| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: komische Musik wie Filmmusik im Hintergrund am PCWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
31.01.2015, 17:38
| #5 |
 |  komische Musik wie Filmmusik im Hintergrund am PC FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-01-2015 01
Ran by Elisa (administrator) on ELISA-PC on 31-01-2015 17:20:44
Running from C:\Users\Elisa\Desktop
Loaded Profiles: Elisa (Available profiles: Elisa)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\WaInterEnhance\WaInterEnhance Internet Enhancer\InternetEnhancerService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
() C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
() C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
() C:\Program Files (x86)\WaInterEnhance\WaInterEnhance Internet Enhancer\InternetEnhancer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avconfig.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2884880 2012-02-23] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM\...\Run: [EPSON Stylus DX3800 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIACE.EXE [98304 2005-02-08] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-21] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-05] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-03] (CyberLink)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2640408 2014-08-31] ()
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG)
HKLM\...\RunOnce: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2203958977-2909987201-2001847882-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-11-03] (Google Inc.)
HKU\S-1-5-21-2203958977-2909987201-2001847882-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2203958977-2909987201-2001847882-1000\...\Run: [EPLTarget\P0000000000000002] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2203958977-2909987201-2001847882-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1367360 2014-12-16] (Lavasoft)
HKU\S-1-5-21-2203958977-2909987201-2001847882-1000\...\Run: [InetStat] => C:\Users\Elisa\AppData\Roaming\InetStat\inetstat.exe [726542 2015-01-08] ()
AppInit_DLLs-x32: c:\progra~2\searchprotect\searchprotect\bin\spvc32loader.dll => c:\Program Files (x86)\searchprotect\searchprotect\bin\spvc32loader.dll [1050912 2014-03-03] (Conduit)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{F0559C5E-7912-4391-B1A0-6B975F0E5064}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:50126;https=127.0.0.1:50126
ProxyEnable: [S-1-5-21-2203958977-2909987201-2001847882-1000] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-2203958977-2909987201-2001847882-1000] => http=127.0.0.1:50126;https=127.0.0.1:50126
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2203958977-2909987201-2001847882-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/?pc=COSP&ptag=D010815-AB747CC590BEC44CD91F&form=CONMHP&conlogo=CT3330962
HKU\S-1-5-21-2203958977-2909987201-2001847882-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1420533048&from=cvs&uid=ST9500325AS_S2WBGGJQXXXXS2WBGGJQ
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2203958977-2909987201-2001847882-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=msd3_14_10_ch&cd=2XzuyEtN2Y1L1QzuyCzzyD0DyEtAzyyCtDzzzz0DtA0C0CtDtN0D0Tzu0SyBzyzytN1L2XzutCtFtCtFtCtFtCtN1L1CzutCyEtDtAtDyD1V1OtN1L1G1B1V1N2Y1L1Qzu2StDtDzz0AtDtD0EtAtGzy0CzzyCtG0CtB0CyCtGtAzz0EyCtGtD0ByByC0A0F0BzyyC0ByBtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBtDtA0F0EyBtBtDtG0AtB0D0FtGzztDyCtBtG0FtDyDyCtGyBtC0D0CyD0A0AyD0CtByB0E2Q&cr=18652583&ir=
SearchScopes: HKU\S-1-5-21-2203958977-2909987201-2001847882-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=msd3_14_10_ch&cd=2XzuyEtN2Y1L1QzuyCzzyD0DyEtAzyyCtDzzzz0DtA0C0CtDtN0D0Tzu0SyBzyzytN1L2XzutCtFtCtFtCtFtCtN1L1CzutCyEtDtAtDyD1V1OtN1L1G1B1V1N2Y1L1Qzu2StDtDzz0AtDtD0EtAtGzy0CzzyCtG0CtB0CyCtGtAzz0EyCtGtD0ByByC0A0F0BzyyC0ByBtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBtDtA0F0EyBtBtDtG0AtB0D0FtGzztDyCtBtG0FtDyDyCtGyBtC0D0CyD0A0AyD0CtByB0E2Q&cr=18652583&ir=
