| |
| |||||||
Log-Analyse und Auswertung: Windows 7 zeitweise keine Downloads möglich, Outlook verändertWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
08.02.2014, 20:48
| #1 |
| |  Windows 7 zeitweise keine Downloads möglich, Outlook verändert Guten Abend allerseits Auf dem Rechner meines Vaters haben sich diverse seltsame Dinge ereignet: Er hat sich u.a. Awesomehp (und wohl diverse andere wie Mobogenie, Internet Updater, DMUninstaller hab ich auf den ersten Blick gesehen) eingefangen, hatte Probleme mit Microsoft Outlook (Adressen & Mails sind nicht mehr vorhanden, oder Outlook startet nicht, eine Widerherstellung aus .pst Dateien ist nicht mehr möglich) und zeitweise kann er aus dem Internet nichts mehr downloaden oder Dateien öffnen. Die Herstellung einer Teamviewer Verbindung gestaltete sich als schwierig, war aber dann doch möglich. Betriebssystem: Windows 7 Bereits durchgeführt habe ich eine "Reinigung" des Systems mit CCleaner und ich habe FRST und ComboFix drüber laufen lassen. FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2014
Ran by Klaus-Admin (administrator) on HOMEPC on 08-02-2014 19:14:23
Running from C:\Users\Klaus-Admin\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Parallel Lines Development, LLC) C:\ProgramData\InternetUpdater\InternetUpdaterService.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Updater) C:\ProgramData\Updater\updater.exe
() D:\Tobit Radio.fx\Server\rfx-server.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe
(WatchDog) C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe
(WatchDog) C:\ProgramData\RHelpers\IeHelper\IeHelper.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(TeamViewer GmbH) C:\Users\Klaus-Admin\AppData\Local\Temp\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Users\Klaus-Admin\AppData\Local\Temp\TeamViewer\Version9\TeamViewer_Desktop.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-08] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-02-03] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [775872 2014-01-27] ()
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-1726798138-106132286-2484466448-1001\...\Run: [GarminExpressTrayApp] - C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1095000 2013-11-08] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-1726798138-106132286-2484466448-1001\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-03] (Samsung)
HKU\S-1-5-21-1726798138-106132286-2484466448-1001\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Klaus-Admin\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1726798138-106132286-2484466448-1003\...\Run: [NokiaSuite.exe] - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
HKU\S-1-5-21-1726798138-106132286-2484466448-1003\...\Run: [AdobeBridge] - [X]
HKU\S-1-5-21-1726798138-106132286-2484466448-1003\...\Run: [Hoolapp Android] - "C:\Users\KLAUS-~2\AppData\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized
HKU\S-1-5-21-1726798138-106132286-2484466448-1003\...\Run: [hsscp.EXE] - C:\Users\Klaus-Home\AppData\Roaming\Hotspot Shield\bin\hsscp.EXE -nonadmin
HKU\S-1-5-21-1726798138-106132286-2484466448-1003\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [486264 2013-12-18] (Updater)
HKU\S-1-5-21-1726798138-106132286-2484466448-1003\...\Run: [KiesPDLR.exe] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)
Startup: C:\Users\Klaus-Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x20656E4618DACC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {1d8566bd-f06f-4029-a3be-ba80af5a09f3} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {8BB08D60-753B-4001-9DD9-67FB8506EF3C} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=5B316BC7-A348-44D9-A512-F8D75F14EF6E&apn_sauid=46190A66-DA34-4BE3-9312-6732B794C2EC
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.76\npchrome_frame.dll (Google Inc.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {1D8566BD-F06F-4029-A3BE-BA80AF5A09F3} - No File
DPF: HKLM-x32 {B07F54E6-0806-47DB-B5D8-398F240776F2} file:///G:/viewer/ORDcmViewCD.ocx
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.76\npchrome_frame.dll (Google Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Klaus-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xjxe9shz.default-1391882703237
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-21]
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011-12-26]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-12-26]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-02-19]
FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Klaus-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvjkkdru.default\extensions\lightningnewtab@gmail.com.xpi
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-02-19]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com",
"hxxp://wisersearch.com/?channel=de"
CHR DefaultSearchProvider: "name" : "Mysearchdial"
CHR Extension: (Google Docs) - C:\Users\Klaus-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-27]
CHR Extension: (Google Drive) - C:\Users\Klaus-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-27]
CHR Extension: (YouTube) - C:\Users\Klaus-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-27]
CHR Extension: (Google Search) - C:\Users\Klaus-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-27]
CHR Extension: (Skype Click to Call) - C:\Users\Klaus-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-08-27]
CHR Extension: (Chrome In-App Payments service) - C:\Users\Klaus-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-27]
CHR Extension: (Gmail) - C:\Users\Klaus-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-27]
CHR HKLM-x32\...\Chrome\Extension: [ckjhoplcbnkhgnnahfbcdmganjhpcceg] - C:\Users\KLAUS-~1\AppData\Local\Temp\ccex.crx [2013-08-27]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-04-09]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-08] (AVAST Software)
R2 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250712 2013-11-08] (Garmin Ltd or its subsidiaries)
R2 InternetUpdater; C:\ProgramData\InternetUpdater\InternetUpdaterService.exe [45568 2014-01-15] (Parallel Lines Development, LLC)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 Radio.fx; D:\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()
==================== Drivers (Whitelisted) ====================
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-05] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-08] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-24] ()
R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] ()
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-08 19:14 - 2014-02-08 19:14 - 00021633 _____ () C:\Users\Klaus-Admin\Desktop\FRST.txt
2014-02-08 19:14 - 2014-02-08 19:14 - 00000000 ____D () C:\FRST
2014-02-08 19:12 - 2014-02-08 19:12 - 02079744 _____ (Farbar) C:\Users\Klaus-Admin\Desktop\FRST64.exe
2014-02-08 19:10 - 2014-02-08 19:10 - 01136640 _____ (Farbar) C:\Users\Klaus-Admin\Desktop\FRST.exe
2014-02-08 19:06 - 2014-02-08 19:06 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\TeamViewer
2014-02-08 19:05 - 2014-02-08 19:05 - 04391624 _____ (TeamViewer) C:\Users\Klaus-Admin\Downloads\TeamViewerQS_de-ckc.exe
2014-02-08 18:39 - 2014-02-08 18:39 - 00000000 ____D () C:\ProgramData\InternetUpdater
2014-02-08 17:42 - 2014-02-08 16:37 - 05853320 _____ (TeamViewer GmbH) C:\Users\Klaus-Home\Desktop\TeamViewer_Setup_de.exe
2014-02-08 17:40 - 2014-02-08 17:40 - 00000000 ____D () C:\Users\Klaus-Home\Desktop\Mozilla Firefox
2014-02-08 16:45 - 2014-02-08 18:47 - 00000000 ____D () C:\AdwCleaner
2014-02-08 16:43 - 2014-02-08 16:37 - 05853320 _____ (TeamViewer GmbH) C:\Users\Klaus-Admin\Desktop\TeamViewer_Setup_de.exe
2014-02-08 16:43 - 2014-02-08 16:35 - 01166132 _____ () C:\Users\Klaus-Admin\Desktop\adwcleaner-3.018.exe
2014-02-08 15:16 - 2006-10-27 15:16 - 00049976 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\MSMAPI32.DLL_0001_1031
2014-02-08 15:16 - 2006-10-27 09:42 - 00072192 _____ () C:\Users\Klaus-Admin\Documents\PROTTPLV.PPT_1031
2014-02-08 15:16 - 2006-10-27 09:42 - 00072192 _____ () C:\Users\Klaus-Admin\Documents\PROTTPLN.PPT_1031
2014-02-08 15:16 - 2006-10-27 09:42 - 00023040 _____ () C:\Users\Klaus-Admin\Documents\PROTTPLV.DOC_1031
