Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Avast findet Virus und Malwarebytes findet Viren

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 08.03.2014, 16:30   #1
sever01
 
Avast findet Virus und Malwarebytes findet Viren - Standard

Avast findet Virus und Malwarebytes findet Viren



Hallo,
ich habe Heute mal meinen PC auf Viren gescannt. Nachdem Avast "NSIS:NextLive-A" gefunden hat, habe ich mir Malwarebytes gedownloaded und habe es auch einmal scannen lassen. Mein PC hat keine Symptome, die ich bis jetzt bemerkt habe. Das Internet und der PC haben sich nicht verlangsamt.
Sever01

Malwarebytes
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.08.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16518
Franz :: FRANZ-PC [Administrator]

08.03.2014 13:50:37
MBAM-log-2014-03-08 (14-48-22).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 452803
Laufzeit: 53 Minute(n), 49 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 6
C:\$RECYCLE.BIN\S-1-5-21-921928476-601607189-1348779831-1000\$RKADB69.exe (PUP.Optional.Amonetize.A) -> Keine Aktion durchgeführt.
C:\Users\Franz\AppData\Local\11926\a25799.exe (PUP.Optional.Amonetize.A) -> Keine Aktion durchgeführt.
C:\Users\Franz\AppData\Local\Temp\awhE370.tmp (PUP.Optional.SkyTech.A) -> Keine Aktion durchgeführt.
C:\Users\Franz\AppData\Local\Temp\Fraps3.5.99Setup__4940_il4040.exe (PUP.Optional.Amonetize.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\Re-markit_wd.job (PUP.Optional.ReMarkIt.A) -> Keine Aktion durchgeführt.
C:\Users\Franz\AppData\Local\Temp\Re-markit_2040-4032.exe (PUP.Optional.ReMarkIT.A) -> Keine Aktion durchgeführt.

(Ende)
         
Frst.txt



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-03-2014 01
Ran by Franz (administrator) on FRANZ-PC on 08-03-2014 16:46:31
Running from C:\Users\Franz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(The Within Network, LLC) C:\Windows\UnsignedThemesSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Program Files (x86)\Re-markit-soft\Re-markit_wd.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.75\deploy\LolClient.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-09] (AVAST Software)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKU\S-1-5-21-921928476-601607189-1348779831-1000\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-921928476-601607189-1348779831-1000\...\Run: [NetLimiter] - C:\Program Files\NetLimiter 3\NLClientApp.exe /tray
HKU\S-1-5-21-921928476-601607189-1348779831-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1B05EBC14B4ECE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{B93B3B22-47CA-4026-BCD3-DE87FBC83548}: [NameServer]192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default
FF NewTab: about:blank
FF Homepage: https://www.google.de/|hxxp://www.rudolf-hildebrand-schule.de/|hxxp://nosxclan.ohost.de/index.php?news
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.20 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-28]
FF Extension: Personas Plus - C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default\Extensions\personas@christopher.beard.xpi [2013-06-08]
FF Extension: Adblock Plus - C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-31]
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-11]
FF HKCU\...\Firefox\Extensions: [{8a1a43a3-ee9f-4fff-9c5c-b3063ee1f0e0}] - C:\Program Files (x86)\Re-markit-soft\157.xpi
FF Extension: No Name - C:\Program Files (x86)\Re-markit-soft\157.xpi [2014-03-08]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-09] (AVAST Software)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-20] (Intel Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 UnsignedThemes; C:\Windows\UnsignedThemesSvc.exe [24168 2009-07-13] (The Within Network, LLC)

==================== Drivers (Whitelisted) ====================

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [47512 2013-01-10] (Asmedia Technology)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-09] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-01] ()
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-03-14] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-03-20] (Intel Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2010-03-29] (Texas Instruments)
R2 uxpatch; C:\Windows\system32\drivers\uxpatch.sys [30568 2009-07-13] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
U5 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-21] (Microsoft Corporation)
S3 NLNdisMP; system32\DRIVERS\nlndis.sys [X]
S3 NLNdisPT; system32\DRIVERS\nlndis.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-08 16:40 - 2014-03-08 16:46 - 00014466 _____ () C:\Users\Franz\Downloads\FRST.txt
2014-03-08 16:40 - 2014-03-08 16:40 - 00000000 ____D () C:\FRST
2014-03-08 16:39 - 2014-03-08 16:39 - 02156544 _____ (Farbar) C:\Users\Franz\Downloads\FRST64.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00050477 _____ () C:\Users\Franz\Downloads\Defogger.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00000472 _____ () C:\Users\Franz\Downloads\defogger_disable.log
2014-03-08 16:38 - 2014-03-08 16:38 - 00000000 _____ () C:\Users\Franz\defogger_reenable
2014-03-08 13:25 - 2014-03-08 13:25 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-08 13:25 - 2014-03-08 13:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-08 13:25 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-08 12:30 - 2014-03-08 13:58 - 00015181 _____ () C:\Users\Franz\Documents\American news.odt
2014-03-08 12:28 - 2014-03-08 13:21 - 00000390 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-03-08 12:28 - 2014-03-08 12:28 - 00002978 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-03-08 12:28 - 2014-03-08 12:28 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-03-08 12:28 - 2014-03-08 12:28 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-03-08 12:27 - 2014-03-08 12:27 - 00000000 ____D () C:\Users\Franz\AppData\Local\11926
2014-03-08 12:19 - 2014-03-08 12:19 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-08 12:19 - 2014-03-08 12:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-06 13:33 - 2014-03-06 19:10 - 00000000 ____D () C:\Program Files\OBS
2014-03-06 13:33 - 2014-03-06 13:33 - 00000935 _____ () C:\Users\Franz\Desktop\Open Broadcaster Software.lnk
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OBS
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-06 13:23 - 2014-03-08 11:48 - 00001306 _____ () C:\Windows\PFRO.log
2014-03-05 19:28 - 2014-03-05 19:28 - 00000000 ____D () C:\Users\Franz\AppData\Local\SplitMediaLabs
2014-03-05 19:26 - 2014-03-08 16:28 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-05 19:26 - 2014-03-06 14:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-05 19:26 - 2014-03-06 14:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-05 19:26 - 2014-03-06 14:28 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-05 19:17 - 2014-03-06 13:35 - 00000000 ____D () C:\Program Files (x86)\SplitMediaLabs
2014-03-05 19:17 - 2014-03-05 19:26 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\SplitMediaLabs
2014-03-05 19:17 - 2014-03-05 19:17 - 00000000 ____D () C:\ProgramData\SplitMediaLabs
2014-03-04 14:58 - 2014-03-04 14:58 - 00000000 ____D () C:\Users\Franz\AppData\Local\Skype
2014-03-04 14:57 - 2014-03-04 14:57 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-04 14:57 - 2014-03-04 14:57 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Users\Franz\Documents\Scratch Projekte
2014-03-03 17:41 - 2014-03-08 12:18 - 00000000 ____D () C:\Users\Franz\AppData\Local\Dxtory Software
2014-03-03 17:41 - 2014-03-03 17:42 - 00000000 ____D () C:\Program Files (x86)\Dxtory Software
2014-03-03 17:39 - 2014-03-03 17:39 - 00715038 _____ () C:\Windows\unins000.exe
2014-03-03 17:39 - 2014-03-03 17:39 - 00001990 _____ () C:\Windows\unins000.dat
2014-03-03 17:39 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll
2014-03-03 17:39 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2014-03-01 17:47 - 2014-03-01 17:47 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iTunes
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iPod
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-01 17:42 - 2014-03-01 17:42 - 00001845 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-02-25 13:27 - 2014-02-25 13:28 - 00000000 ____D () C:\ef47be9d57167b970f003dc78fd13db7
2014-02-23 10:37 - 2014-02-23 10:37 - 00000646 _____ () C:\Users\Franz\Desktop\PBE.lnk
2014-02-23 10:33 - 2014-03-08 16:42 - 00000896 _____ () C:\Windows\setupact.log
2014-02-23 10:33 - 2014-02-23 10:33 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 19:59 - 2014-02-22 19:59 - 00000000 ____D () C:\Program Files (x86)\WinPcap
2014-02-22 19:58 - 2014-02-22 19:58 - 00003059 _____ () C:\Users\Franz\Desktop\PowerLine Utility.lnk
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TP-LINK
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-02-22 19:46 - 2014-02-22 19:46 - 00000000 ____D () C:\Users\Franz\Documents\My Weblog Posts
2014-02-22 17:35 - 2014-02-26 13:05 - 00000000 ____D () C:\Users\Franz\Tracing
2014-02-22 17:11 - 2014-02-22 17:11 - 00000000 ____D () C:\Windows\de
2014-02-22 17:09 - 2014-02-26 13:13 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-22 17:09 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-02-22 17:09 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-02-22 17:09 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-02-22 17:09 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-02-22 17:09 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-02-22 17:09 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-02-22 17:09 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-02-22 17:09 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-02-22 17:09 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ___RD () C:\Users\Franz\OneDrive
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-02-22 17:08 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-02-22 17:08 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-02-22 17:07 - 2014-02-22 17:07 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{7514B9EE-62DF-4EB7-97F7-AAAAEA715FB3}
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{5907288C-7E23-4F4F-8A0D-385823C80FDB}
2014-02-15 17:24 - 2014-02-15 17:24 - 00001274 _____ () C:\Users\Franz\Desktop\Technik Launcher.lnk
2014-02-15 15:38 - 2014-02-15 15:42 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-15 15:31 - 2014-02-20 19:37 - 00000000 ____D () C:\ProgramData\Tunngle
2014-02-15 15:31 - 2014-02-15 15:31 - 00000991 _____ () C:\Users\Public\Desktop\Tunngle beta.lnk
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\Users\Public\Documents\Tunngle
2014-02-15 15:26 - 2014-02-15 15:26 - 00000000 _____ () C:\Windows\SysWOW64\Access.dat
2014-02-15 15:14 - 2014-02-15 15:14 - 00000000 ____D () C:\Users\Franz\Documents\Tunngle
2014-02-15 15:09 - 2014-02-15 15:10 - 00000000 ____D () C:\Users\Franz\Desktop\Jakob Server
2014-02-15 12:30 - 2014-02-15 12:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 19:06 - 2014-02-14 19:06 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OpenOffice
2014-02-14 15:19 - 2014-02-16 13:02 - 00000000 ____D () C:\ProgramData\Soluto
2014-02-14 15:19 - 2014-02-16 13:01 - 00000193 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
2014-02-13 15:29 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 15:29 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 15:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 15:28 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 15:28 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 15:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 15:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 15:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 15:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 15:28 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 15:28 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 15:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 15:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 15:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 15:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 15:28 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 15:28 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 15:28 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 15:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 15:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 15:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 15:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 15:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 15:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 15:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 15:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 15:28 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 15:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 15:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 15:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 15:28 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 15:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 15:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 15:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 15:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 15:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 15:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 15:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 15:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 15:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 15:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 11:49 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 11:49 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 11:48 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 11:48 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 11:48 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 11:48 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 11:48 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 11:48 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 11:48 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 11:48 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 11:48 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 11:48 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 11:48 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 11:48 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 11:48 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 11:48 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 11:48 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 11:48 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 11:48 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 11:48 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 11:48 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 11:48 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 11:48 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 11:48 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 16:53 - 2014-02-15 17:24 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\.technic
2014-02-09 13:37 - 2014-02-09 13:37 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-06 19:47 - 2014-02-06 19:47 - 00026484 _____ () C:\Users\Franz\Documents\Koks Bio.odt

