in Chrome - bisher half nix - Standard

"ads not from this site" NUR in Chrome - bisher half nix



Du wirst gefragt ob Du Daten behalten willst, Nein wählen. Dann neu installierne und testen.
__________________
--> "ads not from this site" NUR in Chrome - bisher half nix

Alt 04.02.2014, 17:16   #7
glubscher
 
"ads not from this site" NUR in Chrome - bisher half nix - Standard

"ads not from this site" NUR in Chrome - bisher half nix



Chrome bereits am Sonntag deinstalliert (incl. aller alter Daten).

Da Du mich wg. der Google-Verbindung fragtest, hatte ich nicht einfach neu installieren wollen.
habe das jetzt getan und es sieht gut aus.

Ich sag mal danke und würde das Thema damit als abgeschlossen betrachten können/wollen.

Alt 05.02.2014, 12:23   #8
schrauber
/// the machine
/// TB-Ausbilder
 

"ads not from this site" NUR in Chrome - bisher half nix - Standard

"ads not from this site" NUR in Chrome - bisher half nix



Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu "ads not from this site" NUR in Chrome - bisher half nix
ads, anti, ashampoo, betreff, chrome, erbitte, hilfe, iex, laufe, laufen, malwarebytes, mcafee, neustart, not, this, zusammen



Ähnliche Themen: "ads not from this site" NUR in Chrome - bisher half nix


  1. ESET hat Diverses gefunden, Laptop extrem langsam, andauernde Fehlermeldungen Chrome"Ups Google Chrome ...."
    Plagegeister aller Art und deren Bekämpfung - 19.07.2015 (165)
  2. Möglicherweise "Startfenster"-Trojaner entdeckt - bisher keine Auffälligkeiten - Entfernung?
    Log-Analyse und Auswertung - 16.02.2015 (7)
  3. Diverse Malware ("CoolSaleCoupon", "ddownlloaditkeep", "omiga-plus", "SaveSense", "SaleItCoupon"); lahmer PC & viel Werbung!
    Plagegeister aller Art und deren Bekämpfung - 11.01.2015 (16)
  4. Windows 8.1: Avira findet "TR/Swrort.A.10259" in "C:\Program Files (x86)\Google\Chrome\Application\old_chrome.exe"
    Plagegeister aller Art und deren Bekämpfung - 23.07.2014 (3)
  5. Werbung "ads not by this site" auf jeder Internet-Seite
    Log-Analyse und Auswertung - 23.01.2014 (9)
  6. Windows 8.1: Viel Werbung im Browser und "Ads not by this site" Meldung
    Plagegeister aller Art und deren Bekämpfung - 03.01.2014 (12)
  7. "Ads not by this site" gehen nicht weg...
    Log-Analyse und Auswertung - 05.12.2013 (9)
  8. Windows 7: Firefox zeigt Overlay Werbung und schiebt "Ads not by this site" Blöcke ein
    Plagegeister aller Art und deren Bekämpfung - 29.11.2013 (5)
  9. wie entferne ich " snap.Do " von meinem PC, Deinstallation bisher erfolglos
    Log-Analyse und Auswertung - 19.11.2013 (3)
  10. Windows XP Nach Installation von HP Player immer zwei Startseiten beim Öffnen von Google chrome "start.iminent.com" und "Search gol"
    Log-Analyse und Auswertung - 08.10.2013 (5)
  11. Windows 8: "Snapdo" und "Ads not by this site" Probleme
    Log-Analyse und Auswertung - 29.09.2013 (3)
  12. Chrome: Umleitung auf Werbesites und "ads not from this site" Einblendungen auf Websites
    Log-Analyse und Auswertung - 07.08.2013 (11)
  13. "Ads not by this site" und "safesaver"
    Plagegeister aller Art und deren Bekämpfung - 29.06.2013 (10)
  14. Spybot meldet "possible URL Spoofing (Cross Site)"
    Plagegeister aller Art und deren Bekämpfung - 17.06.2013 (8)
  15. 0.13268268941784256.exe , "Bundespolizei", keine Verschlüsselung bisher
    Log-Analyse und Auswertung - 04.07.2012 (6)
  16. Internet Langsam, bei Virustest Bluescreen kein Thread half bisher..
    Log-Analyse und Auswertung - 12.01.2009 (0)
  17. Umleitung auf die Site des "Windefender"
    Log-Analyse und Auswertung - 30.12.2008 (3)

Zum Thema "ads not from this site" NUR in Chrome - bisher half nix - Halo zusammen, ich hab das im Betreff genannte Problem. FireFox und IEx sind sauber. Ich hab - adwcleaner - malwarebytes anti Malware - WinOpimizer (Ashampoo) - PandaCloudCleaner - McAfee SecurityScanPlus - "ads not from this site" NUR in Chrome - bisher half nix...
Archiv
Du betrachtest: "ads not from this site" NUR in Chrome - bisher half nix auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.