Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 01.03.2014, 01:58   #1
El3ssaR
 
Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam - Ausrufezeichen

Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam



Hallo!

Seit kurzer Zeit hat sich bei meinem Firefox-Browser die Angewohnheit eingeschlichen Seiten nur sehr sehr langsam zu laden. Meistens ist es sogar so, dass jede Seite zunächst komplett blank erscheint, sodass man nur ein weißes Bild sieht. Beim aktualisieren bzw. wiederholter Eingabe wird die Seite dann meistens geladen. Beim googlen eines Begriffs tauchen die Ergenisse sofort auf, aber wenn ich dann eines anklicke kommt es zu besagtem Problem. Spiele wie z.B. League of Legends und der Teamspeak-Dienst funktionieren problemlos und ohne Verzögerungen. Facebook funktioniert auch meistens aber auch hier kam es zu heute mittag (jetzt nicht mehr) zu Ladeproblemen der Inhalte. Jedenfalls ist das ganze sehr untypisch für mein System. Mein Virenprogramm von G-Data hat keinen Fund zu melden. Zuvor hab ich Spybot Search&Destroy verwendet und da gab es ein paar Funde (Flash Player Cookies wenn ich mich recht entsinne). Nach dem Durchlauf des Spybot haben Antimalware und der Terminator nichts mehr gefunden. Anbei die Logfiles von FRST und GMER sowie Spybot:

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02
Ran by Dani (administrator) on DANI-PC on 01-03-2014 02:04:23
Running from C:\Users\Dani\Downloads
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\PROGRAM FILES (X86)\COMMON FILES\G DATA\GDSCAN\GDSCAN.EXE
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlX64.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(G Data Software AG) C:\PROGRAM FILES (X86)\COMMON FILES\G DATA\AVKPROXY\AVKPROXY.EXE
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Safer-Networking Ltd.) C:\PROGRAM FILES (X86)\SPYBOT - SEARCH & DESTROY 2\SDFSSVC.EXE
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\PROGRAM FILES (X86)\SPYBOT - SEARCH & DESTROY 2\SDWSCSVC.EXE
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Flux Software LLC) C:\Users\Dani\AppData\Local\FluxSoftware\Flux\flux.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTXFISPI.EXE
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\GUI\GDSC.exe
(G Data Software AG) C:\program files (x86)\g data\antivirus\avk\avk.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.4217\Battle.net.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [CTxfiHlp] - CTXFIHLP.EXE
HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [F.lux] - C:\Users\Dani\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [LightShot] - C:\Users\Dani\AppData\Local\Skillbrains\lightshot\LightShot.exe [195072 2012-02-02] ()
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-20] ()
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [Steam] - D:\Games\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\MountPoints2: {3c89804b-96ba-11e3-bf59-f46d04cf6127} - "L:\Startme.exe" 
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\MountPoints2: {4aaa9c37-30a5-11e2-be72-f46d04cf6127} - "F:\Setup.EXE" 
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll => "C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll" File Not Found
Startup: C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFDF96472E9CFCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E2EBA4A1-F71A-4DFA-AA65-AD9099523CF9}: [NameServer]192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: YouTube™ Anywhere Player - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\{c9d31470-81c6-4e3e-9a37-46eb9237ed3a} [2014-01-17]
FF Extension: SmartVideo For YouTube - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\mytube@ashishmishra.in.xpi [2013-04-15]
FF Extension: Test Pilot - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\testpilot@labs.mozilla.com.xpi [2012-11-26]
FF Extension: Adblock Plus - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-11-26]

==================== Services (Whitelisted) =================

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-10-28] ()
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek                                            )
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2012-11-17] (DT Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-09-28] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-09-28] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64856 2013-09-28] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68440 2013-11-11] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2013-10-01] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-09-28] (G Data Software AG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-10-28] ()
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S3 NdisImPlatformMp; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [126464 2012-07-26] (Microsoft Corporation)
S3 s1039bus; C:\Windows\System32\drivers\s1039bus.sys [127600 2009-11-19] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\system32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\system32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\system32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\system32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\system32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\drivers\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-03-01] (Windows (R) Win 7 DDK provider)
S3 UHSfiltv; C:\Windows\system32\drivers\UHSfiltv.sys [23552 2012-09-12] (Creative Technology Ltd.)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-01 02:04 - 2014-03-01 02:04 - 00016974 _____ () C:\Users\Dani\Downloads\FRST.txt
2014-03-01 01:59 - 2014-03-01 02:00 - 00043097 _____ () C:\Users\Dani\Downloads\Addition.txt
2014-03-01 01:58 - 2014-03-01 02:00 - 00039565 _____ () C:\Users\Dani\Desktop\FRST.txt
2014-03-01 01:57 - 2014-03-01 02:04 - 00000000 ____D () C:\FRST
2014-03-01 01:56 - 2014-03-01 01:56 - 02155520 _____ (Farbar) C:\Users\Dani\Downloads\FRST64.exe
2014-03-01 00:20 - 2014-03-01 00:27 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-28 23:34 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-28 23:32 - 2014-02-28 23:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dani\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-28 23:32 - 2014-02-28 23:32 - 05049344 _____ (Crawler.com ) C:\Users\Dani\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-02-28 22:33 - 2014-02-28 22:34 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner_3.0.2.0.exe
2014-02-27 14:21 - 2014-02-27 14:21 - 00085308 _____ () C:\Users\Dani\Downloads\20130905_VVS.pptx
2014-02-27 02:26 - 2014-03-01 02:01 - 00000000 ____D () C:\Users\Dani\AppData\Local\Battle.net
2014-02-27 02:26 - 2014-02-28 03:37 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Battle.net
2014-02-27 02:26 - 2014-02-27 02:26 - 00001156 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Local\Blizzard Entertainment
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-02-26 16:07 - 2014-02-26 16:07 - 00000208 _____ () C:\Users\Dani\Desktop\Path of Exile.url
2014-02-26 02:55 - 2014-02-26 02:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-18 00:19 - 2014-02-18 00:19 - 00000000 ____D () C:\Windows\LastGood.Tmp
2014-02-18 00:18 - 2014-02-18 00:19 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony Setup
2014-02-18 00:18 - 2014-02-18 00:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony
2014-02-18 00:16 - 2009-11-19 14:06 - 00127600 _____ (MCCI Corporation) C:\Windows\system32\Drivers\s1039bus.sys
2014-02-18 00:16 - 2009-11-19 14:06 - 00015984 _____ (MCCI Corporation) C:\Windows\system32\Drivers\s1039whnt.sys
2014-02-15 01:24 - 2013-11-27 01:19 - 00385614 _____ () C:\Windows\system32\ApnDatabase.xml
2014-02-15 01:24 - 2013-11-26 00:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-15 01:24 - 2013-11-01 06:53 - 02232664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-15 01:23 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-15 01:23 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-15 01:23 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-15 01:23 - 2014-02-01 10:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-02-15 01:23 - 2014-02-01 10:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-15 01:23 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-15 01:23 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-15 01:23 - 2014-02-01 08:58 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-15 01:23 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-15 01:23 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-15 01:23 - 2014-02-01 06:08 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-02-15 01:23 - 2014-01-13 00:30 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-15 01:23 - 2014-01-13 00:30 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-15 01:23 - 2013-12-09 01:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-15 01:23 - 2013-12-09 00:59 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-15 01:23 - 2013-12-05 00:43 - 01845248 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-15 01:23 - 2013-12-05 00:43 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-15 01:23 - 2013-12-05 00:37 - 01419264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-15 01:23 - 2013-12-05 00:37 - 00451072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-15 01:23 - 2013-11-20 01:15 - 03842560 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-15 01:23 - 2013-11-20 00:57 - 03288576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-15 01:23 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-02-15 01:23 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2014-02-15 01:23 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2014-02-15 01:23 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2014-02-15 01:23 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-02-15 01:23 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-02-15 01:23 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2014-02-15 01:23 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-02-15 01:23 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-02-15 01:23 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-02-15 01:23 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-02-15 01:22 - 2013-12-07 07:37 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-02-15 01:22 - 2013-12-07 07:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-15 01:22 - 2013-12-07 06:15 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-02-15 01:22 - 2013-12-07 06:15 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-11 02:31 - 2014-02-11 02:33 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\dvdcss
2014-02-10 14:29 - 2014-02-10 14:29 - 15492434 _____ () C:\Users\Dani\Desktop\DSC_0028.dng
2014-02-10 14:22 - 2014-02-10 14:22 - 15465786 _____ () C:\Users\Dani\Desktop\DSC_0031.dng
2014-02-09 21:28 - 2014-02-09 21:29 - 07427245 _____ () C:\Users\Dani\Desktop\DSC_0032.dng
2014-02-08 03:20 - 2014-02-26 13:42 - 00001187 _____ () C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-02-06 15:21 - 2014-02-06 18:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-02 20:34 - 2014-03-01 01:54 - 00000000 ____D () C:\Users\Dani\Desktop\Fasnet14
2014-01-30 12:03 - 2014-01-30 16:36 - 00081458 _____ () C:\Users\Dani\Desktop\536305_20140129_Kontaktdaten_NwT.xlsx