==================== One Month Modified Files and Folders =======

2014-03-08 16:46 - 2014-03-08 16:40 - 00014466 _____ () C:\Users\Franz\Downloads\FRST.txt
2014-03-08 16:46 - 2013-05-15 19:29 - 00000000 ____D () C:\Users\Franz\AppData\Local\PMB Files
2014-03-08 16:42 - 2014-02-23 10:33 - 00000896 _____ () C:\Windows\setupact.log
2014-03-08 16:40 - 2014-03-08 16:40 - 00000000 ____D () C:\FRST
2014-03-08 16:39 - 2014-03-08 16:39 - 02156544 _____ (Farbar) C:\Users\Franz\Downloads\FRST64.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00050477 _____ () C:\Users\Franz\Downloads\Defogger.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00000472 _____ () C:\Users\Franz\Downloads\defogger_disable.log
2014-03-08 16:38 - 2014-03-08 16:38 - 00000000 _____ () C:\Users\Franz\defogger_reenable
2014-03-08 16:38 - 2013-05-11 16:15 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Skype
2014-03-08 16:38 - 2013-05-11 14:14 - 00000000 ____D () C:\Users\Franz
2014-03-08 16:28 - 2014-03-05 19:26 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-08 16:03 - 2013-05-15 19:29 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-08 14:55 - 2013-08-13 10:15 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-08 14:54 - 2013-05-11 15:16 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Adobe
2014-03-08 14:54 - 2013-05-11 15:13 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-08 14:52 - 2014-01-19 12:47 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-03-08 13:58 - 2014-03-08 12:30 - 00015181 _____ () C:\Users\Franz\Documents\American news.odt
2014-03-08 13:28 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-08 13:28 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-08 13:25 - 2014-03-08 13:25 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-08 13:25 - 2014-03-08 13:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-08 13:24 - 2013-08-10 12:50 - 02014112 _____ () C:\Windows\WindowsUpdate.log
2014-03-08 13:22 - 2009-07-14 05:45 - 05006784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-08 13:21 - 2014-03-08 12:28 - 00000390 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-03-08 13:21 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-08 13:19 - 2013-09-18 18:30 - 00000000 ____D () C:\AdwCleaner
2014-03-08 13:17 - 2013-05-11 14:30 - 00069608 _____ () C:\Users\Franz\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 12:28 - 2014-03-08 12:28 - 00002978 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-03-08 12:28 - 2014-03-08 12:28 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-03-08 12:28 - 2014-03-08 12:28 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-03-08 12:28 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-08 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-08 12:27 - 2014-03-08 12:27 - 00000000 ____D () C:\Users\Franz\AppData\Local\11926
2014-03-08 12:19 - 2014-03-08 12:19 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-08 12:19 - 2014-03-08 12:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-08 12:18 - 2014-03-03 17:41 - 00000000 ____D () C:\Users\Franz\AppData\Local\Dxtory Software
2014-03-08 11:59 - 2013-06-18 18:44 - 00000000 ____D () C:\Users\Franz\AppData\Local\Adobe
2014-03-08 11:48 - 2014-03-06 13:23 - 00001306 _____ () C:\Windows\PFRO.log
2014-03-07 20:10 - 2013-05-17 19:11 - 00000000 ____D () C:\Users\Franz\AppData\Local\CrashDumps
2014-03-07 13:46 - 2013-05-11 15:32 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-06 19:10 - 2014-03-06 13:33 - 00000000 ____D () C:\Program Files\OBS
2014-03-06 14:28 - 2014-03-05 19:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-06 14:28 - 2014-03-05 19:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-06 14:28 - 2014-03-05 19:26 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-06 13:35 - 2014-03-05 19:17 - 00000000 ____D () C:\Program Files (x86)\SplitMediaLabs
2014-03-06 13:33 - 2014-03-06 13:33 - 00000935 _____ () C:\Users\Franz\Desktop\Open Broadcaster Software.lnk
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OBS
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-05 19:28 - 2014-03-05 19:28 - 00000000 ____D () C:\Users\Franz\AppData\Local\SplitMediaLabs
2014-03-05 19:26 - 2014-03-05 19:17 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\SplitMediaLabs
2014-03-05 19:17 - 2014-03-05 19:17 - 00000000 ____D () C:\ProgramData\SplitMediaLabs
2014-03-05 15:42 - 2013-11-23 12:18 - 00000000 ____D () C:\Program Files (x86)\LOLReplay
2014-03-05 13:22 - 2013-05-11 14:14 - 00000000 ___RD () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-04 16:54 - 2013-07-03 18:09 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\.minecraft
2014-03-04 14:58 - 2014-03-04 14:58 - 00000000 ____D () C:\Users\Franz\AppData\Local\Skype
2014-03-04 14:57 - 2014-03-04 14:57 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-04 14:57 - 2014-03-04 14:57 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-04 14:57 - 2013-05-11 16:15 - 00000000 ____D () C:\ProgramData\Skype
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Users\Franz\Documents\Scratch Projekte
2014-03-03 17:42 - 2014-03-03 17:41 - 00000000 ____D () C:\Program Files (x86)\Dxtory Software
2014-03-03 17:39 - 2014-03-03 17:39 - 00715038 _____ () C:\Windows\unins000.exe
2014-03-03 17:39 - 2014-03-03 17:39 - 00001990 _____ () C:\Windows\unins000.dat
2014-03-02 13:30 - 2013-05-17 19:11 - 01596822 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-02 13:30 - 2011-04-12 08:43 - 00700316 _____ () C:\Windows\system32\perfh007.dat
2014-03-02 13:30 - 2011-04-12 08:43 - 00149954 _____ () C:\Windows\system32\perfc007.dat
2014-03-02 13:30 - 2009-07-14 06:13 - 01596822 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-01 17:47 - 2014-03-01 17:47 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iTunes
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iPod
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-01 17:42 - 2014-03-01 17:42 - 00001845 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-03-01 17:42 - 2013-05-12 09:29 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-02-26 13:14 - 2013-05-15 19:35 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-02-26 13:13 - 2014-02-22 17:09 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-26 13:05 - 2014-02-22 17:35 - 00000000 ____D () C:\Users\Franz\Tracing
2014-02-25 13:28 - 2014-02-25 13:27 - 00000000 ____D () C:\ef47be9d57167b970f003dc78fd13db7
2014-02-25 13:23 - 2013-05-31 19:13 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\TS3Client
2014-02-23 10:37 - 2014-02-23 10:37 - 00000646 _____ () C:\Users\Franz\Desktop\PBE.lnk
2014-02-23 10:33 - 2014-02-23 10:33 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 21:37 - 2013-12-09 18:47 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-22 21:37 - 2013-05-11 16:03 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-22 21:11 - 2013-05-17 14:45 - 00000000 ____D () C:\Riot Games
2014-02-22 19:59 - 2014-02-22 19:59 - 00000000 ____D () C:\Program Files (x86)\WinPcap
2014-02-22 19:58 - 2014-02-22 19:58 - 00003059 _____ () C:\Users\Franz\Desktop\PowerLine Utility.lnk
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TP-LINK
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-02-22 19:46 - 2014-02-22 19:46 - 00000000 ____D () C:\Users\Franz\Documents\My Weblog Posts
2014-02-22 19:46 - 2013-09-20 19:38 - 00000000 ____D () C:\Users\Franz\AppData\Local\Windows Live Writer
2014-02-22 17:29 - 2013-05-15 19:31 - 00000000 ____D () C:\Users\Franz\AppData\Local\Windows Live
2014-02-22 17:11 - 2014-02-22 17:11 - 00000000 ____D () C:\Windows\de
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ___RD () C:\Users\Franz\OneDrive
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-02-22 17:07 - 2014-02-22 17:07 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{7514B9EE-62DF-4EB7-97F7-AAAAEA715FB3}
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{5907288C-7E23-4F4F-8A0D-385823C80FDB}
2014-02-21 17:41 - 2013-06-22 19:27 - 00000000 ____D () C:\Windows\pss
2014-02-20 19:37 - 2014-02-15 15:31 - 00000000 ____D () C:\ProgramData\Tunngle
2014-02-20 19:37 - 2013-05-11 16:23 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Tunngle
2014-02-20 16:38 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-16 13:06 - 2013-12-24 10:42 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-02-16 13:02 - 2014-02-14 15:19 - 00000000 ____D () C:\ProgramData\Soluto
2014-02-16 13:01 - 2014-02-14 15:19 - 00000193 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
2014-02-15 17:24 - 2014-02-15 17:24 - 00001274 _____ () C:\Users\Franz\Desktop\Technik Launcher.lnk
2014-02-15 17:24 - 2014-02-11 16:53 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\.technic
2014-02-15 15:43 - 2013-05-11 14:20 - 00000000 ____D () C:\Program Files (x86)\REALTEK
2014-02-15 15:42 - 2014-02-15 15:38 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-15 15:32 - 2013-05-11 16:23 - 00000000 ____D () C:\Program Files (x86)\Tunngle
2014-02-15 15:31 - 2014-02-15 15:31 - 00000991 _____ () C:\Users\Public\Desktop\Tunngle beta.lnk
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\Users\Public\Documents\Tunngle
2014-02-15 15:26 - 2014-02-15 15:26 - 00000000 _____ () C:\Windows\SysWOW64\Access.dat
2014-02-15 15:25 - 2013-05-11 15:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 15:14 - 2014-02-15 15:14 - 00000000 ____D () C:\Users\Franz\Documents\Tunngle
2014-02-15 15:10 - 2014-02-15 15:09 - 00000000 ____D () C:\Users\Franz\Desktop\Jakob Server
2014-02-15 12:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 12:30 - 2014-02-15 12:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 19:06 - 2014-02-14 19:06 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OpenOffice
2014-02-14 18:59 - 2013-06-17 14:45 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Feed The Beast
2014-02-14 16:00 - 2013-08-15 10:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-14 15:59 - 2013-05-11 17:35 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-12 14:13 - 2013-07-10 14:23 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\FileZilla
2014-02-09 16:10 - 2014-01-24 19:02 - 00000000 ____D () C:\Users\Franz\AppData\Local\Battle.net
2014-02-09 13:37 - 2014-02-09 13:37 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-09 13:37 - 2014-01-01 15:08 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-02-09 13:37 - 2013-05-11 15:32 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-09 13:36 - 2013-05-11 15:32 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-09 13:36 - 2013-05-11 15:32 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-09 13:36 - 2013-05-11 15:32 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-09 13:36 - 2013-05-11 15:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-06 19:47 - 2014-02-06 19:47 - 00026484 _____ () C:\Users\Franz\Documents\Koks Bio.odt
2014-02-06 13:16 - 2014-02-13 15:28 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 15:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 15:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 15:28 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 15:28 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 15:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 15:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-13 15:28 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-13 15:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 15:28 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 15:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 15:28 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 15:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 15:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 15:28 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 15:28 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 15:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 15:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 15:28 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 15:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 15:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 15:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 15:28 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-13 15:28 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-13 15:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 15:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 15:28 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 15:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 15:28 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 15:28 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 15:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 15:28 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 15:28 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 15:28 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 15:28 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 15:28 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 15:28 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 15:28 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\Franz\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Franz\AppData\Local\Temp\Fraps3.5.99Setup__4940_il4040.exe
C:\Users\Franz\AppData\Local\Temp\Quarantine.exe
C:\Users\Franz\AppData\Local\Temp\Re-markit_2040-4032.exe
C:\Users\Franz\AppData\Local\Temp\uninstall_flash_player.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-08 15:12