2014-02-08 15:16 - 2006-10-27 09:42 - 00022528 _____ () C:\Users\Klaus-Admin\Documents\PROTTPLN.DOC_1031
2014-02-08 15:16 - 2006-10-27 09:42 - 00018432 _____ () C:\Users\Klaus-Admin\Documents\PROTTPLV.XLS_1031
2014-02-08 15:16 - 2006-10-27 09:42 - 00018432 _____ () C:\Users\Klaus-Admin\Documents\PROTTPLN.XLS_1031
2014-02-08 15:16 - 2006-10-27 03:31 - 00107832 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OMSINTL.DLL_1031
2014-02-08 15:16 - 2006-10-27 03:25 - 00047000 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\UMOUTLOOKSTRINGS.DLL_1031
2014-02-08 15:16 - 2006-10-27 03:22 - 00000551 _____ () C:\Users\Klaus-Admin\Documents\OMSSMS.CFG_1031
2014-02-08 15:16 - 2006-10-27 03:21 - 00000563 _____ () C:\Users\Klaus-Admin\Documents\OMSMMS.CFG_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00042304 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\LOCALDV.DLL_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00015216 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OLADDR.FAE_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00015184 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\TRANSMRR.DLL_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00014672 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OLR.SAM_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00014664 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\ACT3R.SAM_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00014168 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\ORG97R.SAM_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00013176 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OLAPPTR.FAE_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00012616 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\ODBCR.SAM_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00012136 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OLTASKR.FAE_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00012104 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\PABR.SAM_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00011624 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OLMAILR.FAE_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00011120 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OLJRNLR.FAE_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00011104 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\DELIMR.FAE_1031
2014-02-08 15:16 - 2006-10-27 03:19 - 00010600 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OLNOTER.FAE_1031
2014-02-08 15:16 - 2006-10-27 00:23 - 06052144 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OUTLLIBR.DLL_1031
2014-02-08 15:16 - 2006-10-27 00:23 - 01322792 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\MAPIR.DLL_1031
2014-02-08 15:16 - 2006-10-27 00:23 - 00281888 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\OUTLWVW.DLL_1031
2014-02-08 15:16 - 2006-10-27 00:23 - 00018768 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\ENVELOPR.DLL_1031
2014-02-08 15:16 - 2006-10-27 00:21 - 00000584 _____ () C:\Users\Klaus-Admin\Documents\SEAMARBL.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:21 - 00000564 _____ () C:\Users\Klaus-Admin\Documents\PINELUMB.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:21 - 00000549 _____ () C:\Users\Klaus-Admin\Documents\TECHTOOL.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:20 - 00000588 _____ () C:\Users\Klaus-Admin\Documents\JUNGLE.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:20 - 00000582 _____ () C:\Users\Klaus-Admin\Documents\JUDGESCH.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:20 - 00000568 _____ () C:\Users\Klaus-Admin\Documents\NOTEBOOK.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:20 - 00000558 _____ () C:\Users\Klaus-Admin\Documents\DADSHIRT.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:20 - 00000551 _____ () C:\Users\Klaus-Admin\Documents\PAWPRINT.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:20 - 00000544 _____ () C:\Users\Klaus-Admin\Documents\OFFISUPP.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:19 - 00005703 _____ () C:\Users\Klaus-Admin\Documents\OUTLPERF.INI_1031
2014-02-08 15:16 - 2006-10-27 00:19 - 00001939 _____ () C:\Users\Klaus-Admin\Documents\OUTEX.ECF_1031
2014-02-08 15:16 - 2006-10-27 00:19 - 00000875 _____ () C:\Users\Klaus-Admin\Documents\OUTEX2.ECF_1031
2014-02-08 15:16 - 2006-10-27 00:19 - 00000623 _____ () C:\Users\Klaus-Admin\Documents\CURRENCY.HTM_1031
2014-02-08 15:16 - 2006-10-27 00:17 - 00000842 _____ () C:\Users\Klaus-Admin\Documents\TASKUPD.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:17 - 00000832 _____ () C:\Users\Klaus-Admin\Documents\TASKDEC.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:17 - 00000831 _____ () C:\Users\Klaus-Admin\Documents\TASKREQ.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:17 - 00000831 _____ () C:\Users\Klaus-Admin\Documents\TASKACC.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:16 - 00000802 _____ () C:\Users\Klaus-Admin\Documents\TASK.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:16 - 00000703 _____ () C:\Users\Klaus-Admin\Documents\SMIMES.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:16 - 00000693 _____ () C:\Users\Klaus-Admin\Documents\SIGN.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:16 - 00000684 _____ () C:\Users\Klaus-Admin\Documents\SMIMEE.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:16 - 00000674 _____ () C:\Users\Klaus-Admin\Documents\SECURE.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:15 - 00001250 _____ () C:\Users\Klaus-Admin\Documents\SCHDREQ.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:15 - 00000877 _____ () C:\Users\Klaus-Admin\Documents\SCHDREST.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:15 - 00000860 _____ () C:\Users\Klaus-Admin\Documents\SCHDRESP.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:15 - 00000850 _____ () C:\Users\Klaus-Admin\Documents\SCHDRESN.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:15 - 00000697 _____ () C:\Users\Klaus-Admin\Documents\SECREC.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:14 - 00000871 _____ () C:\Users\Klaus-Admin\Documents\RESEND.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:14 - 00000857 _____ () C:\Users\Klaus-Admin\Documents\REPLTMPL.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:14 - 00000840 _____ () C:\Users\Klaus-Admin\Documents\SCHDCNCL.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:14 - 00000822 _____ () C:\Users\Klaus-Admin\Documents\REPORT.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:14 - 00000800 _____ () C:\Users\Klaus-Admin\Documents\REMOTE.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:13 - 00001320 _____ () C:\Users\Klaus-Admin\Documents\RECALL.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:13 - 00000883 _____ () C:\Users\Klaus-Admin\Documents\RCLRPT.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:13 - 00000849 _____ () C:\Users\Klaus-Admin\Documents\OOFTMPL.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:13 - 00000824 _____ () C:\Users\Klaus-Admin\Documents\POST.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:13 - 00000814 _____ () C:\Users\Klaus-Admin\Documents\NOTE.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:13 - 00000809 _____ () C:\Users\Klaus-Admin\Documents\POSTIT.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:12 - 00000874 _____ () C:\Users\Klaus-Admin\Documents\EXITEM.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:12 - 00000847 _____ () C:\Users\Klaus-Admin\Documents\IPM.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:12 - 00000844 _____ () C:\Users\Klaus-Admin\Documents\DISTLIST.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:12 - 00000812 _____ () C:\Users\Klaus-Admin\Documents\CONTACT.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:12 - 00000807 _____ () C:\Users\Klaus-Admin\Documents\DOC.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:11 - 00001018 _____ () C:\Users\Klaus-Admin\Documents\ACTIVITY.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:11 - 00000808 _____ () C:\Users\Klaus-Admin\Documents\APPT.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:11 - 00000637 _____ () C:\Users\Klaus-Admin\Documents\INFOMAIL.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:11 - 00000361 _____ () C:\Users\Klaus-Admin\Documents\CNFRES.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:11 - 00000342 _____ () C:\Users\Klaus-Admin\Documents\CNFNOT.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:10 - 00000819 _____ () C:\Users\Klaus-Admin\Documents\RSSITEM.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:10 - 00000784 _____ () C:\Users\Klaus-Admin\Documents\SHARING.CFG_1031
