| |
| |||||||
Log-Analyse und Auswertung: Startseite bei Firefox lässt sich nicht ändern.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
09.04.2014, 13:28
| #1 |
 |  Startseite bei Firefox lässt sich nicht ändern. Hallo Forum, wenn ich im FF einen neuen Tab öffne, geht er immer auf "search.conduit.com". Jetzt soll man über "about:config" den Schlüssel "browser.newtab.url" ändern. Das klappt aber nicht. Sobald ich in der Dialogbox OK klicke, steht da wieder der alte Link. Ich hab auch schon nach der user.js gesucht. Die gibt es auch nicht. Das Problem ist mir vor zwei Tagen das erste Mal aufgefallen. Ich habe seither auch nix installiert. Ich habe einen Virus heute gefunden und Avira hat ihn in Quarantäne verschoben. Anbei die gewünschten Log-Dateien: Avira: Code:
ATTFilter Avira Free Antivirus
Erstellungsdatum der Reportdatei: Mittwoch, 9. April 2014 09:10
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Antivirus Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 7 Home Premium
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : ****
Computername : PC
Versionsinformationen:
BUILD.DAT : 14.0.3.350 56624 Bytes 25.02.2014 11:41:00
AVSCAN.EXE : 14.0.3.332 1058384 Bytes 20.02.2014 09:27:15
AVSCANRC.DLL : 14.0.2.292 62008 Bytes 18.02.2014 20:52:48
LUKE.DLL : 14.0.3.336 65616 Bytes 20.02.2014 09:27:26
AVSCPLR.DLL : 14.0.3.336 124496 Bytes 20.02.2014 09:27:15
AVREG.DLL : 14.0.3.336 250448 Bytes 20.02.2014 09:27:14
avlode.dll : 14.0.3.336 544848 Bytes 20.02.2014 09:27:13
avlode.rdf : 14.0.3.38 58680 Bytes 13.03.2014 14:05:20
VBASE000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 11:03:18
VBASE001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 11:03:20
VBASE002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 11:03:22
VBASE003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 11:03:23
VBASE004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 11:03:25
VBASE005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 11:03:29
VBASE006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 15:52:55
VBASE007.VDF : 7.11.139.39 2048 Bytes 27.03.2014 15:52:55
VBASE008.VDF : 7.11.139.40 2048 Bytes 27.03.2014 15:52:55
VBASE009.VDF : 7.11.139.41 2048 Bytes 27.03.2014 15:52:55
VBASE010.VDF : 7.11.139.42 2048 Bytes 27.03.2014 15:52:55
VBASE011.VDF : 7.11.139.43 2048 Bytes 27.03.2014 15:52:55
VBASE012.VDF : 7.11.139.44 2048 Bytes 27.03.2014 15:52:55
VBASE013.VDF : 7.11.139.45 2048 Bytes 27.03.2014 15:52:56
VBASE014.VDF : 7.11.139.171 111104 Bytes 28.03.2014 13:03:57
VBASE015.VDF : 7.11.140.23 150016 Bytes 30.03.2014 10:50:07
VBASE016.VDF : 7.11.140.143 222720 Bytes 01.04.2014 06:18:00
VBASE017.VDF : 7.11.140.235 144384 Bytes 03.04.2014 12:17:53
VBASE018.VDF : 7.11.141.81 193536 Bytes 05.04.2014 16:43:44
VBASE019.VDF : 7.11.141.203 241152 Bytes 08.04.2014 17:59:26
VBASE020.VDF : 7.11.141.204 2048 Bytes 08.04.2014 17:59:26
VBASE021.VDF : 7.11.141.205 2048 Bytes 08.04.2014 17:59:26
VBASE022.VDF : 7.11.141.206 2048 Bytes 08.04.2014 17:59:27
VBASE023.VDF : 7.11.141.207 2048 Bytes 08.04.2014 17:59:27
VBASE024.VDF : 7.11.141.208 2048 Bytes 08.04.2014 17:59:27
VBASE025.VDF : 7.11.141.209 2048 Bytes 08.04.2014 17:59:27
VBASE026.VDF : 7.11.141.210 2048 Bytes 08.04.2014 17:59:27
VBASE027.VDF : 7.11.141.211 2048 Bytes 08.04.2014 17:59:27
VBASE028.VDF : 7.11.141.212 2048 Bytes 08.04.2014 17:59:27
VBASE029.VDF : 7.11.141.213 2048 Bytes 08.04.2014 17:59:27
VBASE030.VDF : 7.11.141.214 2048 Bytes 08.04.2014 17:59:27
VBASE031.VDF : 7.11.142.34 152064 Bytes 09.04.2014 06:20:44
Engineversion : 8.3.18.2
AEVDF.DLL : 8.3.0.4 118976 Bytes 20.03.2014 17:00:08
AESCRIPT.DLL : 8.1.4.198 528584 Bytes 28.03.2014 13:03:57
AESCN.DLL : 8.3.0.2 135360 Bytes 20.03.2014 17:00:08
AESBX.DLL : 8.2.20.6 1331575 Bytes 30.01.2014 16:26:47
AERDL.DLL : 8.2.0.138 704888 Bytes 30.01.2014 16:26:10
AEPACK.DLL : 8.4.0.16 778440 Bytes 03.04.2014 06:17:59
AEOFFICE.DLL : 8.3.0.2 201084 Bytes 14.03.2014 17:21:35
AEHEUR.DLL : 8.1.4.1004 6643912 Bytes 03.04.2014 18:18:00
AEHELP.DLL : 8.3.0.0 274808 Bytes 12.03.2014 07:55:58
AEGEN.DLL : 8.1.7.24 442743 Bytes 12.03.2014 07:55:58
AEEXP.DLL : 8.4.1.258 512376 Bytes 14.03.2014 17:21:35
AEEMU.DLL : 8.1.3.2 393587 Bytes 29.09.2013 11:03:33
AECORE.DLL : 8.3.0.6 241864 Bytes 20.03.2014 16:59:50
AEBB.DLL : 8.1.1.4 53619 Bytes 29.09.2013 11:03:32
AVWINLL.DLL : 14.0.3.252 23608 Bytes 20.02.2014 09:27:11
AVPREF.DLL : 14.0.3.252 48696 Bytes 20.02.2014 09:27:14
AVREP.DLL : 14.0.3.252 175672 Bytes 20.02.2014 09:27:14
AVARKT.DLL : 14.0.3.336 256080 Bytes 20.02.2014 09:27:11
AVEVTLOG.DLL : 14.0.3.336 165968 Bytes 20.02.2014 09:27:12
SQLITE3.DLL : 3.7.0.1 394824 Bytes 29.09.2013 11:04:01
AVSMTP.DLL : 14.0.3.252 60472 Bytes 20.02.2014 09:27:15
NETNT.DLL : 14.0.3.252 13368 Bytes 20.02.2014 09:27:26
RCIMAGE.DLL : 14.0.3.260 4979256 Bytes 20.02.2014 09:27:11
RCTEXT.DLL : 14.0.3.282 72760 Bytes 20.02.2014 09:27:11
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Suche nach Rootkits und aktiver Malware
Konfigurationsdatei...................: C:\ProgramData\Avira\AntiVir Desktop\PROFILES\rootkit.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Löschen
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: Vollständig
Beginn des Suchlaufs: Mittwoch, 9. April 2014 09:10
Der Suchlauf nach versteckten Objekten wird begonnen.
Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvSCPAPISvr.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '95' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '129' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '165' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '74' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLANExt.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '14' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvxdsync.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'apnmcp.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '182' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'CltMngSvc.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'EscSvc64.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'cltmng.exe' - '83' Modul(e) wurden durchsucht
Durchsuche Prozess 'cltmngui.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'SetPoint.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'WrtMon.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'NvBackend.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'WrtProc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'KHALMNPR.EXE' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'iCloudServices.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'ApplePhotoStreams.exe' - '122' Modul(e) wurden durchsucht
Durchsuche Prozess 'E_YATIJJE.EXE' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'E_YATIJJE.EXE' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '99' Modul(e) wurden durchsucht
Durchsuche Prozess 'TBNotifier.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'FUFAXRCV.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'FUFAXSTM.exe' - '87' Modul(e) wurden durchsucht
Durchsuche Prozess 'EEventManager.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'PMSpeed.exe' - '146' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvtray.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'GloboFleet_CC.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'splwow64.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'DivXUpdate.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'APSDaemon.exe' - '88' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'AVWEBGRD.EXE' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'iPodService.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'daemonu.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'wuauclt.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '154' Modul(e) wurden durchsucht
Durchsuche Prozess 'firefox.exe' - '132' Modul(e) wurden durchsucht
Durchsuche Prozess 'plugin-container.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '121' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '1684' Dateien ).
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:'
[0] Archivtyp: Runtime Packed
--> C:\Users\****\*******\Dokumente\Sony Ericsson\Sony Ericsson PC Suite\Telefonsicherungen\C905.dbk
[1] Archivtyp: ZIP
--> Files/Content/{50AE213B-E5C7-4AAA-BB36-F5B006C4D86C}.jar
[2] Archivtyp: ZIP
--> n.class
[FUND] Enthält Erkennungsmuster des Exploits EXP/CVE-2012-1723.A.4089
[WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\****\*******\Dokumente\Sony Ericsson\Sony Ericsson PC Suite\Telefonsicherungen\C905.dbk
[FUND] Enthält Erkennungsmuster des Exploits EXP/CVE-2012-1723.A.4089
Beginne mit der Desinfektion:
C:\Users\****\*******\Dokumente\Sony Ericsson\Sony Ericsson PC Suite\Telefonsicherungen\C905.dbk
[FUND] Enthält Erkennungsmuster des Exploits EXP/CVE-2012-1723.A.4089
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '56d3b40d.qua' verschoben!
Ende des Suchlaufs: Mittwoch, 9. April 2014 11:17
Benötigte Zeit: 1:02:01 Stunde(n)
Der Suchlauf wurde vollständig durchgeführt.
