| |
| |||||||
Log-Analyse und Auswertung: Startmenü ist leer und die Dateien lassen sich nicht mehr "Suchen"Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
16.07.2014, 21:17
| #16 |
 |  Startmenü ist leer und die Dateien lassen sich nicht mehr "Suchen"Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=4006dbb66e6eef4185ce818535069f2c
# engine=19202
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-07-16 12:57:44
# local_time=2014-07-16 02:57:44 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='AVG Internet Security 2014'
# compatibility_mode=1049 16777213 100 98 7523 92649448 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 66 85 31614368 157145314 0 0
# scanned=261011
# found=7
# cleaned=0
# scan_time=6753
sh=7560ADB6881D658A46F52AD1DCDF667B615F6EDE ft=1 fh=19f14dde2ee67322 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe.vir"
sh=A981E3D6F03D3BD57D1472F33A4093A01533F8A8 ft=1 fh=7aaf7b3d0491af48 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\LadyDany\Downloads\wzmp_8.exe"
sh=9A579D06963998D2E015B69737AA1AA9D8A4F37B ft=1 fh=75557439e7bfbd68 vn="Variante von Win32/Hao123.A evtl. unerwünschte Anwendung" ac=I fn="H:\Filme\Dave\FFSetup3.1.1.exe"
sh=E8192F5A0ED1C33A1040955D2BB044C88A8E3134 ft=1 fh=4b6ce6e30b2cd28d vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="X:\Downloads\Neuer Ordner\SoftonicDownloader_fuer_icq(2).exe"
sh=E8192F5A0ED1C33A1040955D2BB044C88A8E3134 ft=1 fh=4b6ce6e30b2cd28d vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="X:\Downloads\Neuer Ordner\SoftonicDownloader_fuer_icq.exe"
sh=2491B1C3FB678C87D5A2BBCC096E1ABF9E5AF9A6 ft=1 fh=da0c783ab2c04138 vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="X:\Downloads\Neuer Ordner\SoftonicDownloader_fuer_tor.exe"
sh=2A232C7BACDE60DDB2CED577A253131DAB0E6C07 ft=1 fh=63e4919b8bacaa47 vn="Variante von Win32/SweetIM.C evtl. unerwünschte Anwendung" ac=I fn="X:\Downloads\Neuer Ordner\sweetimsetup.exe"
Code:
ATTFilter Results of screen317's Security Check version 0.99.85
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
AVG Internet Security 2014
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Adobe Flash Player 10 Flash Player out of Date!
Adobe Flash Player 14.0.0.145
Adobe Reader 10.1.10 Adobe Reader out of Date!
Mozilla Firefox (30.0)
````````Process Check: objlist.exe by Laurent````````
AVG avgwdsvc.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-07-2014 01
Ran by LadyDany (administrator) on LADYDANYS-PC on 16-07-2014 22:16:12
Running from C:\Users\LadyDany\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files (x86)\Join Air\AssistantServices.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
() C:\Program Files (x86)\Join Air\UIExec.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-11] (Egis Technology Inc.)
HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [16395880 2009-10-03] (NVIDIA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-06] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [823840 2009-09-30] (Acer Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-09-25] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1094736 2009-11-02] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-06] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] => C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-10-05] (Acer Corp.)
HKLM-x32\...\Run: [UIExec] => C:\Program Files (x86)\Join Air\UIExec.exe [132608 2009-08-31] ()
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5179408 2014-06-17] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare)
HKU\S-1-5-21-4261819520-2772529573-432796419-1001\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-03-22] (TomTom)
HKU\S-1-5-21-4261819520-2772529573-432796419-1001\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE373
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\LadyDany\AppData\Roaming\Mozilla\Profiles\zlp76fnu.Dany
FF NewTab: chrome://quick_start/content/index.html
FF Homepage: hxxp://web.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=1.0.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\LadyDany\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Fast Start - C:\Users\LadyDany\AppData\Roaming\Mozilla\Profiles\zlp76fnu.Dany\Extensions\faststartff@gmail.com [2014-07-14]
FF Extension: Skype extension - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2014-06-28]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR DefaultSearchURL: {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
==================== Services (Whitelisted) =================
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1417160 2014-06-17] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3241488 2014-06-27] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-06-17] (AVG Technologies CZ, s.r.o.)