2014-02-08 15:16 - 2006-10-27 00:10 - 00000778 _____ () C:\Users\Klaus-Admin\Documents\MSSPC.ECF_1031
2014-02-08 15:16 - 2006-10-27 00:10 - 00000645 _____ () C:\Users\Klaus-Admin\Documents\PMAILEXT.ECF_1031
2014-02-08 15:16 - 2006-10-27 00:09 - 00002420 _____ () C:\Users\Klaus-Admin\Documents\OUTLBAR.INF_1031
2014-02-08 15:16 - 2006-10-27 00:09 - 00000834 _____ () C:\Users\Klaus-Admin\Documents\FAXEXT.ECF_1031
2014-02-08 15:16 - 2006-10-27 00:09 - 00000833 _____ () C:\Users\Klaus-Admin\Documents\DUMPSTER.ECF_1031
2014-02-08 15:16 - 2006-10-27 00:09 - 00000653 _____ () C:\Users\Klaus-Admin\Documents\DLGSETP.ECF_1031
2014-02-08 15:16 - 2006-10-26 23:07 - 01053480 _____ (Microsoft Corporation) C:\Users\Klaus-Admin\Documents\WWINTL.DLL_1031
2014-02-08 15:16 - 2006-10-20 08:52 - 06743442 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK.HXS_1031
2014-02-08 15:16 - 2006-10-13 12:13 - 05269274 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK.DEV.HXS_1031
2014-02-08 15:16 - 2006-09-20 03:03 - 00489748 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK.HOL_1031
2014-02-08 15:16 - 2006-09-12 18:39 - 00000781 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK.DEV_COL.HXC_1031
2014-02-08 15:16 - 2006-08-29 20:43 - 00000790 ____R () C:\Users\Klaus-Admin\Documents\VBE.DEV_COL.HXC_1031
2014-02-08 15:16 - 2006-08-29 10:45 - 00000114 ____R () C:\Users\Klaus-Admin\Documents\VBE.DEV_A_COL.HXK_1031
2014-02-08 15:16 - 2006-08-10 11:17 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\INFOMS.ICO_1031
2014-02-08 15:16 - 2006-08-10 11:15 - 00025214 ____R () C:\Users\Klaus-Admin\Documents\INFOML.ICO_1031
2014-02-08 15:16 - 2006-06-26 17:13 - 00095232 ____R () C:\Users\Klaus-Admin\Documents\OUTFORM.DAT_1031
2014-02-08 15:16 - 2006-06-23 15:51 - 00000289 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK.DEV_COL.HXT_1031
2014-02-08 15:16 - 2006-06-05 10:37 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\RSSITEMS.ICO_1031
2014-02-08 15:16 - 2006-06-05 10:37 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\RSSITEML.ICO_1031
2014-02-08 15:16 - 2006-06-05 10:35 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\CNFNOT.ICO_1031
2014-02-08 15:16 - 2006-06-02 02:52 - 00002238 ____R () C:\Users\Klaus-Admin\Documents\MMSS.ICO_1031
2014-02-08 15:16 - 2006-06-02 02:51 - 00002238 ____R () C:\Users\Klaus-Admin\Documents\SMSS.ICO_1031
2014-02-08 15:16 - 2006-05-25 08:30 - 00000207 ____R () C:\Users\Klaus-Admin\Documents\VBE.DEV_COL.HXT_1031
2014-02-08 15:16 - 2006-05-25 01:06 - 00010134 ____R () C:\Users\Klaus-Admin\Documents\MMSL.ICO_1031
2014-02-08 15:16 - 2006-04-24 00:57 - 00010134 ____R () C:\Users\Klaus-Admin\Documents\SMSL.ICO_1031
2014-02-08 15:16 - 2006-03-26 20:43 - 00000000 ____R () C:\Users\Klaus-Admin\Documents\VBAOL11.CHM_1031
2014-02-08 15:16 - 2006-03-26 19:47 - 00000000 ____R () C:\Users\Klaus-Admin\Documents\OLMAIN11.CHM_1031
2014-02-08 15:16 - 2006-03-26 19:42 - 00000000 ____R () C:\Users\Klaus-Admin\Documents\OLFM10.CHM_1031
2014-02-08 15:16 - 2006-01-11 12:32 - 00000631 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK_COL.HXC_1031
2014-02-08 15:16 - 2006-01-11 12:32 - 00000207 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK_COL.HXT_1031
2014-02-08 15:16 - 2005-12-16 03:58 - 02036900 ____R () C:\Users\Klaus-Admin\Documents\VBE.DEV.HXS_1031
2014-02-08 15:16 - 2005-12-12 14:26 - 00000114 ____R () C:\Users\Klaus-Admin\Documents\VBE.DEV_F_COL.HXK_1031
2014-02-08 15:16 - 2005-12-12 14:26 - 00000113 ____R () C:\Users\Klaus-Admin\Documents\VBE.DEV_K_COL.HXK_1031
2014-02-08 15:16 - 2005-09-27 03:16 - 00012288 ____R () C:\Users\Klaus-Admin\Documents\MAIL.OFT_1031
2014-02-08 15:16 - 2005-09-08 17:15 - 00000551 ____R () C:\Users\Klaus-Admin\Documents\OUTLPERF.H_1031
2014-02-08 15:16 - 2005-06-08 00:20 - 00000114 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK_F_COL.HXK_1031
2014-02-08 15:16 - 2005-06-08 00:20 - 00000114 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK.DEV_F_COL.HXK_1031
2014-02-08 15:16 - 2005-06-08 00:20 - 00000113 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK_K_COL.HXK_1031
2014-02-08 15:16 - 2005-06-08 00:20 - 00000113 ____R () C:\Users\Klaus-Admin\Documents\OUTLOOK.DEV_K_COL.HXK_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\TASKS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\TASKREQS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\TASKDECS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\TASKACCS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\SIGNS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\SECURS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\SECRECS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\SCDRESTS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\SCDRESPS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\SCDRESNS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\SCDREQS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\SCDCNCLS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\RESENDS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\REPORTS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\REMOTES.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\RECALLS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\POSTS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\POSTITS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\OOFS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\NOTES.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\IPMS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\EXITEMS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\DOCS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\DISTLSTS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\CONTACTS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\CONFLICT.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\APPTS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00002998 ____R () C:\Users\Klaus-Admin\Documents\ACTIVITS.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\TASKREQL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\TASKL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\TASKDECL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\TASKACCL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\SIGNL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\SECURL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\SECRECL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\SCDRESTL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\SCDRESPL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\SCDRESNL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\SCDREQL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\SCDCNCLL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\RESENDL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\REPORTL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\REMOTEL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\RECALLL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\POSTL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\POSTITL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\OOFL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\NOTEL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\IPML.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\EXITEML.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\DOCL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\DISTLSTL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\CONTACTL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\APPTL.ICO_1031
2014-02-08 15:16 - 2005-02-10 17:38 - 00001078 ____R () C:\Users\Klaus-Admin\Documents\ACTIVITL.ICO_1031
2014-02-08 15:16 - 2000-10-06 08:14 - 00002074 ____R () C:\Users\Klaus-Admin\Documents\TECHTOOL.GIF_1031
2014-02-08 15:16 - 1998-08-20 10:56 - 00006281 ____R () C:\Users\Klaus-Admin\Documents\SEAMARBL.JPG_1031