==================== One Month Modified Files and Folders =======

2014-03-01 02:04 - 2014-03-01 02:04 - 00016974 _____ () C:\Users\Dani\Downloads\FRST.txt
2014-03-01 02:04 - 2014-03-01 01:57 - 00000000 ____D () C:\FRST
2014-03-01 02:01 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Local\Battle.net
2014-03-01 02:01 - 2012-11-07 01:17 - 01824256 ___SH () C:\Users\Dani\Downloads\Thumbs.db
2014-03-01 02:00 - 2014-03-01 01:59 - 00043097 _____ () C:\Users\Dani\Downloads\Addition.txt
2014-03-01 02:00 - 2014-03-01 01:58 - 00039565 _____ () C:\Users\Dani\Desktop\FRST.txt
2014-03-01 02:00 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-03-01 01:56 - 2014-03-01 01:56 - 02155520 _____ (Farbar) C:\Users\Dani\Downloads\FRST64.exe
2014-03-01 01:54 - 2014-02-02 20:34 - 00000000 ____D () C:\Users\Dani\Desktop\Fasnet14
2014-03-01 01:37 - 2013-01-08 19:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-01 01:35 - 2012-12-20 21:05 - 00000000 ____D () C:\Users\Dani\AppData\Local\PMB Files
2014-03-01 01:35 - 2012-12-20 21:05 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-01 00:48 - 2012-11-10 19:37 - 00000402 _____ () C:\Windows\Tasks\update-sys.job
2014-03-01 00:27 - 2014-03-01 00:20 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-28 23:32 - 2014-02-28 23:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dani\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-28 23:32 - 2014-02-28 23:32 - 05049344 _____ (Crawler.com ) C:\Users\Dani\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-02-28 23:32 - 2012-11-10 19:37 - 00000402 _____ () C:\Windows\Tasks\update-S-1-5-21-3053964864-2100263365-1666197601-1001.job
2014-02-28 22:34 - 2014-02-28 22:33 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner_3.0.2.0.exe
2014-02-28 21:16 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-28 16:13 - 2012-11-21 11:14 - 00000000 ____D () C:\Program Files\Opera x64
2014-02-28 16:13 - 2012-11-21 11:14 - 00000000 ____D () C:\Program Files (x86)\Opera x64
2014-02-28 03:37 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Battle.net
2014-02-28 02:30 - 2012-12-20 23:25 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\TS3Client
2014-02-27 15:09 - 2012-11-07 00:43 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3053964864-2100263365-1666197601-1001
2014-02-27 14:21 - 2014-02-27 14:21 - 00085308 _____ () C:\Users\Dani\Downloads\20130905_VVS.pptx
2014-02-27 14:06 - 2013-05-16 12:32 - 00189356 _____ () C:\Windows\DPINST.LOG
2014-02-27 02:26 - 2014-02-27 02:26 - 00001156 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Local\Blizzard Entertainment
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-02-26 17:58 - 2012-11-07 01:06 - 00000000 ____D () C:\Users\Dani\Documents\My Games
2014-02-26 16:07 - 2014-02-26 16:07 - 00000208 _____ () C:\Users\Dani\Desktop\Path of Exile.url
2014-02-26 13:42 - 2014-02-08 03:20 - 00001187 _____ () C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-02-26 13:42 - 2012-11-07 01:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-26 13:40 - 2012-11-07 00:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-26 13:40 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-26 02:55 - 2014-02-26 02:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-23 21:00 - 2012-11-07 01:04 - 00014544 _____ () C:\Users\Dani\Desktop\Filmliste.xlsx
2014-02-23 13:22 - 2012-11-07 00:26 - 00424530 _____ () C:\Windows\PFRO.log
2014-02-22 14:03 - 2012-07-26 11:27 - 00751892 _____ () C:\Windows\system32\perfh007.dat
2014-02-22 14:03 - 2012-07-26 11:27 - 00155620 _____ () C:\Windows\system32\perfc007.dat
2014-02-22 14:03 - 2012-07-26 08:28 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-20 20:37 - 2013-01-08 19:47 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-18 00:21 - 2012-11-07 14:26 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-18 00:19 - 2014-02-18 00:19 - 00000000 ____D () C:\Windows\LastGood.Tmp
2014-02-18 00:19 - 2014-02-18 00:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony Setup
2014-02-18 00:19 - 2012-11-07 00:36 - 01229151 _____ () C:\Windows\WindowsUpdate.log
2014-02-18 00:18 - 2014-02-18 00:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony
2014-02-16 15:24 - 2012-12-21 17:54 - 00000039 _____ () C:\Windows\vbaddin.ini
2014-02-16 15:24 - 2012-11-07 11:11 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-16 15:23 - 2013-07-19 17:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-15 15:52 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\rescache
2014-02-15 03:42 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\WinStore
2014-02-15 01:25 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-02-13 13:37 - 2012-11-07 01:04 - 05909504 ___SH () C:\Users\Dani\Desktop\Thumbs.db
2014-02-11 04:53 - 2013-01-17 00:50 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\vlc
2014-02-11 02:33 - 2014-02-11 02:31 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\dvdcss
2014-02-11 00:27 - 2014-01-24 17:55 - 02942259 _____ () C:\Users\Dani\Desktop\Das Gehirn.pptx
2014-02-10 18:29 - 2014-01-20 21:14 - 00000000 ____D () C:\Users\Dani\Desktop\50er
2014-02-10 14:29 - 2014-02-10 14:29 - 15492434 _____ () C:\Users\Dani\Desktop\DSC_0028.dng
2014-02-10 14:22 - 2014-02-10 14:22 - 15465786 _____ () C:\Users\Dani\Desktop\DSC_0031.dng
2014-02-09 21:29 - 2014-02-09 21:28 - 07427245 _____ () C:\Users\Dani\Desktop\DSC_0032.dng
2014-02-06 18:13 - 2014-02-06 15:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-04 19:09 - 2012-11-14 09:26 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-01 13:41 - 2013-11-11 22:14 - 00000000 ____D () C:\Windows\Minidump
2014-02-01 13:41 - 2012-11-07 00:26 - 00084992 ____N () C:\Windows\Minidump\020114-22713-01.dmp
2014-02-01 10:20 - 2014-02-15 01:23 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-01 10:19 - 2014-02-15 01:23 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-01 10:19 - 2014-02-15 01:23 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-01 10:19 - 2014-02-15 01:23 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-02-01 10:19 - 2014-02-15 01:23 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-01 08:58 - 2014-02-15 01:23 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-01 08:58 - 2014-02-15 01:23 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-01 08:58 - 2014-02-15 01:23 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-01 08:40 - 2014-02-15 01:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-01 08:34 - 2014-02-15 01:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-01 06:08 - 2014-02-15 01:23 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-01-30 22:10 - 2013-11-17 17:16 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-30 22:10 - 2013-11-17 17:16 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 16:36 - 2014-01-30 12:03 - 00081458 _____ () C:\Users\Dani\Desktop\536305_20140129_Kontaktdaten_NwT.xlsx

Files to move or delete:
====================
C:\Users\Dani\AppData\Roaming\CamLayout.ini
C:\Users\Dani\AppData\Roaming\CamShapes.ini
C:\Users\Dani\AppData\Roaming\CamStudio.Producer.Data.ini


Some content of TEMP:
====================
C:\Users\Dani\AppData\Local\Temp\CTPBSeq.exe
C:\Users\Dani\AppData\Local\Temp\ose00000.exe
C:\Users\Dani\AppData\Local\Temp\ose00001.exe
C:\Users\Dani\AppData\Local\Temp\ose00002.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-27 15:11

==================== End Of Log ============================
         
Code:
ATTFilter
 Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-02-2014 02
Ran by Dani at 2014-03-01 02:04:43
Running from C:\Users\Dani\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: G Data AntiVirus 2014 (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: G Data AntiVirus 2014 (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

2600 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
2600_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
2600Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.2.8870 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.2.8870 - Adobe Systems Inc.) Hidden
Adobe Anchor Service CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Bridge CS4 (x32 Version: 3 - Adobe Systems Incorporated) Hidden
Adobe CMaps CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color - Photoshop Specific CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Recommended Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit CS4 (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Fonts All (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 (x32 Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Output Module (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (HKLM-x32\...\Adobe_faf656ef605427ee2f42989c3ad31b8) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Photoshop CS4 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 Support (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Search for Help (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Service Manager Extension (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Setup (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.0.112 - Adobe Systems, Inc.)
Adobe Type Support CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS4 (x32 Version: 6.0.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin (x32 Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetCMYK (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
AIO_CDB_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Anno 1701 (HKLM-x32\...\{A2433A63-5F5D-40E5-B529-9123C2B3E734}) (Version: 1.04 - Sunflowers)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bing Bar (HKLM-x32\...\{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}) (Version: 7.3.124.0 - Microsoft Corporation)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CamStudio version 2.7 (HKLM-x32\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7 - CamStudio Open Source)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.2.3442 - CDBurnerXP)
Celestia 1.6.1 (HKLM-x32\...\Celestia_is1) (Version:  - Shatters Software)
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.04072 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.04072 - Cisco Systems, Inc.) Hidden
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Creative Audio-Systemsteuerung (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.41 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: 1.03 - Creative Technology Limited)
Creative Systeminformationen (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{81FB7C60-565A-4869-9D90-3BE1D270E8B7}) (Version:  - Microsoft)
Deponia (HKLM-x32\...\Deponia) (Version: 1.0 - Daedalic Entertainment)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.00 - Creative Technology Limited)
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
f.lux (HKCU\...\Flux) (Version:  - )
Fallout 3 (HKCU\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
Free FLV Converter V 7.5.0 (HKLM-x32\...\Free FLV Converter_is1) (Version: 7.5.0.0 - Koyote Soft)
G Data AntiVirus 2014 (HKLM-x32\...\{5F17164A-FE5F-48B4-916F-56C6C4470D32}) (Version: 24.0.3.4 - G Data Software AG)
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software (HKLM\...\{6F5B70F0-EA6C-4A5B-BB16-8390BD66B251}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
League of Legends (HKLM-x32\...\{918A9082-6287-4D25-9002-5E5D5E4971CB}) (Version: 1.02.0000 - Riot Games)
lightshot-3.2.0.0 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 3.2.0.0 - Skillbrains)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.5.2 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}) (Version: 1.2.0241 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Visio 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Visio MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visio Professional 2010 (HKLM-x32\...\Office14.VISIOR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version:  - DICE)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mozilla Thunderbird 24.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.3.0 (x86 de)) (Version: 24.3.0 - Mozilla)
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA PhysX v8.10.17 (HKLM-x32\...\{E4D15328-8C89-484B-B9AA-F5BE9EA6D01C}) (Version: 8.10.17 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Opera 12.16 (HKLM\...\Opera 12.16.1860) (Version: 12.16.1860 - Opera Software ASA)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
Path of Exile (HKLM-x32\...\Steam App 238960) (Version:  - Grinding Gear Games)
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.5.1 - Frank Heindörfer, Philip Chinery)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.206.0 - Tracker Software Products Ltd)
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{359ADBEC-068A-4CC9-9174-77AB8EDB867A}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Skype™ 6.1 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.1.129 - Skype Technologies S.A.)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Sound Blaster X-Fi (HKLM-x32\...\{20288888-A7AF-4B24-8AEB-398D20CD563C}) (Version: 1.0 - Creative Technology Limited)
Speed-Link SL-6535 USB Pad (HKLM-x32\...\{B0DC2DA9-2AF9-422A-88E0-1B84E0F65DB5}) (Version: 1.00.0000 - GASIA)
SPEEDLINK Strike 2 Gamepad (HKLM-x32\...\{4999B2F1-3E74-409A-B8B5-E94448AA9EA6}) (Version: 2007.08.17 - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
Spyware Terminator 2012 (HKLM-x32\...\{56736259-613E-4A3B-B428-6235F2E76F44}_is1) (Version: 3.0.0.82 - Crawler.com)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837583) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{E21274CE-CA0C-49FA-93F4-DC292A052264}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.VISIOR_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.VISIOR_{B5C70C99-B109-42FD-B219-FF12CA543F19}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.VISIOR_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================

06-02-2014 17:29:16 Geplanter Prüfpunkt
14-02-2014 16:11:04 Geplanter Prüfpunkt
22-02-2014 17:43:01 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2012-07-26 06:26 - 2014-02-04 13:14 - 00444984 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.10sek.com
127.0.0.1	10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	www.123fporn.info
127.0.0.1	123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {41F5D5F1-F227-4627-85B6-7876354CFB8C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-20] (Adobe Systems Incorporated)
Task: {59326961-9E4C-4F70-AC62-D7984684A93A} - System32\Tasks\update-S-1-5-21-3053964864-2100263365-1666197601-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: {61A35711-201E-44B2-9BE9-EFBFE85DD2D7} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {D6C5712C-7AE4-46A4-956D-6F8429DABC56} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: {D6E932C5-522B-4824-B015-261B24E2BD63} - System32\Tasks\Microsoft\Windows\Setup\Windows Upgrade Notification Task => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {DBA0791D-2B4C-4715-9837-32A9C724583A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\update-S-1-5-21-3053964864-2100263365-1666197601-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Loaded Modules (whitelisted) =============