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---


Addition.txt
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-03-2014 01
Ran by Franz at 2014-03-08 16:47:03
Running from C:\Users\Franz\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2013 - Avast Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Blender (HKLM\...\Blender) (Version: 2.67 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brick-Force  (HKLM-x32\...\Brick-Force) (Version:  - Infernum Productions AG)
Camtasia Studio 8 (HKLM-x32\...\{8F6F7194-0734-4CDA-8C04-6B766F2241A6}) (Version: 8.0.4.1060 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
diclovit's mod pack 1.9.0 (HKLM-x32\...\{28B1238E-1C18-4637-A2B7-95315E94EB29}_is1) (Version: 1.9.0 - diclovit)
DIE SIEDLER - Das Erbe der Könige - Gold Edition (HKLM-x32\...\{E08DE897-B6AF-4DFF-9E90-131E80C876B4}) (Version: 1.00.0000 - Blue Byte)
Dokan Library 0.6.0 (HKLM-x32\...\DokanLibrary) (Version:  - )
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
FileZilla Client 3.7.3 (HKCU\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
Fotogalerie (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
GIMP 2.8.8 (HKLM\...\GIMP-2_is1) (Version: 2.8.8 - The GIMP Team)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.0.1428 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.5.0.1066 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.5.0.1066 - Intel Corporation) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170250}) (Version: 1.7.0.250 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.5.2 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)
Microsoft Expression Web 4 (x32 Version: 4.0.1460.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.9 - Pando Networks Inc.)
Photo Gallery (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
PlanetSide 2 (HKCU\...\SOE-PlanetSide 2 PSG) (Version: 1.0.3.183 - Sony Online Entertainment)
PowerLine Utility (HKLM-x32\...\{762E248A-F922-42D6-B577-A47B0AB558D2}) (Version: 1.1.810 - TP-LINK)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.72.410.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6873 - Realtek Semiconductor Corp.)
Re-markit (HKLM-x32\...\1366f773-3476-4d68-acc0-219e692e6fd3) (Version:  - Re-markit Software) <==== ATTENTION
ROCCAT Lua Mouse Driver (HKLM-x32\...\{10E03440-9A5B-48F5-BB24-359EFE3E6C71}) (Version: 1.13 - ROCCAT GmbH)
Scratch (HKLM-x32\...\Scratch) (Version: 1.4.0.0 - MIT Media Lab Lifelong Kindergarten Group)
SHARKOON Skiller (HKLM-x32\...\{91C25547-9534-41A5-823A-1E54BA16EA3F}) (Version: 1.00.0000 - )
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Theme Resource Changer X64 v1.0 (HKLM\...\Theme Resource Changer X64 v1.0) (Version:  - Bad Ass Apps)
TI-Nspire(TM) CAS Student Software (HKLM-x32\...\{E8CC9064-8382-4D5C-9E55-F88D9541FFC0}) (Version: 3.2.0.1219 - Texas Instruments Inc.)
TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version:  - Nadeo)
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version:  - Tunngle.net GmbH)
UxStyle Core Beta (HKLM\...\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}) (Version: 0.2.1.1 - The Within Network, LLC)
Windows Live Communications Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
World of Tanks - Common Test (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812CT}_is1) (Version:  - Wargaming.net)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)
World of Warplanes (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version:  - Wargaming.net)

==================== Restore Points  =========================

06-03-2014 12:34:50 Removed XSplit Broadcaster
07-03-2014 13:02:20 Windows Update
08-03-2014 11:08:12 Removed OpenOffice 4.0.1
08-03-2014 11:14:18 OpenOffice 4.0.1 wird installiert
08-03-2014 11:16:45 OpenOffice 4.0.1 wird installiert
08-03-2014 11:18:14 OpenOffice 4.0.1 wird installiert

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-08-07 15:42 - 00000031 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============
         
Gmer.txt
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-03-08 17:12:18
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 ST1000DM003-1CH162 rev.CC44 931,51GB
Running: mngwvcjz.exe; Driver: C:\Users\Franz\AppData\Local\Temp\pgloypog.sys


---- User code sections - GMER 2.1 ----

.text   C:\Windows\system32\wininit.exe[672] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                            0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\winlogon.exe[708] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\services.exe[764] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\svchost.exe[912] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                            0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\atiesrxx.exe[340] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Windows\System32\svchost.exe[444] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                            0000000076dceecd 1 byte [62]
.text   C:\Windows\System32\svchost.exe[820] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                            0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\svchost.exe[928] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                            0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\svchost.exe[1044] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\AUDIODG.EXE[1120] C:\Windows\System32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Windows\System32\spoolsv.exe[1680] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\svchost.exe[1712] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1796] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                              0000000076b9a2ba 1 byte [62]
.text   C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1820] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112              0000000076b9a2ba 1 byte [62]
.text   C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe[1900] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                     0000000076b9a2ba 1 byte [62]
.text   C:\Windows\system32\svchost.exe[2036] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Windows\System32\svchost.exe[1196] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[1172] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                   0000000076dceecd 1 byte [62]
.text   C:\Windows\Explorer.EXE[2968] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                   0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\svchost.exe[1416] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                           0000000076dceecd 1 byte [62]
.text   C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe[2480] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                       0000000076b9a2ba 1 byte [62]
.text   C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[3112] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                         0000000076b9a2ba 1 byte [62]
.text   C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe[3168] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                             0000000076b9a2ba 1 byte [62]
.text   C:\Program Files\Windows Sidebar\sidebar.exe[3252] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                              0000000076dceecd 1 byte [62]
.text   C:\Windows\system32\SearchIndexer.exe[3364] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                     0000000076dceecd 1 byte [62]
.text   C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe[3808] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112  0000000076b9a2ba 1 byte [62]
.text   C:\Program Files (x86)\iTunes\iTunesHelper.exe[3884] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                            0000000076b9a2ba 1 byte [62]
.text   C:\Program Files\iPod\bin\iPodService.exe[2492] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                 0000000076dceecd 1 byte [62]
.text   C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe[4340] C:\Windows\syswow64\KERNEL32.dll!GetBinaryTypeW + 112                                   0000000076b9a2ba 1 byte [62]
.text   C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[4804] C:\Windows\syswow64\KERNEL32.dll!GetBinaryTypeW + 112                             0000000076b9a2ba 1 byte [62]
.text   C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[4804] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           00000000755b1465 2 bytes [5B, 75]
.text   C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[4804] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          00000000755b14bb 2 bytes [5B, 75]
.text   ...                                                                                                                                                                   * 2
.text   C:\Windows\system32\wbem\wmiprvse.exe[4888] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                     0000000076dceecd 1 byte [62]
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe[4924] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112         0000000076b9a2ba 1 byte [62]
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[4972] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                    0000000076b9a2ba 1 byte [62]
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[4972] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                  00000000755b1465 2 bytes [5B, 75]
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[4972] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                 00000000755b14bb 2 bytes [5B, 75]
.text   ...                                                                                                                                                                   * 2
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[5012] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                            0000000076b9a2ba 1 byte [62]
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[5012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                          00000000755b1465 2 bytes [5B, 75]
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[5012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                         00000000755b14bb 2 bytes [5B, 75]
.text   ...                                                                                                                                                                   * 2
.text   C:\Users\Franz\Downloads\mngwvcjz.exe[4592] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                     0000000076b9a2ba 1 byte [62]

---- Threads - GMER 2.1 ----

Thread   [3800:4028]                                                                                                                                                          00000000770c2e65
Thread   [3800:4032]                                                                                                                                                          00000000770c3e85
Thread   [3800:4036]                                                                                                                                                          0000000072dff28e
Thread   [3800:4040]                                                                                                                                                          000000006bd313f0
Thread   [3800:4044]                                                                                                                                                          0000000072310140
Thread   [3800:4048]                                                                                                                                                          0000000072dff28e
Thread   [3800:4068]                                                                                                                                                          0000000072dff28e
Thread   [3800:4076]                                                                                                                                                          0000000072dff28e
Thread   [3800:3772]                                                                                                                                                          000000006d3da031
Thread   [3800:3880]                                                                                                                                                          000000006d3da031
Thread   [3800:3876]                                                                                                                                                          000000006df6b90f
Thread   [3800:3912]                                                                                                                                                          000000006df6b90f
Thread   [3800:3916]                                                                                                                                                          000000006df6b90f
Thread   [3800:2652]                                                                                                                                                          000000006df6b90f
Thread   [3800:2860]                                                                                                                                                          000000006df6b90f
Thread   [3800:4056]                                                                                                                                                          000000006d3da031
Thread   [3800:3396]                                                                                                                                                          00000000770c3e85
Thread   [3800:3716]                                                                                                                                                          000000006d3da031
Thread   [3800:1348]                                                                                                                                                          000000006d3da031
Thread   [3800:3652]                                                                                                                                                          000000006d3da031
Thread   [3800:5068]                                                                                                                                                          00000000770c3e85
Thread   [3800:3268]                                                                                                                                                          00000000770c3e85
Thread   [3800:2508]                                                                                                                                                          00000000770c3e85
Thread   [3800:1336]                                                                                                                                                          000000006c8960d0
Thread   [3800:5108]                                                                                                                                                          000000006c8960d0
Thread   [3800:3920]                                                                                                                                                          000000006c8960d0
Thread   [3800:3936]                                                                                                                                                          000000006c8960d0
Thread   [3800:3932]                                                                                                                                                          000000006c8960d0
Thread   [3800:2528]                                                                                                                                                          00000000770c3e85
Thread   [3800:4616]                                                                                                                                                          00000000770c3e85
Thread   [3800:4628]                                                                                                                                                          00000000770c3e85
Thread   [3800:4644]                                                                                                                                                          00000000770c3e85
Thread   [3800:4620]                                                                                                                                                          000000007547d864
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [252:3688]                                                                                                         000007fefad22a7c
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [252:3480]                                                                                                         000007feedc34830
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [252:4172]                                                                                                         000007feedc34830

---- EOF - GMER 2.1 ----
         

Geändert von sever01 (08.03.2014 um 16:36 Uhr)

Alt 08.03.2014, 16:40   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Avast findet Virus und Malwarebytes findet Viren - Standard

Avast findet Virus und Malwarebytes findet Viren



Hi,

Funde von MBAM löschen lassen.