2014-02-08 15:16 - 1998-08-20 10:55 - 00005999 ____R () C:\Users\Klaus-Admin\Documents\CURRENCY.GIF_1031
2014-02-08 15:16 - 1998-08-20 10:55 - 00004610 ____R () C:\Users\Klaus-Admin\Documents\OFFISUPP.GIF_1031
2014-02-08 15:16 - 1998-08-20 10:55 - 00004039 ____R () C:\Users\Klaus-Admin\Documents\JUNGLE.GIF_1031
2014-02-08 15:16 - 1998-08-20 10:55 - 00003382 ____R () C:\Users\Klaus-Admin\Documents\JUDGESCH.GIF_1031
2014-02-08 15:16 - 1998-08-20 10:55 - 00002950 ____R () C:\Users\Klaus-Admin\Documents\NOTEBOOK.JPG_1031
2014-02-08 15:16 - 1998-08-20 10:55 - 00000046 ____R () C:\Users\Klaus-Admin\Documents\DADSHIRT.GIF_1031
2014-02-08 15:16 - 1998-07-14 14:15 - 00003981 ____R () C:\Users\Klaus-Admin\Documents\PINELUMB.JPG_1031
2014-02-08 15:16 - 1998-07-14 14:15 - 00001115 ____R () C:\Users\Klaus-Admin\Documents\PAWPRINT.GIF_1031
2014-02-08 14:28 - 2014-02-08 19:05 - 00000000 ____D () C:\Users\Klaus-Admin\Desktop\Alte Firefox-Daten
2014-02-07 00:33 - 2014-02-08 18:48 - 00001860 _____ () C:\Windows\error.log
2014-02-07 00:32 - 2014-02-08 18:48 - 00000952 _____ () C:\Windows\setupact.log
2014-02-07 00:32 - 2014-02-07 00:32 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-07 00:31 - 2014-02-08 18:47 - 00000420 _____ () C:\Windows\errord.log
2014-02-07 00:31 - 2014-02-08 16:42 - 00003074 _____ () C:\Windows\PFRO.log
2014-02-07 00:05 - 2014-02-07 00:05 - 00002777 _____ () C:\Users\Klaus-Admin\Desktop\Microsoft Office Outlook 2007 (2).lnk
2014-02-07 00:03 - 2014-02-07 00:03 - 00002703 _____ () C:\Users\Klaus-Home\Desktop\Microsoft Office Excel 2007 (2).lnk
2014-02-06 23:06 - 2014-02-06 23:06 - 00000000 ____D () C:\ProgramData\Websteroids
2014-02-06 23:01 - 2014-02-08 15:40 - 00000000 ____D () C:\ProgramData\WPM
2014-02-06 23:01 - 2014-02-08 15:34 - 00000000 ____D () C:\ProgramData\IePluginService
2014-02-06 22:58 - 2013-12-24 15:06 - 00873384 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2014-02-06 22:58 - 2013-12-24 15:06 - 00796072 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-02-06 22:58 - 2013-12-24 15:06 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-06 22:58 - 2013-12-24 15:06 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-06 22:58 - 2013-12-24 15:06 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-06 22:41 - 2014-02-06 22:41 - 00002777 _____ () C:\Users\Klaus-Home\Microsoft Office Outlook 2007 (2).lnk
2014-02-06 21:49 - 2014-02-06 21:49 - 04852608 _____ (Systweak Inc ) C:\Users\Klaus-Admin\Downloads\sysrc_trial_9407_german01.exe
2014-02-06 12:28 - 2014-02-06 12:28 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\cleanpc365
2014-02-06 00:49 - 2014-02-06 00:49 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\cleanpc365
2014-02-06 00:48 - 2014-02-06 00:49 - 00000000 ____D () C:\ProgramData\cleanpc365
2014-02-06 00:08 - 2014-02-06 00:08 - 00000000 ____D () C:\Users\Klaus-Admin\Documents\samsung
2014-02-06 00:08 - 2014-02-06 00:08 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\Samsung
2014-02-06 00:08 - 2014-02-06 00:08 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Local\Samsung
2014-02-06 00:05 - 2014-02-06 00:05 - 22721768 _____ (Chelsea Marketing) C:\Users\Klaus-Admin\Downloads\CLEANPC365_1.12.0Full.exe
2014-02-06 00:02 - 2014-02-06 00:03 - 75201304 _____ (Samsung Electronics Co., Ltd.) C:\Users\Klaus-Admin\Downloads\KiesSetup.exe
2014-02-05 22:51 - 2014-02-05 22:51 - 04319824 _____ () C:\Users\Klaus-Home\Downloads\oclassic.exe
2014-02-05 22:44 - 2014-02-05 22:44 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\Funambol
2014-02-05 22:44 - 2014-02-05 22:44 - 00000000 ____D () C:\Program Files (x86)\simyo
2014-02-05 22:39 - 2014-02-05 22:46 - 295861936 _____ (Microsoft Corporation) C:\Users\Klaus-Home\Downloads\X16-32587.exe
2014-02-05 22:39 - 2014-02-05 22:39 - 04852608 _____ (Systweak Inc ) C:\Users\Klaus-Home\Downloads\sysrc_trial_9407_german01.exe
2014-02-04 23:35 - 2014-02-04 23:43 - 00000139 _____ () C:\Windows\Crypkey.ini
2014-02-04 23:35 - 2008-05-08 00:29 - 00122880 _____ (CrypKey (Canada) Ltd.) C:\Windows\system32\Crypserv.exe
2014-02-04 23:35 - 2008-03-17 18:12 - 00028664 _____ () C:\Windows\system32\Ckldrv.sys
2014-02-04 23:35 - 1999-06-18 21:49 - 00165888 _____ (Kenonic Controls) C:\Windows\Ckconfig.exe
2014-02-04 23:35 - 1996-05-03 17:21 - 00027648 ____R () C:\Windows\Setup_ck.exe
2014-02-04 23:35 - 1996-05-03 15:36 - 00018432 _____ () C:\Windows\Setup_ck.dll
2014-02-04 23:35 - 1995-07-04 18:33 - 00011776 _____ () C:\Windows\Ckrfresh.exe
2014-02-04 21:02 - 2014-02-04 21:02 - 00000000 ____D () C:\ProgramData\CrypKey
2014-02-04 20:47 - 2014-02-04 22:02 - 00000000 ____D () C:\Users\Klaus-Admin\Outlook Recovered
2014-02-04 20:36 - 2014-02-04 22:33 - 00000000 ____D () C:\Program Files\PST Scanner
2014-02-03 00:29 - 2014-02-03 00:32 - 00104352 _____ () C:\Users\Klaus-Home\Documents\Tölzer Knabenchor CGN3.aup
2014-02-02 14:33 - 2014-02-02 14:33 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\com.adobe.amp
2014-02-02 14:19 - 2014-02-05 22:45 - 00000592 _____ () C:\Users\Public\Desktop\WAV To MP3.lnk
2014-02-02 14:19 - 2014-02-05 22:45 - 00000000 ____D () C:\WAV To MP3
2014-02-02 14:19 - 2014-02-02 14:19 - 00000000 ____D () C:\output
2014-02-02 14:17 - 2014-02-02 14:17 - 03432683 _____ (WAV To MP3 ) C:\Users\Klaus-Home\Downloads\wav2mp3v21.exe
2014-01-31 21:48 - 2014-02-01 00:48 - 00180338 _____ () C:\Users\Klaus-Home\Documents\Tölzer Knabenchor Köln.aup
2014-01-28 22:37 - 2014-01-28 22:37 - 03542076 _____ () C:\Users\Klaus-Home\Downloads\outlook-sync-client.exe
2014-01-25 20:56 - 2014-01-25 20:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-01-24 22:38 - 2014-01-24 22:38 - 00097814 _____ () C:\Users\Klaus-Home\Documents\Weihnachten 1981.wav.aup
2014-01-24 22:29 - 2014-02-03 13:01 - 00000000 ____D () C:\Users\Klaus-Home\Documents\Weihnachten 1981_data
2014-01-24 22:29 - 2014-01-24 23:36 - 00097810 _____ () C:\Users\Klaus-Home\Documents\Weihnachten 1981.aup
2014-01-24 20:29 - 2014-01-24 20:48 - 00098073 _____ () C:\Users\Klaus-Home\Documents\Weihnachten 1978.wav.aup
2014-01-24 17:42 - 2014-01-24 17:42 - 00001007 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-01-24 17:42 - 2014-01-24 17:42 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\Audacity
2014-01-24 17:41 - 2014-01-24 17:42 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-01-24 17:24 - 2014-02-06 22:08 - 00000000 ____D () C:\ProgramData\Updater
2014-01-24 17:24 - 2014-01-24 17:24 - 00000000 ____D () C:\ProgramData\RHelpers
2014-01-24 17:23 - 2014-02-04 22:33 - 00000000 ____D () C:\Users\Klaus-Home\Downloads\Audacity_TSV42M821
2014-01-24 16:59 - 2014-01-24 16:59 - 00002494 _____ () C:\Users\Klaus-Home\Documents\nix.aup
2014-01-24 16:59 - 2014-01-24 16:59 - 00000000 ____D () C:\Users\Klaus-Home\Documents\nix_data
2014-01-24 16:16 - 2014-01-24 16:16 - 00000000 ____D () C:\Users\Klaus-Home\Downloads\Wanderungen um Aschau
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-24 13:10 - 2014-02-04 22:33 - 00000000 ____D () C:\Users\Klaus-Home\Downloads\AdobeCameraRaw-6.7.1-mul-AdobeUpdate
2014-01-23 13:41 - 2014-02-06 23:00 - 00001337 _____ () C:\Users\Klaus-Admin\Desktop\Mozilla Firefox.lnk
2014-01-23 13:41 - 2014-01-23 13:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-23 13:40 - 2014-01-23 13:40 - 00283096 _____ (Mozilla) C:\Users\Klaus-Admin\Downloads\Firefox Setup Stub 26.0.exe
2014-01-23 13:27 - 2014-01-23 13:27 - 00893523 _____ () C:\Users\Klaus-Home\Downloads\adblockplus-2.4.1.xpi.zip
2014-01-22 08:52 - 2014-01-22 08:52 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2014-01-22 08:52 - 2014-01-22 08:52 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-01-21 13:35 - 2014-01-21 13:35 - 00001019 _____ () C:\Users\Klaus-Admin\Desktop\Mobogenie.lnk
2014-01-21 13:35 - 2014-01-21 13:35 - 00000000 ____D () C:\Users\Klaus-Admin\Documents\Mobogenie
2014-01-20 14:19 - 2014-01-20 14:19 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\IsolatedStorage
2014-01-20 14:09 - 2014-01-20 14:09 - 00000060 _____ () C:\Users\Klaus-Admin\AppData\Roaming\WB.CFG
2014-01-20 13:09 - 2014-01-20 13:09 - 22240760 _____ (Mozilla) C:\Users\Klaus-Admin\Downloads\Firefox [1].exe
2014-01-20 13:09 - 2014-01-20 13:09 - 00366611 _____ () C:\Users\Klaus-Admin\AppData\Local\mysearchdial-speeddial.crx