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [80448 2012-07-18] (Microsoft Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-11] (Egis Technology Inc.)
R2 UI Assistant Service; C:\Program Files (x86)\Join Air\AssistantServices.exe [241664 2009-08-31] () [File not signed]
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [242968 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [269080 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-06-27] (AVG Technologies)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2009-12-26] () [File not signed]
U3 aqgzm6ig; C:\Windows\System32\Drivers\aqgzm6ig.sys [0 ] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-16 21:35 - 2014-07-16 21:35 - 00854390 _____ () C:\Users\LadyDany\Desktop\SecurityCheck.exe
2014-07-16 12:55 - 2014-07-16 12:55 - 02347384 _____ (ESET) C:\Users\LadyDany\Desktop\esetsmartinstaller_deu.exe
2014-07-14 22:21 - 2014-07-14 22:21 - 00000000 ____D () C:\Users\LadyDany\Desktop\FRST-OlderVersion
2014-07-14 21:44 - 2014-07-14 21:44 - 00000628 _____ () C:\Users\LadyDany\Desktop\JRT.txt
2014-07-14 21:34 - 2014-07-14 21:34 - 00000000 ____D () C:\Windows\ERUNT
2014-07-14 21:33 - 2014-07-14 21:33 - 00010765 _____ () C:\Users\LadyDany\Desktop\AdwCleaner[S0].txt
2014-07-14 21:32 - 2014-07-14 21:32 - 01016261 _____ (Thisisu) C:\Users\LadyDany\Desktop\JRT.exe
2014-07-14 21:06 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-14 21:05 - 2014-07-14 21:07 - 00000000 ____D () C:\AdwCleaner
2014-07-14 21:05 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-14 21:05 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-14 21:03 - 2014-07-14 21:03 - 01348263 _____ () C:\Users\LadyDany\Downloads\adwcleaner_3.215.exe
2014-07-14 21:01 - 2014-07-14 21:01 - 00011276 _____ () C:\Users\LadyDany\Desktop\mbam.txt
2014-07-14 20:45 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-14 20:45 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-14 20:44 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-14 20:44 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-14 20:44 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-14 20:44 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-14 20:44 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-14 20:44 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-14 20:44 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-14 20:44 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-14 20:44 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-14 20:44 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-14 20:44 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-14 20:44 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-14 20:44 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-14 20:44 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-14 20:44 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-14 20:44 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-14 20:44 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-14 20:44 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-14 20:44 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-14 20:44 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-14 20:44 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-14 20:44 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-14 20:44 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-14 20:44 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-14 20:44 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-14 20:44 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-14 20:44 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-14 20:44 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-14 20:44 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-14 20:44 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-14 20:44 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-14 20:44 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-14 20:44 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-14 20:44 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-14 20:44 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-14 20:44 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-14 20:44 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-14 20:44 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-14 20:44 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-14 20:44 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-14 20:44 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-14 