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________

__________________

Alt 09.03.2014, 17:31   #3
sever01
 
Avast findet Virus und Malwarebytes findet Viren - Standard

Avast findet Virus und Malwarebytes findet Viren



Hallo,
danke für die schnelle Antwort.
Ich habe vergessen in meiner Frage zu erwähenen, dass ich ADW Cleaner heute schonmal laufen gehabt hab.
Wenn ich FRST laufen hab, gibt Windows den Fehler aus bei dem Schritt Scanning Firefox: Extensions: "Aufgrund eines unerwarteten Fehlers können Sie die Datei nicht kopieren. Wenn der Fehler weiterhin ausgegeben wird, können Sie mithilfe des Fehlercodes in der Hilfe nach diesem Problem suchen.
Fehler 0x80030002: install.rdf wurde nicht gefunden"


Alter log:
Code:
ATTFilter
# AdwCleaner v3.020 - Bericht erstellt am 08/03/2014 um 13:19:19
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Franz - FRANZ-PC
# Gestartet von : C:\Users\Franz\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\f8b34e3b5e6e337aa6491ee3f713f8f5\adwcleaner_3.0.2.0.exe
# Option : Suchen

***** [ Dienste ] *****

Dienst Gefunden : Re-markit

***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default\user.js
Datei Gefunden : C:\Windows\System32\Tasks\AmiUpdXp
Datei Gefunden : C:\Windows\System32\Tasks\Re-markit Update
Datei Gefunden : C:\Windows\Tasks\AmiUpdXp.job
Datei Gefunden : C:\Windows\Tasks\Re-markit Update.job
Ordner Gefunden C:\Users\Franz\AppData\Local\Temp\OCS
Ordner Gefunden C:\Windows\SysWOW64\AI_RecycleBin

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default\prefs.js ]


[ Datei : C:\Users\Youtube\AppData\Roaming\Mozilla\Firefox\Profiles\uhllyprv.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [2245 octets] - [18/09/2013 18:30:58]
AdwCleaner[R1].txt - [2567 octets] - [08/03/2014 13:19:19]
AdwCleaner[S0].txt - [2156 octets] - [18/09/2013 18:31:23]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [2687 octets] ##########
         
Jetzt hab ich ADW cleaner nochmal benutzt
Code:
ATTFilter
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Franz - FRANZ-PC
# Gestartet von : C:\Users\Franz\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default\prefs.js ]


[ Datei : C:\Users\Youtube\AppData\Roaming\Mozilla\Firefox\Profiles\uhllyprv.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [2245 octets] - [18/09/2013 18:30:58]
AdwCleaner[R1].txt - [2779 octets] - [08/03/2014 13:19:19]
AdwCleaner[R2].txt - [1149 octets] - [08/03/2014 18:27:51]
AdwCleaner[S0].txt - [2156 octets] - [18/09/2013 18:31:23]
AdwCleaner[S1].txt - [2802 octets] - [08/03/2014 13:19:51]
AdwCleaner[S2].txt - [1071 octets] - [08/03/2014 18:29:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1131 octets] ##########
         


JRT:
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Franz on 08.03.2014 at 18:42:56,34
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Franz\AppData\Roaming\mozilla\firefox\profiles\ufim2oib.default\minidumps [133 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.03.2014 at 18:47:11,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
FRST:


FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-03-2014 01
Ran by Franz (administrator) on FRANZ-PC on 08-03-2014 18:51:13
Running from C:\Users\Franz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(The Within Network, LLC) C:\Windows\UnsignedThemesSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Re-markit-soft\Re-markit_wd.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.75\deploy\LolClient.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-09] (AVAST Software)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-921928476-601607189-1348779831-1000\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-921928476-601607189-1348779831-1000\...\Run: [NetLimiter] - C:\Program Files\NetLimiter 3\NLClientApp.exe /tray
HKU\S-1-5-21-921928476-601607189-1348779831-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1B05EBC14B4ECE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{B93B3B22-47CA-4026-BCD3-DE87FBC83548}: [NameServer]192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default
FF NewTab: about:blank
FF Homepage: https://www.google.de/|hxxp://www.rudolf-hildebrand-schule.de/|hxxp://nosxclan.ohost.de/index.php?news
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.20 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-28]
FF Extension: Personas Plus - C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default\Extensions\personas@christopher.beard.xpi [2013-06-08]
FF Extension: Adblock Plus - C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\ufim2oib.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-31]
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-11]
FF HKCU\...\Firefox\Extensions: [{8a1a43a3-ee9f-4fff-9c5c-b3063ee1f0e0}] - C:\Program Files (x86)\Re-markit-soft\157.xpi
FF Extension: No Name - C:\Program Files (x86)\Re-markit-soft\157.xpi [2014-03-08]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-09] (AVAST Software)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-20] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 UnsignedThemes; C:\Windows\UnsignedThemesSvc.exe [24168 2009-07-13] (The Within Network, LLC)

==================== Drivers (Whitelisted) ====================

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [47512 2013-01-10] (Asmedia Technology)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-09] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-01] ()
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-03-14] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-03-20] (Intel Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2010-03-29] (Texas Instruments)
R2 uxpatch; C:\Windows\system32\drivers\uxpatch.sys [30568 2009-07-13] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
U5 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-21] (Microsoft Corporation)
S3 NLNdisMP; system32\DRIVERS\nlndis.sys [X]
S3 NLNdisPT; system32\DRIVERS\nlndis.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-08 18:47 - 2014-03-08 18:47 - 00000758 _____ () C:\Users\Franz\Desktop\JRT.txt
2014-03-08 18:26 - 2014-03-08 18:26 - 01244192 _____ () C:\Users\Franz\Downloads\adwcleaner.exe
2014-03-08 18:26 - 2014-03-08 18:26 - 01037734 _____ (Thisisu) C:\Users\Franz\Downloads\JRT.exe
2014-03-08 17:12 - 2014-03-08 17:12 - 00016232 _____ () C:\Users\Franz\Downloads\gmer.log
2014-03-08 16:56 - 2014-03-08 16:56 - 782529337 _____ () C:\Windows\MEMORY.DMP
2014-03-08 16:56 - 2014-03-08 16:56 - 00275128 _____ () C:\Windows\Minidump\030814-20716-01.dmp
2014-03-08 16:56 - 2014-03-08 16:56 - 00000000 ____D () C:\Windows\Minidump
2014-03-08 16:49 - 2014-03-08 16:49 - 00380416 _____ () C:\Users\Franz\Downloads\mngwvcjz.exe
2014-03-08 16:47 - 2014-03-08 16:47 - 00033383 _____ () C:\Users\Franz\Downloads\Addition.txt
2014-03-08 16:40 - 2014-03-08 18:51 - 00014846 _____ () C:\Users\Franz\Downloads\FRST.txt
2014-03-08 16:40 - 2014-03-08 18:51 - 00000000 ____D () C:\FRST
2014-03-08 16:39 - 2014-03-08 16:39 - 02156544 _____ (Farbar) C:\Users\Franz\Downloads\FRST64.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00050477 _____ () C:\Users\Franz\Downloads\Defogger.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00000472 _____ () C:\Users\Franz\Downloads\defogger_disable.log
2014-03-08 16:38 - 2014-03-08 16:38 - 00000000 _____ () C:\Users\Franz\defogger_reenable
2014-03-08 13:25 - 2014-03-08 13:25 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-08 13:25 - 2014-03-08 13:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-08 13:25 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-08 12:30 - 2014-03-08 13:58 - 00015181 _____ () C:\Users\Franz\Documents\American news.odt
2014-03-08 12:28 - 2014-03-08 18:30 - 00000390 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-03-08 12:28 - 2014-03-08 16:56 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-03-08 12:28 - 2014-03-08 12:28 - 00002978 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-03-08 12:28 - 2014-03-08 12:28 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-03-08 12:27 - 2014-03-08 12:27 - 00000000 ____D () C:\Users\Franz\AppData\Local\11926
2014-03-08 12:19 - 2014-03-08 12:19 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-08 12:19 - 2014-03-08 12:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-06 13:33 - 2014-03-06 19:10 - 00000000 ____D () C:\Program Files\OBS
2014-03-06 13:33 - 2014-03-06 13:33 - 00000935 _____ () C:\Users\Franz\Desktop\Open Broadcaster Software.lnk
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OBS
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-06 13:23 - 2014-03-08 11:48 - 00001306 _____ () C:\Windows\PFRO.log
2014-03-05 19:28 - 2014-03-05 19:28 - 00000000 ____D () C:\Users\Franz\AppData\Local\SplitMediaLabs
2014-03-05 19:26 - 2014-03-08 18:28 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-05 19:26 - 2014-03-06 14:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-05 19:26 - 2014-03-06 14:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-05 19:26 - 2014-03-06 14:28 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-05 19:17 - 2014-03-06 13:35 - 00000000 ____D () C:\Program Files (x86)\SplitMediaLabs
2014-03-05 19:17 - 2014-03-05 19:26 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\SplitMediaLabs
2014-03-05 19:17 - 2014-03-05 19:17 - 00000000 ____D () C:\ProgramData\SplitMediaLabs
2014-03-04 14:58 - 2014-03-04 14:58 - 00000000 ____D () C:\Users\Franz\AppData\Local\Skype
2014-03-04 14:57 - 2014-03-04 14:57 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-04 14:57 - 2014-03-04 14:57 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Users\Franz\Documents\Scratch Projekte
2014-03-03 17:41 - 2014-03-08 12:18 - 00000000 ____D () C:\Users\Franz\AppData\Local\Dxtory Software
2014-03-03 17:41 - 2014-03-03 17:42 - 00000000 ____D () C:\Program Files (x86)\Dxtory Software
2014-03-03 17:39 - 2014-03-03 17:39 - 00715038 _____ () C:\Windows\unins000.exe
2014-03-03 17:39 - 2014-03-03 17:39 - 00001990 _____ () C:\Windows\unins000.dat
2014-03-03 17:39 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll
2014-03-03 17:39 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2014-03-01 17:47 - 2014-03-01 17:47 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iTunes
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iPod
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-01 17:42 - 2014-03-01 17:42 - 00001845 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-02-25 13:27 - 2014-02-25 13:28 - 00000000 ____D () C:\ef47be9d57167b970f003dc78fd13db7
2014-02-23 10:37 - 2014-02-23 10:37 - 00000646 _____ () C:\Users\Franz\Desktop\PBE.lnk
2014-02-23 10:33 - 2014-03-08 18:30 - 00001064 _____ () C:\Windows\setupact.log
2014-02-23 10:33 - 2014-02-23 10:33 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 19:59 - 2014-02-22 19:59 - 00000000 ____D () C:\Program Files (x86)\WinPcap
2014-02-22 19:58 - 2014-02-22 19:58 - 00003059 _____ () C:\Users\Franz\Desktop\PowerLine Utility.lnk
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TP-LINK
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-02-22 19:46 - 2014-02-22 19:46 - 00000000 ____D () C:\Users\Franz\Documents\My Weblog Posts
2014-02-22 17:35 - 2014-02-26 13:05 - 00000000 ____D () C:\Users\Franz\Tracing
2014-02-22 17:11 - 2014-02-22 17:11 - 00000000 ____D () C:\Windows\de
2014-02-22 17:09 - 2014-02-26 13:13 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-22 17:09 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-02-22 17:09 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-02-22 17:09 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-02-22 17:09 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-02-22 17:09 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-02-22 17:09 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-02-22 17:09 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-02-22 17:09 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-02-22 17:09 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ___RD () C:\Users\Franz\OneDrive
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-02-22 17:08 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-02-22 17:08 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-02-22 17:07 - 2014-02-22 17:07 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{7514B9EE-62DF-4EB7-97F7-AAAAEA715FB3}
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{5907288C-7E23-4F4F-8A0D-385823C80FDB}
2014-02-15 17:24 - 2014-02-15 17:24 - 00001274 _____ () C:\Users\Franz\Desktop\Technik Launcher.lnk
2014-02-15 15:38 - 2014-02-15 15:42 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-15 15:31 - 2014-02-20 19:37 - 00000000 ____D () C:\ProgramData\Tunngle
2014-02-15 15:31 - 2014-02-15 15:31 - 00000991 _____ () C:\Users\Public\Desktop\Tunngle beta.lnk
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\Users\Public\Documents\Tunngle
2014-02-15 15:26 - 2014-02-15 15:26 - 00000000 _____ () C:\Windows\SysWOW64\Access.dat
2014-02-15 15:14 - 2014-02-15 15:14 - 00000000 ____D () C:\Users\Franz\Documents\Tunngle
2014-02-15 15:09 - 2014-02-15 15:10 - 00000000 ____D () C:\Users\Franz\Desktop\Jakob Server
2014-02-15 12:30 - 2014-02-15 12:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 19:06 - 2014-02-14 19:06 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OpenOffice
2014-02-14 15:19 - 2014-02-16 13:02 - 00000000 ____D () C:\ProgramData\Soluto
2014-02-14 15:19 - 2014-02-16 13:01 - 00000193 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
2014-02-13 15:29 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 15:29 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 15:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 15:28 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 15:28 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 15:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 15:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 15:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 15:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 15:28 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 15:28 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 15:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 15:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 15:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 15:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 15:28 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 15:28 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 15:28 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 15:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 15:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 15:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 15:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 15:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 15:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 15:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 15:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 15:28 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 15:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 15:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 15:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 15:28 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 15:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 15:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 15:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 15:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 15:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 15:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 15:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 15:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 15:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 15:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 11:49 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 11:49 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 11:48 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 11:48 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 11:48 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 11:48 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 11:48 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 11:48 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 11:48 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 11:48 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 11:48 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 11:48 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 11:48 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 11:48 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 11:48 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 11:48 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 11:48 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 11:48 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 11:48 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 11:48 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 11:48 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 11:48 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 11:48 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 11:48 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 16:53 - 2014-02-15 17:24 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\.technic
2014-02-09 13:37 - 2014-02-09 13:37 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-06 19:47 - 2014-02-06 19:47 - 00026484 _____ () C:\Users\Franz\Documents\Koks Bio.odt