2014-01-17 22:50 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-17 22:50 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-17 22:50 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-17 22:50 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-17 22:50 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-17 22:50 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-17 22:50 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-17 22:50 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-17 22:50 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
==================== One Month Modified Files and Folders =======
2014-02-08 19:14 - 2014-02-08 19:14 - 00021633 _____ () C:\Users\Klaus-Admin\Desktop\FRST.txt
2014-02-08 19:14 - 2014-02-08 19:14 - 00000000 ____D () C:\FRST
2014-02-08 19:12 - 2014-02-08 19:12 - 02079744 _____ (Farbar) C:\Users\Klaus-Admin\Desktop\FRST64.exe
2014-02-08 19:10 - 2014-02-08 19:10 - 01136640 _____ (Farbar) C:\Users\Klaus-Admin\Desktop\FRST.exe
2014-02-08 19:06 - 2014-02-08 19:06 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\TeamViewer
2014-02-08 19:05 - 2014-02-08 19:05 - 04391624 _____ (TeamViewer) C:\Users\Klaus-Admin\Downloads\TeamViewerQS_de-ckc.exe
2014-02-08 19:05 - 2014-02-08 14:28 - 00000000 ____D () C:\Users\Klaus-Admin\Desktop\Alte Firefox-Daten
2014-02-08 19:04 - 2013-12-29 00:21 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\newnext.me
2014-02-08 19:04 - 2013-07-15 13:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-08 18:55 - 2009-07-14 05:45 - 00014912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-08 18:55 - 2009-07-14 05:45 - 00014912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-08 18:52 - 2011-12-26 14:41 - 02067505 _____ () C:\Windows\WindowsUpdate.log
2014-02-08 18:48 - 2014-02-07 00:33 - 00001860 _____ () C:\Windows\error.log
2014-02-08 18:48 - 2014-02-07 00:32 - 00000952 _____ () C:\Windows\setupact.log
2014-02-08 18:48 - 2011-12-26 16:32 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-08 18:48 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-08 18:47 - 2014-02-08 16:45 - 00000000 ____D () C:\AdwCleaner
2014-02-08 18:47 - 2014-02-07 00:31 - 00000420 _____ () C:\Windows\errord.log
2014-02-08 18:39 - 2014-02-08 18:39 - 00000000 ____D () C:\ProgramData\InternetUpdater
2014-02-08 18:37 - 2012-07-04 00:05 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-08 18:35 - 2013-12-24 12:43 - 00001970 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-08 18:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-08 18:34 - 2013-12-24 12:43 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-02-08 18:34 - 2011-12-26 17:24 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-08 18:34 - 2011-12-26 17:24 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-08 18:34 - 2011-12-26 17:24 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-08 18:34 - 2011-12-26 17:24 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-08 18:34 - 2011-12-26 14:45 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-08 18:17 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-08 17:48 - 2012-04-10 23:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-08 17:44 - 2009-07-14 18:58 - 00654150 _____ () C:\Windows\system32\perfh007.dat
2014-02-08 17:44 - 2009-07-14 18:58 - 00130022 _____ () C:\Windows\system32\perfc007.dat
2014-02-08 17:44 - 2009-07-14 06:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-08 17:41 - 2013-07-15 13:07 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-08 17:40 - 2014-02-08 17:40 - 00000000 ____D () C:\Users\Klaus-Home\Desktop\Mozilla Firefox
2014-02-08 16:46 - 2013-06-12 11:35 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\Common
2014-02-08 16:42 - 2014-02-07 00:31 - 00003074 _____ () C:\Windows\PFRO.log
2014-02-08 16:37 - 2014-02-08 17:42 - 05853320 _____ (TeamViewer GmbH) C:\Users\Klaus-Home\Desktop\TeamViewer_Setup_de.exe
2014-02-08 16:37 - 2014-02-08 16:43 - 05853320 _____ (TeamViewer GmbH) C:\Users\Klaus-Admin\Desktop\TeamViewer_Setup_de.exe
2014-02-08 16:35 - 2014-02-08 16:43 - 01166132 _____ () C:\Users\Klaus-Admin\Desktop\adwcleaner-3.018.exe
2014-02-08 15:40 - 2014-02-06 23:01 - 00000000 ____D () C:\ProgramData\WPM
2014-02-08 15:34 - 2014-02-06 23:01 - 00000000 ____D () C:\ProgramData\IePluginService
2014-02-08 15:34 - 2011-12-26 14:42 - 00000000 ___RD () C:\Users\Klaus-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-08 12:22 - 2012-01-11 18:11 - 00000136 _____ () C:\Users\Klaus-Home\AppData\Roaming\default.rss
2014-02-08 12:20 - 2011-12-26 18:41 - 00000000 ____D () C:\Users\Klaus-Home
2014-02-08 01:45 - 2011-12-26 17:49 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\Adobe
2014-02-07 00:52 - 2011-12-26 16:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-02-07 00:41 - 2011-12-26 16:06 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-07 00:32 - 2014-02-07 00:32 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-07 00:07 - 2011-12-26 14:42 - 00001559 _____ () C:\Users\Klaus-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-07 00:05 - 2014-02-07 00:05 - 00002777 _____ () C:\Users\Klaus-Admin\Desktop\Microsoft Office Outlook 2007 (2).lnk
2014-02-07 00:03 - 2014-02-07 00:03 - 00002703 _____ () C:\Users\Klaus-Home\Desktop\Microsoft Office Excel 2007 (2).lnk
2014-02-06 23:58 - 2011-12-26 16:05 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-06 23:06 - 2014-02-06 23:06 - 00000000 ____D () C:\ProgramData\Websteroids
2014-02-06 23:00 - 2014-01-23 13:41 - 00001337 _____ () C:\Users\Klaus-Admin\Desktop\Mozilla Firefox.lnk
2014-02-06 22:57 - 2012-03-03 22:09 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-06 22:41 - 2014-02-06 22:41 - 00002777 _____ () C:\Users\Klaus-Home\Microsoft Office Outlook 2007 (2).lnk
2014-02-06 22:08 - 2014-01-24 17:24 - 00000000 ____D () C:\ProgramData\Updater
2014-02-06 21:49 - 2014-02-06 21:49 - 04852608 _____ (Systweak Inc ) C:\Users\Klaus-Admin\Downloads\sysrc_trial_9407_german01.exe
2014-02-06 12:28 - 2014-02-06 12:28 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\cleanpc365
2014-02-06 00:49 - 2014-02-06 00:49 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\cleanpc365
2014-02-06 00:49 - 2014-02-06 00:48 - 00000000 ____D () C:\ProgramData\cleanpc365
2014-02-06 00:17 - 2013-12-29 00:21 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Local\Mobogenie
2014-02-06 00:11 - 2013-12-25 12:37 - 00002002 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-02-06 00:08 - 2014-02-06 00:08 - 00000000 ____D () C:\Users\Klaus-Admin\Documents\samsung
2014-02-06 00:08 - 2014-02-06 00:08 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\Samsung
2014-02-06 00:08 - 2014-02-06 00:08 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Local\Samsung
2014-02-06 00:05 - 2014-02-06 00:05 - 22721768 _____ (Chelsea Marketing) C:\Users\Klaus-Admin\Downloads\CLEANPC365_1.12.0Full.exe
2014-02-06 00:03 - 2014-02-06 00:02 - 75201304 _____ (Samsung Electronics Co., Ltd.) C:\Users\Klaus-Admin\Downloads\KiesSetup.exe
2014-02-05 22:51 - 2014-02-05 22:51 - 04319824 _____ () C:\Users\Klaus-Home\Downloads\oclassic.exe
2014-02-05 22:46 - 2014-02-05 22:39 - 295861936 _____ (Microsoft Corporation) C:\Users\Klaus-Home\Downloads\X16-32587.exe
2014-02-05 22:45 - 2014-02-02 14:19 - 00000592 _____ () C:\Users\Public\Desktop\WAV To MP3.lnk
2014-02-05 22:45 - 2014-02-02 14:19 - 00000000 ____D () C:\WAV To MP3
2014-02-05 22:44 - 2014-02-05 22:44 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\Funambol
2014-02-05 22:44 - 2014-02-05 22:44 - 00000000 ____D () C:\Program Files (x86)\simyo
2014-02-05 22:39 - 2014-02-05 22:39 - 04852608 _____ (Systweak Inc ) C:\Users\Klaus-Home\Downloads\sysrc_trial_9407_german01.exe
2014-02-05 18:27 - 2012-10-23 21:18 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\WinRAR
2014-02-05 00:48 - 2012-04-10 23:23 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 00:48 - 2012-04-10 23:23 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 00:48 - 2012-01-17 11:23 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 00:38 - 2012-01-21 01:40 - 00000000 ____D () C:\Users\Klaus-Home\Zip Uncompressor
2014-02-05 00:22 - 2012-04-09 22:29 - 00002679 _____ () C:\Users\Klaus-Home\Desktop\Microsoft Office Word 2007 (2).lnk