20:44 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-14 20:44 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-14 20:44 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-14 20:44 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-14 20:44 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-14 20:44 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-14 20:44 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-14 20:44 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-14 20:44 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-14 20:44 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-14 20:44 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-14 20:44 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-14 20:44 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-14 20:44 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-14 20:44 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-14 20:43 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-14 20:43 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-14 20:43 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-14 20:43 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-14 20:42 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-14 20:42 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-14 20:42 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-14 20:42 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-14 20:42 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-14 20:42 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-14 20:42 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-14 20:42 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-14 20:42 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-14 20:42 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-14 20:42 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-14 20:42 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-14 20:42 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-14 20:42 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-14 20:42 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-14 20:42 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-14 20:42 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-14 20:38 - 2014-07-15 23:21 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-14 20:38 - 2014-07-14 20:38 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-14 20:38 - 2014-07-14 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-14 20:37 - 2014-07-14 20:38 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-14 20:37 - 2014-07-14 20:37 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-14 20:37 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-14 20:37 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-14 20:37 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-14 20:36 - 2014-07-14 20:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\LadyDany\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-10 19:34 - 2014-07-15 23:09 - 00001260 _____ () C:\Windows\PFRO.log
2014-07-06 16:03 - 2014-07-06 16:03 - 00000000 _____ () C:\Users\LadyDany\Desktop\Neue Bitmap.bmp
2014-07-05 13:19 - 2014-07-05 13:19 - 00020716 _____ () C:\ComboFix.txt
2014-07-05 13:07 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-05 13:07 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-05 13:07 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-05 13:07 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-05 13:07 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-05 13:07 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-05 13:07 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-05 13:07 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-05 13:06 - 2014-07-05 13:19 - 00000000 ____D () C:\Qoobox
2014-07-05 13:06 - 2014-07-05 13:18 - 00000000 ____D () C:\Windows\erdnt
2014-07-05 12:50 - 2014-07-05 12:50 - 05213907 ____R (Swearware) C:\Users\LadyDany\Desktop\ComboFix.exe
2014-07-04 12:01 - 2014-07-16 21:29 - 00001008 _____ () C:\Windows\setupact.log
2014-07-04 11:49 - 2014-07-04 11:50 - 00032194 _____ () C:\Users\LadyDany\Desktop\Addition.txt
2014-07-04 11:48 - 2014-07-16 22:16 - 00018616 _____ () C:\Users\LadyDany\Desktop\FRST.txt
2014-07-04 11:48 - 2014-07-16 22:16 - 00000000 ____D () C:\FRST
2014-07-04 11:47 - 2014-07-14 22:21 - 02086912 _____ (Farbar) C:\Users\LadyDany\Desktop\FRST64.exe
2014-07-04 09:59 - 2014-07-04 09:59 - 00000000 ____D () C:\Users\LadyDany\AppData\Roaming\AVG2014