SearchScopes: HKU\S-1-5-21-2203958977-2909987201-2001847882-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D010815-AB747CC590BEC44CD91F&form=CONBDF&conlogo=CT3330962&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2203958977-2909987201-2001847882-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1420533048&from=cvs&uid=ST9500325AS_S2WBGGJQXXXXS2WBGGJQ&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2203958977-2909987201-2001847882-1000 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP66E9E8B3-A432-466D-B567-7E62D572C20C&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-2203958977-2909987201-2001847882-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={CEAB185A-9669-4EE4-A58E-630E762D39D8}&mid=208127fc92df47d28495b9140572e17e-4a1f1b791ca5eb83e4e635cd9ef4abf075dc4e2b&lang=en&ds=re011&coid=&cmpid=&pr=sa&d=2014-03-23 10:13:52&v=18.1.9.799&pid=safeguard&sg=&sap=dsp&q={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AVG SafeGuard toolbar -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.9.799\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: EpsonToolBandKicker Class -> {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} -> C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
BHO-x32: mysearchdial Helper Object -> {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} -> No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - mysearchdial Toolbar - {3004627E-F8E9-4E8B-909D-316753CBA923} - No File
Toolbar: HKLM-x32 - loadtbs - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - C:\Users\Elisa\AppData\Roaming\loadtbs\toolbar.dll (InfiniAd GmbH)
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.9.799\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-2203958977-2909987201-2001847882-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-2203958977-2909987201-2001847882-1000 -> No Name - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No File
Toolbar: HKU\S-1-5-21-2203958977-2909987201-2001847882-1000 -> No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - No File
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog9 01 C:\Windows\SysWOW64\LavasoftTcpService.dll [312424] (Lavasoft Limited)
Winsock: Catalog9 02 C:\Windows\SysWOW64\LavasoftTcpService.dll [312424] (Lavasoft Limited)
Winsock: Catalog9 03 C:\Windows\SysWOW64\LavasoftTcpService.dll [312424] (Lavasoft Limited)
Winsock: Catalog9 04 C:\Windows\SysWOW64\LavasoftTcpService.dll [312424] (Lavasoft Limited)
Winsock: Catalog9 16 C:\Windows\SysWOW64\LavasoftTcpService.dll [312424] (Lavasoft Limited)
Winsock: Catalog9-x64 01 C:\Windows\system32\LavasoftTcpService64.dll [358736] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\Windows\system32\LavasoftTcpService64.dll [358736] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\Windows\system32\LavasoftTcpService64.dll [358736] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\Windows\system32\LavasoftTcpService64.dll [358736] (Lavasoft Limited)
Winsock: Catalog9-x64 16 C:\Windows\system32\LavasoftTcpService64.dll [358736] (Lavasoft Limited)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1420533048&from=cvs&uid=ST9500325AS_S2WBGGJQXXXXS2WBGGJQ
FireFox:
========
FF ProfilePath: C:\Users\Elisa\AppData\Roaming\Mozilla\Firefox\Profiles\1cwqe510.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: webssearches
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://www.bing.com/?pc=COSP&ptag=D010815-AB747CC590BEC44CD91F&form=CONMHP&conlogo=CT3330962
FF NetworkProxy: "type", 5
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Elisa\AppData\Roaming\Mozilla\Firefox\Profiles\1cwqe510.default\searchplugins\webssearches.xml
FF Extension: Avira Browser Safety - C:\Users\Elisa\AppData\Roaming\Mozilla\Firefox\Profiles\1cwqe510.default\Extensions\abs@avira.com [2015-01-06]
FF Extension: Fast Start - C:\Users\Elisa\AppData\Roaming\Mozilla\Firefox\Profiles\1cwqe510.default\Extensions\faststartff@gmail.com [2015-01-06]
FF Extension: FF Toolbar - C:\Users\Elisa\AppData\Roaming\Mozilla\Firefox\Profiles\1cwqe510.default\Extensions\fftoolbar2014@etech.com [2015-01-06]