2014-02-05 00:22 - 2012-04-09 22:28 - 00002685 _____ () C:\Users\Klaus-Home\Desktop\Microsoft Office Excel 2007.lnk
2014-02-05 00:22 - 2011-12-26 17:23 - 00002777 _____ () C:\Users\Klaus-Home\Desktop\Microsoft Office Outlook 2007.lnk
2014-02-05 00:22 - 2011-12-26 17:23 - 00002685 _____ () C:\Users\Klaus-Admin\Desktop\Microsoft Office Excel 2007.lnk
2014-02-05 00:22 - 2011-12-26 17:23 - 00002679 _____ () C:\Users\Klaus-Admin\Desktop\Microsoft Office Word 2007.lnk
2014-02-04 23:43 - 2014-02-04 23:35 - 00000139 _____ () C:\Windows\Crypkey.ini
2014-02-04 22:33 - 2014-02-04 20:36 - 00000000 ____D () C:\Program Files\PST Scanner
2014-02-04 22:33 - 2014-01-24 17:23 - 00000000 ____D () C:\Users\Klaus-Home\Downloads\Audacity_TSV42M821
2014-02-04 22:33 - 2014-01-24 13:10 - 00000000 ____D () C:\Users\Klaus-Home\Downloads\AdobeCameraRaw-6.7.1-mul-AdobeUpdate
2014-02-04 22:33 - 2013-08-20 21:12 - 00000000 ____D () C:\Users\Gast
2014-02-04 22:33 - 2013-08-16 21:52 - 00000000 ____D () C:\Users\Klaus-Home\Downloads\Berchtesgadener und Chiemgauer Wanderberge 50 Touren zwischen Inn und Salzach - Sepp Brandl - Google Books-Dateien
2014-02-04 22:33 - 2012-02-01 16:53 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-02-04 22:33 - 2011-12-26 14:41 - 00000000 ____D () C:\Users\Klaus-Admin
2014-02-04 22:33 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-04 22:02 - 2014-02-04 20:47 - 00000000 ____D () C:\Users\Klaus-Admin\Outlook Recovered
2014-02-04 21:02 - 2014-02-04 21:02 - 00000000 ____D () C:\ProgramData\CrypKey
2014-02-03 23:05 - 2012-11-25 17:57 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\FreeBurner
2014-02-03 13:01 - 2014-01-24 22:29 - 00000000 ____D () C:\Users\Klaus-Home\Documents\Weihnachten 1981_data
2014-02-03 12:51 - 2012-10-23 00:06 - 00000000 ____D () C:\Users\Klaus-Home\dwhelper
2014-02-03 00:43 - 2011-12-26 19:51 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\Audacity
2014-02-03 00:32 - 2014-02-03 00:29 - 00104352 _____ () C:\Users\Klaus-Home\Documents\Tölzer Knabenchor CGN3.aup
2014-02-02 21:04 - 2013-12-29 00:20 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-02-02 15:21 - 2013-02-04 21:25 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\vlc
2014-02-02 14:33 - 2014-02-02 14:33 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\com.adobe.amp
2014-02-02 14:19 - 2014-02-02 14:19 - 00000000 ____D () C:\output
2014-02-02 14:17 - 2014-02-02 14:17 - 03432683 _____ (WAV To MP3 ) C:\Users\Klaus-Home\Downloads\wav2mp3v21.exe
2014-02-02 00:40 - 2012-10-22 00:49 - 00000460 ____H () C:\Windows\Tasks\Norton Security Scan for Klaus-Admin.job
2014-02-01 18:00 - 2013-07-27 17:15 - 00000149 _____ () C:\Users\Klaus-Home\AppData\Roaming\WB.CFG
2014-02-01 00:48 - 2014-01-31 21:48 - 00180338 _____ () C:\Users\Klaus-Home\Documents\Tölzer Knabenchor Köln.aup
2014-01-31 17:41 - 2013-06-26 21:45 - 00000000 ____D () C:\ProgramData\tmp
2014-01-28 22:37 - 2014-01-28 22:37 - 03542076 _____ () C:\Users\Klaus-Home\Downloads\outlook-sync-client.exe
2014-01-28 22:03 - 2013-12-29 00:21 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Local\cache
2014-01-27 23:51 - 2012-03-15 22:38 - 00061952 _____ () C:\Users\Klaus-Home\Desktop\Anschriften gesamt und Notfall.xls
2014-01-27 21:20 - 2013-12-25 12:33 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-01-27 18:31 - 2013-12-29 00:21 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Local\genienext
2014-01-27 18:00 - 2013-06-19 17:00 - 00000005 _____ () C:\Users\Klaus-Home\AppData\Roaming\WBPU-TTL.DAT
2014-01-25 20:56 - 2014-01-25 20:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-01-24 23:36 - 2014-01-24 22:29 - 00097810 _____ () C:\Users\Klaus-Home\Documents\Weihnachten 1981.aup
2014-01-24 22:38 - 2014-01-24 22:38 - 00097814 _____ () C:\Users\Klaus-Home\Documents\Weihnachten 1981.wav.aup
2014-01-24 20:48 - 2014-01-24 20:29 - 00098073 _____ () C:\Users\Klaus-Home\Documents\Weihnachten 1978.wav.aup
2014-01-24 17:42 - 2014-01-24 17:42 - 00001007 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-01-24 17:42 - 2014-01-24 17:42 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\Audacity
2014-01-24 17:42 - 2014-01-24 17:41 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-01-24 17:24 - 2014-01-24 17:24 - 00000000 ____D () C:\ProgramData\RHelpers
2014-01-24 17:15 - 2012-08-06 22:58 - 00000000 ____D () C:\Users\Klaus-Home\Documents\DVDVideoSoft
2014-01-24 17:15 - 2012-08-06 22:54 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\DVDVideoSoft
2014-01-24 17:04 - 2013-04-17 17:59 - 00000000 ____D () C:\Program Files\WinRAR
2014-01-24 16:59 - 2014-01-24 16:59 - 00002494 _____ () C:\Users\Klaus-Home\Documents\nix.aup
2014-01-24 16:59 - 2014-01-24 16:59 - 00000000 ____D () C:\Users\Klaus-Home\Documents\nix_data
2014-01-24 16:16 - 2014-01-24 16:16 - 00000000 ____D () C:\Users\Klaus-Home\Downloads\Wanderungen um Aschau
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-23 14:42 - 2012-08-19 23:29 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Local\Unity
2014-01-23 13:41 - 2014-01-23 13:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-23 13:41 - 2013-12-21 12:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-23 13:40 - 2014-01-23 13:40 - 00283096 _____ (Mozilla) C:\Users\Klaus-Admin\Downloads\Firefox Setup Stub 26.0.exe
2014-01-23 13:27 - 2014-01-23 13:27 - 00893523 _____ () C:\Users\Klaus-Home\Downloads\adblockplus-2.4.1.xpi.zip
2014-01-23 12:15 - 2013-12-13 22:16 - 00004096 ____H () C:\Users\Klaus-Home\AppData\Local\keyfile3.drm
2014-01-23 00:01 - 2012-01-10 00:22 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Roaming\Skype
2014-01-22 23:39 - 2013-04-07 16:56 - 00000000 ____D () C:\Users\Klaus-Home\Documents\Amazon Music Importer
2014-01-22 23:29 - 2012-02-13 14:30 - 00000000 ____D () C:\Users\Klaus-Home\Documents\2012 Korrespondenz
2014-01-22 21:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-22 17:05 - 2012-11-20 15:40 - 00000000 ____D () C:\ProgramData\hps
2014-01-22 08:52 - 2014-01-22 08:52 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2014-01-22 08:52 - 2014-01-22 08:52 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-01-21 13:36 - 2013-12-29 00:21 - 00001436 _____ () C:\Users\Klaus-Admin\daemonprocess.txt
2014-01-21 13:35 - 2014-01-21 13:35 - 00001019 _____ () C:\Users\Klaus-Admin\Desktop\Mobogenie.lnk
2014-01-21 13:35 - 2014-01-21 13:35 - 00000000 ____D () C:\Users\Klaus-Admin\Documents\Mobogenie
2014-01-21 13:35 - 2013-12-29 00:20 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
2014-01-20 14:21 - 2011-12-26 14:33 - 00000000 ____D () C:\Windows\Panther
2014-01-20 14:19 - 2014-01-20 14:19 - 00000000 ____D () C:\Users\Klaus-Admin\AppData\Roaming\IsolatedStorage
2014-01-20 14:09 - 2014-01-20 14:09 - 00000060 _____ () C:\Users\Klaus-Admin\AppData\Roaming\WB.CFG
2014-01-20 13:09 - 2014-01-20 13:09 - 22240760 _____ (Mozilla) C:\Users\Klaus-Admin\Downloads\Firefox [1].exe
2014-01-20 13:09 - 2014-01-20 13:09 - 00366611 _____ () C:\Users\Klaus-Admin\AppData\Local\mysearchdial-speeddial.crx
2014-01-18 13:09 - 2013-12-30 23:17 - 00000000 ____D () C:\Users\Klaus-Home\AppData\Local\Mobogenie
2014-01-18 13:02 - 2013-03-27 17:42 - 04998760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-18 01:48 - 2013-08-14 15:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-18 01:40 - 2011-12-27 00:04 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-18 00:43 - 2013-12-29 00:35 - 00012057 _____ () C:\Users\Klaus-Home\daemonprocess.txt
2014-01-17 22:44 - 2011-12-27 10:08 - 00000000 ____D () C:\Program Files (x86)\Google
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.2528.dll
Some content of TEMP:
====================
C:\Users\Klaus-Admin\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-29 09:54
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Combofix Logfile: Code:
ATTFilter ComboFix 14-02-05.02 - Klaus-Admin 08.02.2014 20:09:36.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.4095.2287 [GMT 1:00]
ausgeführt von:: c:\users\Klaus-Admin\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Klaus-Admin\AppData\Local\omesuperv.exe
c:\users\Public\AlexaNSISPlugin.2528.dll
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-01-08 bis 2014-02-08 ))))))))))))))))))))))))))))))
.