==================== One Month Modified Files and Folders =======

2014-03-08 18:51 - 2014-03-08 16:40 - 00014846 _____ () C:\Users\Franz\Downloads\FRST.txt
2014-03-08 18:51 - 2014-03-08 16:40 - 00000000 ____D () C:\FRST
2014-03-08 18:51 - 2013-05-15 19:29 - 00000000 ____D () C:\Users\Franz\AppData\Local\PMB Files
2014-03-08 18:48 - 2013-05-11 16:15 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Skype
2014-03-08 18:47 - 2014-03-08 18:47 - 00000758 _____ () C:\Users\Franz\Desktop\JRT.txt
2014-03-08 18:45 - 2013-05-15 19:29 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-08 18:42 - 2013-06-24 15:51 - 00000000 ____D () C:\Windows\ERUNT
2014-03-08 18:37 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-08 18:37 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-08 18:33 - 2013-08-10 12:50 - 02022800 _____ () C:\Windows\WindowsUpdate.log
2014-03-08 18:30 - 2014-03-08 12:28 - 00000390 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-03-08 18:30 - 2014-02-23 10:33 - 00001064 _____ () C:\Windows\setupact.log
2014-03-08 18:30 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-08 18:29 - 2013-09-18 18:30 - 00000000 ____D () C:\AdwCleaner
2014-03-08 18:28 - 2014-03-05 19:26 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-08 18:26 - 2014-03-08 18:26 - 01244192 _____ () C:\Users\Franz\Downloads\adwcleaner.exe
2014-03-08 18:26 - 2014-03-08 18:26 - 01037734 _____ (Thisisu) C:\Users\Franz\Downloads\JRT.exe
2014-03-08 17:12 - 2014-03-08 17:12 - 00016232 _____ () C:\Users\Franz\Downloads\gmer.log
2014-03-08 16:56 - 2014-03-08 16:56 - 782529337 _____ () C:\Windows\MEMORY.DMP
2014-03-08 16:56 - 2014-03-08 16:56 - 00275128 _____ () C:\Windows\Minidump\030814-20716-01.dmp
2014-03-08 16:56 - 2014-03-08 16:56 - 00000000 ____D () C:\Windows\Minidump
2014-03-08 16:56 - 2014-03-08 12:28 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-03-08 16:49 - 2014-03-08 16:49 - 00380416 _____ () C:\Users\Franz\Downloads\mngwvcjz.exe
2014-03-08 16:47 - 2014-03-08 16:47 - 00033383 _____ () C:\Users\Franz\Downloads\Addition.txt
2014-03-08 16:39 - 2014-03-08 16:39 - 02156544 _____ (Farbar) C:\Users\Franz\Downloads\FRST64.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00050477 _____ () C:\Users\Franz\Downloads\Defogger.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00000472 _____ () C:\Users\Franz\Downloads\defogger_disable.log
2014-03-08 16:38 - 2014-03-08 16:38 - 00000000 _____ () C:\Users\Franz\defogger_reenable
2014-03-08 16:38 - 2013-05-11 14:14 - 00000000 ____D () C:\Users\Franz
2014-03-08 14:55 - 2013-08-13 10:15 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-08 14:54 - 2013-05-11 15:16 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Adobe
2014-03-08 14:54 - 2013-05-11 15:13 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-08 14:52 - 2014-01-19 12:47 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-03-08 13:58 - 2014-03-08 12:30 - 00015181 _____ () C:\Users\Franz\Documents\American news.odt
2014-03-08 13:25 - 2014-03-08 13:25 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-08 13:25 - 2014-03-08 13:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-08 13:22 - 2009-07-14 05:45 - 05006784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-08 13:17 - 2013-05-11 14:30 - 00069608 _____ () C:\Users\Franz\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 12:28 - 2014-03-08 12:28 - 00002978 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-03-08 12:28 - 2014-03-08 12:28 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-03-08 12:28 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-08 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-08 12:27 - 2014-03-08 12:27 - 00000000 ____D () C:\Users\Franz\AppData\Local\11926
2014-03-08 12:19 - 2014-03-08 12:19 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-08 12:19 - 2014-03-08 12:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-08 12:18 - 2014-03-03 17:41 - 00000000 ____D () C:\Users\Franz\AppData\Local\Dxtory Software
2014-03-08 11:59 - 2013-06-18 18:44 - 00000000 ____D () C:\Users\Franz\AppData\Local\Adobe
2014-03-08 11:48 - 2014-03-06 13:23 - 00001306 _____ () C:\Windows\PFRO.log
2014-03-07 20:10 - 2013-05-17 19:11 - 00000000 ____D () C:\Users\Franz\AppData\Local\CrashDumps
2014-03-07 13:46 - 2013-05-11 15:32 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-06 19:10 - 2014-03-06 13:33 - 00000000 ____D () C:\Program Files\OBS
2014-03-06 14:28 - 2014-03-05 19:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-06 14:28 - 2014-03-05 19:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-06 14:28 - 2014-03-05 19:26 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-06 13:35 - 2014-03-05 19:17 - 00000000 ____D () C:\Program Files (x86)\SplitMediaLabs
2014-03-06 13:33 - 2014-03-06 13:33 - 00000935 _____ () C:\Users\Franz\Desktop\Open Broadcaster Software.lnk
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OBS
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-05 19:28 - 2014-03-05 19:28 - 00000000 ____D () C:\Users\Franz\AppData\Local\SplitMediaLabs
2014-03-05 19:26 - 2014-03-05 19:17 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\SplitMediaLabs
2014-03-05 19:17 - 2014-03-05 19:17 - 00000000 ____D () C:\ProgramData\SplitMediaLabs
2014-03-05 15:42 - 2013-11-23 12:18 - 00000000 ____D () C:\Program Files (x86)\LOLReplay
2014-03-05 13:22 - 2013-05-11 14:14 - 00000000 ___RD () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-04 16:54 - 2013-07-03 18:09 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\.minecraft
2014-03-04 14:58 - 2014-03-04 14:58 - 00000000 ____D () C:\Users\Franz\AppData\Local\Skype
2014-03-04 14:57 - 2014-03-04 14:57 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-04 14:57 - 2014-03-04 14:57 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-04 14:57 - 2013-05-11 16:15 - 00000000 ____D () C:\ProgramData\Skype
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Users\Franz\Documents\Scratch Projekte
2014-03-03 17:42 - 2014-03-03 17:41 - 00000000 ____D () C:\Program Files (x86)\Dxtory Software
2014-03-03 17:39 - 2014-03-03 17:39 - 00715038 _____ () C:\Windows\unins000.exe
2014-03-03 17:39 - 2014-03-03 17:39 - 00001990 _____ () C:\Windows\unins000.dat
2014-03-02 13:30 - 2013-05-17 19:11 - 01596822 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-02 13:30 - 2011-04-12 08:43 - 00700316 _____ () C:\Windows\system32\perfh007.dat
2014-03-02 13:30 - 2011-04-12 08:43 - 00149954 _____ () C:\Windows\system32\perfc007.dat
2014-03-02 13:30 - 2009-07-14 06:13 - 01596822 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-01 17:47 - 2014-03-01 17:47 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iTunes
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iPod
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-01 17:42 - 2014-03-01 17:42 - 00001845 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-03-01 17:42 - 2013-05-12 09:29 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-02-26 13:14 - 2013-05-15 19:35 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-02-26 13:13 - 2014-02-22 17:09 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-26 13:05 - 2014-02-22 17:35 - 00000000 ____D () C:\Users\Franz\Tracing
2014-02-25 13:28 - 2014-02-25 13:27 - 00000000 ____D () C:\ef47be9d57167b970f003dc78fd13db7
2014-02-25 13:23 - 2013-05-31 19:13 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\TS3Client
2014-02-23 10:37 - 2014-02-23 10:37 - 00000646 _____ () C:\Users\Franz\Desktop\PBE.lnk
2014-02-23 10:33 - 2014-02-23 10:33 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 21:37 - 2013-12-09 18:47 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-22 21:37 - 2013-05-11 16:03 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-22 21:11 - 2013-05-17 14:45 - 00000000 ____D () C:\Riot Games
2014-02-22 19:59 - 2014-02-22 19:59 - 00000000 ____D () C:\Program Files (x86)\WinPcap
2014-02-22 19:58 - 2014-02-22 19:58 - 00003059 _____ () C:\Users\Franz\Desktop\PowerLine Utility.lnk
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TP-LINK
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-02-22 19:46 - 2014-02-22 19:46 - 00000000 ____D () C:\Users\Franz\Documents\My Weblog Posts
2014-02-22 19:46 - 2013-09-20 19:38 - 00000000 ____D () C:\Users\Franz\AppData\Local\Windows Live Writer
2014-02-22 17:29 - 2013-05-15 19:31 - 00000000 ____D () C:\Users\Franz\AppData\Local\Windows Live
2014-02-22 17:11 - 2014-02-22 17:11 - 00000000 ____D () C:\Windows\de
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ___RD () C:\Users\Franz\OneDrive
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-02-22 17:07 - 2014-02-22 17:07 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{7514B9EE-62DF-4EB7-97F7-AAAAEA715FB3}
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{5907288C-7E23-4F4F-8A0D-385823C80FDB}
2014-02-21 17:41 - 2013-06-22 19:27 - 00000000 ____D () C:\Windows\pss
2014-02-20 19:37 - 2014-02-15 15:31 - 00000000 ____D () C:\ProgramData\Tunngle
2014-02-20 19:37 - 2013-05-11 16:23 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Tunngle
2014-02-20 16:38 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-16 13:06 - 2013-12-24 10:42 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-02-16 13:02 - 2014-02-14 15:19 - 00000000 ____D () C:\ProgramData\Soluto
2014-02-16 13:01 - 2014-02-14 15:19 - 00000193 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
2014-02-15 17:24 - 2014-02-15 17:24 - 00001274 _____ () C:\Users\Franz\Desktop\Technik Launcher.lnk
2014-02-15 17:24 - 2014-02-11 16:53 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\.technic
2014-02-15 15:43 - 2013-05-11 14:20 - 00000000 ____D () C:\Program Files (x86)\REALTEK
2014-02-15 15:42 - 2014-02-15 15:38 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-15 15:32 - 2013-05-11 16:23 - 00000000 ____D () C:\Program Files (x86)\Tunngle
2014-02-15 15:31 - 2014-02-15 15:31 - 00000991 _____ () C:\Users\Public\Desktop\Tunngle beta.lnk
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\Users\Public\Documents\Tunngle
2014-02-15 15:26 - 2014-02-15 15:26 - 00000000 _____ () C:\Windows\SysWOW64\Access.dat
2014-02-15 15:25 - 2013-05-11 15:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 15:14 - 2014-02-15 15:14 - 00000000 ____D () C:\Users\Franz\Documents\Tunngle
2014-02-15 15:10 - 2014-02-15 15:09 - 00000000 ____D () C:\Users\Franz\Desktop\Jakob Server
2014-02-15 12:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 12:30 - 2014-02-15 12:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 19:06 - 2014-02-14 19:06 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OpenOffice
2014-02-14 18:59 - 2013-06-17 14:45 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Feed The Beast
2014-02-14 16:00 - 2013-08-15 10:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-14 15:59 - 2013-05-11 17:35 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-12 14:13 - 2013-07-10 14:23 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\FileZilla
2014-02-09 16:10 - 2014-01-24 19:02 - 00000000 ____D () C:\Users\Franz\AppData\Local\Battle.net
2014-02-09 13:37 - 2014-02-09 13:37 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-09 13:37 - 2014-01-01 15:08 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-02-09 13:37 - 2013-05-11 15:32 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-09 13:36 - 2013-05-11 15:32 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-09 13:36 - 2013-05-11 15:32 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-09 13:36 - 2013-05-11 15:32 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-09 13:36 - 2013-05-11 15:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-06 19:47 - 2014-02-06 19:47 - 00026484 _____ () C:\Users\Franz\Documents\Koks Bio.odt
2014-02-06 13:16 - 2014-02-13 15:28 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 15:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 15:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 15:28 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 15:28 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 15:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 15:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-13 15:28 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-13 15:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 15:28 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 15:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 15:28 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 15:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 15:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 15:28 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 15:28 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 15:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 15:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 15:28 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 15:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 15:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 15:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 15:28 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-13 15:28 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-13 15:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 15:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 15:28 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 15:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 15:28 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 15:28 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 15:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 15:28 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 15:28 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 15:28 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 15:28 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 15:28 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 15:28 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 15:28 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\Franz\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Franz\AppData\Local\Temp\Fraps3.5.99Setup__4940_il4040.exe
C:\Users\Franz\AppData\Local\Temp\Quarantine.exe
C:\Users\Franz\AppData\Local\Temp\Re-markit_2040-4032.exe
C:\Users\Franz\AppData\Local\Temp\uninstall_flash_player.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-08 15:12