26383 Verzeichnisse wurden überprüft
763063 Dateien wurden geprüft
2 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
1 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
763061 Dateien ohne Befall
7071 Archive wurden durchsucht
1 Warnungen
1 Hinweise
547411 Objekte wurden beim Rootkitscan durchsucht
0 Versteckte Objekte wurden gefunden
Defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 11:35 on 09/04/2014 (****)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 27 days old and could be outdated)
Ran by **** (administrator) on PC on 09-04-2014 11:36:25
Running from C:\Users\****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Buyond GmbH) C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1758160 2014-02-13] (APN)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PMSpeed] - C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.EXE [116632 2010-07-29] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [GloboFleet CC] - C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe [366400 2013-11-21] (Buyond GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [SSync] - C:\Users\****\AppData\Roaming\SSync\SSync.exe [37376 2013-12-09] ()
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [DataMgr] - C:\Users\****\AppData\Roaming\DataMgr\DataMgr.exe [168824 2014-01-23] (HTTO Group, Ltd.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [Intermediate] - C:\Users\****\AppData\Roaming\Intermediate\Intermediate.exe [37376 2013-12-09] ()
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [SCheck] - C:\Users\****\AppData\Roaming\SCheck\SCheck.exe [37376 2013-12-09] ()
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [Snoozer] - C:\Users\****\AppData\Roaming\Snz\Snz.exe [1210387 2014-03-12] ()
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355040 2014-03-30] (Conduit)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050400 2014-03-30] (Conduit)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://native-search.com/?channel=deg
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://native-search.com/search.php?channel=deg&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://native-search.com/search.php?channel=deg&q={searchTerms}
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\****\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: OfferMosquito - {82B16A3D-F03E-4565-A532-666B219C9A53} - C:\Users\****\AppData\Local\ext_offermosquito\OfferMosquitoIEPlaceholder.dll (Bebo Media Ltd)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Tcpip\..\Interfaces\{DDA62AC0-5A0C-4D51-A1D7-0CEFFFD29E9F}: [NameServer]145.253.2.171,145.253.2.75
FireFox:
========
FF ProfilePath: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default
FF user.js: detected! => C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\user.js
FF NewTab: 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\****\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll (Bebo Media Ltd)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\searchplugins\search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: OfferMosquito - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\om@offermosquito.com.xpi [2014-02-28]
FF Extension: Simple New Tab - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
FF Extension: Adblock Plus - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-06]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-03-21]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2466080 2014-03-30] (Conduit)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-30] (Avira Operations GmbH & Co. KG)
R3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w764.sys [1254464 2011-03-29] (Broadcom Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-09 11:36 - 2014-04-09 11:36 - 00017905 _____ () C:\Users\****\Desktop\FRST.txt
2014-04-09 11:36 - 2014-04-09 11:36 - 00000000 ____D () C:\FRST
2014-04-09 11:35 - 2014-04-09 11:35 - 00000470 _____ () C:\Users\****\Desktop\defogger_disable.log
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\****\defogger_reenable
2014-04-09 11:33 - 2014-04-09 11:33 - 00380416 _____ () C:\Users\****\Desktop\vq5ki2pf.exe
2014-04-09 11:31 - 2014-04-09 11:33 - 00000000 ____D () C:\Users\****\Downloads\Trojaner Board
2014-04-09 11:30 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2014-04-09 11:29 - 2014-04-09 11:29 - 00050477 _____ () C:\Users\****\Desktop\Defogger.exe
2014-04-09 11:18 - 2014-04-09 11:18 - 00026852 _____ () C:\Users\****\Desktop\AVSCAN-20140409-091023-AC5ECD10.LOG
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\****\AppData\Local\NVIDIA
2014-04-08 08:01 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-04-08 07:52 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-08 07:52 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-04-08 07:52 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-04-06 23:27 - 2014-04-06 23:27 - 00000000 ____D () C:\Users\****\AppData\Local\SearchProtect
2014-04-06 23:27 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-04-06 09:37 - 2011-09-29 11:30 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\****\Desktop\Firefox.lnk
2014-04-06 01:36 - 2013-10-03 10:57 - 00001062 _____ () C:\Users\****\Desktop\OpenOffice Calc.lnk
2014-04-06 01:35 - 2013-10-03 10:57 - 00001098 _____ () C:\Users\****\Desktop\OpenOffice Writer.lnk
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:38 - 2014-04-05 22:42 - 21987424 _____ (Mozilla) C:\Users\****\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2014-04-06 12:16 - 00000000 ____D () C:\Users\****\Documents\Anwalt
2014-04-05 18:45 - 2014-04-07 13:47 - 00000000 ____D () C:\Users\****\Documents\Inso
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\****\Documents\Fahrerkarte
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:49 - 2014-04-04 10:52 - 79962728 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-09 08:50 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:53 - 2014-04-04 06:54 - 48537520 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:53 - 2014-04-04 06:54 - 48366056 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Roaming\Snz
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Local\simple_new_tab
2014-03-28 14:59 - 2014-03-28 14:59 - 00000000 ____D () C:\Users\****\AppData\Roaming\SCheck
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 12:46 - 2014-04-04 12:56 - 00000000 ____D () C:\Users\****\Documents\Re******
2014-03-21 12:44 - 2014-03-18 18:34 - 00000954 _____ () C:\Users\****\Desktop\EPSON Scan.lnk
2014-03-21 09:10 - 2014-02-23 10:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 09:10 - 2014-02-23 10:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 09:10 - 2014-02-23 10:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 10:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 08:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 07:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 09:10 - 2014-02-23 07:35 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-21 09:09 - 2014-02-23 10:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 09:09 - 2014-02-23 10:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 09:09 - 2014-02-23 08:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-21 09:09 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-21 09:09 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-21 09:09 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-21 09:09 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-21 09:09 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-19 00:09 - 2014-04-09 08:50 - 00000000 ____D () C:\Users\****\AppData\Roaming\.oit
2014-03-19 00:09 - 2014-04-07 00:00 - 00000000 ____D () C:\Users\****\Documents\My PageManager
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Local\NewSoft
2014-03-19 00:08 - 1999-05-06 15:22 - 00027632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CTL3DV2.DLL
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:35 - 2014-04-06 23:51 - 00000000 ____D () C:\Users\****\AppData\Roaming\Epson
2014-03-18 18:35 - 2014-03-21 21:58 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll
2014-03-18 18:34 - 2014-03-18 18:36 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:34 - 2012-07-24 01:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2014-03-18 18:34 - 2011-12-12 01:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2014-03-18 18:33 - 2014-04-06 23:51 - 00000000 ____D () C:\ProgramData\EPSON
2014-03-18 18:33 - 2011-04-19 04:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMJJE.DLL
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\****\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\****\Desktop\****.lnk
2014-03-12 14:13 - 2014-03-12 14:13 - 02259352 _____ () C:\Users\****\AppData\Local\omesuperv.exe
==================== One Month Modified Files and Folders =======
2014-04-09 11:36 - 2014-04-09 11:36 - 00017905 _____ () C:\Users\****\Desktop\FRST.txt
2014-04-09 11:36 - 2014-04-09 11:36 - 00000000 ____D () C:\FRST
2014-04-09 11:35 - 2014-04-09 11:35 - 00000470 _____ () C:\Users\****\Desktop\defogger_disable.log
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\****\defogger_reenable
2014-04-09 11:35 - 2013-09-03 20:43 - 00000000 ____D () C:\Users\****
2014-04-09 11:33 - 2014-04-09 11:33 - 00380416 _____ () C:\Users\****\Desktop\vq5ki2pf.exe
2014-04-09 11:33 - 2014-04-09 11:31 - 00000000 ____D () C:\Users\****\Downloads\Trojaner Board
2014-04-09 11:30 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2014-04-09 11:29 - 2014-04-09 11:29 - 00050477 _____ () C:\Users\****\Desktop\Defogger.exe
2014-04-09 11:18 - 2014-04-09 11:18 - 00026852 _____ () C:\Users\****\Desktop\AVSCAN-20140409-091023-AC5ECD10.LOG
2014-04-09 10:49 - 2014-02-06 01:27 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-09 10:40 - 2013-10-11 16:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-09 08:57 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-09 08:57 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-09 08:54 - 2013-09-03 20:25 - 01127503 _____ () C:\Windows\WindowsUpdate.log
2014-04-09 08:50 - 2014-04-04 09:38 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-09 08:50 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\.oit
2014-04-09 08:50 - 2014-02-06 01:27 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-09 08:50 - 2013-09-03 22:18 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-09 08:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-09 08:50 - 2009-07-14 06:51 - 00055248 _____ () C:\Windows\setupact.log
2014-04-09 08:22 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-08 18:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\****\AppData\Local\NVIDIA
2014-04-08 08:01 - 2013-09-03 22:18 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-08 08:01 - 2013-09-03 22:17 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-07 13:47 - 2014-04-05 18:45 - 00000000 ____D () C:\Users\****\Documents\Inso
2014-04-07 11:35 - 2010-11-21 08:50 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 11:35 - 2010-11-21 08:50 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 11:35 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 00:00 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\Documents\My PageManager
2014-04-06 23:51 - 2014-03-18 18:35 - 00000000 ____D () C:\Users\****\AppData\Roaming\Epson
2014-04-06 23:51 - 2014-03-18 18:33 - 00000000 ____D () C:\ProgramData\EPSON
2014-04-06 23:27 - 2014-04-06 23:27 - 00000000 ____D () C:\Users\****\AppData\Local\SearchProtect
2014-04-06 23:27 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-04-06 23:27 - 2014-04-05 22:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\ProgramData\DivX
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-06 12:16 - 2014-04-05 21:39 - 00000000 ____D () C:\Users\****\Documents\Anwalt
2014-04-06 09:37 - 2013-09-03 22:10 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-04-06 09:35 - 2013-09-03 21:35 - 00000000 ____D () C:\Treiber
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\****\Desktop\Firefox.lnk
2014-04-06 08:39 - 2013-09-29 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:42 - 2014-04-05 22:38 - 21987424 _____ (Mozilla) C:\Users\****\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Bl*****
2014-04-05 18:46 - 2013-10-20 10:53 - 00134656 ___SH () C:\Users\****\Documents\Thumbs.db
2014-04-05 18:45 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\doc
2014-04-04 19:18 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Ol**
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\****\Documents\Fahrerkarte
2014-04-04 12:56 - 2014-03-21 12:46 - 00000000 ____D () C:\Users\****\Documents\Re******
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:52 - 2014-04-04 10:49 - 79962728 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:54 - 2014-04-04 06:53 - 48537520 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:54 - 2014-04-04 06:53 - 48366056 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 21:09 - 2014-01-29 20:29 - 00000000 ____D () C:\Users\****\*******