2014-07-04 09:27 - 2014-07-14 21:05 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-07-04 09:27 - 2014-07-04 09:27 - 00001193 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-07-04 09:27 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe
2014-07-04 09:26 - 2014-07-04 09:26 - 04892480 _____ (WinZip International LLC ) C:\Users\LadyDany\Downloads\wzmp_8.exe
2014-07-04 09:26 - 2014-07-04 09:26 - 00000985 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-07-04 09:26 - 2014-07-04 09:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-07-04 09:24 - 2014-07-04 09:27 - 00000000 ____D () C:\ProgramData\AVG2014
2014-07-04 09:21 - 2014-07-04 17:55 - 00000000 ____D () C:\Users\LadyDany\AppData\Local\Avg2014
2014-07-04 09:21 - 2014-07-04 09:21 - 04424240 _____ (AVG Technologies) C:\Users\LadyDany\Downloads\avg_avct_stb_all_2014_4116_cm10.exe
2014-07-04 01:58 - 2014-07-04 01:58 - 00000876 _____ () C:\Users\LadyDany\Desktop\Finger von Davon - Verknüpfung.lnk
2014-07-04 01:58 - 2014-07-04 01:58 - 00000791 _____ () C:\Users\LadyDany\Desktop\Musik - Verknüpfung.lnk
2014-07-04 01:58 - 2014-07-04 01:58 - 00000685 _____ () C:\Users\LadyDany\Desktop\Danys Ordner - Verknüpfung.lnk
2014-07-04 01:57 - 2014-07-04 01:57 - 00000720 _____ () C:\Users\LadyDany\Desktop\New Cam Pics Dany - Verknüpfung.lnk
2014-07-04 01:57 - 2014-07-04 01:57 - 00000685 _____ () C:\Users\LadyDany\Desktop\iTunes Music - Verknüpfung.lnk
2014-07-04 01:53 - 2014-07-06 15:47 - 00001252 _____ () C:\Users\LadyDany\Desktop\Eigene Dokumente - Verknüpfung.lnk
2014-07-04 01:53 - 2014-07-06 15:47 - 00001239 _____ () C:\Users\LadyDany\Desktop\Eigene Bilder - Verknüpfung.lnk
2014-07-04 01:53 - 2014-07-06 15:47 - 00001236 _____ () C:\Users\LadyDany\Desktop\Downloads - Verknüpfung.lnk
2014-07-04 01:52 - 2014-07-04 01:52 - 00001650 _____ () C:\Users\LadyDany\Desktop\EXCEL - Verknüpfung.lnk
2014-07-04 01:51 - 2014-07-04 01:51 - 00001499 _____ () C:\Users\LadyDany\Desktop\TomTomHOME - Verknüpfung.lnk
2014-07-04 01:50 - 2014-07-04 01:50 - 00001488 _____ () C:\Users\LadyDany\Desktop\Skype - Verknüpfung.lnk
2014-07-04 01:50 - 2014-07-04 01:50 - 00001382 _____ () C:\Users\LadyDany\Desktop\iTunes - Verknüpfung.lnk
2014-07-04 01:50 - 2014-07-04 01:50 - 00001358 _____ () C:\Users\LadyDany\Desktop\Steam - Verknüpfung.lnk
2014-07-04 01:49 - 2014-07-04 01:49 - 00001434 _____ () C:\Users\LadyDany\Desktop\GameOverlayUI - Verknüpfung.lnk
2014-07-04 01:48 - 2014-07-04 01:48 - 00001492 _____ () C:\Users\LadyDany\Desktop\firefox - Verknüpfung.lnk
2014-06-30 13:17 - 2014-06-30 13:17 - 00000222 _____ () C:\Users\LadyDany\Desktop\The Forest.url
2014-06-30 13:08 - 2014-07-08 18:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-06-30 13:08 - 2014-07-04 01:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-30 13:07 - 2014-06-30 13:07 - 01141680 _____ () C:\Users\LadyDany\Downloads\SteamSetup.exe
2014-06-28 20:47 - 2014-06-28 20:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 20:49 - 2014-06-17 20:49 - 00015992 _____ () C:\Users\LadyDany\Desktop\Thiel(1).xlsx
2014-06-17 20:47 - 2014-06-17 20:47 - 00015982 _____ () C:\Users\LadyDany\Downloads\Thiel(1).xlsx
2014-06-17 16:21 - 2014-06-17 16:21 - 00235800 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys
2014-06-17 16:07 - 2014-06-17 16:07 - 00328984 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00269080 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00242968 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00190744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00153368 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00123672 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
==================== One Month Modified Files and Folders =======
2014-07-16 22:16 - 2014-07-04 11:48 - 00018616 _____ () C:\Users\LadyDany\Desktop\FRST.txt
2014-07-16 22:16 - 2014-07-04 11:48 - 00000000 ____D () C:\FRST
2014-07-16 21:51 - 2010-04-02 11:40 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-16 21:41 - 2012-05-30 20:53 - 00000000 ____D () C:\ProgramData\MFAData
2014-07-16 21:38 - 2010-04-02 11:40 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-16 21:35 - 2014-07-16 21:35 - 00854390 _____ () C:\Users\LadyDany\Desktop\SecurityCheck.exe
2014-07-16 21:31 - 2012-05-01 02:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-16 21:29 - 2014-07-04 12:01 - 00001008 _____ () C:\Windows\setupact.log
2014-07-16 21:29 - 2009-11-16 17:55 - 01172963 _____ () C:\Windows\WindowsUpdate.log