FF Extension: SparPilot - Gutscheine & mehr... - C:\Users\Elisa\AppData\Roaming\Mozilla\Firefox\Profiles\1cwqe510.default\Extensions\sparpilot@sparpilot.com [2015-01-12]
FF Extension: {7d701d07-c418-4e0e-95f8-b8fce4f85e56} - C:\Users\Elisa\AppData\Roaming\Mozilla\Firefox\Profiles\1cwqe510.default\Extensions\{7d701d07-c418-4e0e-95f8-b8fce4f85e56}.xpi [2015-01-12]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\14.0.0.12 [2014-03-23]
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Elisa\AppData\Roaming\Mozilla\Firefox\Profiles\1cwqe510.default\extensions\fftoolbar2014@etech.com
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Elisa\AppData\Roaming\Mozilla\Firefox\Profiles\1cwqe510.default\extensions\faststartff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [sparpilot@sparpilot.com] - C:\Program Files (x86)\SparPilot\sparpilot_8.xpi
FF Extension: SparPilot - Gutscheine & mehr... - C:\Program Files (x86)\SparPilot\sparpilot_8.xpi [2014-12-10]
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://istart.webssearches.com/?type=sc&ts=1420533048&from=cvs&uid=ST9500325AS_S2WBGGJQXXXXS2WBGGJQ
Chrome:
=======
CHR HomePage: Default -> https://mysearch.avg.com?cid={CEAB185A-9669-4EE4-A58E-630E762D39D8}&mid=208127fc92df47d28495b9140572e17e-4a1f1b791ca5eb83e4e635cd9ef4abf075dc4e2b&lang=en&ds=re011&coid=&cmpid=&pr=sa&d=2014-03-23 10:13:52&v=18.1.9.799&pid=safeguard&sg=&sap=hp
CHR StartupUrls: Default -> "https://mysearch.avg.com?cid={CEAB185A-9669-4EE4-A58E-630E762D39D8}&mid=208127fc92df47d28495b9140572e17e-4a1f1b791ca5eb83e4e635cd9ef4abf075dc4e2b&lang=en&ds=re011&coid=&cmpid=&pr=sa&d=2014-03-23 10:13:52&v=18.1.9.799&pid=safeguard&sg=&sap=hp"
CHR DefaultSearchKeyword: Default -> mysearch.avg.com_
CHR DefaultSearchURL: Default -> https://mysearch.avg.com/search?cid={CEAB185A-9669-4EE4-A58E-630E762D39D8}&mid=208127fc92df47d28495b9140572e17e-4a1f1b791ca5eb83e4e635cd9ef4abf075dc4e2b&lang=en&ds=re011&coid=&cmpid=&pr=sa&d=2014-03-23 10:13:52&v=18.1.9.786&pid=safeguard&sg=&sap=dsp&q={searchTerms}
CHR DefaultNewTabURL: Default -> https://mysearch.avg.com/chroment?espv=2&cid={CEAB185A-9669-4EE4-A58E-630E762D39D8}&mid=208127fc92df47d28495b9140572e17e-4a1f1b791ca5eb83e4e635cd9ef4abf075dc4e2b&lang=en&ds=re011&pr=sa&d=2014-03-23 10:13:52&v=18.1.9.786&pid=safeguard&sg=
CHR DefaultSuggestURL: Default -> hxxp://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\Elisa\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Elisa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-07]
CHR Extension: (Avira Browserschutz) - C:\Users\Elisa\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-01-06]
CHR Extension: (Google Wallet) - C:\Users\Elisa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-05]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [807672 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-11-24] (APN LLC.)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG)
S4 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2454816 2014-03-03] (Conduit)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON CORPORATION)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
R2 Internet Enhancer Service; C:\Program Files (x86)\WaInterEnhance\WaInterEnhance Internet Enhancer\InternetEnhancerService.exe [312320 2015-01-05] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [1351512 2014-12-16] (Lavasoft Limited)
R2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [15208 2014-12-16] ()
R2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [1820184 2014-08-14] (AVG Secure Search)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2012-01-31] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [473088 2015-01-06] (Fuyu LIMITED) [File not signed]
S2 Update Mega Browse; "C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe" [X] <==== ATTENTION
S2 Util Mega Browse; "C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe" [X] <==== ATTENTION