2014-04-01 20:44 - 2014-02-06 01:27 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-01 20:44 - 2014-02-06 01:27 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-30 11:59 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\xls
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Roaming\Snz
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Local\simple_new_tab
2014-03-28 15:00 - 2014-02-06 01:28 - 00003096 _____ () C:\Windows\System32\Tasks\OMESupervisor
2014-03-28 15:00 - 2014-02-06 01:27 - 00003104 _____ () C:\Windows\System32\Tasks\Fifth
2014-03-28 15:00 - 2014-02-06 01:27 - 00000000 ____D () C:\Users\****\AppData\Roaming\Fifth
2014-03-28 14:59 - 2014-03-28 14:59 - 00000000 ____D () C:\Users\****\AppData\Roaming\SCheck
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 21:58 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-21 09:37 - 2009-07-14 06:45 - 00306472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-21 09:13 - 2013-09-29 17:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-21 09:11 - 2013-09-29 17:46 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-20 23:02 - 2013-09-29 19:24 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-20 18:54 - 2010-11-21 05:47 - 00013394 _____ () C:\Windows\PFRO.log
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Local\NewSoft
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-19 00:07 - 2013-09-03 22:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-18 23:06 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Bewerbungen
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:36 - 2014-03-18 18:34 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:34 - 2014-03-21 12:44 - 00000954 _____ () C:\Users\****\Desktop\EPSON Scan.lnk
2014-03-16 15:55 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Ofenhaus
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\****\Desktop\Da***.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\****\Desktop\****.lnk
2014-03-12 14:13 - 2014-03-12 14:13 - 02259352 _____ () C:\Users\****\AppData\Local\omesuperv.exe
2014-03-12 13:12 - 2013-10-11 16:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 13:12 - 2013-09-29 19:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 13:12 - 2013-09-29 19:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 10:53 - 2014-02-06 01:11 - 00000000 ____D () C:\Users\****\AppData\Roaming\WindSolutions
2014-03-12 10:21 - 2014-02-06 01:11 - 00000000 ____D () C:\ProgramData\WindSolutions
Some content of TEMP:
====================
C:\Users\****\AppData\Local\Temp\AskSLib.dll
C:\Users\****\AppData\Local\Temp\avgnt.exe
C:\Users\****\AppData\Local\Temp\DivXSetup.exe
C:\Users\****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\****\AppData\Local\Temp\LMkRstPt.exe
C:\Users\****\AppData\Local\Temp\nseD023.exe
C:\Users\****\AppData\Local\Temp\nsjAEBA.exe
C:\Users\****\AppData\Local\Temp\nsoCC6A.exe
C:\Users\****\AppData\Local\Temp\nszAB6F.exe
C:\Users\****\AppData\Local\Temp\nvStInst.exe
C:\Users\****\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\****\AppData\Local\Temp\_is2DE9.exe
C:\Users\****\AppData\Local\Temp\_isF655.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-04-09 10:27
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by **** at 2014-04-09 11:36:59
Running from C:\Users\****\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4690 - APN, LLC)
AVS Audio Converter 7.2 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.2.529 - Online Media Technologies Ltd.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
Epson Benutzerhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Useg) (Version: - )
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version: - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{CEC98C2A-9ED5-49DA-9F3A-92434E0A4FA3}) (Version: 1.19.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Netg) (Version: - )
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON WF-3520 Series Printer Uninstall (HKLM\...\EPSON WF-3520 Series) (Version: - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
GloboFleet CC (HKLM\...\{C657CCF7-A8DB-435A-A764-2AF538A88F5E}) (Version: 3.7.5 - Buyond GmbH)
GloboFleet DriverCard Checker (HKLM-x32\...\{5F4F0021-343C-49B1-AAED-846A35656948}) (Version: 1.2.1 - Buyond GmbH)
Google Chrome Frame (HKLM-x32\...\{8618AE04-1210-3C32-A8C3-45A5E44CD340}) (Version: 65.169.107 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KYOCERA Client Tool (HKLM\...\KYOCERA Client Tool) (Version: 1.0.0026 - KYOCERA Document Solutions Inc.)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 4.2.1909 - KYOCERA Document Solutions Inc.)
Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
Nur Entfernen der CopyTrans Suite möglich (HKCU\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Presto! PageManager 9.03 SE (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.03.06 - Newsoft Technology Corporation)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.12.11.11 - Conduit) <==== ATTENTION
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION) <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIS (HKLM-x32\...\VIS) (Version: - ) <==== ATTENTION
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
WePrint (HKLM-x32\...\WePrint) (Version: - EuroSmartz Ltd)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
==================== Restore Points =========================
01-04-2014 18:24:10 Geplanter Prüfpunkt
04-04-2014 07:37:05 Installed GloboFleet DriverCard Checker
04-04-2014 08:52:38 Installed GloboFleet CC
05-04-2014 16:41:29 Installed Software Updater
05-04-2014 20:20:52 Removed Java(TM) 6 Update 35
05-04-2014 20:21:25 Installed Java 7 Update 51
06-04-2014 07:26:34 Gerätetreiber-Paketinstallation: EPSON Drucker
06-04-2014 07:37:05 Installiert Realtek Ethernet Controller Driver
08-04-2014 05:58:46 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\****\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {9902649F-0ED4-4AE0-91F2-E9FBF8963E7F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {A67324AC-50DA-4043-9535-7A17BA6775A7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {B1FA0F76-8125-43B2-84E7-48914B2C7B0F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\****\AppData\Local\omesuperv.exe [2014-03-12] () <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-03 22:18 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-09-29 13:05 - 2013-09-29 13:04 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-03-19 00:07 - 2008-11-17 15:56 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\nsSign.dll
2014-03-19 00:07 - 2010-05-07 12:46 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PerformOcr.dll
2014-03-19 00:07 - 2010-12-23 14:17 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMISM.dll
2014-03-19 00:07 - 2007-03-30 11:24 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Qem.dll
2014-03-19 00:07 - 2010-12-29 18:52 - 00147456 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMCommon.dll
2014-03-19 00:07 - 2008-08-25 18:19 - 00069632 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PHooKDlg.dll
2014-03-19 00:07 - 2009-11-26 18:49 - 00081920 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NetFun2k.dll
2014-03-19 00:07 - 2011-03-11 11:47 - 00151040 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ScanModule.dll
2014-03-19 00:07 - 2009-09-09 15:44 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMANO.dll
2014-03-19 00:07 - 2007-03-30 10:49 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ComClass.dll
2014-03-19 00:07 - 2010-11-30 17:42 - 00352256 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMTree.dll
2014-03-19 00:07 - 2010-10-22 11:01 - 00139264 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSet.dll
2014-03-19 00:07 - 2010-12-29 19:32 - 00614400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDB_N.dll
2014-03-19 00:07 - 2009-08-06 11:22 - 00421888 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\FT.dll
2014-03-19 00:07 - 2010-09-09 19:00 - 00061440 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMINSO.dll
2014-03-19 00:07 - 2010-07-13 11:48 - 00106496 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMProp.dll
2014-03-19 00:07 - 2007-08-31 18:51 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMVoice.dll
2014-03-19 00:07 - 2010-09-08 18:10 - 00073728 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\OutlookVBA.dll
2014-03-19 00:07 - 2009-11-27 18:38 - 00331776 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAppBar.dll
2014-03-19 00:07 - 2010-11-26 11:33 - 04583424 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMView.dll
2014-03-19 00:07 - 2007-03-30 11:01 - 00038992 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NsOEMKey.dll
2014-03-19 00:07 - 2010-10-22 11:22 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSave.dll
2014-03-19 00:07 - 2010-08-03 11:44 - 00049152 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMOffice.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00430080 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPageVW.dll
2014-03-19 00:07 - 2010-03-02 16:09 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDocVW.dll
2014-03-19 00:07 - 2009-06-26 10:03 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMApSet.dll
2014-03-19 00:07 - 2010-08-03 11:51 - 01036288 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\SlideBarDLL.dll
2014-03-19 00:07 - 2009-12-04 18:20 - 00323584 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAnoSet.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00184320 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImgVW.dll
2014-03-19 00:07 - 2008-08-25 17:16 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMIEVW.dll
2014-03-19 00:07 - 2010-09-08 11:52 - 00036864 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPDFView.dll
2014-03-19 00:07 - 2010-04-27 16:20 - 00065536 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMStatus.dll
2014-03-19 00:07 - 2011-01-21 16:05 - 00258048 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMScnSet.dll
2014-03-19 00:07 - 2007-03-30 10:57 - 00034896 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Import.dll
2014-03-19 00:07 - 2010-11-26 11:45 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImageSplitter.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-04-01 21:10 - 2014-04-01 21:10 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/09/2014 08:50:24 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/09/2014 08:20:33 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 09:33:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 08:51:49 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 07:59:15 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 06:07:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 05:26:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 11:59:55 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 11:53:56 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 11:35:16 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (04/09/2014 08:51:15 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/09/2014 08:21:33 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/09/2014 08:21:04 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/09/2014 08:21:04 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%0
Error: (04/09/2014 08:21:04 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (04/09/2014 08:21:03 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (04/08/2014 09:34:15 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/08/2014 08:52:49 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/08/2014 08:00:14 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/08/2014 06:08:49 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (04/09/2014 08:50:24 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/09/2014 08:20:33 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 09:33:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 08:51:49 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 07:59:15 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 06:07:50 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 05:26:13 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 11:59:55 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 11:53:56 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/08/2014 11:35:16 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Percentage of memory in use: 43%
Total physical RAM: 4094.49 MB
Available physical RAM: 2316.16 MB
Total Pagefile: 8187.16 MB
Available Pagefile: 6123.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.99 GB) (Free:232.61 GB) NTFS
Drive d: (Setup) (CDROM) (Total:0.09 GB) (Free:0 GB) CDFS
Drive n: (Wombel) (Fixed) (Total:1863.01 GB) (Free:1128.25 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: C13EC13E)
Partition: GPT Partition Type.