2013-10-10 22:48 - 2013-10-10 22:48 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2012-11-30 19:37 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2012-11-30 19:37 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2012-11-30 19:37 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2012-11-30 19:37 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2012-11-30 19:37 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2012-11-30 19:37 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2013-12-11 05:22 - 2013-12-11 05:22 - 00378368 _____ () C:\Program Files (x86)\LOLReplay\LOLUtils.dll
2013-09-06 17:12 - 2013-09-06 17:12 - 00040448 _____ () C:\Program Files (x86)\LOLReplay\Compression.dll
2012-11-09 16:55 - 2007-09-13 17:05 - 00002560 _____ () C:\Windows\system32\CTXFIGER.DLL
2014-02-27 02:26 - 2014-02-27 02:26 - 26118656 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4217\libcef.dll
2014-02-27 02:26 - 2014-02-27 02:26 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4217\libglesv2.dll
2014-02-27 02:26 - 2014-02-27 02:26 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4217\libegl.dll
2014-02-26 02:55 - 2014-02-26 02:55 - 03622512 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Photosmart 2600 series
Description: Photosmart 2600 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet Pro 8600
Description: Officejet Pro 8600
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/01/2014 00:57:45 AM) (Source: Application Hang) (User: )
Description: Programm opera.exe, Version 12.16.1860.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1368

Startzeit: 01cf34e07affbd59

Endzeit: 16

Anwendungspfad: C:\Program Files\Opera x64\opera.exe

Berichts-ID: 1bcf18aa-a0d4-11e3-bf5f-f46d04cf6127

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (02/28/2014 07:29:55 PM) (Source: Application Hang) (User: )
Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 11ec

Startzeit: 01cf34b3095954e7

Endzeit: 1

Anwendungspfad: D:\Games\League of Legends\League of Legends\RADS\system\rads_user_kernel.exe

Berichts-ID: 50acf3d7-a0a6-11e3-bf5f-f46d04cf6127

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (02/28/2014 03:26:18 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/28/2014 03:25:51 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/28/2014 02:30:35 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ts3client_win64.exe, Version: 3.0.13.0, Zeitstempel: 0x5267bcf3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16579, Zeitstempel: 0x51637f77
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ebd59
ID des fehlerhaften Prozesses: 0xe68
Startzeit der fehlerhaften Anwendung: 0xts3client_win64.exe0
Pfad der fehlerhaften Anwendung: ts3client_win64.exe1
Pfad des fehlerhaften Moduls: ts3client_win64.exe2
Berichtskennung: ts3client_win64.exe3
Vollständiger Name des fehlerhaften Pakets: ts3client_win64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ts3client_win64.exe5

Error: (02/27/2014 03:12:44 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/26/2014 06:01:06 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PathOfExileSteam.exe, Version: 0.0.0.0, Zeitstempel: 0x52fd8696
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x16a0
Startzeit der fehlerhaften Anwendung: 0xPathOfExileSteam.exe0
Pfad der fehlerhaften Anwendung: PathOfExileSteam.exe1
Pfad des fehlerhaften Moduls: PathOfExileSteam.exe2
Berichtskennung: PathOfExileSteam.exe3
Vollständiger Name des fehlerhaften Pakets: PathOfExileSteam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: PathOfExileSteam.exe5

Error: (02/26/2014 02:41:39 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/26/2014 01:50:07 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/24/2014 06:15:48 PM) (Source: Application Hang) (User: )
Description: Programm deponia.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1ae0

Startzeit: 01cf3183f5303726

Endzeit: 98

Anwendungspfad: D:\Games\Deponia\deponia.exe

Berichts-ID: 49ec07f5-9d77-11e3-bf5d-f46d04cf6127

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


System errors:
=============
Error: (02/28/2014 07:38:41 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (02/28/2014 03:56:24 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.

Error: (02/28/2014 01:18:03 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.

Error: (02/27/2014 11:32:07 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.

Error: (02/26/2014 02:41:38 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/26/2014 02:41:38 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (02/26/2014 01:49:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/26/2014 01:49:46 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (02/26/2014 01:43:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/26/2014 01:43:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-02-26 13:40:45.331
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-02-25 14:35:08.457
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-02-24 11:18:19.267
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-02-23 13:22:14.157
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-02-20 13:12:56.702
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-02-19 15:14:54.909
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-02-16 04:27:34.903
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-02-15 13:51:09.591
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-02-13 11:29:49.206
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-02-12 13:34:53.798
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\Drivers\vfilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Percentage of memory in use: 30%
Total physical RAM: 8191.17 MB
Available physical RAM: 5719.01 MB
Total Pagefile: 16383.17 MB
Available Pagefile: 13067.85 MB
Total Virtual: 8192 MB
Available Virtual: 8191.76 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:205.54 GB) (Free:53.23 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:390.62 GB) (Free:342.05 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: F29C53FC)

Partition: GPT Partition Type.

==================== End Of Log ============================
         
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-03-01 02:50:23
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T1L0-3 WDC_WD6400AAKS-22A7B2 rev.01.03B01 596,17GB
Running: t4w1kw00.exe; Driver: C:\Users\Dani\AppData\Local\Temp\kwtoapod.sys


---- User code sections - GMER 2.1 ----

.text   C:\Windows\System32\dwm.exe[4328] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                       000007fe1daf177a 4 bytes [AF, 1D, FE, 07]
.text   C:\Windows\System32\dwm.exe[4328] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                       000007fe1daf1782 4 bytes [AF, 1D, FE, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[2180] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690    000007fe1a801532 4 bytes [80, 1A, FE, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[2180] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698    000007fe1a80153a 4 bytes [80, 1A, FE, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[2180] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246  000007fe1a80165a 4 bytes [80, 1A, FE, 07]
.text   C:\Windows\system32\nvvsvc.exe[5384] C:\Windows\system32\MSIMG32.dll!GradientFill + 690                              000007fe1a801532 4 bytes [80, 1A, FE, 07]
.text   C:\Windows\system32\nvvsvc.exe[5384] C:\Windows\system32\MSIMG32.dll!GradientFill + 698                              000007fe1a80153a 4 bytes [80, 1A, FE, 07]
.text   C:\Windows\system32\nvvsvc.exe[5384] C:\Windows\system32\MSIMG32.dll!TransparentBlt + 246                            000007fe1a80165a 4 bytes [80, 1A, FE, 07]
.text   C:\Windows\system32\nvvsvc.exe[5384] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                    000007fe1daf177a 4 bytes [AF, 1D, FE, 07]
.text   C:\Windows\system32\nvvsvc.exe[5384] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                    000007fe1daf1782 4 bytes [AF, 1D, FE, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[5896] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690      000007fe1a801532 4 bytes [80, 1A, FE, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[5896] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698      000007fe1a80153a 4 bytes [80, 1A, FE, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[5896] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246    000007fe1a80165a 4 bytes [80, 1A, FE, 07]

---- Threads - GMER 2.1 ----

Thread  C:\Windows\system32\csrss.exe [5584:3856]                                                                            fffff960009735e8

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed                                    -86999178

---- EOF - GMER 2.1 ----
         
Code:
ATTFilter
Search results from Spybot - Search & Destroy

28.02.2014 20:10:55
Scan took 00:26:54.
39 items found.

DownloadSponsor: [SBI $CC437C6B] Settings (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\OCS\lastPID

DownloadSponsor: [SBI $980DE8E4] Settings (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\OCS\PID

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\Dani\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\TC3DQYUP\s.ytimg.com\soundData.sol
  Properties.size=49
  Properties.md5=F842E17E14FDF46AAD8850604CE0EEBD
  Properties.filedate=1393596926
  Properties.filedatetext=2014-02-28 15:15:26

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\Dani\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\TC3DQYUP\www-cdn.jtvnw.net\jtv_pdata.sol
  Properties.size=90
  Properties.md5=5D466AB15CF6F4FC5ED3E4DC1845B93F
  Properties.filedate=1393599864
  Properties.filedatetext=2014-02-28 16:04:24

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\Dani\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\TC3DQYUP\www-cdn.jtvnw.net\sessions.sol
  Properties.size=50
  Properties.md5=C98F5D5443B9344EBF29A73551C51D73
  Properties.filedate=1393599859
  Properties.filedatetext=2014-02-28 16:04:19

Right Media: [SBI $4E2AF2AC] Tracking cookie (Internet Explorer (Benutzer): Dani) (Browser: Cookie, nothing done)
  

Log: [SBI $4E2AF2AC]  Install: Directx.log (File, nothing done)
  C:\Windows\Directx.log
  Properties.size=222513
  Properties.md5=A7555AB69EEA6110B768E8B2D75A7505
  Properties.filedate=1388280941
  Properties.filedatetext=2013-12-29 02:35:40

Log: [SBI $4E2AF2AC]  Install: setupact.log (File, nothing done)
  C:\Windows\setupact.log
  Properties.size=6906
  Properties.md5=79E4BD0EE244099509B505815482F0CF
  Properties.filedate=1392678982
  Properties.filedatetext=2014-02-18 00:16:21

Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Internet Explorer\TypedURLs

MS Management Console: [SBI $ECD50EAD] Recent command list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Microsoft Management Console\Recent File List

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS DirectInput: [SBI $9A063C91] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\DirectInput\MostRecentApplication\Name

MS DirectInput: [SBI $7B184199] Most recent application ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\DirectInput\MostRecentApplication\Id

MS Office 12.0: [SBI $31A61065] Internet history (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Office\12.0\Common\Internet\UseRWHlinkNavigation

MS Office 12.0 (Excel): [SBI $546355D5] Recent Cartel List (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Office\12.0\Excel\File MRU

MS Office 12.0 (PowerPoint): [SBI $242E8728] Recent Slideshow List (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Office\12.0\PowerPoint\File MRU

MS Office 12.0 (Word): [SBI $E357B233] Recent Document List (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Office\12.0\Word\File MRU

MS Paint: [SBI $07867C39] Recent file list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List

MS Regedit: [SBI $C3B62FC1] Recent open key (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\LastKey

Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

Windows.OpenWith: [SBI $A1C94E79] Open with list - .BMP extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\OpenWithList

Windows Explorer: [SBI $A2C7B3CD] Recent wallpaper list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpaper\MRU

Windows Explorer: [SBI $7308A845] Run history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU

Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

WinRAR: [SBI $0B56E92B] Recent file list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\WinRAR\ArcHistory

WinRAR: [SBI $A59A1C0A] Recent exe file list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\WinRAR\DialogEditHistory\ArcName

WinRAR: [SBI $B84F9965] Last used directory (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\WinRAR\General\LastFolder

WinRAR: [SBI $B510882E] Extraction directory history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\WinRAR\DialogEditHistory\ExtrPath

Cookie: [SBI $49804B54] Browser: Cookie (109) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (1047) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (101) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (1) (Browser: Cookie, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (65) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (60) (Browser: Cookie, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (28) (Browser: Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 2.0.12.131  DLL (build: 20121113) ---