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-14] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-31 17:20 - 2015-01-31 17:21 - 00029790 _____ () C:\Users\Elisa\Desktop\FRST.txt
2015-01-31 17:20 - 2015-01-31 17:20 - 00000000 ____D () C:\FRST
2015-01-31 17:19 - 2015-01-31 17:19 - 02130944 _____ (Farbar) C:\Users\Elisa\Desktop\FRST64.exe
2015-01-31 13:18 - 2015-01-31 13:18 - 03458272 _____ (tuneuppro.com ) C:\Users\Elisa\Downloads\tuppsetup_2005.exe
2015-01-30 15:16 - 2015-01-30 15:16 - 00000000 ____D () C:\Users\Elisa\Arbeit
2015-01-29 20:19 - 2015-01-29 20:19 - 00000000 ____D () C:\Users\Elisa\Drucker
2015-01-29 20:16 - 2015-01-29 20:16 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-01-25 17:38 - 2015-01-25 17:38 - 03539632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-01-25 12:44 - 2015-01-25 14:41 - 00000000 ____D () C:\Users\Elisa\Sport
2015-01-25 12:29 - 2015-01-25 12:29 - 00212992 _____ () C:\Users\Elisa\Downloads\Trainingsdaten_Elisa.xls
2015-01-25 12:08 - 2015-01-31 14:22 - 00001355 _____ () C:\Windows\setupact.log
2015-01-25 12:08 - 2015-01-25 12:08 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-24 23:22 - 2015-01-24 23:31 - 00000000 ____D () C:\Users\Elisa\AppData\Local\AviraSpeedup
2015-01-19 18:16 - 2015-01-19 18:16 - 00001243 _____ () C:\Users\Public\Desktop\Avira System Speedup.lnk
2015-01-14 20:49 - 2015-01-31 12:55 - 00000000 ____D () C:\Users\Elisa\Documents\Youcam
2015-01-14 17:25 - 2015-01-14 17:25 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2015-01-14 12:19 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 12:19 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 12:19 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 12:19 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-14 12:19 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-14 12:19 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-14 12:19 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 12:19 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 12:19 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-14 12:19 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 12:19 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 12:19 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 12:19 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-12 12:48 - 2015-01-12 12:48 - 00000000 ____D () C:\ProgramData\36ab4c2200000e76
2015-01-10 16:46 - 2015-01-10 16:46 - 00022813 _____ () C:\Users\Elisa\Downloads\pdfPrint (6)
2015-01-10 16:46 - 2015-01-10 16:46 - 00022811 _____ () C:\Users\Elisa\Downloads\pdfPrint (7)
2015-01-10 16:44 - 2015-01-10 16:44 - 00022818 _____ () C:\Users\Elisa\Downloads\pdfPrint (5)
2015-01-10 16:38 - 2015-01-10 16:38 - 00022996 _____ () C:\Users\Elisa\Downloads\pdfPrint (4)
2015-01-10 16:09 - 2015-01-10 16:09 - 00023080 _____ () C:\Users\Elisa\Downloads\pdfPrint (3)
2015-01-10 15:58 - 2015-01-10 15:58 - 00023081 _____ () C:\Users\Elisa\Downloads\pdfPrint (2)
2015-01-10 15:06 - 2015-01-10 15:06 - 00022519 _____ () C:\Users\Elisa\Downloads\pdfPrint (1)
2015-01-10 14:52 - 2015-01-12 22:12 - 00000000 ____D () C:\Users\Elisa\Autos
2015-01-10 14:52 - 2015-01-10 14:52 - 00023070 _____ () C:\Users\Elisa\Downloads\pdfPrint
2015-01-08 09:27 - 2015-01-08 09:27 - 00000000 ____D () C:\Users\Elisa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat
2015-01-08 09:27 - 2015-01-08 09:27 - 00000000 ____D () C:\Users\Elisa\AppData\Roaming\InetStat
2015-01-08 09:26 - 2015-01-08 09:27 - 00000000 ____D () C:\Users\Elisa\AppData\Local\Lavasoft
2015-01-08 09:26 - 2015-01-08 09:26 - 00004688 _____ () C:\Windows\SysWOW64\LavasoftTcpService.ini
2015-01-08 09:26 - 2015-01-08 09:26 - 00002520 _____ () C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
2015-01-08 09:26 - 2015-01-08 09:26 - 00002520 _____ () C:\Windows\system32\LavasoftTcpServiceOff.ini
2015-01-08 09:26 - 2015-01-08 09:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2015-01-08 09:26 - 2015-01-08 09:26 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2015-01-08 09:26 - 2014-12-16 12:10 - 00358736 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll
2015-01-08 09:26 - 2014-12-16 12:10 - 00312424 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll
2015-01-08 09:25 - 2015-01-08 09:25 - 00000000 ____D () C:\Users\Elisa\AppData\Roaming\Lavasoft
2015-01-08 09:25 - 2015-01-08 09:25 - 00000000 ____D () C:\ProgramData\Lavasoft
2015-01-07 07:32 - 2015-01-19 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviraSpeedup
2015-01-07 07:31 - 2015-01-19 18:14 - 00003364 _____ () C:\Windows\System32\Tasks\AviraSpeedup
2015-01-07 07:21 - 2015-01-07 07:21 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Elisa\Downloads\avira_de_issu_3007254828_ef2hsdpc5wafwgaqc14z_wd(1).exe
2015-01-06 10:04 - 2015-01-06 10:04 - 00000000 ____D () C:\Users\Elisa\AppData\Roaming\dlg
2015-01-06 09:36 - 2015-01-06 09:36 - 00000000 ____D () C:\Users\Elisa\AppData\Roaming\Bildverkleinerer
2015-01-06 09:35 - 2015-01-06 09:35 - 00000000 ____D () C:\Users\Elisa\Documents\verkleinert
2015-01-06 09:32 - 2015-01-06 09:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaInterEnhance
2015-01-06 09:32 - 2015-01-06 09:32 - 00000000 ____D () C:\Program Files (x86)\Wajam
2015-01-06 09:32 - 2015-01-06 09:32 - 00000000 ____D () C:\Program Files (x86)\WaInterEnhance
2015-01-06 09:31 - 2015-01-06 09:31 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-01-06 09:31 - 2015-01-06 09:31 - 00000000 ____D () C:\Program Files (x86)\SparPilot
2015-01-06 09:12 - 2015-01-06 09:12 - 00000000 ____D () C:\Users\Elisa\AppData\Roaming\Avira
2015-01-06 09:06 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-01-06 09:06 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-01-06 09:06 - 2014-11-24 10:23 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-01-06 09:06 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-01-06 09:03 - 2015-01-29 20:16 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-06 09:03 - 2015-01-29 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-06 09:03 - 2015-01-29 20:16 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-06 09:02 - 2015-01-06 09:02 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Elisa\Downloads\avira_de_av_5763853064__ws.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-31 17:12 - 2014-03-09 21:12 - 00000292 _____ () C:\Windows\Tasks\MySearchDial.job
2015-01-31 17:05 - 2014-07-20 12:05 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-610 Series Update {E9F9B998-B11A-4B8D-9D42-891052B80D54}.job
2015-01-31 17:05 - 2014-07-20 12:05 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-610 Series Invitation {E9F9B998-B11A-4B8D-9D42-891052B80D54}.job
2015-01-31 16:42 - 2014-07-20 12:42 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-610 Series Update {8B18E676-8E3E-49EA-834E-2422990204B8}.job
2015-01-31 16:42 - 2014-07-20 12:42 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-610 Series Invitation {8B18E676-8E3E-49EA-834E-2422990204B8}.job
2015-01-31 16:39 - 2012-11-03 17:49 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-31 16:38 - 2014-12-21 20:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-31 16:28 - 2011-05-16 15:04 - 00700134 _____ () C:\Windows\system32\perfh007.dat
2015-01-31 16:28 - 2011-05-16 15:04 - 00149984 _____ () C:\Windows\system32\perfc007.dat
2015-01-31 16:28 - 2009-07-14 06:13 - 01622300 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-31 16:26 - 2012-11-03 18:44 - 01849619 _____ () C:\Windows\WindowsUpdate.log
2015-01-31 14:31 - 2014-05-26 06:14 - 00000000 ____D () C:\Elisa
2015-01-31 14:10 - 2014-09-16 21:37 - 00000000 ____D () C:\Users\Elisa\AppData\Local\CrashDumps
2015-01-31 13:38 - 2014-09-07 11:18 - 00000000 ____D () C:\Users\Elisa\Rezepte
2015-01-31 13:02 - 2014-05-11 16:44 - 00000000 ____D () C:\Users\Elisa\Documents\Ebay
2015-01-31 12:55 - 2009-07-14 05:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-31 12:55 - 2009-07-14 05:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-31 12:53 - 2012-11-03 17:49 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-31 12:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-30 15:41 - 2012-11-03 18:09 - 00000000 ____D () C:\Users\Elisa\AppData\Roaming\SoftGrid Client