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Sever01

Hallo, ich habe jetzt ein bisschen im Internet gesurft. Bei zufälligen Internetseiten öffnet sich einfach Werbung in einem neuen Fenster. Unten rechts ist auch manchmal Werbung.
Sever01

Zum beispiel solche Treiberseiten:
hxxp://gir.driveropti.net/sd/dw31.html?u=http%3A%2F%2Fdlvr.readserver.net%2Fbp%3Fsection%3D2455%26type%3D2&p=Remarkit&a=&c=2040-4033&b=firefox&bv=27&t1=1394385898556&tt=1394385898556&r=www.google.de&ua=1&n=apptv&sn=&mpa=0&mp=0
__________________

Alt 10.03.2014, 13:27   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Avast findet Virus und Malwarebytes findet Viren - Standard

Avast findet Virus und Malwarebytes findet Viren



Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, Reste entfernen lassen, neu installieren.

Dann:

https://support.mozilla.org/de/kb/fi...einfach-loesen





ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 10.03.2014, 18:48   #5
sever01
 
Avast findet Virus und Malwarebytes findet Viren - Standard

Avast findet Virus und Malwarebytes findet Viren



Hier die Checkup.txt. Der Rest kommt noch
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.80  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 51  
 Adobe Flash Player 12.0.0.70  
 Adobe Reader XI  
 Mozilla Firefox (27.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Av   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
Hier noch frst

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2014 02
Ran by Franz (administrator) on FRANZ-PC on 10-03-2014 19:04:35
Running from C:\Users\Franz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(The Within Network, LLC) C:\Windows\UnsignedThemesSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\Re-markit-soft\Re-markit_wd.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ROCCAT) C:\Program Files (x86)\ROCCAT\Lua Mouse\Lua Config.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
() C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
() C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.75\deploy\LolClient.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-09] (AVAST Software)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-921928476-601607189-1348779831-1000\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-921928476-601607189-1348779831-1000\...\Run: [NetLimiter] - C:\Program Files\NetLimiter 3\NLClientApp.exe /tray
HKU\S-1-5-21-921928476-601607189-1348779831-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1B05EBC14B4ECE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{B93B3B22-47CA-4026-BCD3-DE87FBC83548}: [NameServer]192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\o5qb79m0.default-1394461475543
FF Homepage: https://www.google.de/|hxxp://www.rudolf-hildebrand-schule.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.20 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\o5qb79m0.default-1394461475543\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-03-10]
FF Extension: Personas Plus - C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\o5qb79m0.default-1394461475543\Extensions\personas@christopher.beard.xpi [2014-03-10]
FF Extension: Adblock Plus - C:\Users\Franz\AppData\Roaming\Mozilla\Firefox\Profiles\o5qb79m0.default-1394461475543\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-10]
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-11]
FF HKCU\...\Firefox\Extensions: [{8a1a43a3-ee9f-4fff-9c5c-b3063ee1f0e0}] - C:\Program Files (x86)\Re-markit-soft\157.xpi
FF Extension: No Name - C:\Program Files (x86)\Re-markit-soft\157.xpi [2014-03-08]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-09] (AVAST Software)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-20] (Intel Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 UnsignedThemes; C:\Windows\UnsignedThemesSvc.exe [24168 2009-07-13] (The Within Network, LLC)