2012-11-13 blindman.exe (2.0.12.151)
2012-11-13 explorer.exe (2.0.12.173)
2012-11-13 SDBootCD.exe (2.0.12.109)
2012-11-13 SDCleaner.exe (2.0.12.110)
2012-11-13 SDDelFile.exe (2.0.12.94)
2012-11-13 SDFiles.exe (2.0.12.135)
2012-11-13 SDFileScanHelper.exe (2.0.12.1)
2012-11-13 SDFSSvc.exe (2.0.12.205)
2012-11-13 SDImmunize.exe (2.0.12.130)
2012-11-13 SDLogReport.exe (2.0.12.107)
2012-11-13 SDPESetup.exe (2.0.12.3)
2012-11-13 SDPEStart.exe (2.0.12.86)
2012-11-13 SDPhoneScan.exe (2.0.12.27)
2012-11-13 SDPRE.exe (2.0.12.13)
2012-11-13 SDPrepPos.exe (2.0.12.10)
2012-11-13 SDQuarantine.exe (2.0.12.103)
2012-11-13 SDRootAlyzer.exe (2.0.12.116)
2012-11-13 SDSBIEdit.exe (2.0.12.39)
2012-11-13 SDScan.exe (2.0.12.173)
2012-11-13 SDScript.exe (2.0.12.53)
2012-11-13 SDSettings.exe (2.0.12.130)
2012-11-13 SDShred.exe (2.0.12.105)
2012-11-13 SDSysRepair.exe (2.0.12.101)
2012-11-13 SDTools.exe (2.0.12.150)
2012-11-13 SDTray.exe (2.0.12.127)
2012-11-13 SDUpdate.exe (2.0.12.89)
2012-11-13 SDUpdSvc.exe (2.0.12.76)
2012-11-13 SDWelcome.exe (2.0.12.126)
2012-11-13 SDWSCSvc.exe (2.0.12.2)
2012-11-30 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2012-11-13 SDAdvancedCheckLibrary.dll (2.0.12.98)
2012-11-13 SDECon32.dll (2.0.12.113)
2012-11-13 SDECon64.dll (2.0.12.113)
2012-11-13 SDEvents.dll (2.0.12.2)
2012-11-13 SDFileScanLibrary.dll (2.0.12.9)
2012-11-13 SDHelper.dll (2.0.12.88)
2012-11-13 SDImmunizeLibrary.dll (2.0.12.2)
2012-11-13 SDLists.dll (2.0.12.4)
2012-11-13 SDResources.dll (2.0.12.7)
2012-11-13 SDScanLibrary.dll (2.0.12.131)
2012-11-13 SDTasks.dll (2.0.12.15)
2012-11-13 SDWinLogon.dll (2.0.12.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2012-11-13 Tools.dll (2.0.12.36)
2012-11-13 UninsSrv.dll (2.0.12.52)
2014-01-08 Includes\Adware-000.sbi (*)
2014-01-08 Includes\Adware-001.sbi (*)
2014-02-26 Includes\Adware-C.sbi (*)
2014-01-13 Includes\Adware.sbi (*)
2014-01-13 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2014-01-08 Includes\Dialer-000.sbi (*)
2014-01-08 Includes\Dialer-001.sbi (*)
2014-01-08 Includes\Dialer-C.sbi (*)
2014-01-13 Includes\Dialer.sbi (*)
2014-01-13 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2014-01-08 Includes\Hijackers-000.sbi (*)
2014-01-08 Includes\Hijackers-001.sbi (*)
2014-01-08 Includes\Hijackers-C.sbi (*)
2014-01-13 Includes\Hijackers.sbi (*)
2014-01-13 Includes\HijackersC.sbi (*)
2014-01-08 Includes\iPhone-000.sbi (*)
2014-01-08 Includes\iPhone.sbi (*)
2014-01-08 Includes\Keyloggers-000.sbi (*)
2014-01-08 Includes\Keyloggers-C.sbi (*)
2014-01-13 Includes\Keyloggers.sbi (*)
2014-01-13 Includes\KeyloggersC.sbi (*)
2014-01-09 Includes\Malware-001.sbi (*)
2014-01-09 Includes\Malware-002.sbi (*)
2014-02-05 Includes\Malware-003.sbi (*)
2014-01-28 Includes\Malware-004.sbi (*)
2014-01-09 Includes\Malware-005.sbi (*)
2014-02-26 Includes\Malware-006.sbi (*)
2014-01-09 Includes\Malware-007.sbi (*)
2014-02-19 Includes\Malware-C.sbi (*)
2014-01-13 Includes\Malware.sbi (*)
2013-12-23 Includes\MalwareC.sbi (*)
2014-01-15 Includes\PUPS-000.sbi (*)
2014-01-15 Includes\PUPS-001.sbi (*)
2014-01-15 Includes\PUPS-002.sbi (*)
2014-02-26 Includes\PUPS-C.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2014-01-07 Includes\PUPSC.sbi (*)
2014-01-08 Includes\Security-000.sbi (*)
2014-01-08 Includes\Security-C.sbi (*)
2014-01-21 Includes\Security.sbi (*)
2014-01-21 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2014-01-08 Includes\Spyware-000.sbi (*)
2014-01-08 Includes\Spyware-001.sbi (*)
2014-01-08 Includes\Spyware-C.sbi (*)
2014-01-21 Includes\Spyware.sbi (*)
2014-01-21 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2014-01-15 Includes\Trojans-000.sbi (*)
2014-01-15 Includes\Trojans-001.sbi (*)
2014-01-15 Includes\Trojans-002.sbi (*)
2014-01-15 Includes\Trojans-003.sbi (*)
2014-01-15 Includes\Trojans-004.sbi (*)
2014-01-15 Includes\Trojans-005.sbi (*)
2014-01-15 Includes\Trojans-006.sbi (*)
2014-01-15 Includes\Trojans-007.sbi (*)
2014-01-15 Includes\Trojans-008.sbi (*)
2014-01-15 Includes\Trojans-009.sbi (*)
2014-02-26 Includes\Trojans-C.sbi (*)
2014-01-15 Includes\Trojans-OG-000.sbi (*)
2014-01-15 Includes\Trojans-TD-000.sbi (*)
2014-01-15 Includes\Trojans-VM-000.sbi (*)
2014-01-15 Includes\Trojans-VM-001.sbi (*)
2014-01-15 Includes\Trojans-VM-002.sbi (*)
2014-01-15 Includes\Trojans-VM-003.sbi (*)
2014-01-15 Includes\Trojans-VM-004.sbi (*)
2014-01-15 Includes\Trojans-VM-005.sbi (*)
2014-01-15 Includes\Trojans-VM-006.sbi (*)
2014-01-15 Includes\Trojans-VM-007.sbi (*)
2014-01-15 Includes\Trojans-VM-008.sbi (*)
2014-01-15 Includes\Trojans-VM-009.sbi (*)
2014-01-15 Includes\Trojans-VM-010.sbi (*)
2014-01-15 Includes\Trojans-VM-011.sbi (*)
2014-01-15 Includes\Trojans-VM-012.sbi (*)
2014-01-15 Includes\Trojans-VM-013.sbi (*)
2014-01-15 Includes\Trojans-VM-014.sbi (*)
2014-01-15 Includes\Trojans-VM-015.sbi (*)
2014-01-15 Includes\Trojans-VM-016.sbi (*)
2014-01-15 Includes\Trojans-VM-017.sbi (*)
2014-01-15 Includes\Trojans-VM-018.sbi (*)
2014-01-15 Includes\Trojans-VM-019.sbi (*)
2014-01-15 Includes\Trojans-VM-020.sbi (*)
2014-01-15 Includes\Trojans-VM-021.sbi (*)
2014-01-15 Includes\Trojans-VM-022.sbi (*)
2014-01-15 Includes\Trojans-VM-023.sbi (*)
2014-01-15 Includes\Trojans-VM-024.sbi (*)
2014-01-15 Includes\Trojans-ZB-000.sbi (*)
2014-01-15 Includes\Trojans-ZL-000.sbi (*)
2014-01-09 Includes\Trojans.sbi (*)
2014-01-16 Includes\TrojansC-01.sbi (*)
2014-01-16 Includes\TrojansC-02.sbi (*)
2014-01-16 Includes\TrojansC-03.sbi (*)
2014-01-16 Includes\TrojansC-04.sbi (*)
2014-01-16 Includes\TrojansC-05.sbi (*)
2014-01-09 Includes\TrojansC.sbi (*)
         
Code:
ATTFilter
Search results from Spybot - Search & Destroy

28.02.2014 22:25:00
Scan took 00:25:59.
8 items found.

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\Dani\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\TC3DQYUP\www-cdn.jtvnw.net\jtv_pdata.sol
  Properties.size=94
  Properties.md5=CDFB7E9841F58C3A0AC53031E9A08162
  Properties.filedate=1393617981
  Properties.filedatetext=2014-02-28 21:06:20

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\Dani\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\TC3DQYUP\www-cdn.jtvnw.net\sessions.sol
  Properties.size=50
  Properties.md5=A662FE5B1C6F26E6D108B8AC8A0E0DE0
  Properties.filedate=1393617966
  Properties.filedatetext=2014-02-28 21:06:05

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS DirectInput: [SBI $9A063C91] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\DirectInput\MostRecentApplication\Name

MS DirectInput: [SBI $7B184199] Most recent application ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3053964864-2100263365-1666197601-1001\Software\Microsoft\DirectInput\MostRecentApplication\Id

Cookie: [SBI $49804B54] Browser: Cookie (3) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (19) (Browser: Cache, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (56) (Browser: Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 2.0.12.131  DLL (build: 20121113) ---