.
2014-02-08 19:18 . 2014-02-08 19:18 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-02-08 18:54 . 2014-02-08 18:54 -------- d-----w- c:\users\Klaus-Admin\AppData\Local\Max Secure Software
2014-02-08 18:50 . 2014-02-08 18:52 -------- d-----w- c:\users\Klaus-Admin\AppData\Roaming\GetRightToGo
2014-02-08 18:14 . 2014-02-08 18:15 -------- d-----w- C:\FRST
2014-02-08 18:06 . 2014-02-08 18:06 -------- d-----w- c:\users\Klaus-Admin\AppData\Roaming\TeamViewer
2014-02-08 17:39 . 2014-02-08 17:39 -------- d-----w- c:\programdata\InternetUpdater
2014-02-08 15:45 . 2014-02-08 18:23 -------- d-----w- C:\AdwCleaner
2014-02-08 14:14 . 2014-02-08 14:14 -------- d-----w- c:\program files (x86)\Outlook.de-de
2014-02-07 11:07 . 2014-02-08 19:01 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{52515C4E-2F20-450E-AC3F-2A218A3C60DB}\offreg.dll
2014-02-07 11:00 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{52515C4E-2F20-450E-AC3F-2A218A3C60DB}\mpengine.dll
2014-02-06 22:06 . 2014-02-06 22:06 -------- d-----w- c:\programdata\Websteroids
2014-02-06 22:03 . 2014-02-06 22:03 -------- d-----w- c:\program files\Uninstaller
2014-02-06 22:01 . 2014-02-08 14:34 -------- d-----w- c:\programdata\IePluginService
2014-02-06 22:01 . 2014-02-08 14:40 -------- d-----w- c:\programdata\WPM
2014-02-06 21:58 . 2013-12-24 14:06 873384 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2014-02-06 21:58 . 2013-12-24 14:06 796072 ----a-w- c:\windows\SysWow64\deployJava1.dll
2014-02-06 11:28 . 2014-02-06 11:28 -------- d-----w- c:\users\Klaus-Home\AppData\Roaming\cleanpc365
2014-02-05 23:49 . 2014-02-05 23:49 -------- d-----w- c:\users\Klaus-Admin\AppData\Roaming\cleanpc365
2014-02-05 23:48 . 2014-02-05 23:49 -------- d-----w- c:\programdata\cleanpc365
2014-02-05 23:08 . 2014-02-05 23:08 -------- d-----w- c:\users\Klaus-Admin\AppData\Local\Samsung
2014-02-05 23:08 . 2014-02-05 23:08 -------- d-----w- c:\users\Klaus-Admin\AppData\Roaming\Samsung
2014-02-05 21:44 . 2014-02-05 21:44 -------- d-----w- c:\users\Klaus-Home\AppData\Roaming\Funambol
2014-02-05 21:44 . 2014-02-05 21:44 -------- d-----w- c:\program files (x86)\simyo
2014-02-04 22:35 . 2008-05-07 23:29 122880 ----a-w- c:\windows\system32\Crypserv.exe
2014-02-04 22:35 . 2008-03-17 17:12 28664 ----a-w- c:\windows\system32\Ckldrv.sys
2014-02-04 22:35 . 1999-06-18 20:49 165888 ----a-w- c:\windows\Ckconfig.exe
2014-02-04 22:35 . 1996-05-03 16:21 27648 ----a-r- c:\windows\Setup_ck.exe
2014-02-04 22:35 . 1996-05-03 14:36 18432 ----a-w- c:\windows\Setup_ck.dll
2014-02-04 22:35 . 1995-07-04 17:33 11776 ----a-w- c:\windows\Ckrfresh.exe
2014-02-04 20:02 . 2014-02-04 20:02 -------- d-----w- c:\programdata\CrypKey
2014-02-04 19:47 . 2014-02-04 21:02 -------- d-----w- c:\users\Klaus-Admin\Outlook Recovered
2014-02-04 19:36 . 2014-02-04 21:33 -------- d-----w- c:\program files\PST Scanner
2014-02-02 13:33 . 2014-02-02 13:33 -------- d-----w- c:\users\Klaus-Home\AppData\Roaming\com.adobe.amp
2014-02-02 13:19 . 2014-02-02 13:19 -------- d-----w- C:\output
2014-02-02 13:19 . 2014-02-05 21:45 -------- d-----w- C:\WAV To MP3
2014-01-24 16:42 . 2014-01-24 16:42 -------- d-----w- c:\users\Klaus-Admin\AppData\Roaming\Audacity
2014-01-24 16:41 . 2014-01-24 16:42 -------- d-----w- c:\program files (x86)\Audacity
2014-01-24 16:24 . 2014-02-06 21:08 -------- d-----w- c:\programdata\Updater
2014-01-24 16:24 . 2014-01-24 16:24 -------- d-----w- c:\programdata\RHelpers
2014-01-22 07:52 . 2014-01-22 07:52 708168 ----a-w- c:\windows\system32\WinUSBCoInstaller.dll
2014-01-22 07:52 . 2014-01-22 07:52 1490656 ----a-w- c:\windows\system32\WdfCoInstaller01007.dll
2014-01-22 07:52 . 2014-01-22 07:52 206080 ----a-w- c:\windows\system32\drivers\ssudmdm.sys
2014-01-22 07:52 . 2014-01-22 07:52 108800 ----a-w- c:\windows\system32\drivers\ssudbus.sys
2014-01-20 13:19 . 2014-01-20 13:19 -------- d-----w- c:\users\Klaus-Admin\AppData\Roaming\IsolatedStorage
2014-01-17 21:50 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-01-17 21:50 . 2013-11-27 01:41 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-01-17 21:50 . 2013-11-27 01:41 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-01-17 21:50 . 2013-11-27 01:41 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-01-17 21:50 . 2013-11-27 01:41 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-01-17 21:50 . 2013-11-27 01:41 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-01-17 21:50 . 2013-11-27 01:41 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-01-17 21:50 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-01-17 21:50 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-08 17:34 . 2013-12-24 11:43 80184 ----a-w- c:\windows\system32\drivers\aswstm.sys
2014-02-08 17:34 . 2011-12-26 16:24 421704 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-02-08 17:34 . 2011-12-26 16:24 1038072 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-02-08 17:34 . 2011-12-26 16:24 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-02-08 17:34 . 2011-12-26 13:45 334136 ----a-w- c:\windows\system32\aswBoot.exe
2014-02-08 17:34 . 2011-12-26 16:24 43152 ----a-w- c:\windows\avastSS.scr
2014-02-04 23:48 . 2012-04-10 22:23 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-04 23:48 . 2012-01-17 10:23 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-18 00:40 . 2011-12-26 23:04 86054176 ----a-w- c:\windows\system32\MRT.exe
2013-12-24 14:06 . 2013-09-19 10:43 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-12-24 11:43 . 2013-03-15 11:28 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-12-18 05:13 . 2011-12-27 08:50 270496 ------w- c:\windows\system32\MpSigStub.exe
2013-12-05 23:37 . 2013-12-05 23:37 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-05 23:37 . 2013-12-05 23:37 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-12-05 23:37 . 2013-12-05 23:37 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-12-05 23:37 . 2013-12-05 23:37 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-12-05 23:37 . 2013-12-05 23:37 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-12-05 23:37 . 2013-12-05 23:37 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-12-05 23:37 . 2013-12-05 23:37 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-12-05 23:37 . 2013-12-05 23:37 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-12-05 23:37 . 2013-12-05 23:37 81408 ----a-w- c:\windows\system32\icardie.dll
2013-12-05 23:37 . 2013-12-05 23:37 774144 ----a-w- c:\windows\system32\jscript.dll
2013-12-05 23:37 . 2013-12-05 23:37 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-12-05 23:37 . 2013-12-05 23:37 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-05 23:37 . 2013-12-05 23:37 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-05 23:37 . 2013-12-05 23:37 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-12-05 23:37 . 2013-12-05 23:37 626176 ----a-w- c:\windows\system32\msfeeds.dll
2013-12-05 23:37 . 2013-12-05 23:37 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-12-05 23:37 . 2013-12-05 23:37 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-12-05 23:37 . 2013-12-05 23:37 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-12-05 23:37 . 2013-12-05 23:37 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-12-05 23:37 . 2013-12-05 23:37 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-12-05 23:37 . 2013-12-05 23:37 548352 ----a-w- c:\windows\system32\vbscript.dll
2013-12-05 23:37 . 2013-12-05 23:37 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-12-05 23:37 . 2013-12-05 23:37 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2013-12-05 23:37 . 2013-12-05 23:37 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-12-05 23:37 . 2013-12-05 23:37 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-12-05 23:37 . 2013-12-05 23:37 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-12-05 23:37 . 2013-12-05 23:37 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-12-05 23:37 . 2013-12-05 23:37 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-12-05 23:37 . 2013-12-05 23:37 413696 ----a-w- c:\windows\system32\html.iec