========================================================
Disk: 5 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00080E6D)
Partition 1: (Not Active) - (Size=-198627557376) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-09 11:50:08
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_HD321KJ rev.CP100-12 298,09GB
Running: vq5ki2pf.exe; Driver: C:\Users\****\AppData\Local\Temp\pxldapow.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 818 fffff800031b9122 81 bytes [D8, CF, 11, F2, D1, 76, 4B, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 900 fffff800031b9174 26 bytes [B9, 00, 86, 17, 5C, 44, E1, ...]
---- User code sections - GMER 2.1 ----
.text C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe[2508] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000772b1465 2 bytes [2B, 77]
.text C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe[2508] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000772b14bb 2 bytes [2B, 77]
.text ... * 2
.text C:\PROGRA~2\SearchProtect\SearchProtect\bin\cltmng.exe[2700] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000772b1465 2 bytes [2B, 77]
.text C:\PROGRA~2\SearchProtect\SearchProtect\bin\cltmng.exe[2700] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000772b14bb 2 bytes [2B, 77]
.text ... * 2
.text C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exe[2760] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000772b1465 2 bytes [2B, 77]
.text C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exe[2760] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000772b14bb 2 bytes [2B, 77]
.text ... * 2
.text C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000772b1465 2 bytes [2B, 77]
.text C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000772b14bb 2 bytes [2B, 77]
.text ... * 2
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[3692] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000772b1465 2 bytes [2B, 77]
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[3692] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000772b14bb 2 bytes [2B, 77]
.text ... * 2
? C:\Windows\system32\mssprxy.dll [1432] entry point in ".rdata" section 000000006daf71e6
---- EOF - GMER 2.1 ----
 Vielen Dank auch schon mal im voraus. Bis dahin **** |
|
09.04.2014, 13:58
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Startseite bei Firefox lässt sich nicht ändern. Hallo und
__________________ Adware/Junkware/Toolbars entfernen 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
09.04.2014, 21:14
| #3 |
| | Startseite bei Firefox lässt sich nicht ändern. Hi.
__________________Vielen Dank erstmal für die Hilfe. Ich häng die Dateien mal an. Nur von dem FRST gibt es keine Addition.txt, wurde nicht erstellt. Beim ersten mal schon. Adwcleaner AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.023 - Bericht erstellt am 09/04/2014 um 21:40:18
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : **** - PC
# Gestartet von : C:\Users\****\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : CltMngSvc
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Program Files (x86)\SearchProtect
Ordner Gelöscht : C:\Users\****\AppData\Local\ext_offermosquito
Ordner Gelöscht : C:\Users\****\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\****\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\****\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\****\AppData\Roaming\Common\LuaRT
Ordner Gelöscht : C:\Users\****\AppData\Roaming\DataMgr
Ordner Gelöscht : C:\Users\****\AppData\Roaming\Intermediate
Ordner Gelöscht : C:\Users\****\AppData\Roaming\SCheck
Ordner Gelöscht : C:\Users\****\AppData\Roaming\Snz
Ordner Gelöscht : C:\Users\****\AppData\Roaming\SSync
Ordner Gelöscht : C:\Users\****\AppData\Roaming\Windows Net Data
Datei Gelöscht : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\om@offermosquito.com.xpi
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\****\AppData\Local\omesuperv.exe
Datei Gelöscht : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\searchplugins\conduit-search.xml
Datei Gelöscht : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\searchplugins\search.xml
Datei Gelöscht : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\user.js
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82B16A3D-F03E-4565-A532-666B219C9A53}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82B16A3D-F03E-4565-A532-666B219C9A53}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\OfferMosquito
Schlüssel Gelöscht : HKCU\Software\Protector
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16843
-\\ Mozilla Firefox v28.0 (de)
[ Datei : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\prefs.js ]
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://search.conduit.com/?gd=&ctid=CT3321902&octid=EB_ORIGINAL_CTID&ISID=M4E9963BF-F6BE-4B5D-AD1B-6D8507108DA2&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP1A6882AB-A2C[...]
*************************
AdwCleaner[R0].txt - [4409 octets] - [09/04/2014 21:39:24]
AdwCleaner[S0].txt - [3973 octets] - [09/04/2014 21:40:18]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4033 octets] ##########
JRT Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by **** on 09.04.2014 at 21:45:17,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-785402712-3989741325-3718471224-1000\Software\Microsoft\Internet Explorer\Main\\Start Page
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\apn"
~~~ FireFox
Emptied folder: C:\Users\****\AppData\Roaming\mozilla\firefox\profiles\lyuir5hg.default\minidumps [24 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.04.2014 at 21:52:55,78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 27 days old and could be outdated)
Ran by **** (administrator) on PC on 09-04-2014 21:58:41
Running from C:\Users\****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Buyond GmbH) C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PMSpeed] - C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.EXE [116632 2010-07-29] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [GloboFleet CC] - C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe [366400 2013-11-21] (Buyond GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
==================== Internet (Whitelisted) ====================
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\****\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Tcpip\..\Interfaces\{DDA62AC0-5A0C-4D51-A1D7-0CEFFFD29E9F}: [NameServer]145.253.2.171,145.253.2.75
FireFox:
========
FF ProfilePath: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\****\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Simple New Tab - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
FF Extension: Adblock Plus - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-06]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-03-21]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-30] (Avira Operations GmbH & Co. KG)
R3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w764.sys [1254464 2011-03-29] (Broadcom Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-09 21:58 - 2014-04-09 21:58 - 00015194 _____ () C:\Users\****\Desktop\FRST.txt
2014-04-09 21:52 - 2014-04-09 21:58 - 00001882 _____ () C:\Users\****\Desktop\JRT.txt
2014-04-09 21:45 - 2014-04-09 21:45 - 00000000 ____D () C:\Windows\ERUNT
2014-04-09 21:45 - 2014-04-09 21:44 - 00004117 _____ () C:\Users\****\Desktop\AdwCleaner[S0].txt
2014-04-09 21:39 - 2014-04-09 21:40 - 00000000 ____D () C:\AdwCleaner
2014-04-09 21:36 - 2014-04-09 15:22 - 01016261 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe
2014-04-09 21:34 - 2014-04-09 15:21 - 01426178 _____ () C:\Users\****\Desktop\adwcleaner.exe
2014-04-09 14:32 - 2014-04-09 14:35 - 00000000 ____D () C:\Users\****\Desktop\OpenHardwareMonitor
2014-04-09 14:31 - 2014-04-09 14:31 - 00526371 _____ () C:\Users\****\Desktop\openhardwaremonitor-v0.6.0-beta.zip
2014-04-09 11:36 - 2014-04-09 21:58 - 00000000 ____D () C:\FRST
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\****\defogger_reenable
2014-04-09 11:31 - 2014-04-09 21:48 - 00000000 ____D () C:\Users\****\Downloads\Trojaner Board
2014-04-09 11:30 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\****\AppData\Local\NVIDIA
2014-04-08 08:01 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-04-08 07:52 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-08 07:52 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-04-08 07:52 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\****\Desktop\Firefox.lnk
2014-04-06 01:36 - 2013-10-03 10:57 - 00001062 _____ () C:\Users\****\Desktop\OpenOffice Calc.lnk
2014-04-06 01:35 - 2013-10-03 10:57 - 00001098 _____ () C:\Users\****\Desktop\OpenOffice Writer.lnk
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:38 - 2014-04-05 22:42 - 21987424 _____ (Mozilla) C:\Users\****\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2014-04-06 12:16 - 00000000 ____D () C:\Users\****\Documents\Anwalt
2014-04-05 18:45 - 2014-04-07 13:47 - 00000000 ____D () C:\Users\****\Documents\Inso
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\****\Documents\Fahrerkarte
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:49 - 2014-04-04 10:52 - 79962728 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-09 21:42 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:53 - 2014-04-04 06:54 - 48537520 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:53 - 2014-04-04 06:54 - 48366056 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Local\simple_new_tab
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 12:46 - 2014-04-04 12:56 - 00000000 ____D () C:\Users\****\Documents\Re******
2014-03-21 12:44 - 2014-03-18 18:34 - 00000954 _____ () C:\Users\****\Desktop\EPSON Scan.lnk
2014-03-21 09:10 - 2014-02-23 10:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 09:10 - 2014-02-23 10:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 09:10 - 2014-02-23 10:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 10:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 08:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 07:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 09:10 - 2014-02-23 07:35 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-21 09:09 - 2014-02-23 10:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 09:09 - 2014-02-23 10:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 09:09 - 2014-02-23 08:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-21 09:09 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-21 09:09 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-21 09:09 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-21 09:09 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-21 09:09 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-19 00:09 - 2014-04-09 21:42 - 00000000 ____D () C:\Users\****\AppData\Roaming\.oit