2012-11-13 blindman.exe (2.0.12.151)
2012-11-13 explorer.exe (2.0.12.173)
2012-11-13 SDBootCD.exe (2.0.12.109)
2012-11-13 SDCleaner.exe (2.0.12.110)
2012-11-13 SDDelFile.exe (2.0.12.94)
2012-11-13 SDFiles.exe (2.0.12.135)
2012-11-13 SDFileScanHelper.exe (2.0.12.1)
2012-11-13 SDFSSvc.exe (2.0.12.205)
2012-11-13 SDImmunize.exe (2.0.12.130)
2012-11-13 SDLogReport.exe (2.0.12.107)
2012-11-13 SDPESetup.exe (2.0.12.3)
2012-11-13 SDPEStart.exe (2.0.12.86)
2012-11-13 SDPhoneScan.exe (2.0.12.27)
2012-11-13 SDPRE.exe (2.0.12.13)
2012-11-13 SDPrepPos.exe (2.0.12.10)
2012-11-13 SDQuarantine.exe (2.0.12.103)
2012-11-13 SDRootAlyzer.exe (2.0.12.116)
2012-11-13 SDSBIEdit.exe (2.0.12.39)
2012-11-13 SDScan.exe (2.0.12.173)
2012-11-13 SDScript.exe (2.0.12.53)
2012-11-13 SDSettings.exe (2.0.12.130)
2012-11-13 SDShred.exe (2.0.12.105)
2012-11-13 SDSysRepair.exe (2.0.12.101)
2012-11-13 SDTools.exe (2.0.12.150)
2012-11-13 SDTray.exe (2.0.12.127)
2012-11-13 SDUpdate.exe (2.0.12.89)
2012-11-13 SDUpdSvc.exe (2.0.12.76)
2012-11-13 SDWelcome.exe (2.0.12.126)
2012-11-13 SDWSCSvc.exe (2.0.12.2)
2012-11-30 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2012-11-13 SDAdvancedCheckLibrary.dll (2.0.12.98)
2012-11-13 SDECon32.dll (2.0.12.113)
2012-11-13 SDECon64.dll (2.0.12.113)
2012-11-13 SDEvents.dll (2.0.12.2)
2012-11-13 SDFileScanLibrary.dll (2.0.12.9)
2012-11-13 SDHelper.dll (2.0.12.88)
2012-11-13 SDImmunizeLibrary.dll (2.0.12.2)
2012-11-13 SDLists.dll (2.0.12.4)
2012-11-13 SDResources.dll (2.0.12.7)
2012-11-13 SDScanLibrary.dll (2.0.12.131)
2012-11-13 SDTasks.dll (2.0.12.15)
2012-11-13 SDWinLogon.dll (2.0.12.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2012-11-13 Tools.dll (2.0.12.36)
2012-11-13 UninsSrv.dll (2.0.12.52)
2014-01-08 Includes\Adware-000.sbi (*)
2014-01-08 Includes\Adware-001.sbi (*)
2014-02-26 Includes\Adware-C.sbi (*)
2014-01-13 Includes\Adware.sbi (*)
2014-01-13 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2014-01-08 Includes\Dialer-000.sbi (*)
2014-01-08 Includes\Dialer-001.sbi (*)
2014-01-08 Includes\Dialer-C.sbi (*)
2014-01-13 Includes\Dialer.sbi (*)
2014-01-13 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2014-01-08 Includes\Hijackers-000.sbi (*)
2014-01-08 Includes\Hijackers-001.sbi (*)
2014-01-08 Includes\Hijackers-C.sbi (*)
2014-01-13 Includes\Hijackers.sbi (*)
2014-01-13 Includes\HijackersC.sbi (*)
2014-01-08 Includes\iPhone-000.sbi (*)
2014-01-08 Includes\iPhone.sbi (*)
2014-01-08 Includes\Keyloggers-000.sbi (*)
2014-01-08 Includes\Keyloggers-C.sbi (*)
2014-01-13 Includes\Keyloggers.sbi (*)
2014-01-13 Includes\KeyloggersC.sbi (*)
2014-01-09 Includes\Malware-001.sbi (*)
2014-01-09 Includes\Malware-002.sbi (*)
2014-02-05 Includes\Malware-003.sbi (*)
2014-01-28 Includes\Malware-004.sbi (*)
2014-01-09 Includes\Malware-005.sbi (*)
2014-02-26 Includes\Malware-006.sbi (*)
2014-01-09 Includes\Malware-007.sbi (*)
2014-02-19 Includes\Malware-C.sbi (*)
2014-01-13 Includes\Malware.sbi (*)
2013-12-23 Includes\MalwareC.sbi (*)
2014-01-15 Includes\PUPS-000.sbi (*)
2014-01-15 Includes\PUPS-001.sbi (*)
2014-01-15 Includes\PUPS-002.sbi (*)
2014-02-26 Includes\PUPS-C.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2014-01-07 Includes\PUPSC.sbi (*)
2014-01-08 Includes\Security-000.sbi (*)
2014-01-08 Includes\Security-C.sbi (*)
2014-01-21 Includes\Security.sbi (*)
2014-01-21 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2014-01-08 Includes\Spyware-000.sbi (*)
2014-01-08 Includes\Spyware-001.sbi (*)
2014-01-08 Includes\Spyware-C.sbi (*)
2014-01-21 Includes\Spyware.sbi (*)
2014-01-21 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2014-01-15 Includes\Trojans-000.sbi (*)
2014-01-15 Includes\Trojans-001.sbi (*)
2014-01-15 Includes\Trojans-002.sbi (*)
2014-01-15 Includes\Trojans-003.sbi (*)
2014-01-15 Includes\Trojans-004.sbi (*)
2014-01-15 Includes\Trojans-005.sbi (*)
2014-01-15 Includes\Trojans-006.sbi (*)
2014-01-15 Includes\Trojans-007.sbi (*)
2014-01-15 Includes\Trojans-008.sbi (*)
2014-01-15 Includes\Trojans-009.sbi (*)
2014-02-26 Includes\Trojans-C.sbi (*)
2014-01-15 Includes\Trojans-OG-000.sbi (*)
2014-01-15 Includes\Trojans-TD-000.sbi (*)
2014-01-15 Includes\Trojans-VM-000.sbi (*)
2014-01-15 Includes\Trojans-VM-001.sbi (*)
2014-01-15 Includes\Trojans-VM-002.sbi (*)
2014-01-15 Includes\Trojans-VM-003.sbi (*)
2014-01-15 Includes\Trojans-VM-004.sbi (*)
2014-01-15 Includes\Trojans-VM-005.sbi (*)
2014-01-15 Includes\Trojans-VM-006.sbi (*)
2014-01-15 Includes\Trojans-VM-007.sbi (*)
2014-01-15 Includes\Trojans-VM-008.sbi (*)
2014-01-15 Includes\Trojans-VM-009.sbi (*)
2014-01-15 Includes\Trojans-VM-010.sbi (*)
2014-01-15 Includes\Trojans-VM-011.sbi (*)
2014-01-15 Includes\Trojans-VM-012.sbi (*)
2014-01-15 Includes\Trojans-VM-013.sbi (*)
2014-01-15 Includes\Trojans-VM-014.sbi (*)
2014-01-15 Includes\Trojans-VM-015.sbi (*)
2014-01-15 Includes\Trojans-VM-016.sbi (*)
2014-01-15 Includes\Trojans-VM-017.sbi (*)
2014-01-15 Includes\Trojans-VM-018.sbi (*)
2014-01-15 Includes\Trojans-VM-019.sbi (*)
2014-01-15 Includes\Trojans-VM-020.sbi (*)
2014-01-15 Includes\Trojans-VM-021.sbi (*)
2014-01-15 Includes\Trojans-VM-022.sbi (*)
2014-01-15 Includes\Trojans-VM-023.sbi (*)
2014-01-15 Includes\Trojans-VM-024.sbi (*)
2014-01-15 Includes\Trojans-ZB-000.sbi (*)
2014-01-15 Includes\Trojans-ZL-000.sbi (*)
2014-01-09 Includes\Trojans.sbi (*)
2014-01-16 Includes\TrojansC-01.sbi (*)
2014-01-16 Includes\TrojansC-02.sbi (*)
2014-01-16 Includes\TrojansC-03.sbi (*)
2014-01-16 Includes\TrojansC-04.sbi (*)
2014-01-16 Includes\TrojansC-05.sbi (*)
2014-01-09 Includes\TrojansC.sbi (*)
         
Vielen herzlichen Dank für die Mühe!

Alt 01.03.2014, 08:31   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam - Standard

Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam



hi,

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________

__________________

Alt 01.03.2014, 12:44   #3
El3ssaR
 
Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam - Standard

Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam



Vielen Dank! You are my hero! Ich hab das Gefühl das Problem ist gelöst, alles geht auf einmal sehr viel schneller vonstatten. Muss ich mir irgendwelche Sorgen machen oder hat da etwas nur meinen Browser ausgebremst? Anbei die Logs. Übrigens kann ich jetzt auch wieder die Symbole wie das # hier im Fenster nutzen, den Code musste ich gestern Nacht noch von Hand eingeben, um die Logs posten zu können D:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02
Ran by Dani (administrator) on DANI-PC on 01-03-2014 13:35:23
Running from C:\Users\Dani\Downloads
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlX64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Flux Software LLC) C:\Users\Dani\AppData\Local\FluxSoftware\Flux\flux.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTXFISPI.EXE
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [CTxfiHlp] - CTXFIHLP.EXE
HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [F.lux] - C:\Users\Dani\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [LightShot] - C:\Users\Dani\AppData\Local\Skillbrains\lightshot\LightShot.exe [195072 2012-02-02] ()
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-20] ()
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [Steam] - D:\Games\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\MountPoints2: {3c89804b-96ba-11e3-bf59-f46d04cf6127} - "L:\Startme.exe" 
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\MountPoints2: {4aaa9c37-30a5-11e2-be72-f46d04cf6127} - "F:\Setup.EXE" 
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll => "C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll" File Not Found
Startup: C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFDF96472E9CFCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E2EBA4A1-F71A-4DFA-AA65-AD9099523CF9}: [NameServer]192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: YouTube™ Anywhere Player - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\{c9d31470-81c6-4e3e-9a37-46eb9237ed3a} [2014-01-17]
FF Extension: SmartVideo For YouTube - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\mytube@ashishmishra.in.xpi [2013-04-15]
FF Extension: Test Pilot - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\testpilot@labs.mozilla.com.xpi [2012-11-26]
FF Extension: Adblock Plus - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-11-26]

==================== Services (Whitelisted) =================

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-10-28] ()
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek                                            )
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2012-11-17] (DT Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-09-28] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-09-28] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64856 2013-09-28] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68440 2013-11-11] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2013-10-01] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-09-28] (G Data Software AG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-10-28] ()
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S3 NdisImPlatformMp; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [126464 2012-07-26] (Microsoft Corporation)
S3 s1039bus; C:\Windows\System32\drivers\s1039bus.sys [127600 2009-11-19] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\system32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\system32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\system32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\system32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\system32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\drivers\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-03-01] (Windows (R) Win 7 DDK provider)
S3 UHSfiltv; C:\Windows\system32\drivers\UHSfiltv.sys [23552 2012-09-12] (Creative Technology Ltd.)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-01 13:35 - 2014-03-01 13:35 - 00015866 _____ () C:\Users\Dani\Downloads\FRST.txt
2014-03-01 13:33 - 2014-03-01 13:33 - 00000822 _____ () C:\Users\Dani\Desktop\JRT.txt
2014-03-01 13:17 - 2014-03-01 13:17 - 00000000 ____D () C:\Windows\ERUNT
2014-03-01 13:16 - 2014-03-01 13:16 - 01037734 _____ (Thisisu) C:\Users\Dani\Downloads\JRT.exe
2014-03-01 13:15 - 2014-03-01 13:15 - 00001043 _____ () C:\Users\Dani\Desktop\AdwCleaner[S0].txt
2014-03-01 13:00 - 2014-03-01 13:09 - 00000000 ____D () C:\AdwCleaner
2014-03-01 13:00 - 2014-03-01 13:00 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner(1).exe
2014-03-01 12:59 - 2014-03-01 12:59 - 00000000 _____ () C:\Users\Dani\Downloads\adwcleaner.exe
2014-03-01 02:50 - 2014-03-01 02:50 - 00002879 _____ () C:\Users\Dani\Desktop\Gmer.log
2014-03-01 02:30 - 2014-03-01 02:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-01 02:27 - 2014-03-01 02:27 - 00013577 _____ () C:\Users\Dani\Desktop\Checks.140228-2010.txt
2014-03-01 02:24 - 2014-03-01 02:24 - 00007700 _____ () C:\Users\Dani\Desktop\Checks.140228-2225.txt
2014-03-01 02:13 - 2014-03-01 02:13 - 00380416 _____ () C:\Users\Dani\Downloads\t4w1kw00.exe
2014-03-01 02:05 - 2014-03-01 02:04 - 00043097 _____ () C:\Users\Dani\Desktop\Addition.txt
2014-03-01 02:05 - 2014-03-01 02:04 - 00039677 _____ () C:\Users\Dani\Desktop\FRST.txt
2014-03-01 01:57 - 2014-03-01 13:35 - 00000000 ____D () C:\FRST
2014-03-01 01:56 - 2014-03-01 01:56 - 02155520 _____ (Farbar) C:\Users\Dani\Downloads\FRST64.exe
2014-03-01 00:20 - 2014-03-01 00:27 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-28 23:34 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-28 23:32 - 2014-02-28 23:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dani\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-28 23:32 - 2014-02-28 23:32 - 05049344 _____ (Crawler.com ) C:\Users\Dani\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-02-28 22:33 - 2014-02-28 22:34 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner_3.0.2.0.exe
2014-02-27 14:21 - 2014-02-27 14:21 - 00085308 _____ () C:\Users\Dani\Downloads\20130905_VVS.pptx
2014-02-27 02:26 - 2014-03-01 02:11 - 00000000 ____D () C:\Users\Dani\AppData\Local\Battle.net
2014-02-27 02:26 - 2014-02-28 03:37 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Battle.net
2014-02-27 02:26 - 2014-02-27 02:26 - 00001156 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Local\Blizzard Entertainment
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-02-26 16:07 - 2014-02-26 16:07 - 00000208 _____ () C:\Users\Dani\Desktop\Path of Exile.url
2014-02-18 00:19 - 2014-02-18 00:19 - 00000000 ____D () C:\Windows\LastGood.Tmp
2014-02-18 00:18 - 2014-02-18 00:19 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony Setup
2014-02-18 00:18 - 2014-02-18 00:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony
2014-02-18 00:16 - 2009-11-19 14:06 - 00127600 _____ (MCCI Corporation) C:\Windows\system32\Drivers\s1039bus.sys
2014-02-18 00:16 - 2009-11-19 14:06 - 00015984 _____ (MCCI Corporation) C:\Windows\system32\Drivers\s1039whnt.sys
2014-02-15 01:24 - 2013-11-27 01:19 - 00385614 _____ () C:\Windows\system32\ApnDatabase.xml
2014-02-15 01:24 - 2013-11-26 00:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-15 01:24 - 2013-11-01 06:53 - 02232664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-15 01:23 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-15 01:23 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-15 01:23 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-15 01:23 - 2014-02-01 10:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-02-15 01:23 - 2014-02-01 10:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-15 01:23 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-15 01:23 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-15 01:23 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-15 01:23 - 2014-02-01 08:58 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-15 01:23 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-15 01:23 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-15 01:23 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-15 01:23 - 2014-02-01 06:08 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-02-15 01:23 - 2014-01-13 00:30 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-15 01:23 - 2014-01-13 00:30 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-15 01:23 - 2013-12-09 01:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-15 01:23 - 2013-12-09 00:59 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-15 01:23 - 2013-12-05 00:43 - 01845248 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-15 01:23 - 2013-12-05 00:43 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-15 01:23 - 2013-12-05 00:37 - 01419264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-15 01:23 - 2013-12-05 00:37 - 00451072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-15 01:23 - 2013-11-20 01:15 - 03842560 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-15 01:23 - 2013-11-20 00:57 - 03288576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-15 01:23 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-02-15 01:23 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2014-02-15 01:23 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2014-02-15 01:23 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2014-02-15 01:23 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-02-15 01:23 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-02-15 01:23 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2014-02-15 01:23 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-02-15 01:23 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-02-15 01:23 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-02-15 01:23 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-02-15 01:22 - 2013-12-07 07:37 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-02-15 01:22 - 2013-12-07 07:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-15 01:22 - 2013-12-07 06:15 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-02-15 01:22 - 2013-12-07 06:15 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-11 02:31 - 2014-02-11 02:33 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\dvdcss
2014-02-10 14:29 - 2014-02-10 14:29 - 15492434 _____ () C:\Users\Dani\Desktop\DSC_0028.dng
2014-02-10 14:22 - 2014-02-10 14:22 - 15465786 _____ () C:\Users\Dani\Desktop\DSC_0031.dng
2014-02-09 21:28 - 2014-02-09 21:29 - 07427245 _____ () C:\Users\Dani\Desktop\DSC_0032.dng
2014-02-08 03:20 - 2014-03-01 03:02 - 00001187 _____ () C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-02-06 15:21 - 2014-02-06 18:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-02 20:34 - 2014-03-01 01:54 - 00000000 ____D () C:\Users\Dani\Desktop\Fasnet14
2014-01-30 12:03 - 2014-01-30 16:36 - 00081458 _____ () C:\Users\Dani\Desktop\536305_20140129_Kontaktdaten_NwT.xlsx