2014-07-16 12:55 - 2014-07-16 12:55 - 02347384 _____ (ESET) C:\Users\LadyDany\Desktop\esetsmartinstaller_deu.exe
2014-07-16 12:51 - 2010-01-16 01:21 - 00000000 ____D () C:\Users\LadyDany\AppData\Roaming\vlc
2014-07-15 23:21 - 2014-07-14 20:38 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-15 23:21 - 2013-01-22 21:56 - 00000354 _____ () C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job
2014-07-15 23:19 - 2009-07-14 06:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-15 23:19 - 2009-07-14 06:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-15 23:14 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-15 23:14 - 2009-07-14 06:45 - 00426440 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-15 23:10 - 2014-05-25 20:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-15 23:10 - 2009-10-28 20:00 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-15 23:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-15 23:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-15 23:09 - 2014-07-10 19:34 - 00001260 _____ () C:\Windows\PFRO.log
2014-07-14 22:21 - 2014-07-14 22:21 - 00000000 ____D () C:\Users\LadyDany\Desktop\FRST-OlderVersion
2014-07-14 22:21 - 2014-07-04 11:47 - 02086912 _____ (Farbar) C:\Users\LadyDany\Desktop\FRST64.exe
2014-07-14 21:44 - 2014-07-14 21:44 - 00000628 _____ () C:\Users\LadyDany\Desktop\JRT.txt
2014-07-14 21:34 - 2014-07-14 21:34 - 00000000 ____D () C:\Windows\ERUNT
2014-07-14 21:33 - 2014-07-14 21:33 - 00010765 _____ () C:\Users\LadyDany\Desktop\AdwCleaner[S0].txt
2014-07-14 21:32 - 2014-07-14 21:32 - 01016261 _____ (Thisisu) C:\Users\LadyDany\Desktop\JRT.exe
2014-07-14 21:31 - 2012-05-01 02:23 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-14 21:31 - 2012-05-01 02:23 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-14 21:31 - 2011-09-04 18:15 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-14 21:07 - 2014-07-14 21:05 - 00000000 ____D () C:\AdwCleaner
2014-07-14 21:05 - 2014-07-04 09:27 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-07-14 21:03 - 2014-07-14 21:03 - 01348263 _____ () C:\Users\LadyDany\Downloads\adwcleaner_3.215.exe
2014-07-14 21:01 - 2014-07-14 21:01 - 00011276 _____ () C:\Users\LadyDany\Desktop\mbam.txt
2014-07-14 20:38 - 2014-07-14 20:38 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-14 20:38 - 2014-07-14 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-14 20:38 - 2014-07-14 20:37 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-14 20:37 - 2014-07-14 20:37 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-14 20:36 - 2014-07-14 20:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\LadyDany\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-10 23:39 - 2013-08-25 17:48 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 23:39 - 2010-01-11 23:39 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-08 18:21 - 2014-06-30 13:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-06 16:03 - 2014-07-06 16:03 - 00000000 _____ () C:\Users\LadyDany\Desktop\Neue Bitmap.bmp
2014-07-06 15:47 - 2014-07-04 01:53 - 00001252 _____ () C:\Users\LadyDany\Desktop\Eigene Dokumente - Verknüpfung.lnk
2014-07-06 15:47 - 2014-07-04 01:53 - 00001239 _____ () C:\Users\LadyDany\Desktop\Eigene Bilder - Verknüpfung.lnk
2014-07-06 15:47 - 2014-07-04 01:53 - 00001236 _____ () C:\Users\LadyDany\Desktop\Downloads - Verknüpfung.lnk
2014-07-05 13:19 - 2014-07-05 13:19 - 00020716 _____ () C:\ComboFix.txt
2014-07-05 13:19 - 2014-07-05 13:06 - 00000000 ____D () C:\Qoobox
2014-07-05 13:19 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-05 13:18 - 2014-07-05 13:06 - 00000000 ____D () C:\Windows\erdnt
2014-07-05 13:18 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-07-05 12:50 - 2014-07-05 12:50 - 05213907 ____R (Swearware) C:\Users\LadyDany\Desktop\ComboFix.exe
2014-07-04 17:55 - 2014-07-04 09:21 - 00000000 ____D () C:\Users\LadyDany\AppData\Local\Avg2014
2014-07-04 12:12 - 2009-12-26 14:31 - 00110808 _____ () C:\Users\LadyDany\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-04 11:50 - 2014-07-04 11:49 - 00032194 _____ () C:\Users\LadyDany\Desktop\Addition.txt
2014-07-04 10:22 - 2010-07-06 10:24 - 00000000 ____D () C:\Windows\Minidump
2014-07-04 09:59 - 2014-07-04 09:59 - 00000000 ____D () C:\Users\LadyDany\AppData\Roaming\AVG2014
2014-07-04 09:57 - 2013-06-14 21:59 - 00000000 ____D () C:\ProgramData\AVG2013
2014-07-04 09:27 - 2014-07-04 09:27 - 00001193 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-07-04 09:27 - 2014-07-04 09:24 - 00000000 ____D () C:\ProgramData\AVG2014