==================== Drivers (Whitelisted) ====================

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [47512 2013-01-10] (Asmedia Technology)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-09] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-01] ()
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-03-14] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-03-20] (Intel Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2010-03-29] (Texas Instruments)
R2 uxpatch; C:\Windows\system32\drivers\uxpatch.sys [30568 2009-07-13] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
U5 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-21] (Microsoft Corporation)
S3 NLNdisMP; system32\DRIVERS\nlndis.sys [X]
S3 NLNdisPT; system32\DRIVERS\nlndis.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-10 19:04 - 2014-03-10 19:04 - 00000000 ____D () C:\Users\Franz\Downloads\FRST-OlderVersion
2014-03-10 16:39 - 2014-03-10 16:39 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-10 16:38 - 2014-03-10 16:38 - 02347384 _____ (ESET) C:\Users\Franz\Downloads\esetsmartinstaller_enu.exe
2014-03-10 16:37 - 2014-03-10 16:37 - 00987442 _____ () C:\Users\Franz\Downloads\SecurityCheck.exe
2014-03-10 15:24 - 2014-03-10 15:24 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-10 15:24 - 2014-03-10 15:24 - 00000000 ____D () C:\Users\Franz\Desktop\Alte Firefox-Daten
2014-03-10 15:24 - 2014-03-10 15:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-10 15:24 - 2014-03-10 15:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-10 14:37 - 2014-03-10 14:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Franz\Downloads\revosetup95.exe
2014-03-10 14:37 - 2014-03-10 14:37 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-09 18:39 - 2014-03-09 19:46 - 00039761 _____ () C:\Users\Franz\Documents\Bilder american news.odt
2014-03-08 18:47 - 2014-03-08 18:47 - 00000758 _____ () C:\Users\Franz\Desktop\JRT.txt
2014-03-08 18:26 - 2014-03-08 18:26 - 01244192 _____ () C:\Users\Franz\Downloads\adwcleaner.exe
2014-03-08 18:26 - 2014-03-08 18:26 - 01037734 _____ (Thisisu) C:\Users\Franz\Downloads\JRT.exe
2014-03-08 17:12 - 2014-03-08 17:12 - 00016232 _____ () C:\Users\Franz\Downloads\gmer.log
2014-03-08 16:56 - 2014-03-09 19:15 - 00000000 ____D () C:\Windows\Minidump
2014-03-08 16:49 - 2014-03-08 16:49 - 00380416 _____ () C:\Users\Franz\Downloads\mngwvcjz.exe
2014-03-08 16:47 - 2014-03-08 16:47 - 00033383 _____ () C:\Users\Franz\Downloads\Addition.txt
2014-03-08 16:40 - 2014-03-10 19:04 - 00014507 _____ () C:\Users\Franz\Downloads\FRST.txt
2014-03-08 16:40 - 2014-03-10 19:04 - 00000000 ____D () C:\FRST
2014-03-08 16:39 - 2014-03-10 19:04 - 02157056 _____ (Farbar) C:\Users\Franz\Downloads\FRST64.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00050477 _____ () C:\Users\Franz\Downloads\Defogger.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00000472 _____ () C:\Users\Franz\Downloads\defogger_disable.log
2014-03-08 16:38 - 2014-03-08 16:38 - 00000000 _____ () C:\Users\Franz\defogger_reenable
2014-03-08 12:30 - 2014-03-09 19:46 - 00018066 _____ () C:\Users\Franz\Documents\American news.odt
2014-03-08 12:28 - 2014-03-10 14:31 - 00000390 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-03-08 12:28 - 2014-03-08 16:56 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-03-08 12:28 - 2014-03-08 12:28 - 00002978 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-03-08 12:28 - 2014-03-08 12:28 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-03-08 12:27 - 2014-03-08 12:27 - 00000000 ____D () C:\Users\Franz\AppData\Local\11926
2014-03-08 12:19 - 2014-03-08 12:19 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-08 12:19 - 2014-03-08 12:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-06 13:33 - 2014-03-06 19:10 - 00000000 ____D () C:\Program Files\OBS
2014-03-06 13:33 - 2014-03-06 13:33 - 00000935 _____ () C:\Users\Franz\Desktop\Open Broadcaster Software.lnk
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OBS
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-05 19:28 - 2014-03-05 19:28 - 00000000 ____D () C:\Users\Franz\AppData\Local\SplitMediaLabs
2014-03-05 19:26 - 2014-03-10 18:28 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-05 19:26 - 2014-03-06 14:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-05 19:26 - 2014-03-06 14:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-05 19:26 - 2014-03-06 14:28 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-05 19:17 - 2014-03-06 13:35 - 00000000 ____D () C:\Program Files (x86)\SplitMediaLabs
2014-03-05 19:17 - 2014-03-05 19:26 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\SplitMediaLabs
2014-03-05 19:17 - 2014-03-05 19:17 - 00000000 ____D () C:\ProgramData\SplitMediaLabs
2014-03-04 14:58 - 2014-03-04 14:58 - 00000000 ____D () C:\Users\Franz\AppData\Local\Skype
2014-03-04 14:57 - 2014-03-04 14:57 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-04 14:57 - 2014-03-04 14:57 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Users\Franz\Documents\Scratch Projekte
2014-03-03 17:41 - 2014-03-08 12:18 - 00000000 ____D () C:\Users\Franz\AppData\Local\Dxtory Software
2014-03-03 17:41 - 2014-03-03 17:42 - 00000000 ____D () C:\Program Files (x86)\Dxtory Software
2014-03-03 17:39 - 2014-03-03 17:39 - 00715038 _____ () C:\Windows\unins000.exe
2014-03-03 17:39 - 2014-03-03 17:39 - 00001990 _____ () C:\Windows\unins000.dat
2014-03-03 17:39 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll
2014-03-03 17:39 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2014-03-01 17:47 - 2014-03-01 17:47 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iTunes
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iPod
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-01 17:42 - 2014-03-01 17:42 - 00001845 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-02-25 13:27 - 2014-02-25 13:28 - 00000000 ____D () C:\ef47be9d57167b970f003dc78fd13db7
2014-02-23 10:37 - 2014-02-23 10:37 - 00000646 _____ () C:\Users\Franz\Desktop\PBE.lnk
2014-02-22 19:59 - 2014-02-22 19:59 - 00000000 ____D () C:\Program Files (x86)\WinPcap
2014-02-22 19:58 - 2014-02-22 19:58 - 00003059 _____ () C:\Users\Franz\Desktop\PowerLine Utility.lnk
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TP-LINK
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-02-22 19:46 - 2014-02-22 19:46 - 00000000 ____D () C:\Users\Franz\Documents\My Weblog Posts
2014-02-22 17:35 - 2014-03-09 19:15 - 00000000 ____D () C:\Users\Franz\Tracing
2014-02-22 17:11 - 2014-02-22 17:11 - 00000000 ____D () C:\Windows\de
2014-02-22 17:09 - 2014-02-26 13:13 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-22 17:09 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-02-22 17:09 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-02-22 17:09 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-02-22 17:09 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-02-22 17:09 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-02-22 17:09 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-02-22 17:09 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-02-22 17:09 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-02-22 17:09 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ___RD () C:\Users\Franz\OneDrive
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-02-22 17:08 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-02-22 17:08 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-02-22 17:07 - 2014-02-22 17:07 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{7514B9EE-62DF-4EB7-97F7-AAAAEA715FB3}
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{5907288C-7E23-4F4F-8A0D-385823C80FDB}
2014-02-15 17:24 - 2014-02-15 17:24 - 00001274 _____ () C:\Users\Franz\Desktop\Technik Launcher.lnk
2014-02-15 15:38 - 2014-02-15 15:42 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-15 15:31 - 2014-02-20 19:37 - 00000000 ____D () C:\ProgramData\Tunngle
2014-02-15 15:31 - 2014-02-15 15:31 - 00000991 _____ () C:\Users\Public\Desktop\Tunngle beta.lnk
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\Users\Public\Documents\Tunngle
2014-02-15 15:26 - 2014-02-15 15:26 - 00000000 _____ () C:\Windows\SysWOW64\Access.dat
2014-02-15 15:14 - 2014-02-15 15:14 - 00000000 ____D () C:\Users\Franz\Documents\Tunngle
2014-02-15 15:09 - 2014-02-15 15:10 - 00000000 ____D () C:\Users\Franz\Desktop\Jakob Server
2014-02-14 19:06 - 2014-02-14 19:06 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OpenOffice
2014-02-14 15:19 - 2014-02-16 13:02 - 00000000 ____D () C:\ProgramData\Soluto
2014-02-14 15:19 - 2014-02-16 13:01 - 00000193 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
2014-02-13 15:29 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 15:29 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 15:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 15:28 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 15:28 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 15:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 15:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 15:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 15:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 15:28 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 15:28 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 15:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 15:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 15:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 15:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 15:28 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 15:28 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 15:28 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 15:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 15:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 15:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 15:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 15:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 15:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 15:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 15:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 15:28 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 15:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 15:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 15:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 15:28 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 15:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 15:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 15:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 15:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 15:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 15:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 15:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 15:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 15:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 15:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 11:49 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 11:49 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 11:48 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 11:48 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 11:48 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 11:48 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 11:48 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 11:48 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 11:48 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 11:48 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 11:48 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 11:48 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 11:48 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 11:48 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 11:48 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 11:48 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 11:48 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 11:48 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 11:48 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 11:48 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 11:48 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 11:48 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 11:48 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 11:48 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 11:48 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 16:53 - 2014-02-15 17:24 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\.technic
2014-02-09 13:37 - 2014-02-09 13:37 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk

==================== One Month Modified Files and Folders =======

2014-03-10 19:05 - 2014-03-10 14:37 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-10 19:05 - 2014-03-08 16:40 - 00014507 _____ () C:\Users\Franz\Downloads\FRST.txt
2014-03-10 19:05 - 2013-05-15 19:29 - 00000000 ____D () C:\Users\Franz\AppData\Local\PMB Files
2014-03-10 19:04 - 2014-03-10 19:04 - 00000000 ____D () C:\Users\Franz\Downloads\FRST-OlderVersion
2014-03-10 19:04 - 2014-03-08 16:40 - 00000000 ____D () C:\FRST
2014-03-10 19:04 - 2014-03-08 16:39 - 02157056 _____ (Farbar) C:\Users\Franz\Downloads\FRST64.exe
2014-03-10 19:01 - 2013-05-11 16:15 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Skype
2014-03-10 18:28 - 2014-03-05 19:26 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-10 18:00 - 2013-05-15 19:29 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-10 17:44 - 2013-05-17 19:11 - 00000000 ____D () C:\Users\Franz\AppData\Local\CrashDumps
2014-03-10 16:39 - 2014-03-10 16:39 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-10 16:38 - 2014-03-10 16:38 - 02347384 _____ (ESET) C:\Users\Franz\Downloads\esetsmartinstaller_enu.exe
2014-03-10 16:37 - 2014-03-10 16:37 - 00987442 _____ () C:\Users\Franz\Downloads\SecurityCheck.exe
2014-03-10 15:24 - 2014-03-10 15:24 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-10 15:24 - 2014-03-10 15:24 - 00000000 ____D () C:\Users\Franz\Desktop\Alte Firefox-Daten
2014-03-10 15:24 - 2014-03-10 15:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-10 15:24 - 2014-03-10 15:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-10 14:42 - 2013-08-10 12:50 - 02046918 _____ () C:\Windows\WindowsUpdate.log
2014-03-10 14:37 - 2014-03-10 14:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Franz\Downloads\revosetup95.exe
2014-03-10 14:31 - 2014-03-08 12:28 - 00000390 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-03-09 20:26 - 2013-05-11 18:40 - 00000000 ____D () C:\Users\Franz\Documents\Schule
2014-03-09 19:46 - 2014-03-09 18:39 - 00039761 _____ () C:\Users\Franz\Documents\Bilder american news.odt
2014-03-09 19:46 - 2014-03-08 12:30 - 00018066 _____ () C:\Users\Franz\Documents\American news.odt
2014-03-09 19:15 - 2014-03-08 16:56 - 00000000 ____D () C:\Windows\Minidump
2014-03-09 19:15 - 2014-02-22 17:35 - 00000000 ____D () C:\Users\Franz\Tracing
2014-03-09 19:15 - 2013-05-31 19:13 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\TS3Client
2014-03-09 09:17 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-09 09:17 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-09 09:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-08 18:47 - 2014-03-08 18:47 - 00000758 _____ () C:\Users\Franz\Desktop\JRT.txt
2014-03-08 18:42 - 2013-06-24 15:51 - 00000000 ____D () C:\Windows\ERUNT
2014-03-08 18:29 - 2013-09-18 18:30 - 00000000 ____D () C:\AdwCleaner
2014-03-08 18:26 - 2014-03-08 18:26 - 01244192 _____ () C:\Users\Franz\Downloads\adwcleaner.exe
2014-03-08 18:26 - 2014-03-08 18:26 - 01037734 _____ (Thisisu) C:\Users\Franz\Downloads\JRT.exe
2014-03-08 17:12 - 2014-03-08 17:12 - 00016232 _____ () C:\Users\Franz\Downloads\gmer.log
2014-03-08 16:56 - 2014-03-08 12:28 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-03-08 16:49 - 2014-03-08 16:49 - 00380416 _____ () C:\Users\Franz\Downloads\mngwvcjz.exe
2014-03-08 16:47 - 2014-03-08 16:47 - 00033383 _____ () C:\Users\Franz\Downloads\Addition.txt
2014-03-08 16:38 - 2014-03-08 16:38 - 00050477 _____ () C:\Users\Franz\Downloads\Defogger.exe
2014-03-08 16:38 - 2014-03-08 16:38 - 00000472 _____ () C:\Users\Franz\Downloads\defogger_disable.log
2014-03-08 16:38 - 2014-03-08 16:38 - 00000000 _____ () C:\Users\Franz\defogger_reenable
2014-03-08 16:38 - 2013-05-11 14:14 - 00000000 ____D () C:\Users\Franz
2014-03-08 14:55 - 2013-08-13 10:15 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-08 14:54 - 2013-05-11 15:16 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Adobe
2014-03-08 14:54 - 2013-05-11 15:13 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-08 14:52 - 2014-01-19 12:47 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-03-08 13:22 - 2009-07-14 05:45 - 05006784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-08 13:17 - 2013-05-11 14:30 - 00069608 _____ () C:\Users\Franz\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 12:28 - 2014-03-08 12:28 - 00002978 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-03-08 12:28 - 2014-03-08 12:28 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-03-08 12:28 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-08 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-08 12:27 - 2014-03-08 12:27 - 00000000 ____D () C:\Users\Franz\AppData\Local\11926
2014-03-08 12:19 - 2014-03-08 12:19 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-08 12:19 - 2014-03-08 12:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-08 12:18 - 2014-03-03 17:41 - 00000000 ____D () C:\Users\Franz\AppData\Local\Dxtory Software
2014-03-08 11:59 - 2013-06-18 18:44 - 00000000 ____D () C:\Users\Franz\AppData\Local\Adobe
2014-03-07 13:46 - 2013-05-11 15:32 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-06 19:10 - 2014-03-06 13:33 - 00000000 ____D () C:\Program Files\OBS
2014-03-06 14:28 - 2014-03-05 19:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-06 14:28 - 2014-03-05 19:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-06 14:28 - 2014-03-05 19:26 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-06 13:35 - 2014-03-05 19:17 - 00000000 ____D () C:\Program Files (x86)\SplitMediaLabs
2014-03-06 13:33 - 2014-03-06 13:33 - 00000935 _____ () C:\Users\Franz\Desktop\Open Broadcaster Software.lnk
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OBS
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-03-06 13:33 - 2014-03-06 13:33 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-05 19:28 - 2014-03-05 19:28 - 00000000 ____D () C:\Users\Franz\AppData\Local\SplitMediaLabs
2014-03-05 19:26 - 2014-03-05 19:17 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\SplitMediaLabs
2014-03-05 19:17 - 2014-03-05 19:17 - 00000000 ____D () C:\ProgramData\SplitMediaLabs
2014-03-05 15:42 - 2013-11-23 12:18 - 00000000 ____D () C:\Program Files (x86)\LOLReplay
2014-03-05 13:22 - 2013-05-11 14:14 - 00000000 ___RD () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-04 16:54 - 2013-07-03 18:09 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\.minecraft
2014-03-04 14:58 - 2014-03-04 14:58 - 00000000 ____D () C:\Users\Franz\AppData\Local\Skype
2014-03-04 14:57 - 2014-03-04 14:57 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-04 14:57 - 2014-03-04 14:57 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-04 14:57 - 2013-05-11 16:15 - 00000000 ____D () C:\ProgramData\Skype
2014-03-03 17:46 - 2014-03-03 17:46 - 00000000 ____D () C:\Users\Franz\Documents\Scratch Projekte
2014-03-03 17:42 - 2014-03-03 17:41 - 00000000 ____D () C:\Program Files (x86)\Dxtory Software
2014-03-03 17:39 - 2014-03-03 17:39 - 00715038 _____ () C:\Windows\unins000.exe
2014-03-03 17:39 - 2014-03-03 17:39 - 00001990 _____ () C:\Windows\unins000.dat
2014-03-02 13:30 - 2013-05-17 19:11 - 01596822 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-02 13:30 - 2011-04-12 08:43 - 00700316 _____ () C:\Windows\system32\perfh007.dat
2014-03-02 13:30 - 2011-04-12 08:43 - 00149954 _____ () C:\Windows\system32\perfc007.dat
2014-03-02 13:30 - 2009-07-14 06:13 - 01596822 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-01 17:47 - 2014-03-01 17:47 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iTunes
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files\iPod
2014-03-01 17:47 - 2014-03-01 17:47 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-01 17:42 - 2014-03-01 17:42 - 00001845 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-03-01 17:42 - 2013-05-12 09:29 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-02-26 13:14 - 2013-05-15 19:35 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-02-26 13:13 - 2014-02-22 17:09 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-25 13:28 - 2014-02-25 13:27 - 00000000 ____D () C:\ef47be9d57167b970f003dc78fd13db7
2014-02-23 10:37 - 2014-02-23 10:37 - 00000646 _____ () C:\Users\Franz\Desktop\PBE.lnk
2014-02-22 21:37 - 2013-12-09 18:47 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-22 21:37 - 2013-05-11 16:03 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-22 21:11 - 2013-05-17 14:45 - 00000000 ____D () C:\Riot Games
2014-02-22 19:59 - 2014-02-22 19:59 - 00000000 ____D () C:\Program Files (x86)\WinPcap
2014-02-22 19:58 - 2014-02-22 19:58 - 00003059 _____ () C:\Users\Franz\Desktop\PowerLine Utility.lnk
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TP-LINK
2014-02-22 19:58 - 2014-02-22 19:58 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-02-22 19:46 - 2014-02-22 19:46 - 00000000 ____D () C:\Users\Franz\Documents\My Weblog Posts
2014-02-22 19:46 - 2013-09-20 19:38 - 00000000 ____D () C:\Users\Franz\AppData\Local\Windows Live Writer
2014-02-22 17:29 - 2013-05-15 19:31 - 00000000 ____D () C:\Users\Franz\AppData\Local\Windows Live
2014-02-22 17:11 - 2014-02-22 17:11 - 00000000 ____D () C:\Windows\de
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ___RD () C:\Users\Franz\OneDrive
2014-02-22 17:08 - 2014-02-22 17:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-02-22 17:07 - 2014-02-22 17:07 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{7514B9EE-62DF-4EB7-97F7-AAAAEA715FB3}
2014-02-22 17:06 - 2014-02-22 17:06 - 00003130 _____ () C:\Windows\System32\Tasks\{5907288C-7E23-4F4F-8A0D-385823C80FDB}
2014-02-21 17:41 - 2013-06-22 19:27 - 00000000 ____D () C:\Windows\pss
2014-02-20 19:37 - 2014-02-15 15:31 - 00000000 ____D () C:\ProgramData\Tunngle
2014-02-20 19:37 - 2013-05-11 16:23 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Tunngle
2014-02-20 16:38 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-16 13:06 - 2013-12-24 10:42 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-02-16 13:02 - 2014-02-14 15:19 - 00000000 ____D () C:\ProgramData\Soluto
2014-02-16 13:01 - 2014-02-14 15:19 - 00000193 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
2014-02-15 17:24 - 2014-02-15 17:24 - 00001274 _____ () C:\Users\Franz\Desktop\Technik Launcher.lnk
2014-02-15 17:24 - 2014-02-11 16:53 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\.technic
2014-02-15 15:43 - 2013-05-11 14:20 - 00000000 ____D () C:\Program Files (x86)\REALTEK
2014-02-15 15:42 - 2014-02-15 15:38 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-15 15:32 - 2013-05-11 16:23 - 00000000 ____D () C:\Program Files (x86)\Tunngle
2014-02-15 15:31 - 2014-02-15 15:31 - 00000991 _____ () C:\Users\Public\Desktop\Tunngle beta.lnk
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\Users\Public\Documents\Tunngle
2014-02-15 15:26 - 2014-02-15 15:26 - 00000000 _____ () C:\Windows\SysWOW64\Access.dat
2014-02-15 15:14 - 2014-02-15 15:14 - 00000000 ____D () C:\Users\Franz\Documents\Tunngle
2014-02-15 15:10 - 2014-02-15 15:09 - 00000000 ____D () C:\Users\Franz\Desktop\Jakob Server
2014-02-15 12:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-14 19:06 - 2014-02-14 19:06 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\OpenOffice
2014-02-14 18:59 - 2013-06-17 14:45 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\Feed The Beast
2014-02-14 16:00 - 2013-08-15 10:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-14 15:59 - 2013-05-11 17:35 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-12 14:13 - 2013-07-10 14:23 - 00000000 ____D () C:\Users\Franz\AppData\Roaming\FileZilla
2014-02-09 16:10 - 2014-01-24 19:02 - 00000000 ____D () C:\Users\Franz\AppData\Local\Battle.net
2014-02-09 13:37 - 2014-02-09 13:37 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-09 13:37 - 2014-01-01 15:08 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-02-09 13:37 - 2013-05-11 15:32 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-09 13:36 - 2013-05-11 15:32 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-09 13:36 - 2013-05-11 15:32 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-09 13:36 - 2013-05-11 15:32 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-09 13:36 - 2013-05-11 15:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-08 15:12

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---


Eset kommt gleich.

So hab jetzt Eset mal durchlaufen lassen und es danch gleich gelöscht... (diesen Haken reingemacht). Also hab ich jetzt kein Logfile, aber Eset hat nichts gefunden, dass kann ich sagen. Ich hab auch keine Probleme mehr im Internet mit Werbeeinblendungen.


Alt 11.03.2014, 12:15   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Avast findet Virus und Malwarebytes findet Viren - Standard

Avast findet Virus und Malwarebytes findet Viren



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
--> Avast findet Virus und Malwarebytes findet Viren

Alt 11.03.2014, 14:10   #7
sever01
 
Avast findet Virus und Malwarebytes findet Viren - Standard

Avast findet Virus und Malwarebytes findet Viren



Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-03-2014 02
Ran by Franz at 2014-03-11 14:21:15 Run:1
Running from C:\Users\Franz\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
*****************

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.


The system needed a reboot. 

==== End of Fixlog ====
         
Hallo, danke für deine Hilfe.

Alt 12.03.2014, 11:06   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Avast findet Virus und Malwarebytes findet Viren - Standard

Avast findet Virus und Malwarebytes findet Viren



Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Avast findet Virus und Malwarebytes findet Viren
adobe, bonjour, branding, defender, firefox, fontcache, homepage, iexplore.exe, league of legends, mozilla, newtab, pup.optional.amonetize.a, pup.optional.remarkit.a, pup.optional.skytech.a, security, services.exe, svchost.exe, temp, virus



Ähnliche Themen: Avast findet Virus und Malwarebytes findet Viren


  1. Laptop klickt von allein - Avast findet Trojaner/Viren (u.a. Win32:Dropper-gen [Drp])
    Plagegeister aller Art und deren Bekämpfung - 05.06.2014 (3)
  2. Spybot findet viele ERgebnisse, Avast, Malwarebytes und adwcleaner finden nichts
    Antiviren-, Firewall- und andere Schutzprogramme - 03.04.2014 (1)
  3. Avast findet mehrere Viren Win:32NextLife-B und andere Win:32...
    Log-Analyse und Auswertung - 01.03.2014 (47)
  4. Malwarebytes findet Viren
    Log-Analyse und Auswertung - 12.02.2014 (16)
  5. Viren? - Malwarebytes findet 4 infizierte Objekte
    Plagegeister aller Art und deren Bekämpfung - 06.01.2014 (9)
  6. Kaspersky findet 7 Trojaner, kann aber nur 2 verarbeiten - malwarebytes findet nichts
    Plagegeister aller Art und deren Bekämpfung - 18.12.2013 (6)
  7. Malwarebytes Anti-Malware Scan findet zwei Viren
    Log-Analyse und Auswertung - 07.12.2013 (25)
  8. Windows XP, Avast findet 2 Viren win32:EVo-gen + PDF:CVE-2013-3357
    Plagegeister aller Art und deren Bekämpfung - 25.11.2013 (24)
  9. AVG findet 32 Rootkits,kann sie aber nicht eliminieren ,Malwarebytes findet nichts
    Plagegeister aller Art und deren Bekämpfung - 16.10.2013 (5)
  10. Avast hat Trojaner gefunden,Malwarebytes findet 17
    Plagegeister aller Art und deren Bekämpfung - 07.09.2013 (11)
  11. avast findet JS:Downloader-blr, malwarebytes findet Exploit.Drop.GSA
    Plagegeister aller Art und deren Bekämpfung - 03.04.2013 (6)
  12. AntiVir findet nichts doch Malwarebytes findet 22 infizierte Dateien
    Plagegeister aller Art und deren Bekämpfung - 04.09.2012 (21)
  13. Security Shield Virus und Malwarebytes findet keine Viren
    Plagegeister aller Art und deren Bekämpfung - 22.08.2012 (3)
  14. Malwarebytes findet Viren
    Log-Analyse und Auswertung - 23.01.2012 (1)
  15. Trojan Hunt findet die Trojaner sinowal.727 und agent.28. Malwarebytes findet nichts?
    Plagegeister aller Art und deren Bekämpfung - 15.11.2011 (1)
  16. Viren, Trojaner, Malware auf meinem PC. AntiVir findet, löscht und findet wieder.
    Plagegeister aller Art und deren Bekämpfung - 10.07.2010 (6)
  17. Firefox öffnet Seiten und avast findet ständig Viren
    Plagegeister aller Art und deren Bekämpfung - 03.06.2010 (6)

Zum Thema Avast findet Virus und Malwarebytes findet Viren - Hallo, ich habe Heute mal meinen PC auf Viren gescannt. Nachdem Avast "NSIS:NextLive-A" gefunden hat, habe ich mir Malwarebytes gedownloaded und habe es auch einmal scannen lassen. Mein PC hat - Avast findet Virus und Malwarebytes findet Viren...
Archiv
Du betrachtest: Avast findet Virus und Malwarebytes findet Viren auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.