2014-03-19 00:09 - 2014-04-07 00:00 - 00000000 ____D () C:\Users\****\Documents\My PageManager
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Local\NewSoft
2014-03-19 00:08 - 1999-05-06 15:22 - 00027632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CTL3DV2.DLL
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:35 - 2014-04-06 23:51 - 00000000 ____D () C:\Users\****\AppData\Roaming\Epson
2014-03-18 18:35 - 2014-03-21 21:58 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll
2014-03-18 18:34 - 2014-03-18 18:36 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:34 - 2012-07-24 01:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2014-03-18 18:34 - 2011-12-12 01:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2014-03-18 18:33 - 2014-04-06 23:51 - 00000000 ____D () C:\ProgramData\EPSON
2014-03-18 18:33 - 2011-04-19 04:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMJJE.DLL
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\****\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\****\Desktop\****.lnk
==================== One Month Modified Files and Folders =======
2014-04-09 21:59 - 2014-04-09 21:58 - 00015194 _____ () C:\Users\****\Desktop\FRST.txt
2014-04-09 21:58 - 2014-04-09 21:52 - 00001882 _____ () C:\Users\****\Desktop\JRT.txt
2014-04-09 21:58 - 2014-04-09 11:36 - 00000000 ____D () C:\FRST
2014-04-09 21:50 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-09 21:50 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-09 21:49 - 2014-02-06 01:27 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-09 21:48 - 2014-04-09 11:31 - 00000000 ____D () C:\Users\****\Downloads\Trojaner Board
2014-04-09 21:45 - 2014-04-09 21:45 - 00000000 ____D () C:\Windows\ERUNT
2014-04-09 21:44 - 2014-04-09 21:45 - 00004117 _____ () C:\Users\****\Desktop\AdwCleaner[S0].txt
2014-04-09 21:42 - 2014-04-04 09:38 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-09 21:42 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\.oit
2014-04-09 21:41 - 2014-02-06 01:27 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-09 21:41 - 2013-09-03 22:18 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-09 21:41 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-09 21:41 - 2009-07-14 06:51 - 00055416 _____ () C:\Windows\setupact.log
2014-04-09 21:40 - 2014-04-09 21:39 - 00000000 ____D () C:\AdwCleaner
2014-04-09 21:40 - 2013-10-11 16:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-09 21:40 - 2013-09-03 20:25 - 01150272 _____ () C:\Windows\WindowsUpdate.log
2014-04-09 15:22 - 2014-04-09 21:36 - 01016261 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe
2014-04-09 15:21 - 2014-04-09 21:34 - 01426178 _____ () C:\Users\****\Desktop\adwcleaner.exe
2014-04-09 14:35 - 2014-04-09 14:32 - 00000000 ____D () C:\Users\****\Desktop\OpenHardwareMonitor
2014-04-09 14:31 - 2014-04-09 14:31 - 00526371 _____ () C:\Users\****\Desktop\openhardwaremonitor-v0.6.0-beta.zip
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\****\defogger_reenable
2014-04-09 11:35 - 2013-09-03 20:43 - 00000000 ____D () C:\Users\****
2014-04-09 11:30 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2014-04-09 08:22 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-08 18:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\****\AppData\Local\NVIDIA
2014-04-08 08:01 - 2013-09-03 22:18 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-08 08:01 - 2013-09-03 22:17 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-07 13:47 - 2014-04-05 18:45 - 00000000 ____D () C:\Users\****\Documents\Inso
2014-04-07 11:35 - 2010-11-21 08:50 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 11:35 - 2010-11-21 08:50 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 11:35 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 00:00 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\Documents\My PageManager
2014-04-06 23:51 - 2014-03-18 18:35 - 00000000 ____D () C:\Users\****\AppData\Roaming\Epson
2014-04-06 23:51 - 2014-03-18 18:33 - 00000000 ____D () C:\ProgramData\EPSON
2014-04-06 23:27 - 2014-04-05 22:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\ProgramData\DivX
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-06 12:16 - 2014-04-05 21:39 - 00000000 ____D () C:\Users\****\Documents\Anwalt
2014-04-06 09:37 - 2013-09-03 22:10 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-04-06 09:35 - 2013-09-03 21:35 - 00000000 ____D () C:\Treiber
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\****\Desktop\Firefox.lnk
2014-04-06 08:39 - 2013-09-29 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:42 - 2014-04-05 22:38 - 21987424 _____ (Mozilla) C:\Users\****\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Bl*****
2014-04-05 18:46 - 2013-10-20 10:53 - 00134656 ___SH () C:\Users\****\Documents\Thumbs.db
2014-04-05 18:45 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\doc
2014-04-04 19:18 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Olli
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\****\Documents\Fahrerkarte
2014-04-04 12:56 - 2014-03-21 12:46 - 00000000 ____D () C:\Users\****\Documents\Re******
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:52 - 2014-04-04 10:49 - 79962728 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:54 - 2014-04-04 06:53 - 48537520 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:54 - 2014-04-04 06:53 - 48366056 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 21:09 - 2014-01-29 20:29 - 00000000 ____D () C:\Users\****\*******
2014-04-01 20:44 - 2014-02-06 01:27 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-01 20:44 - 2014-02-06 01:27 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-30 11:59 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\xls
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Local\simple_new_tab
2014-03-28 15:00 - 2014-02-06 01:28 - 00003096 _____ () C:\Windows\System32\Tasks\OMESupervisor
2014-03-28 15:00 - 2014-02-06 01:27 - 00003104 _____ () C:\Windows\System32\Tasks\Fifth
2014-03-28 15:00 - 2014-02-06 01:27 - 00000000 ____D () C:\Users\****\AppData\Roaming\Fifth
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 21:58 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-21 09:37 - 2009-07-14 06:45 - 00306472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-21 09:13 - 2013-09-29 17:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-21 09:11 - 2013-09-29 17:46 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-20 23:02 - 2013-09-29 19:24 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-20 18:54 - 2010-11-21 05:47 - 00013394 _____ () C:\Windows\PFRO.log
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Local\NewSoft
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-19 00:07 - 2013-09-03 22:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-18 23:06 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Bewerbungen
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:36 - 2014-03-18 18:34 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:34 - 2014-03-21 12:44 - 00000954 _____ () C:\Users\****\Desktop\EPSON Scan.lnk
2014-03-16 15:55 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Ofenhaus
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\****\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\****\Desktop\****.lnk
2014-03-12 13:12 - 2013-10-11 16:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 13:12 - 2013-09-29 19:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 13:12 - 2013-09-29 19:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 10:53 - 2014-02-06 01:11 - 00000000 ____D () C:\Users\****\AppData\Roaming\WindSolutions
2014-03-12 10:21 - 2014-02-06 01:11 - 00000000 ____D () C:\ProgramData\WindSolutions
Some content of TEMP:
====================
C:\Users\****\AppData\Local\Temp\AskSLib.dll
C:\Users\****\AppData\Local\Temp\avgnt.exe
C:\Users\****\AppData\Local\Temp\DivXSetup.exe
C:\Users\****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\****\AppData\Local\Temp\LMkRstPt.exe
C:\Users\****\AppData\Local\Temp\nseD023.exe
C:\Users\****\AppData\Local\Temp\nsjAEBA.exe
C:\Users\****\AppData\Local\Temp\nsoCC6A.exe
C:\Users\****\AppData\Local\Temp\nszAB6F.exe
C:\Users\****\AppData\Local\Temp\nvStInst.exe
C:\Users\****\AppData\Local\Temp\Quarantine.exe
C:\Users\****\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\****\AppData\Local\Temp\_is2DE9.exe
C:\Users\****\AppData\Local\Temp\_isF655.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-04-09 10:27
==================== End Of Log ============================
--- --- --- Diesmal hab ich vor dem einfügen den Namen ersetzen lassen  Bis dahin Olaf |
|
09.04.2014, 22:24
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Startseite bei Firefox lässt sich nicht ändern. Haken setzen bei addition.txt dann auf Scan klicken 
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
09.04.2014, 22:43
| #5 |
| | Startseite bei Firefox lässt sich nicht ändern. Sorry Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by **** at 2014-04-09 23:39:53
Running from C:\Users\****\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4690 - APN, LLC)
AVS Audio Converter 7.2 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.2.529 - Online Media Technologies Ltd.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
Epson Benutzerhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Useg) (Version: - )
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version: - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{CEC98C2A-9ED5-49DA-9F3A-92434E0A4FA3}) (Version: 1.19.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Netg) (Version: - )
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON WF-3520 Series Printer Uninstall (HKLM\...\EPSON WF-3520 Series) (Version: - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
GloboFleet CC (HKLM\...\{C657CCF7-A8DB-435A-A764-2AF538A88F5E}) (Version: 3.7.5 - Buyond GmbH)
GloboFleet DriverCard Checker (HKLM-x32\...\{5F4F0021-343C-49B1-AAED-846A35656948}) (Version: 1.2.1 - Buyond GmbH)
Google Chrome Frame (HKLM-x32\...\{8618AE04-1210-3C32-A8C3-45A5E44CD340}) (Version: 65.169.107 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KYOCERA Client Tool (HKLM\...\KYOCERA Client Tool) (Version: 1.0.0026 - KYOCERA Document Solutions Inc.)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 4.2.1909 - KYOCERA Document Solutions Inc.)
Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
Nur Entfernen der CopyTrans Suite möglich (HKCU\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Presto! PageManager 9.03 SE (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.03.06 - Newsoft Technology Corporation)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION) <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIS (HKLM-x32\...\VIS) (Version: - ) <==== ATTENTION
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
WePrint (HKLM-x32\...\WePrint) (Version: - EuroSmartz Ltd)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
==================== Restore Points =========================
01-04-2014 18:24:10 Geplanter Prüfpunkt
04-04-2014 07:37:05 Installed GloboFleet DriverCard Checker
04-04-2014 08:52:38 Installed GloboFleet CC
05-04-2014 16:41:29 Installed Software Updater
05-04-2014 20:20:52 Removed Java(TM) 6 Update 35
05-04-2014 20:21:25 Installed Java 7 Update 51
06-04-2014 07:26:34 Gerätetreiber-Paketinstallation: EPSON Drucker
06-04-2014 07:37:05 Installiert Realtek Ethernet Controller Driver
08-04-2014 05:58:46 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\****\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {9902649F-0ED4-4AE0-91F2-E9FBF8963E7F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {A67324AC-50DA-4043-9535-7A17BA6775A7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {B1FA0F76-8125-43B2-84E7-48914B2C7B0F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\****\AppData\Local\omesuperv.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-03 22:18 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-09-29 13:05 - 2013-09-29 13:04 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-03-19 00:07 - 2008-11-17 15:56 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\nsSign.dll
2014-03-19 00:07 - 2010-05-07 12:46 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PerformOcr.dll
2014-03-19 00:07 - 2010-12-23 14:17 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMISM.dll
2014-03-19 00:07 - 2007-03-30 11:24 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Qem.dll
2014-03-19 00:07 - 2010-12-29 18:52 - 00147456 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMCommon.dll
2014-03-19 00:07 - 2008-08-25 18:19 - 00069632 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PHooKDlg.dll
2014-03-19 00:07 - 2009-11-26 18:49 - 00081920 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NetFun2k.dll
2014-03-19 00:07 - 2011-03-11 11:47 - 00151040 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ScanModule.dll
2014-03-19 00:07 - 2009-09-09 15:44 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMANO.dll
2014-03-19 00:07 - 2007-03-30 10:49 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ComClass.dll
2014-03-19 00:07 - 2010-11-30 17:42 - 00352256 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMTree.dll
2014-03-19 00:07 - 2010-10-22 11:01 - 00139264 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSet.dll
2014-03-19 00:07 - 2010-12-29 19:32 - 00614400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDB_N.dll
2014-03-19 00:07 - 2009-08-06 11:22 - 00421888 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\FT.dll
2014-03-19 00:07 - 2010-09-09 19:00 - 00061440 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMINSO.dll
2014-03-19 00:07 - 2010-07-13 11:48 - 00106496 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMProp.dll
2014-03-19 00:07 - 2007-08-31 18:51 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMVoice.dll
2014-03-19 00:07 - 2010-09-08 18:10 - 00073728 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\OutlookVBA.dll
2014-03-19 00:07 - 2009-11-27 18:38 - 00331776 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAppBar.dll
2014-03-19 00:07 - 2010-11-26 11:33 - 04583424 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMView.dll
2014-03-19 00:07 - 2007-03-30 11:01 - 00038992 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NsOEMKey.dll
2014-03-19 00:07 - 2010-10-22 11:22 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSave.dll
2014-03-19 00:07 - 2010-08-03 11:44 - 00049152 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMOffice.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00430080 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPageVW.dll
2014-03-19 00:07 - 2010-03-02 16:09 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDocVW.dll
2014-03-19 00:07 - 2009-06-26 10:03 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMApSet.dll
2014-03-19 00:07 - 2010-08-03 11:51 - 01036288 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\SlideBarDLL.dll
2014-03-19 00:07 - 2009-12-04 18:20 - 00323584 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAnoSet.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00184320 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImgVW.dll
2014-03-19 00:07 - 2008-08-25 17:16 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMIEVW.dll
2014-03-19 00:07 - 2010-09-08 11:52 - 00036864 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPDFView.dll
2014-03-19 00:07 - 2010-04-27 16:20 - 00065536 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMStatus.dll
2014-03-19 00:07 - 2011-01-21 16:05 - 00258048 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMScnSet.dll
2014-03-19 00:07 - 2007-03-30 10:57 - 00034896 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Import.dll
2014-03-19 00:07 - 2010-11-26 11:45 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImageSplitter.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-04-01 21:10 - 2014-04-01 21:10 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/09/2014 11:17:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (04/09/2014 11:16:52 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (04/09/2014 11:17:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Percentage of memory in use: 40%
Total physical RAM: 4094.49 MB
Available physical RAM: 2454.99 MB
Total Pagefile: 8187.16 MB
Available Pagefile: 6206.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.99 GB) (Free:230.47 GB) NTFS
Drive d: (Setup) (CDROM) (Total:0.09 GB) (Free:0 GB) CDFS
Drive n: (Wombel) (Fixed) (Total:1863.01 GB) (Free:1128.25 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: C13EC13E)
Partition: GPT Partition Type.
========================================================
Disk: 5 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00080E6D)
Partition 1: (Not Active) - (Size=-198627557376) - (Type=07 NTFS)
==================== End Of Log ============================
Olaf |
|
09.04.2014, 22:59
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Startseite bei Firefox lässt sich nicht ändern. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\****\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - No File
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\****\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF Extension: Simple New Tab - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
C:\Users\****\AppData\Local\simple_new_tab
C:\Windows\System32\Tasks\OMESupervisor
C:\Users\****\AppData\Local\omesuperv.exe
C:\Windows\System32\Tasks\Fifth
C:\Users\****\AppData\Roaming\Fifth
C:\Users\****\AppData\Local\Temp\AskSLib.dll
C:\Users\****\AppData\Local\Temp\avgnt.exe
C:\Users\****\AppData\Local\Temp\DivXSetup.exe
C:\Users\****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\****\AppData\Local\Temp\LMkRstPt.exe
C:\Users\****\AppData\Local\Temp\nseD023.exe
C:\Users\****\AppData\Local\Temp\nsjAEBA.exe
C:\Users\****\AppData\Local\Temp\nsoCC6A.exe
C:\Users\****\AppData\Local\Temp\nszAB6F.exe
C:\Users\****\AppData\Local\Temp\nvStInst.exe
C:\Users\****\AppData\Local\Temp\Quarantine.exe
C:\Users\****\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\****\AppData\Local\Temp\_is2DE9.exe
C:\Users\****\AppData\Local\Temp\_isF655.exe
Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\****\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\****\AppData\Local\omesuperv.exe <==== ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ --> Startseite bei Firefox lässt sich nicht ändern. |
|
09.04.2014, 23:14
| #7 |
| | Startseite bei Firefox lässt sich nicht ändern. Jep Code:
ATTFilter HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\****\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - No File
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\****\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF Extension: Simple New Tab - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
C:\Users\****\AppData\Local\simple_new_tab
C:\Windows\System32\Tasks\OMESupervisor
C:\Users\****\AppData\Local\omesuperv.exe
C:\Windows\System32\Tasks\Fifth
C:\Users\****\AppData\Roaming\Fifth
C:\Users\****\AppData\Local\Temp\AskSLib.dll
C:\Users\****\AppData\Local\Temp\avgnt.exe
C:\Users\****\AppData\Local\Temp\DivXSetup.exe
C:\Users\****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\****\AppData\Local\Temp\LMkRstPt.exe
C:\Users\****\AppData\Local\Temp\nseD023.exe
C:\Users\****\AppData\Local\Temp\nsjAEBA.exe
C:\Users\****\AppData\Local\Temp\nsoCC6A.exe
C:\Users\****\AppData\Local\Temp\nszAB6F.exe
C:\Users\****\AppData\Local\Temp\nvStInst.exe
C:\Users\****\AppData\Local\Temp\Quarantine.exe
C:\Users\****\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\****\AppData\Local\Temp\_is2DE9.exe
C:\Users\****\AppData\Local\Temp\_isF655.exe
Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\****\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\****\AppData\Local\omesuperv.exe <==== ATTENTION
|
|
10.04.2014, 10:38
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Startseite bei Firefox lässt sich nicht ändern. Jetzt hst du 1:1 mein Fixscript nochmal gepostet aber nicht das Ergebnis also das Fixlog!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
10.04.2014, 15:37
| #9 |
| | Startseite bei Firefox lässt sich nicht ändern. Nu aber.... Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Olaf at 2014-04-10 16:34:40 Run:2
Running from C:\Users\Olaf\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\Olaf\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - No File
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\Olaf\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF Extension: Simple New Tab - C:\Users\Olaf\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
C:\Users\Olaf\AppData\Local\simple_new_tab
C:\Windows\System32\Tasks\OMESupervisor
C:\Users\Olaf\AppData\Local\omesuperv.exe
C:\Windows\System32\Tasks\Fifth
C:\Users\Olaf\AppData\Roaming\Fifth
C:\Users\Olaf\AppData\Local\Temp\AskSLib.dll
C:\Users\Olaf\AppData\Local\Temp\avgnt.exe
C:\Users\Olaf\AppData\Local\Temp\DivXSetup.exe
C:\Users\Olaf\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Olaf\AppData\Local\Temp\LMkRstPt.exe
C:\Users\Olaf\AppData\Local\Temp\nseD023.exe
C:\Users\Olaf\AppData\Local\Temp\nsjAEBA.exe
C:\Users\Olaf\AppData\Local\Temp\nsoCC6A.exe
C:\Users\Olaf\AppData\Local\Temp\nszAB6F.exe
C:\Users\Olaf\AppData\Local\Temp\nvStInst.exe
C:\Users\Olaf\AppData\Local\Temp\Quarantine.exe
C:\Users\Olaf\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\Olaf\AppData\Local\Temp\_is2DE9.exe
C:\Users\Olaf\AppData\Local\Temp\_isF655.exe
Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\Olaf\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\Olaf\AppData\Local\omesuperv.exe <==== ATTENTION
*****************
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f831ea8a-395f-11e3-b8af-806e6f6e6963} => Key deleted successfully.
HKCR\CLSID\{f831ea8a-395f-11e3-b8af-806e6f6e6963} => Key not found.
"C:\\PROGRA~2\\SearchProtect\\SearchProtect\\bin\\SPVC64Loader.dll" => Value Data not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCR\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C2DD58F-613F-4580-8AC0-F10D760AF938} => Key not found.
HKCR\Wow6432Node\CLSID\{5C2DD58F-613F-4580-8AC0-F10D760AF938} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Value not found.
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Value not found.
HKCR\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{41564952-412D-5637-00A7-7A786E7484D7} => Value not found.
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCR\PROTOCOLS\Handler\gcf => Key not found.
HKCR\CLSID\{9875BFAF-B04D-445E-8A69-BE36838CDE3E} => Key not found.
HKCU\Software\MozillaPlugins\bebomedia.com/OfferMosquitoIEHelper => Key not found.
C:\Users\Olaf\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll not found.
C:\Users\Olaf\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi not found.
"C:\Users\Olaf\AppData\Local\simple_new_tab" => File/Directory not found.
"C:\Windows\System32\Tasks\OMESupervisor" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\omesuperv.exe" => File/Directory not found.
"C:\Windows\System32\Tasks\Fifth" => File/Directory not found.
"C:\Users\Olaf\AppData\Roaming\Fifth" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\AskSLib.dll" => File/Directory not found.
C:\Users\Olaf\AppData\Local\Temp\avgnt.exe => Moved successfully.
"C:\Users\Olaf\AppData\Local\Temp\DivXSetup.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\LMkRstPt.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nseD023.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nsjAEBA.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nsoCC6A.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nszAB6F.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nvStInst.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\Quarantine.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\VIS-2013-German.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\_is2DE9.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\_isF655.exe" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} => Key not found.
C:\Windows\System32\Tasks\Fifth not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Fifth => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FFF5F4BE-3546-485A-967F-0C82927EE08E} => Key not found.
C:\Windows\System32\Tasks\OMESupervisor not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OMESupervisor => Key not found.