==================== One Month Modified Files and Folders =======

2014-03-01 13:35 - 2014-03-01 13:35 - 00015866 _____ () C:\Users\Dani\Downloads\FRST.txt
2014-03-01 13:35 - 2014-03-01 01:57 - 00000000 ____D () C:\FRST
2014-03-01 13:35 - 2012-12-20 21:05 - 00000000 ____D () C:\Users\Dani\AppData\Local\PMB Files
2014-03-01 13:33 - 2014-03-01 13:33 - 00000822 _____ () C:\Users\Dani\Desktop\JRT.txt
2014-03-01 13:17 - 2014-03-01 13:17 - 00000000 ____D () C:\Windows\ERUNT
2014-03-01 13:16 - 2014-03-01 13:16 - 01037734 _____ (Thisisu) C:\Users\Dani\Downloads\JRT.exe
2014-03-01 13:15 - 2014-03-01 13:15 - 00001043 _____ () C:\Users\Dani\Desktop\AdwCleaner[S0].txt
2014-03-01 13:13 - 2012-11-10 19:37 - 00000402 _____ () C:\Windows\Tasks\update-S-1-5-21-3053964864-2100263365-1666197601-1001.job
2014-03-01 13:13 - 2012-11-07 00:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-01 13:13 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-01 13:11 - 2012-11-07 00:26 - 00424928 _____ () C:\Windows\PFRO.log
2014-03-01 13:09 - 2014-03-01 13:00 - 00000000 ____D () C:\AdwCleaner
2014-03-01 13:00 - 2014-03-01 13:00 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner(1).exe
2014-03-01 12:59 - 2014-03-01 12:59 - 00000000 _____ () C:\Users\Dani\Downloads\adwcleaner.exe
2014-03-01 12:54 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-03-01 03:02 - 2014-02-08 03:20 - 00001187 _____ () C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-03-01 02:50 - 2014-03-01 02:50 - 00002879 _____ () C:\Users\Dani\Desktop\Gmer.log
2014-03-01 02:37 - 2013-01-08 19:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-01 02:30 - 2014-03-01 02:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-01 02:27 - 2014-03-01 02:27 - 00013577 _____ () C:\Users\Dani\Desktop\Checks.140228-2010.txt
2014-03-01 02:24 - 2014-03-01 02:24 - 00007700 _____ () C:\Users\Dani\Desktop\Checks.140228-2225.txt
2014-03-01 02:13 - 2014-03-01 02:13 - 00380416 _____ () C:\Users\Dani\Downloads\t4w1kw00.exe
2014-03-01 02:11 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Local\Battle.net
2014-03-01 02:04 - 2014-03-01 02:05 - 00043097 _____ () C:\Users\Dani\Desktop\Addition.txt
2014-03-01 02:04 - 2014-03-01 02:05 - 00039677 _____ () C:\Users\Dani\Desktop\FRST.txt
2014-03-01 02:01 - 2012-11-07 01:17 - 01824256 ___SH () C:\Users\Dani\Downloads\Thumbs.db
2014-03-01 01:56 - 2014-03-01 01:56 - 02155520 _____ (Farbar) C:\Users\Dani\Downloads\FRST64.exe
2014-03-01 01:54 - 2014-02-02 20:34 - 00000000 ____D () C:\Users\Dani\Desktop\Fasnet14
2014-03-01 01:35 - 2012-12-20 21:05 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-01 00:48 - 2012-11-10 19:37 - 00000402 _____ () C:\Windows\Tasks\update-sys.job
2014-03-01 00:27 - 2014-03-01 00:20 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-28 23:32 - 2014-02-28 23:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dani\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-28 23:32 - 2014-02-28 23:32 - 05049344 _____ (Crawler.com ) C:\Users\Dani\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-02-28 22:34 - 2014-02-28 22:33 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner_3.0.2.0.exe
2014-02-28 21:16 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-28 16:13 - 2012-11-21 11:14 - 00000000 ____D () C:\Program Files\Opera x64
2014-02-28 16:13 - 2012-11-21 11:14 - 00000000 ____D () C:\Program Files (x86)\Opera x64
2014-02-28 03:37 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Battle.net
2014-02-28 02:30 - 2012-12-20 23:25 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\TS3Client
2014-02-27 15:09 - 2012-11-07 00:43 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3053964864-2100263365-1666197601-1001
2014-02-27 14:21 - 2014-02-27 14:21 - 00085308 _____ () C:\Users\Dani\Downloads\20130905_VVS.pptx
2014-02-27 14:06 - 2013-05-16 12:32 - 00189356 _____ () C:\Windows\DPINST.LOG
2014-02-27 02:26 - 2014-02-27 02:26 - 00001156 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Local\Blizzard Entertainment
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-02-26 17:58 - 2012-11-07 01:06 - 00000000 ____D () C:\Users\Dani\Documents\My Games
2014-02-26 16:07 - 2014-02-26 16:07 - 00000208 _____ () C:\Users\Dani\Desktop\Path of Exile.url
2014-02-26 13:42 - 2012-11-07 01:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-23 21:00 - 2012-11-07 01:04 - 00014544 _____ () C:\Users\Dani\Desktop\Filmliste.xlsx
2014-02-22 14:03 - 2012-07-26 11:27 - 00751892 _____ () C:\Windows\system32\perfh007.dat
2014-02-22 14:03 - 2012-07-26 11:27 - 00155620 _____ () C:\Windows\system32\perfc007.dat
2014-02-22 14:03 - 2012-07-26 08:28 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-20 20:37 - 2013-01-08 19:47 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-18 00:21 - 2012-11-07 14:26 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-18 00:19 - 2014-02-18 00:19 - 00000000 ____D () C:\Windows\LastGood.Tmp
2014-02-18 00:19 - 2014-02-18 00:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony Setup
2014-02-18 00:19 - 2012-11-07 00:36 - 01229151 _____ () C:\Windows\WindowsUpdate.log
2014-02-18 00:18 - 2014-02-18 00:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony
2014-02-16 15:24 - 2012-12-21 17:54 - 00000039 _____ () C:\Windows\vbaddin.ini
2014-02-16 15:24 - 2012-11-07 11:11 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-16 15:23 - 2013-07-19 17:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-15 15:52 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\rescache
2014-02-15 03:42 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\WinStore
2014-02-15 01:25 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-02-13 13:37 - 2012-11-07 01:04 - 05909504 ___SH () C:\Users\Dani\Desktop\Thumbs.db
2014-02-11 04:53 - 2013-01-17 00:50 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\vlc
2014-02-11 02:33 - 2014-02-11 02:31 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\dvdcss
2014-02-11 00:27 - 2014-01-24 17:55 - 02942259 _____ () C:\Users\Dani\Desktop\Das Gehirn.pptx
2014-02-10 18:29 - 2014-01-20 21:14 - 00000000 ____D () C:\Users\Dani\Desktop\50er
2014-02-10 14:29 - 2014-02-10 14:29 - 15492434 _____ () C:\Users\Dani\Desktop\DSC_0028.dng
2014-02-10 14:22 - 2014-02-10 14:22 - 15465786 _____ () C:\Users\Dani\Desktop\DSC_0031.dng
2014-02-09 21:29 - 2014-02-09 21:28 - 07427245 _____ () C:\Users\Dani\Desktop\DSC_0032.dng
2014-02-06 18:13 - 2014-02-06 15:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-04 19:09 - 2012-11-14 09:26 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-01 13:41 - 2013-11-11 22:14 - 00000000 ____D () C:\Windows\Minidump
2014-02-01 13:41 - 2012-11-07 00:26 - 00084992 ____N () C:\Windows\Minidump\020114-22713-01.dmp
2014-02-01 10:20 - 2014-02-15 01:23 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-01 10:19 - 2014-02-15 01:23 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-01 10:19 - 2014-02-15 01:23 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-01 10:19 - 2014-02-15 01:23 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-02-01 10:19 - 2014-02-15 01:23 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-01 10:18 - 2014-02-15 01:23 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-01 08:58 - 2014-02-15 01:23 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-01 08:58 - 2014-02-15 01:23 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-01 08:58 - 2014-02-15 01:23 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-01 08:57 - 2014-02-15 01:23 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-01 08:40 - 2014-02-15 01:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-01 08:34 - 2014-02-15 01:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-01 06:08 - 2014-02-15 01:23 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-01-30 22:10 - 2013-11-17 17:16 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-30 22:10 - 2013-11-17 17:16 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 16:36 - 2014-01-30 12:03 - 00081458 _____ () C:\Users\Dani\Desktop\536305_20140129_Kontaktdaten_NwT.xlsx