2015-01-30 15:40 - 2012-11-03 17:49 - 00002379 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-01-30 15:16 - 2012-11-03 17:54 - 00000000 ____D () C:\Users\Elisa
2015-01-30 15:15 - 2014-12-17 17:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-30 15:15 - 2014-12-17 17:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-28 20:53 - 2014-07-27 21:44 - 00000000 ____D () C:\Users\Elisa\AppData\Roaming\Epson
2015-01-28 20:31 - 2013-05-26 12:34 - 00119296 ___SH () C:\Users\Elisa\Thumbs.db
2015-01-28 18:15 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-25 17:38 - 2014-12-21 20:33 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-25 17:38 - 2013-07-04 20:21 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-25 17:38 - 2011-12-01 22:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-15 17:54 - 2014-09-08 20:17 - 00000000 ____D () C:\Users\Elisa\Documents\Urlaub
2015-01-14 12:30 - 2013-08-11 21:01 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 12:24 - 2011-07-18 21:31 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-12 22:13 - 2014-08-24 13:03 - 00000000 ____D () C:\Users\Elisa\Documents\MTBs 29er
2015-01-12 12:50 - 2014-09-21 21:46 - 00000000 ____D () C:\Users\Elisa\Documents\MTB
2015-01-08 17:15 - 2014-09-14 21:27 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2015-01-07 17:57 - 2012-11-03 17:56 - 00061216 _____ () C:\Users\Elisa\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-07 17:13 - 2009-07-14 05:45 - 00272248 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-07 07:40 - 2013-12-15 12:21 - 00000000 ____D () C:\Windows\Minidump
2015-01-06 12:31 - 2014-03-22 21:20 - 00000000 ____D () C:\ProgramData\Norton
2015-01-06 09:31 - 2014-12-17 17:04 - 00001367 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-06 09:31 - 2014-12-17 17:04 - 00001355 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-06 09:31 - 2012-11-03 17:55 - 00001641 _____ () C:\Users\Elisa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-06 09:31 - 2012-11-03 17:50 - 00002704 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2015-01-06 09:31 - 2012-11-03 17:50 - 00002233 _____ () C:\Users\Public\Desktop\MEDION Serviceportal.lnk
2015-01-06 09:06 - 2014-03-01 20:15 - 00000000 ____D () C:\ProgramData\Avira
==================== Files in the root of some directories =======
2012-11-06 20:21 - 2012-11-06 20:21 - 6839611 _____ () C:\Program Files\epson324794eu (1).zip
2012-11-05 10:37 - 2012-11-06 20:22 - 6858240 _____ () C:\Program Files\epson324794eu.exe
2012-11-06 20:20 - 2012-11-06 20:21 - 0000022 _____ () C:\Program Files\epson324794eu.zip
2001-08-23 18:25 - 2001-08-23 18:25 - 1706800 _____ (Microsoft Corporation) C:\Program Files\gdiplus.dll
2004-11-05 20:00 - 2004-11-05 20:00 - 0557056 _____ (WisePixel Multimedia) C:\Program Files\HandySnap.exe
2004-11-05 19:19 - 2004-11-05 19:19 - 0040960 _____ () C:\Program Files\hsnapkbd.dll
2004-11-05 19:50 - 2004-11-05 19:50 - 0003494 _____ () C:\Program Files\readme.txt
2006-01-03 21:32 - 2006-01-03 21:32 - 0007693 _____ () C:\Program Files\unins000.dat
2003-11-28 07:00 - 2003-11-28 07:00 - 0075922 _____ (Jordan Russell) C:\Program Files\unins000.exe
2014-03-09 21:13 - 2014-11-17 06:12 - 0000143 _____ () C:\Users\Elisa\AppData\Roaming\WB.CFG
2012-11-03 18:29 - 2012-11-03 18:29 - 0017408 _____ () C:\Users\Elisa\AppData\Local\WebpageIcons.db
Some content of TEMP:
====================
C:\Users\Elisa\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-24 19:08
==================== End Of Log ============================
--- --- --- Hallo, war das nun richtig? |
| Themen zu komische Musik wie Filmmusik im Hintergrund am PC |
| arbeitet, avira, film, filmmusik, freue, hintergrund, hochgefahren, immer wieder, inter, interne, internet, komische, laptop, merkwürdige, merkwürdige werbung, musik, nichts, rückmeldung, tritt, troja, trojaner, trotz, version, wahrscheinlich, woche, wochen, würde |
Baum-Darstellung