2013-12-05 23:37 . 2013-12-05 23:37 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-05 23:37 . 2013-12-05 23:37 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-12-05 23:37 . 2013-12-05 23:37 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-05 23:37 . 2013-12-05 23:37 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-12-05 23:37 . 2013-12-05 23:37 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-12-05 23:37 . 2013-12-05 23:37 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-12-05 23:37 . 2013-12-05 23:37 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-12-05 23:37 . 2013-12-05 23:37 247808 ----a-w- c:\windows\system32\msls31.dll
2013-12-05 23:37 . 2013-12-05 23:37 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-12-05 23:37 . 2013-12-05 23:37 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-12-05 23:37 . 2013-12-05 23:37 235520 ----a-w- c:\windows\system32\url.dll
2013-12-05 23:37 . 2013-12-05 23:37 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-12-05 23:37 . 2013-12-05 23:37 195584 ----a-w- c:\windows\system32\msrating.dll
2013-12-05 23:37 . 2013-12-05 23:37 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-12-05 23:37 . 2013-12-05 23:37 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-12-05 23:37 . 2013-12-05 23:37 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-12-05 23:37 . 2013-12-05 23:37 147968 ----a-w- c:\windows\system32\occache.dll
2013-12-05 23:37 . 2013-12-05 23:37 143872 ----a-w- c:\windows\system32\wextract.exe
2013-12-05 23:37 . 2013-12-05 23:37 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-12-05 23:37 . 2013-12-05 23:37 13824 ----a-w- c:\windows\system32\mshta.exe
2013-12-05 23:37 . 2013-12-05 23:37 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-12-05 23:37 . 2013-12-05 23:37 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-12-05 23:37 . 2013-12-05 23:37 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-12-05 23:37 . 2013-12-05 23:37 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-12-05 23:37 . 2013-12-05 23:37 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-12-05 23:37 . 2013-12-05 23:37 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-12-05 23:37 . 2013-12-05 23:37 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-12-05 23:37 . 2013-12-05 23:37 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-12-05 23:37 . 2013-12-05 23:37 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-12-05 23:37 . 2013-12-05 23:37 101376 ----a-w- c:\windows\system32\inseng.dll
2013-12-05 19:54 . 2013-03-15 11:28 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-12-05 19:54 . 2012-02-25 12:37 92544 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-12-05 19:54 . 2013-03-15 11:28 447888 ----a-w- c:\windows\system32\drivers\aswNdisFlt.sys
2013-11-26 11:54 . 2013-12-11 11:27 23183360 ----a-w- c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-11 11:27 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-11 11:27 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-11 11:27 66048 ----a-w- c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-11 11:27 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-11 11:27 2764288 ----a-w- c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-11 11:27 53760 ----a-w- c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-11 11:27 33792 ----a-w- c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-11 11:27 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-11 11:27 574976 ----a-w- c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-11 11:27 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-11 11:27 111616 ----a-w- c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-11 11:27 708608 ----a-w- c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-11 11:27 218624 ----a-w- c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-11 11:27 5769216 ----a-w- c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-11 11:27 553472 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-11 11:27 4243968 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-11 11:27 1995264 ----a-w- c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-11 11:27 12996608 ----a-w- c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-11 11:27 1928192 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-11 11:27 2334208 ----a-w- c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-11 11:27 1395200 ----a-w- c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-11 11:27 817664 ----a-w- c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-11 11:27 1820160 ----a-w- c:\windows\SysWow64\wininet.dll
2013-11-23 18:26 . 2013-12-11 10:25 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-11 10:25 465920 ----a-w- c:\windows\system32\WMPhoto.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2013-11-08 1095000]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2014-02-03 1564992]
"NextLive"="c:\users\Klaus-Admin\AppData\Roaming\newnext.me\nengine.dll" [2013-11-14 1283584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-11-01 152392]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-02-08 3767096]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2014-02-03 311616]
"mobilegeni daemon"="c:\program files (x86)\Mobogenie\DaemonProcess.exe" [2014-01-27 775872]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
.
c:\users\Klaus-Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.130\SSScheduler.exe [2013-9-6 324320]
PHOTOfunSTUDIO 8.3 PE.lnk - c:\program files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe -e "c:\program files (x86)\Panasonic\PHOTOfunSTUDIO 8.3 PE\PHOTOfunSTUDIO.exe" [2012-12-4 230576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"HP Software Update"=c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 InternetUpdater;Internet Updater;c:\programdata\InternetUpdater\InternetUpdaterService.exe;c:\programdata\InternetUpdater\InternetUpdaterService.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
S2 Radio.fx;Radio.fx Server;d:\tobit radio.fx\Server\rfx-server.exe;d:\tobit radio.fx\Server\rfx-server.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-10 23:48]
.
2014-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-15 12:07]
.
2014-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-15 12:07]
.
2014-02-01 c:\windows\Tasks\Norton Security Scan for Klaus-Admin.job
- c:\progra~2\NORTON~2\Engine\372~1.5\Nss.exe [2012-10-21 09:45]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-02-08 17:34 287280 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.awesomehp.com/?type=hp&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
mDefault_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F&q={searchTerms}
mDefault_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
mStart Page = hxxp://www.awesomehp.com/?type=hp&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391724007&from=tugs&uid=395049983_1052451_2490341F&q={searchTerms}
uInternet Settings,ProxyOverride = *.local
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1 192.168.2.1
DPF: {B07F54E6-0806-47DB-B5D8-398F240776F2} - file:///G:/viewer/ORDcmViewCD.ocx
FF - ProfilePath - c:\users\Klaus-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2168d3wj.default-1391884358309\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{1d8566bd-f06f-4029-a3be-ba80af5a09f3} - (no file)
BHO-{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - (no file)
Toolbar-10 - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-10 - (no file)
WebBrowser-{1D8566BD-F06F-4029-A3BE-BA80AF5A09F3} - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-02-08 20:21:12
ComboFix-quarantined-files.txt 2014-02-08 19:21
.
Vor Suchlauf: 10 Verzeichnis(se), 17.237.147.648 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 16.848.605.184 Bytes frei
.
- - End Of File - - D3C15353C84288115CB3E15FE1EAE638
A36C5E4F47E84449FF07ED3517B43A31 Bin etwas ratlos wie es weiter gehen soll, bin für jeden Tip dankbar! Geändert von ironente (08.02.2014 um 21:22 Uhr) |
Baum-Darstellung