Files to move or delete:
====================
C:\Users\Dani\AppData\Roaming\CamLayout.ini
C:\Users\Dani\AppData\Roaming\CamShapes.ini
C:\Users\Dani\AppData\Roaming\CamStudio.Producer.Data.ini


Some content of TEMP:
====================
C:\Users\Dani\AppData\Local\Temp\CTPBSeq.exe
C:\Users\Dani\AppData\Local\Temp\ose00000.exe
C:\Users\Dani\AppData\Local\Temp\ose00001.exe
C:\Users\Dani\AppData\Local\Temp\ose00002.exe
C:\Users\Dani\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-27 15:11

==================== End Of Log ============================
         
--- --- ---

--- --- ---
__________________

Alt 02.03.2014, 07:17   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam - Standard

Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam



Die logfiles der Tools fehlen noch



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 20.03.2014, 18:34   #5
El3ssaR
 
Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam - Standard

Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam



So hier endlich sämtliche Logs! Danke

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.28.10

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16798
Dani :: DANI-PC [Administrator]

01.03.2014 12:59:09
mbam-log-2014-03-01 (12-59-09).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 245139
Laufzeit: 5 Minute(n), 43 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
Code:
ATTFilter
# AdwCleaner v3.020 - Bericht erstellt am 01/03/2014 um 13:09:39
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 8 Pro  (64 bits)
# Benutzername : Dani - DANI-PC
# Gestartet von : C:\Users\Dani\Downloads\adwcleaner(1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Dani\AppData\Local\Temp\OCS
[x] Nicht Gelöscht : C:\Users\Dani\AppData\Roaming\pdfforge

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\Software\caphyon

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16798


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1021 octets] - [01/03/2014 13:08:02]
AdwCleaner[S0].txt - [905 octets] - [01/03/2014 13:09:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [964 octets] ##########
         