2014-07-04 09:26 - 2014-07-04 09:26 - 04892480 _____ (WinZip International LLC ) C:\Users\LadyDany\Downloads\wzmp_8.exe
2014-07-04 09:26 - 2014-07-04 09:26 - 00000985 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-07-04 09:26 - 2014-07-04 09:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-07-04 09:24 - 2009-12-26 22:10 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-07-04 09:21 - 2014-07-04 09:21 - 04424240 _____ (AVG Technologies) C:\Users\LadyDany\Downloads\avg_avct_stb_all_2014_4116_cm10.exe
2014-07-04 02:01 - 2010-02-09 00:00 - 00000000 ____D () C:\Users\LadyDany\AppData\Roaming\Skype
2014-07-04 01:58 - 2014-07-04 01:58 - 00000876 _____ () C:\Users\LadyDany\Desktop\Finger von Davon - Verknüpfung.lnk
2014-07-04 01:58 - 2014-07-04 01:58 - 00000791 _____ () C:\Users\LadyDany\Desktop\Musik - Verknüpfung.lnk
2014-07-04 01:58 - 2014-07-04 01:58 - 00000685 _____ () C:\Users\LadyDany\Desktop\Danys Ordner - Verknüpfung.lnk
2014-07-04 01:57 - 2014-07-04 01:57 - 00000720 _____ () C:\Users\LadyDany\Desktop\New Cam Pics Dany - Verknüpfung.lnk
2014-07-04 01:57 - 2014-07-04 01:57 - 00000685 _____ () C:\Users\LadyDany\Desktop\iTunes Music - Verknüpfung.lnk
2014-07-04 01:52 - 2014-07-04 01:52 - 00001650 _____ () C:\Users\LadyDany\Desktop\EXCEL - Verknüpfung.lnk
2014-07-04 01:51 - 2014-07-04 01:51 - 00001499 _____ () C:\Users\LadyDany\Desktop\TomTomHOME - Verknüpfung.lnk
2014-07-04 01:50 - 2014-07-04 01:50 - 00001488 _____ () C:\Users\LadyDany\Desktop\Skype - Verknüpfung.lnk
2014-07-04 01:50 - 2014-07-04 01:50 - 00001382 _____ () C:\Users\LadyDany\Desktop\iTunes - Verknüpfung.lnk
2014-07-04 01:50 - 2014-07-04 01:50 - 00001358 _____ () C:\Users\LadyDany\Desktop\Steam - Verknüpfung.lnk
2014-07-04 01:49 - 2014-07-04 01:49 - 00001434 _____ () C:\Users\LadyDany\Desktop\GameOverlayUI - Verknüpfung.lnk
2014-07-04 01:48 - 2014-07-04 01:48 - 00001492 _____ () C:\Users\LadyDany\Desktop\firefox - Verknüpfung.lnk
2014-07-04 01:32 - 2014-06-15 19:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Karl der Bärenreporter im Einsatz
2014-07-04 01:32 - 2014-01-06 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm-Fotowelt
2014-07-04 01:32 - 2013-12-18 22:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-07-04 01:32 - 2013-12-09 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-04 01:32 - 2013-12-09 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-07-04 01:32 - 2013-06-14 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2014-07-04 01:32 - 2012-10-15 23:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2014-07-04 01:32 - 2012-10-08 11:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft WebMatrix
2014-07-04 01:32 - 2012-06-04 20:51 - 00000000 ____D () C:\Users\LadyDany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-04 01:32 - 2011-05-02 10:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.4
2014-07-04 01:32 - 2011-04-21 09:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.5
2014-07-04 01:32 - 2011-01-22 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2014-07-04 01:32 - 2011-01-22 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2014-07-04 01:32 - 2011-01-22 21:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-07-04 01:32 - 2010-07-01 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Join Air
2014-07-04 01:32 - 2010-01-22 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-04 01:32 - 2010-01-12 22:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-07-04 01:32 - 2009-12-26 14:31 - 00000000 ___RD () C:\Users\LadyDany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-04 01:32 - 2009-12-26 14:31 - 00000000 ___RD () C:\Users\LadyDany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 01:32 - 2009-11-16 18:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
2014-07-04 01:32 - 2009-11-16 18:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-07-04 01:32 - 2009-11-16 17:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Arcade Deluxe
2014-07-04 01:32 - 2009-10-29 08:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Backup Manager
2014-07-04 01:32 - 2009-10-29 07:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager
2014-07-04 01:32 - 2009-10-28 19:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-07-04 01:32 - 2009-10-28 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Backup Now 5
2014-07-04 01:32 - 2009-10-28 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Media Maker 8
2014-07-04 01:32 - 2009-10-28 19:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem
2014-07-04 01:32 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-07-04 01:32 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 01:31 - 2014-06-30 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-04 01:31 - 2014-03-07 00:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-04 01:31 - 2012-06-15 22:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudibleManager
2014-07-04 01:31 - 2009-11-16 17:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-04 01:31 - 2009-10-28 19:14 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eSobi v2
2014-07-04 01:31 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-04 01:30 - 2013-03-14 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-06-30 17:22 - 2013-01-15 22:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-30 13:17 - 2014-06-30 13:17 - 00000222 _____ () C:\Users\LadyDany\Desktop\The Forest.url
2014-06-30 13:07 - 2014-06-30 13:07 - 01141680 _____ () C:\Users\LadyDany\Downloads\SteamSetup.exe
2014-06-30 04:09 - 2014-07-14 21:05 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-14 21:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-28 20:47 - 2014-06-28 20:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-27 21:28 - 2013-06-26 23:30 - 00003728 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2014-06-27 21:27 - 2012-11-12 21:08 - 00050464 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-06-22 19:28 - 2009-11-17 02:43 - 00700890 _____ () C:\Windows\system32\perfh007.dat
2014-06-22 19:28 - 2009-11-17 02:43 - 00150708 _____ () C:\Windows\system32\perfc007.dat
2014-06-22 19:28 - 2009-07-14 07:13 - 01624522 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-22 18:46 - 2010-04-02 11:40 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-22 18:46 - 2010-04-02 11:40 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 22:14 - 2014-07-14 20:44 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-20 21:39 - 2014-07-14 20:44 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-19 03:39 - 2014-07-14 20:44 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-19 03:06 - 2014-07-14 20:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-19 03:06 - 2014-07-14 20:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-19 02:48 - 2014-07-14 20:44 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-19 02:42 - 2014-07-14 20:44 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-19 02:42 - 2014-07-14 20:44 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-19 02:41 - 2014-07-14 20:44 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-06-19 02:41 - 2014-07-14 20:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-19 02:32 - 2014-07-14 20:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-19 02:31 - 2014-07-14 20:44 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-19 02:26 - 2014-07-14 20:44 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-19 02:24 - 2014-07-14 20:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-19 02:24 - 2014-07-14 20:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-19 02:23 - 2014-07-14 20:44 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-19 02:16 - 2014-07-14 20:44 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-19 02:14 - 2014-07-14 20:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-19 02:09 - 2014-07-14 20:44 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-19 01:59 - 2014-07-14 20:44 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-19 01:56 - 2014-07-14 20:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-19 01:53 - 2014-07-14 20:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-19 01:51 - 2014-07-14 20:44 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-19 01:50 - 2014-07-14 20:44 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-19 01:48 - 2014-07-14 20:44 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-19 01:39 - 2014-07-14 20:44 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-19 01:38 - 2014-07-14 20:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-19 01:37 - 2014-07-14 20:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-19 01:36 - 2014-07-14 20:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-19 01:35 - 2014-07-14 20:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-06-19 01:33 - 2014-07-14 20:44 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-19 01:32 - 2014-07-14 20:44 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-19 01:28 - 2014-07-14 20:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-19 01:28 - 2014-07-14 20:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-19 01:27 - 2014-07-14 20:44 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-19 01:27 - 2014-07-14 20:44 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-19 01:25 - 2014-07-14 20:44 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-19 01:23 - 2014-07-14 20:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-19 01:22 - 2014-07-14 20:44 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-19 01:12 - 2014-07-14 20:44 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-19 01:06 - 2014-07-14 20:44 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-19 01:01 - 2014-07-14 20:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-19 00:59 - 2014-07-14 20:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-19 00:58 - 2014-07-14 20:44 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-19 00:58 - 2014-07-14 20:44 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-19 00:52 - 2014-07-14 20:44 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-19 00:51 - 2014-07-14 20:44 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-19 00:49 - 2014-07-14 20:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-19 00:46 - 2014-07-14 20:44 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-19 00:45 - 2014-07-14 20:44 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-19 00:35 - 2014-07-14 20:44 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-19 00:34 - 2014-07-14 20:44 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-19 00:15 - 2014-07-14 20:44 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-19 00:13 - 2014-07-14 20:44 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-19 00:09 - 2014-07-14 20:44 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-19 00:07 - 2014-07-14 20:44 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-18 04:18 - 2014-07-14 20:43 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-06-18 03:51 - 2014-07-14 20:43 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-06-18 03:10 - 2014-07-14 20:43 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-17 20:49 - 2014-06-17 20:49 - 00015992 _____ () C:\Users\LadyDany\Desktop\Thiel(1).xlsx
2014-06-17 20:47 - 2014-06-17 20:47 - 00015982 _____ () C:\Users\LadyDany\Downloads\Thiel(1).xlsx
2014-06-17 16:21 - 2014-06-17 16:21 - 00235800 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys
2014-06-17 16:07 - 2014-06-17 16:07 - 00328984 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00269080 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00242968 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00190744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00153368 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00123672 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2014-06-17 00:59 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
Some content of TEMP:
====================
C:\Users\LadyDany\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-28 01:57
==================== End Of Log ============================
--- --- --- |
|
16.07.2014, 21:20
| #17 |
| |  Startmenü ist leer und die Dateien lassen sich nicht mehr "Suchen" Nein keine Probleme, danke, bzw vielen Dank, aber was ist nun mit den leeren Ordnern ??? also die unter Start / Programme.... die Verlinkungen sind alle weg. Kann ich die wieder herstellen ?
__________________ |
|
17.07.2014, 15:35
| #18 |
| /// the machine /// TB-Ausbilder    | Startmenü ist leer und die Dateien lassen sich nicht mehr "Suchen" Java und Adobe updatne.
__________________
__________________ |
|
18.07.2014, 23:31
| #19 |
| | Startmenü ist leer und die Dateien lassen sich nicht mehr "Suchen" nein, leider ohne erfolg..... |
|
19.07.2014, 20:44
| #20 |
| /// the machine /// TB-Ausbilder | Startmenü ist leer und die Dateien lassen sich nicht mehr "Suchen" Aber die Programme sind da und funktionieren? Ich sehe da keine Option das wieder zu richten.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Startmenü ist leer und die Dateien lassen sich nicht mehr "Suchen" |
| hallo zusammen, lösungen, msil/advancedsystemprotector.a, nicht mehr, ordner, programme, pup.optional.faststart.a, pup.optional.iepluginservices.a, pup.optional.isearch.a, pup.optional.omigaplus.a, pup.optional.qone8, pup.optional.softonic.a, pup.optional.wpm.a, schei, schädling, startmenü, startmenü leer, win32/hao123.a, win32/softonicdownloader.a, win32/sweetim.c, zusammen |
Linear-Darstellung