==== End of Fixlog ====
|
|
10.04.2014, 23:01
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Startseite bei Firefox lässt sich nicht ändern. Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken
__________________ Logfiles bitte immer in CODE-Tags posten |
|
11.04.2014, 17:53
| #11 |
| | Startseite bei Firefox lässt sich nicht ändern. Hi, sorry das das so lange gedauert hat. FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 29 days old and could be outdated)
Ran by Olaf (administrator) on PC on 11-04-2014 18:49:28
Running from C:\Users\Olaf\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Buyond GmbH) C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PMSpeed] - C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.EXE [116632 2010-07-29] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [GloboFleet CC] - C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe [366400 2013-11-21] (Buyond GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
==================== Internet (Whitelisted) ====================
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Tcpip\..\Interfaces\{DDA62AC0-5A0C-4D51-A1D7-0CEFFFD29E9F}: [NameServer]145.253.2.171,145.253.2.75
FireFox:
========
FF ProfilePath: C:\Users\Olaf\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default
FF NewTab: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Olaf\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-06]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-03-21]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-30] (Avira Operations GmbH & Co. KG)
R3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w764.sys [1254464 2011-03-29] (Broadcom Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-11 18:49 - 2014-04-11 18:49 - 00013459 _____ () C:\Users\Olaf\Desktop\FRST.txt
2014-04-10 17:01 - 2014-04-10 17:01 - 00014526 _____ () C:\Users\Olaf\Downloads\Systemspeaker_Soundausgabe.vi
2014-04-09 23:38 - 2014-04-10 17:02 - 00011488 _____ () C:\Users\Olaf\Desktop\Unbenannt 1.ods
2014-04-09 23:38 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\Olaf\Desktop\FRST64.exe
2014-04-09 21:45 - 2014-04-09 21:45 - 00000000 ____D () C:\Windows\ERUNT
2014-04-09 21:39 - 2014-04-09 21:40 - 00000000 ____D () C:\AdwCleaner
2014-04-09 14:32 - 2014-04-09 14:35 - 00000000 ____D () C:\Users\Olaf\Desktop\OpenHardwareMonitor
2014-04-09 14:31 - 2014-04-09 14:31 - 00526371 _____ () C:\Users\Olaf\Desktop\openhardwaremonitor-v0.6.0-beta.zip
2014-04-09 11:36 - 2014-04-11 18:49 - 00000000 ____D () C:\FRST
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\Olaf\defogger_reenable
2014-04-09 11:31 - 2014-04-09 22:31 - 00000000 ____D () C:\Users\Olaf\Downloads\Trojaner Board
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\Olaf\AppData\Local\NVIDIA
2014-04-08 08:01 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-04-08 07:52 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-08 07:52 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-04-08 07:52 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\Olaf\Desktop\Firefox.lnk
2014-04-06 01:36 - 2013-10-03 10:57 - 00001062 _____ () C:\Users\Olaf\Desktop\OpenOffice Calc.lnk
2014-04-06 01:35 - 2013-10-03 10:57 - 00001098 _____ () C:\Users\Olaf\Desktop\OpenOffice Writer.lnk
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\Olaf\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:38 - 2014-04-05 22:42 - 21987424 _____ (Mozilla) C:\Users\Olaf\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2014-04-06 12:16 - 00000000 ____D () C:\Users\Olaf\Documents\Anwalt
2014-04-05 18:45 - 2014-04-07 13:47 - 00000000 ____D () C:\Users\Olaf\Documents\Inso
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\Olaf\Documents\Fahrerkarte
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:49 - 2014-04-04 10:52 - 79962728 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-11 17:39 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:53 - 2014-04-04 06:54 - 48537520 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:53 - 2014-04-04 06:54 - 48366056 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 12:46 - 2014-04-04 12:56 - 00000000 ____D () C:\Users\Olaf\Documents\Remondis
2014-03-21 12:44 - 2014-03-18 18:34 - 00000954 _____ () C:\Users\Olaf\Desktop\EPSON Scan.lnk
2014-03-21 09:10 - 2014-02-23 10:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 09:10 - 2014-02-23 10:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 09:10 - 2014-02-23 10:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 10:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 08:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 07:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 09:10 - 2014-02-23 07:35 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-21 09:09 - 2014-02-23 10:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 09:09 - 2014-02-23 10:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 09:09 - 2014-02-23 08:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-21 09:09 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-21 09:09 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-21 09:09 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-21 09:09 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-21 09:09 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-19 00:09 - 2014-04-11 17:39 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\.oit
2014-03-19 00:09 - 2014-04-07 00:00 - 00000000 ____D () C:\Users\Olaf\Documents\My PageManager
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Local\NewSoft
2014-03-19 00:08 - 1999-05-06 15:22 - 00027632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CTL3DV2.DLL
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:35 - 2014-04-06 23:51 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Epson
2014-03-18 18:35 - 2014-03-21 21:58 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll
2014-03-18 18:34 - 2014-03-18 18:36 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:34 - 2012-07-24 01:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2014-03-18 18:34 - 2011-12-12 01:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2014-03-18 18:33 - 2014-04-06 23:51 - 00000000 ____D () C:\ProgramData\EPSON
2014-03-18 18:33 - 2011-04-19 04:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMJJE.DLL
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\Olaf\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\Olaf\Desktop\Olaf.lnk
==================== One Month Modified Files and Folders =======
2014-04-11 18:49 - 2014-04-11 18:49 - 00013459 _____ () C:\Users\Olaf\Desktop\FRST.txt
2014-04-11 18:49 - 2014-04-09 11:36 - 00000000 ____D () C:\FRST
2014-04-11 18:49 - 2014-02-06 01:27 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-11 18:40 - 2013-10-11 16:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-11 17:47 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-11 17:47 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-11 17:44 - 2013-09-03 20:25 - 01186479 _____ () C:\Windows\WindowsUpdate.log
2014-04-11 17:40 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-11 17:39 - 2014-04-04 09:38 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-11 17:39 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\.oit
2014-04-11 17:38 - 2014-02-06 01:27 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-11 17:38 - 2013-09-03 22:18 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-11 17:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-11 17:38 - 2009-07-14 06:51 - 00055640 _____ () C:\Windows\setupact.log
2014-04-10 17:02 - 2014-04-09 23:38 - 00011488 _____ () C:\Users\Olaf\Desktop\Unbenannt 1.ods
2014-04-10 17:01 - 2014-04-10 17:01 - 00014526 _____ () C:\Users\Olaf\Downloads\Systemspeaker_Soundausgabe.vi
2014-04-10 16:26 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-09 22:31 - 2014-04-09 11:31 - 00000000 ____D () C:\Users\Olaf\Downloads\Trojaner Board
2014-04-09 21:45 - 2014-04-09 21:45 - 00000000 ____D () C:\Windows\ERUNT
2014-04-09 21:40 - 2014-04-09 21:39 - 00000000 ____D () C:\AdwCleaner
2014-04-09 21:40 - 2014-02-06 01:26 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Common
2014-04-09 14:35 - 2014-04-09 14:32 - 00000000 ____D () C:\Users\Olaf\Desktop\OpenHardwareMonitor
2014-04-09 14:31 - 2014-04-09 14:31 - 00526371 _____ () C:\Users\Olaf\Desktop\openhardwaremonitor-v0.6.0-beta.zip
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\Olaf\defogger_reenable
2014-04-09 11:35 - 2013-09-03 20:43 - 00000000 ____D () C:\Users\Olaf
2014-04-09 11:30 - 2014-04-09 23:38 - 02157056 _____ (Farbar) C:\Users\Olaf\Desktop\FRST64.exe
2014-04-08 18:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\Olaf\AppData\Local\NVIDIA
2014-04-08 08:01 - 2013-09-03 22:18 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-08 08:01 - 2013-09-03 22:17 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-07 13:47 - 2014-04-05 18:45 - 00000000 ____D () C:\Users\Olaf\Documents\Inso
2014-04-07 11:35 - 2010-11-21 08:50 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 11:35 - 2010-11-21 08:50 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 11:35 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 00:00 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\Documents\My PageManager
2014-04-06 23:51 - 2014-03-18 18:35 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Epson
2014-04-06 23:51 - 2014-03-18 18:33 - 00000000 ____D () C:\ProgramData\EPSON
2014-04-06 23:27 - 2014-04-05 22:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\ProgramData\DivX
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-06 12:16 - 2014-04-05 21:39 - 00000000 ____D () C:\Users\Olaf\Documents\Anwalt
2014-04-06 09:37 - 2013-09-03 22:10 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-04-06 09:35 - 2013-09-03 21:35 - 00000000 ____D () C:\Treiber
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\Olaf\Desktop\Firefox.lnk
2014-04-06 08:39 - 2013-09-29 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\Olaf\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:42 - 2014-04-05 22:38 - 21987424 _____ (Mozilla) C:\Users\Olaf\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\Blüggel
2014-04-05 18:46 - 2013-10-20 10:53 - 00134656 ___SH () C:\Users\Olaf\Documents\Thumbs.db
2014-04-05 18:45 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\doc
2014-04-04 19:18 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\Olli
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\Olaf\Documents\Fahrerkarte
2014-04-04 12:56 - 2014-03-21 12:46 - 00000000 ____D () C:\Users\Olaf\Documents\Remondis
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:52 - 2014-04-04 10:49 - 79962728 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:54 - 2014-04-04 06:53 - 48537520 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:54 - 2014-04-04 06:53 - 48366056 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 21:09 - 2014-01-29 20:29 - 00000000 ____D () C:\Users\Olaf\Daniela
2014-04-01 20:44 - 2014-02-06 01:27 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-01 20:44 - 2014-02-06 01:27 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-30 11:59 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\xls
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 21:58 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-21 09:37 - 2009-07-14 06:45 - 00306472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-21 09:13 - 2013-09-29 17:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-21 09:11 - 2013-09-29 17:46 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-20 23:02 - 2013-09-29 19:24 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-20 18:54 - 2010-11-21 05:47 - 00013394 _____ () C:\Windows\PFRO.log
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Local\NewSoft
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-19 00:07 - 2013-09-03 22:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-18 23:06 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\Bewerbungen
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:36 - 2014-03-18 18:34 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:34 - 2014-03-21 12:44 - 00000954 _____ () C:\Users\Olaf\Desktop\EPSON Scan.lnk
2014-03-16 15:55 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\Ofenhaus
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\Olaf\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\Olaf\Desktop\Olaf.lnk
2014-03-12 13:12 - 2013-10-11 16:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 13:12 - 2013-09-29 19:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 13:12 - 2013-09-29 19:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 10:53 - 2014-02-06 01:11 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\WindSolutions
2014-03-12 10:21 - 2014-02-06 01:11 - 00000000 ____D () C:\ProgramData\WindSolutions
Some content of TEMP:
====================
C:\Users\Olaf\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-04-09 10:27
==================== End Of Log ============================
--- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Olaf at 2014-04-11 18:50:00
Running from C:\Users\Olaf\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4690 - APN, LLC)
AVS Audio Converter 7.2 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.2.529 - Online Media Technologies Ltd.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
Epson Benutzerhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Useg) (Version: - )
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version: - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{CEC98C2A-9ED5-49DA-9F3A-92434E0A4FA3}) (Version: 1.19.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Netg) (Version: - )
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON WF-3520 Series Printer Uninstall (HKLM\...\EPSON WF-3520 Series) (Version: - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
GloboFleet CC (HKLM\...\{C657CCF7-A8DB-435A-A764-2AF538A88F5E}) (Version: 3.7.5 - Buyond GmbH)
GloboFleet DriverCard Checker (HKLM-x32\...\{5F4F0021-343C-49B1-AAED-846A35656948}) (Version: 1.2.1 - Buyond GmbH)
Google Chrome Frame (HKLM-x32\...\{8618AE04-1210-3C32-A8C3-45A5E44CD340}) (Version: 65.169.107 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KYOCERA Client Tool (HKLM\...\KYOCERA Client Tool) (Version: 1.0.0026 - KYOCERA Document Solutions Inc.)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 4.2.1909 - KYOCERA Document Solutions Inc.)
Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
Nur Entfernen der CopyTrans Suite möglich (HKCU\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Presto! PageManager 9.03 SE (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.03.06 - Newsoft Technology Corporation)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION) <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIS (HKLM-x32\...\VIS) (Version: - ) <==== ATTENTION
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
WePrint (HKLM-x32\...\WePrint) (Version: - EuroSmartz Ltd)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
==================== Restore Points =========================
01-04-2014 18:24:10 Geplanter Prüfpunkt
04-04-2014 07:37:05 Installed GloboFleet DriverCard Checker
04-04-2014 08:52:38 Installed GloboFleet CC
05-04-2014 16:41:29 Installed Software Updater
05-04-2014 20:20:52 Removed Java(TM) 6 Update 35
05-04-2014 20:21:25 Installed Java 7 Update 51
06-04-2014 07:26:34 Gerätetreiber-Paketinstallation: EPSON Drucker
06-04-2014 07:37:05 Installiert Realtek Ethernet Controller Driver
08-04-2014 05:58:46 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {9902649F-0ED4-4AE0-91F2-E9FBF8963E7F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {A67324AC-50DA-4043-9535-7A17BA6775A7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {B1FA0F76-8125-43B2-84E7-48914B2C7B0F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-03 22:18 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-09-29 13:05 - 2013-09-29 13:04 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2014-03-19 00:07 - 2008-11-17 15:56 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\nsSign.dll
2014-03-19 00:07 - 2010-05-07 12:46 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PerformOcr.dll
2014-03-19 00:07 - 2010-12-23 14:17 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMISM.dll
2014-03-19 00:07 - 2007-03-30 11:24 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Qem.dll
2014-03-19 00:07 - 2010-12-29 18:52 - 00147456 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMCommon.dll
2014-03-19 00:07 - 2008-08-25 18:19 - 00069632 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PHooKDlg.dll
2014-03-19 00:07 - 2009-11-26 18:49 - 00081920 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NetFun2k.dll
2014-03-19 00:07 - 2011-03-11 11:47 - 00151040 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ScanModule.dll
2014-03-19 00:07 - 2009-09-09 15:44 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMANO.dll
2014-03-19 00:07 - 2007-03-30 10:49 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ComClass.dll
2014-03-19 00:07 - 2010-11-30 17:42 - 00352256 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMTree.dll
2014-03-19 00:07 - 2010-10-22 11:01 - 00139264 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSet.dll
2014-03-19 00:07 - 2010-12-29 19:32 - 00614400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDB_N.dll
2014-03-19 00:07 - 2009-08-06 11:22 - 00421888 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\FT.dll
2014-03-19 00:07 - 2010-09-09 19:00 - 00061440 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMINSO.dll
2014-03-19 00:07 - 2010-07-13 11:48 - 00106496 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMProp.dll
2014-03-19 00:07 - 2007-08-31 18:51 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMVoice.dll
2014-03-19 00:07 - 2010-09-08 18:10 - 00073728 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\OutlookVBA.dll
2014-03-19 00:07 - 2009-11-27 18:38 - 00331776 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAppBar.dll
2014-03-19 00:07 - 2010-11-26 11:33 - 04583424 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMView.dll
2014-03-19 00:07 - 2007-03-30 11:01 - 00038992 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NsOEMKey.dll
2014-03-19 00:07 - 2010-10-22 11:22 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSave.dll
2014-03-19 00:07 - 2010-08-03 11:44 - 00049152 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMOffice.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00430080 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPageVW.dll
2014-03-19 00:07 - 2010-03-02 16:09 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDocVW.dll
2014-03-19 00:07 - 2009-06-26 10:03 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMApSet.dll
2014-03-19 00:07 - 2010-08-03 11:51 - 01036288 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\SlideBarDLL.dll
2014-03-19 00:07 - 2009-12-04 18:20 - 00323584 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAnoSet.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00184320 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImgVW.dll
2014-03-19 00:07 - 2008-08-25 17:16 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMIEVW.dll
2014-03-19 00:07 - 2010-09-08 11:52 - 00036864 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPDFView.dll
2014-03-19 00:07 - 2010-04-27 16:20 - 00065536 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMStatus.dll
2014-03-19 00:07 - 2011-01-21 16:05 - 00258048 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMScnSet.dll
2014-03-19 00:07 - 2007-03-30 10:57 - 00034896 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Import.dll
2014-03-19 00:07 - 2010-11-26 11:45 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImageSplitter.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/11/2014 05:40:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/10/2014 07:27:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/10/2014 04:27:32 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/09/2014 11:17:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (04/11/2014 05:41:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
Error: (04/11/2014 05:40:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde nicht richtig gestartet.
Error: (04/11/2014 05:39:54 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/10/2014 07:26:43 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/10/2014 04:27:05 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/09/2014 11:16:52 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (04/11/2014 05:40:21 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/10/2014 07:27:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/10/2014 04:27:32 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/09/2014 11:17:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Percentage of memory in use: 32%
Total physical RAM: 4094.49 MB
Available physical RAM: 2759.56 MB
Total Pagefile: 8187.16 MB
Available Pagefile: 6560.43 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.99 GB) (Free:230.51 GB) NTFS
Drive d: (Setup) (CDROM) (Total:0.09 GB) (Free:0 GB) CDFS
Drive n: (Wombel) (Fixed) (Total:1863.01 GB) (Free:1128.25 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: C13EC13E)
Partition: GPT Partition Type.
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00080E6D)
Partition 1: (Not Active) - (Size=-198627557376) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
11.04.2014, 19:51
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Startseite bei Firefox lässt sich nicht ändern. Okay, dann bitte Kontrollscans mit MBAM und ESET bitte: Downloade Dir bitte  Malwarebytes Anti-Malware
ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
|
12.04.2014, 06:59
| #13 |
| | Startseite bei Firefox lässt sich nicht ändern. Guten Morgen Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 11.04.2014 Suchlauf-Zeit: 23:04:20 Logdatei: mbam.txt Administrator: Ja Version: 2.00.1.1004 Malware Datenbank: v2014.04.10.07 Rootkit Datenbank: v2014.03.27.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Chameleon: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Olaf Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 279254 Verstrichene Zeit: 15 Min, 20 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Shuriken: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 3 PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3288691, In Quarantäne, [9a66bd431ce41de3ac60cc8d2dd5a25e], PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297265, In Quarantäne, [dc2451af48b8ff012edeb5a42ad8e020], PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297861, In Quarantäne, [b8482dd30cf4857b8a8277e233cfaf51], Dateien: 7 PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\nsz3B4E\SpSetup.exe, In Quarantäne, [13edba46748cb050c0f556c1e21f34cc], PUP.Optional.OpenCandy, C:\Users\Olaf\Downloads\winamp565_full_emusic-7plus_all.exe, In Quarantäne, [51af9a66af514fb1d429112e2cd86799], PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3288691\chromeid.txt, In Quarantäne, [9a66bd431ce41de3ac60cc8d2dd5a25e], PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3288691\setup.ini.txt, In Quarantäne, [9a66bd431ce41de3ac60cc8d2dd5a25e], PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297265\ism.exe, In Quarantäne, [dc2451af48b8ff012edeb5a42ad8e020], PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297861\chromeid.txt, In Quarantäne, [b8482dd30cf4857b8a8277e233cfaf51], PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297861\setup.ini.txt, In Quarantäne, [b8482dd30cf4857b8a8277e233cfaf51], Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=c2c07fee8849c843a0e3f659f074c768
# engine=17853
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-12 12:07:18
# local_time=2014-04-12 02:07:18 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 30492 16808682 23266 0
# compatibility_mode=5893 16776574 100 94 16790430 148891088 0 0
# scanned=211388
# found=31
# cleaned=0
# scan_time=10426
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Users\******\Documents\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Documents\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Documents\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Documents\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Documents\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\referat1.lnk"
sh=826252D08D4BAACB2883DE71CC91EF13A3560E8B ft=1 fh=785b54913062c55c vn="a variant of Win32/Spy.MiniKeyLog.AA trojan" ac=I fn="N:\Daten Minerva\Basis\Basis ********\cfg\PCagent.exe"
|
|
12.04.2014, 12:59
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Startseite bei Firefox lässt sich nicht ändern. Wo hast du die Dateien her die ESET gefunden hat?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
12.04.2014, 23:04
| #15 |
| | Startseite bei Firefox lässt sich nicht ändern. Die sind von einem Arbeitskollegen. Der USB Stick hatte u.a. ein Dokument was ich ihm drucken sollte. dort befanden sich auch Dateien von seiner Tocher. ist aber schon bestimmt 1 Jahr her. Warum? |
|
| Themen zu Startseite bei Firefox lässt sich nicht ändern. |
| .com, avira, bonjour, converter, desktop, entfernen, firefox, flash player, google, home, installation, mozilla, problem, programm, realtek, registry, security, software, svchost.exe, trojaner, virus, warnung, windows, windows xp, wuauclt.exe, ändern |
Linear-Darstellung