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 8 Pro x64
Ran by Dani on 01.03.2014 at 13:17:37,66
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Dani\AppData\Roaming\pdfforge"



~~~ FireFox

Emptied folder: C:\Users\Dani\AppData\Roaming\mozilla\firefox\profiles\p3gyntb7.default\minidumps [298 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.03.2014 at 13:33:41,29
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=dd5c1ddd7368954cb36ac53f1e9bfdd4
# engine=17531
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-20 05:52:46
# local_time=2014-03-20 06:52:46 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=5893 16776574 100 94 18513156 45311623 0 0
# compatibility_mode=7937 16777214 28 75 1708345 30383214 0 0
# scanned=254311
# found=0
# cleaned=0
# scan_time=5349
         
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.80  
   x64 (UAC is enabled)  
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
G Data AntiVirus 2014   
Windows Defender        
 Antivirus out of date!  
`````````Anti-malware/Other Utilities Check:````````` 
 MVPS Hosts File  
 Spyware Terminator 2012   
 Spybot - Search & Destroy 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Adobe Flash Player 	12.0.0.77  
 Mozilla Firefox (28.0) 
 Mozilla Thunderbird (24.3.0) 
````````Process Check: objlist.exe by Laurent````````  
 Spybot Teatimer.exe is disabled! 
 G Data AntiVirus AVK AVKWCtlX64.exe 
 G Data AntiVirus AVK AVKService.exe 
 G Data AntiVirus AVKTray AVKTray.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Dani (administrator) on DANI-PC on 20-03-2014 18:58:12
Running from C:\Users\Dani\Downloads
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlX64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Flux Software LLC) C:\Users\Dani\AppData\Local\FluxSoftware\Flux\flux.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTXFISPI.EXE
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [CTxfiHlp] - CTXFIHLP.EXE
HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [F.lux] - C:\Users\Dani\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [LightShot] - C:\Users\Dani\AppData\Local\Skillbrains\lightshot\LightShot.exe [195072 2012-02-02] ()
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-20] ()
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\Run: [Steam] - D:\Games\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\MountPoints2: {3c89804b-96ba-11e3-bf59-f46d04cf6127} - "L:\Startme.exe" 
HKU\S-1-5-21-3053964864-2100263365-1666197601-1001\...\MountPoints2: {4aaa9c37-30a5-11e2-be72-f46d04cf6127} - "F:\Setup.EXE" 
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll => "C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll" File Not Found
Startup: C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFDF96472E9CFCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E2EBA4A1-F71A-4DFA-AA65-AD9099523CF9}: [NameServer]192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: YouTube™ Anywhere Player - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\{c9d31470-81c6-4e3e-9a37-46eb9237ed3a} [2014-01-17]
FF Extension: SmartVideo For YouTube - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\mytube@ashishmishra.in.xpi [2013-04-15]
FF Extension: Test Pilot - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\testpilot@labs.mozilla.com.xpi [2012-11-26]
FF Extension: Adblock Plus - C:\Users\Dani\AppData\Roaming\Mozilla\Firefox\Profiles\p3gyntb7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-11-26]

==================== Services (Whitelisted) =================

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-10-28] ()
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek                                            )
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2012-11-17] (DT Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-09-28] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-09-28] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64856 2013-09-28] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68440 2013-11-11] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2013-10-01] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-09-28] (G Data Software AG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-10-28] ()
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S3 NdisImPlatformMp; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [126464 2012-07-26] (Microsoft Corporation)
S3 s1039bus; C:\Windows\System32\drivers\s1039bus.sys [127600 2009-11-19] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\system32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\system32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\system32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\system32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\system32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\drivers\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-03-01] (Windows (R) Win 7 DDK provider)
S3 UHSfiltv; C:\Windows\system32\drivers\UHSfiltv.sys [23552 2012-09-12] (Creative Technology Ltd.)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-20 18:58 - 2014-03-20 18:58 - 00000000 ____D () C:\Users\Dani\Downloads\FRST-OlderVersion
2014-03-20 18:57 - 2014-03-20 18:57 - 00001041 _____ () C:\Users\Dani\Desktop\checkup.txt
2014-03-20 18:55 - 2014-03-20 18:55 - 00987442 _____ () C:\Users\Dani\Desktop\SecurityCheck.exe
2014-03-20 17:30 - 2014-03-01 13:09 - 00001043 _____ () C:\Users\Dani\Desktop\AdwCleaner[S0].txt
2014-03-20 17:19 - 2014-03-20 17:20 - 02347384 _____ (ESET) C:\Users\Dani\Downloads\esetsmartinstaller_enu.exe
2014-03-16 23:46 - 2014-03-16 23:50 - 15368769 _____ () C:\Users\Dani\Desktop\DSC_0043.dng
2014-03-16 23:45 - 2014-03-16 15:37 - 16813602 _____ () C:\Users\Dani\Desktop\DSC_0043.NEF
2014-03-12 13:09 - 2014-03-12 13:15 - 13433514 _____ () C:\Users\Dani\Desktop\DSC_0033.dng
2014-03-08 02:25 - 2014-03-08 02:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-07 17:28 - 2014-03-07 17:49 - 00000000 ____D () C:\ProgramData\tmp
2014-03-07 17:28 - 2014-03-07 17:49 - 00000000 ____D () C:\ProgramData\hps
2014-03-07 17:24 - 2014-03-07 17:24 - 00000000 ____D () C:\Program Files (x86)\Mueller Foto
2014-03-07 17:23 - 2014-03-07 17:23 - 01627296 _____ () C:\Users\Dani\Downloads\setup_Mueller_Fotowelt.exe
2014-03-07 14:19 - 2014-03-07 17:36 - 00000000 ____D () C:\Users\Dani\Desktop\Benni Bilderwand
2014-03-05 13:52 - 2014-03-07 13:59 - 00079878 _____ () C:\Users\Dani\Desktop\536305_20130116_Kontaktdaten_NwT.xlsx
2014-03-01 13:35 - 2014-03-20 18:58 - 00016285 _____ () C:\Users\Dani\Downloads\FRST.txt
2014-03-01 13:35 - 2014-03-01 13:36 - 00042760 _____ () C:\Users\Dani\Downloads\Addition.txt
2014-03-01 13:33 - 2014-03-01 13:33 - 00000822 _____ () C:\Users\Dani\Desktop\JRT.txt
2014-03-01 13:17 - 2014-03-01 13:17 - 00000000 ____D () C:\Windows\ERUNT
2014-03-01 13:16 - 2014-03-01 13:16 - 01037734 _____ (Thisisu) C:\Users\Dani\Downloads\JRT.exe
2014-03-01 13:00 - 2014-03-01 13:09 - 00000000 ____D () C:\AdwCleaner
2014-03-01 13:00 - 2014-03-01 13:00 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner(1).exe
2014-03-01 12:59 - 2014-03-01 12:59 - 00000000 _____ () C:\Users\Dani\Downloads\adwcleaner.exe
2014-03-01 02:13 - 2014-03-01 02:13 - 00380416 _____ () C:\Users\Dani\Downloads\t4w1kw00.exe
2014-03-01 01:57 - 2014-03-20 18:58 - 00000000 ____D () C:\FRST
2014-03-01 01:56 - 2014-03-20 18:58 - 02157056 _____ (Farbar) C:\Users\Dani\Downloads\FRST64.exe
2014-03-01 00:20 - 2014-03-18 18:27 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-28 23:34 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-28 23:32 - 2014-02-28 23:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dani\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-28 23:32 - 2014-02-28 23:32 - 05049344 _____ (Crawler.com ) C:\Users\Dani\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-02-28 22:33 - 2014-02-28 22:34 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner_3.0.2.0.exe
2014-02-27 14:21 - 2014-02-27 14:21 - 00085308 _____ () C:\Users\Dani\Downloads\20130905_VVS.pptx
2014-02-27 02:26 - 2014-03-19 18:01 - 00000000 ____D () C:\Users\Dani\AppData\Local\Battle.net
2014-02-27 02:26 - 2014-03-07 23:27 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-02-27 02:26 - 2014-02-28 03:37 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Battle.net
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Local\Blizzard Entertainment
2014-02-18 00:19 - 2014-02-18 00:19 - 00000000 ____D () C:\Windows\LastGood.Tmp
2014-02-18 00:18 - 2014-02-18 00:19 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony Setup
2014-02-18 00:18 - 2014-02-18 00:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony
2014-02-18 00:16 - 2009-11-19 14:06 - 00127600 _____ (MCCI Corporation) C:\Windows\system32\Drivers\s1039bus.sys
2014-02-18 00:16 - 2009-11-19 14:06 - 00015984 _____ (MCCI Corporation) C:\Windows\system32\Drivers\s1039whnt.sys

==================== One Month Modified Files and Folders =======

2014-03-20 18:58 - 2014-03-20 18:58 - 00000000 ____D () C:\Users\Dani\Downloads\FRST-OlderVersion
2014-03-20 18:58 - 2014-03-01 13:35 - 00016285 _____ () C:\Users\Dani\Downloads\FRST.txt
2014-03-20 18:58 - 2014-03-01 01:57 - 00000000 ____D () C:\FRST
2014-03-20 18:58 - 2014-03-01 01:56 - 02157056 _____ (Farbar) C:\Users\Dani\Downloads\FRST64.exe
2014-03-20 18:57 - 2014-03-20 18:57 - 00001041 _____ () C:\Users\Dani\Desktop\checkup.txt
2014-03-20 18:57 - 2012-11-07 01:04 - 06144000 ___SH () C:\Users\Dani\Desktop\Thumbs.db
2014-03-20 18:57 - 2012-11-07 01:02 - 00739328 ___SH () C:\Users\Dani\Thumbs.db
2014-03-20 18:55 - 2014-03-20 18:55 - 00987442 _____ () C:\Users\Dani\Desktop\SecurityCheck.exe
2014-03-20 18:37 - 2013-01-08 19:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-20 18:00 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-03-20 17:20 - 2014-03-20 17:19 - 02347384 _____ (ESET) C:\Users\Dani\Downloads\esetsmartinstaller_enu.exe
2014-03-20 16:54 - 2012-12-20 21:05 - 00000000 ____D () C:\Users\Dani\AppData\Local\PMB Files
2014-03-20 16:54 - 2012-12-20 21:05 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-20 16:48 - 2012-11-10 19:37 - 00000402 _____ () C:\Windows\Tasks\update-sys.job
2014-03-20 15:32 - 2012-11-10 19:37 - 00000402 _____ () C:\Windows\Tasks\update-S-1-5-21-3053964864-2100263365-1666197601-1001.job
2014-03-20 14:41 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-20 14:40 - 2012-11-07 00:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-19 18:01 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Local\Battle.net
2014-03-19 02:41 - 2012-12-20 23:25 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\TS3Client
2014-03-18 18:27 - 2014-03-01 00:20 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-03-16 23:50 - 2014-03-16 23:46 - 15368769 _____ () C:\Users\Dani\Desktop\DSC_0043.dng
2014-03-16 18:11 - 2012-11-07 01:04 - 00000000 ____D () C:\Users\Dani\Desktop\Pix-Neu
2014-03-16 15:37 - 2014-03-16 23:45 - 16813602 _____ () C:\Users\Dani\Desktop\DSC_0043.NEF
2014-03-15 16:21 - 2012-11-07 01:17 - 01895936 ___SH () C:\Users\Dani\Downloads\Thumbs.db
2014-03-15 12:09 - 2012-12-20 23:24 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-03-12 13:15 - 2014-03-12 13:09 - 13433514 _____ () C:\Users\Dani\Desktop\DSC_0033.dng
2014-03-11 18:37 - 2013-01-08 19:47 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-10 14:22 - 2014-02-02 20:34 - 00000000 ____D () C:\Users\Dani\Desktop\Fasnet14
2014-03-10 13:29 - 2012-11-07 01:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-08 17:51 - 2014-02-08 03:20 - 00001187 _____ () C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-03-08 02:25 - 2014-03-08 02:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-07 23:27 - 2014-02-27 02:26 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-03-07 17:49 - 2014-03-07 17:28 - 00000000 ____D () C:\ProgramData\tmp
2014-03-07 17:49 - 2014-03-07 17:28 - 00000000 ____D () C:\ProgramData\hps
2014-03-07 17:36 - 2014-03-07 14:19 - 00000000 ____D () C:\Users\Dani\Desktop\Benni Bilderwand
2014-03-07 17:24 - 2014-03-07 17:24 - 00000000 ____D () C:\Program Files (x86)\Mueller Foto
2014-03-07 17:23 - 2014-03-07 17:23 - 01627296 _____ () C:\Users\Dani\Downloads\setup_Mueller_Fotowelt.exe
2014-03-07 14:12 - 2014-01-30 12:03 - 00081460 _____ () C:\Users\Dani\Desktop\Daniel Evers-Daten.xlsx
2014-03-07 13:59 - 2014-03-05 13:52 - 00079878 _____ () C:\Users\Dani\Desktop\536305_20130116_Kontaktdaten_NwT.xlsx
2014-03-07 12:49 - 2012-11-07 00:26 - 00425256 _____ () C:\Windows\PFRO.log
2014-03-01 13:36 - 2014-03-01 13:35 - 00042760 _____ () C:\Users\Dani\Downloads\Addition.txt
2014-03-01 13:33 - 2014-03-01 13:33 - 00000822 _____ () C:\Users\Dani\Desktop\JRT.txt
2014-03-01 13:17 - 2014-03-01 13:17 - 00000000 ____D () C:\Windows\ERUNT
2014-03-01 13:16 - 2014-03-01 13:16 - 01037734 _____ (Thisisu) C:\Users\Dani\Downloads\JRT.exe
2014-03-01 13:09 - 2014-03-20 17:30 - 00001043 _____ () C:\Users\Dani\Desktop\AdwCleaner[S0].txt
2014-03-01 13:09 - 2014-03-01 13:00 - 00000000 ____D () C:\AdwCleaner
2014-03-01 13:00 - 2014-03-01 13:00 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner(1).exe
2014-03-01 12:59 - 2014-03-01 12:59 - 00000000 _____ () C:\Users\Dani\Downloads\adwcleaner.exe
2014-03-01 02:13 - 2014-03-01 02:13 - 00380416 _____ () C:\Users\Dani\Downloads\t4w1kw00.exe
2014-03-01 00:20 - 2014-03-01 00:20 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Spyware Terminator
2014-03-01 00:20 - 2014-03-01 00:20 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-28 23:34 - 2014-02-28 23:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-28 23:32 - 2014-02-28 23:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dani\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-28 23:32 - 2014-02-28 23:32 - 05049344 _____ (Crawler.com ) C:\Users\Dani\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-02-28 22:34 - 2014-02-28 22:33 - 01244192 _____ () C:\Users\Dani\Downloads\adwcleaner_3.0.2.0.exe
2014-02-28 21:16 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-28 16:13 - 2012-11-21 11:14 - 00000000 ____D () C:\Program Files\Opera x64
2014-02-28 16:13 - 2012-11-21 11:14 - 00000000 ____D () C:\Program Files (x86)\Opera x64
2014-02-28 03:37 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Battle.net
2014-02-27 15:09 - 2012-11-07 00:43 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3053964864-2100263365-1666197601-1001
2014-02-27 14:21 - 2014-02-27 14:21 - 00085308 _____ () C:\Users\Dani\Downloads\20130905_VVS.pptx
2014-02-27 14:06 - 2013-05-16 12:32 - 00189356 _____ () C:\Windows\DPINST.LOG
2014-02-27 02:26 - 2014-02-27 02:26 - 00000000 ____D () C:\Users\Dani\AppData\Local\Blizzard Entertainment
2014-02-26 17:58 - 2012-11-07 01:06 - 00000000 ____D () C:\Users\Dani\Documents\My Games
2014-02-23 21:00 - 2012-11-07 01:04 - 00014544 _____ () C:\Users\Dani\Desktop\Filmliste.xlsx
2014-02-22 14:03 - 2012-07-26 11:27 - 00751892 _____ () C:\Windows\system32\perfh007.dat
2014-02-22 14:03 - 2012-07-26 11:27 - 00155620 _____ () C:\Windows\system32\perfc007.dat
2014-02-22 14:03 - 2012-07-26 08:28 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-18 00:21 - 2012-11-07 14:26 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-18 00:19 - 2014-02-18 00:19 - 00000000 ____D () C:\Windows\LastGood.Tmp
2014-02-18 00:19 - 2014-02-18 00:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony Setup
2014-02-18 00:19 - 2012-11-07 00:36 - 01229151 _____ () C:\Windows\WindowsUpdate.log
2014-02-18 00:18 - 2014-02-18 00:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Sony

Files to move or delete:
====================
C:\Users\Dani\AppData\Roaming\CamLayout.ini
C:\Users\Dani\AppData\Roaming\CamShapes.ini
C:\Users\Dani\AppData\Roaming\CamStudio.Producer.Data.ini


Some content of TEMP:
====================
C:\Users\Dani\AppData\Local\Temp\CTPBSeq.exe
C:\Users\Dani\AppData\Local\Temp\ose00000.exe
C:\Users\Dani\AppData\Local\Temp\ose00001.exe
C:\Users\Dani\AppData\Local\Temp\ose00002.exe
C:\Users\Dani\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-18 22:34

==================== End Of Log ============================
         
--- --- ---

--- --- ---


Alt 21.03.2014, 10:13   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam - Standard

Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam



Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
--> Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam

Antwort

Themen zu Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam
4d36e972-e325-11ce-bfc1-08002be10318, antivirus, battle.net, bingbar, converter, desktop, excel, failed, firefox, firefox 28.0, firefox langsam, flash player, g-data, google, helper, installation, koyote, langsam, league of legends, mozilla, ntdll.dll, officejet, programm, realtek, registry, registry key, rundll, scan, security, services.exe, software, spyware, tracker, usb, warnung, windows



Ähnliche Themen: Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam


  1. Chrome lädt Seiten extrem langsam
    Plagegeister aller Art und deren Bekämpfung - 21.01.2015 (5)
  2. Win 7 (64 bit): Firefox reagiert verzögert und lädt Seiten nicht immer vollständig
    Log-Analyse und Auswertung - 19.09.2014 (9)
  3. Windows 7 Firefox langsam und https Seiten werden nicht geladen
    Log-Analyse und Auswertung - 11.09.2014 (24)
  4. Windows lange Reaktionszeit nach dem Start / Chrome lädt Youtube Videos extrem langsam
    Log-Analyse und Auswertung - 16.03.2014 (8)
  5. Google lädt falsche Seiten in Firefox und IE
    Log-Analyse und Auswertung - 29.06.2013 (36)
  6. Chrome|Firefox lädt keine Seiten (websearch.mocaflix.com)
    Log-Analyse und Auswertung - 11.04.2013 (9)
  7. Browser lädt (einige) Seiten langsam und unvollständig
    Log-Analyse und Auswertung - 20.01.2013 (32)
  8. Firefox lädt ein paar Seiten bzw. Videos sehr langsam
    Log-Analyse und Auswertung - 28.03.2012 (1)
  9. Firefox lädt keine Seiten mehr bzw. muss den Prozess mit dem Task-Manager beenden
    Plagegeister aller Art und deren Bekämpfung - 08.01.2012 (9)
  10. FireFox lädt Seiten zeitweise nicht
    Log-Analyse und Auswertung - 04.06.2011 (1)
  11. Browser (Opera, Firefox) lädt aufgerufene Seiten nicht sofort!
    Alles rund um Windows - 07.12.2010 (17)
  12. Firefox lädt nicht alle Seiten
    Log-Analyse und Auswertung - 08.10.2010 (18)
  13. Firefox öffnet sporadisch neuen Tab und lädt diverse Seiten
    Plagegeister aller Art und deren Bekämpfung - 16.09.2010 (11)
  14. Firefox lädt seiten nicht mehr
    Log-Analyse und Auswertung - 29.03.2009 (1)
  15. Firefox lädt diverse Seiten nicht mehr
    Log-Analyse und Auswertung - 24.10.2008 (2)
  16. Firefox lädt teilweise nur weiße Seiten / IE genau das gleiche
    Log-Analyse und Auswertung - 25.09.2008 (10)
  17. Firefox lädt keine Seiten+google.de googelt nicht mehr
    Mülltonne - 25.08.2008 (0)

Zum Thema Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam - Hallo! Seit kurzer Zeit hat sich bei meinem Firefox-Browser die Angewohnheit eingeschlichen Seiten nur sehr sehr langsam zu laden. Meistens ist es sogar so, dass jede Seite zunächst komplett blank - Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam...
Archiv
Du betrachtest: Windows 8 Pro x64: Firefox lädt Seiten nur nach wiederholtem Aktualisieren und untypisch langsam auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.