Addition.txt: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-06-2013 02
Ran by DoVi at 2013-06-21 20:45:40 Run:
Running from C:\Users\DoVi\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
64 Bit HP CIO Components Installer (Version: 6.2.1)
Adobe Flash Player 10 ActiveX (Version: 10.0.32.18)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Photoshop CS6 (Version: 13.0)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
Avira Free Antivirus (Version: 13.0.0.3640)
Avira SearchFree Toolbar plus Web Protection Updater (Version: 1.2.5.42066)
Beurer HealthManager (Version: 2.2.0.0)
BufferChm (Version: 130.0.331.000)
DAEMON Tools Lite (Version: 4.47.1.0333)
DivX-Setup (Version: 2.6.1.41)
DJ_AIO_03_F2200_Software_Min (Version: 130.0.365.000)
F2200 (Version: 130.0.365.000)
GIMP 2.8.4 (Version: 2.8.4)
Google Chrome (Version: 27.0.1453.110)
Google SketchUp 8 (Version: 3.0.14358)
Google Update Helper (Version: 1.3.21.145)
HP Deskjet F2200 All-In-One Driver Software 13.0 Rel. 3 (Version: 13.0)
HPPhotoGadget (Version: 130.0.282.000)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
MozBackup 1.5.1
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4420.1017)
PDF Architect (Version: 1.1.83.9982)
PDF Settings CS6 (Version: 11.0)
PDFCreator (Version: 1.7.0)
Realtek Ethernet Controller Driver (Version: 7.46.610.2011)
Realtek High Definition Audio Driver (Version: 6.0.1.6458)
roomeon 3D-Planer (Version: 1.4.2)
Scan (Version: 13.0.0.0)
Scribus 1.4.2 (Version: 1.4.2)
ShadowExplorer 0.9 (Version: 0.9.462.0)
SopCast 3.8.2 (Version: 3.8.2)
Toolbox (Version: 130.0.648.000)
TSR Watermark Image software version 2.4.0.4 - Free version
UnloadSupport (Version: 11.0.0)
Update for Microsoft .NET Framework 4.5 (KB2750147) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (Version: 1)
VLC media player 2.0.6 (Version: 2.0.6)
WebReg (Version: 130.0.132.017)
Winamp (Version: 5.63 )
Winamp Erkennungs-Plug-in (Version: 1.0.0.1)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
==================== Restore Points =========================
13-06-2013 08:39:06 Windows Update
13-06-2013 20:31:38 Windows Update
14-06-2013 10:21:51 Installed Beurer HealthManager.
14-06-2013 10:27:53 Installed Beurer HealthManager.
14-06-2013 10:39:37 Installed Beurer HealthManager.
15-06-2013 17:20:26 Installed Beurer HealthManager.
16-06-2013 09:10:04 Windows Update
17-06-2013 13:07:52 Windows Update
==================== Scheduled Tasks (whitelisted) =============
Task: {174B5E7D-F07E-43D6-89F0-6F26D8EFBBE7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {2B86226C-CFCC-44C8-9D51-2C03845D6477} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {31679830-88D9-409E-AE75-95721FE90AFA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {58C1E239-0CCD-4151-9ABE-A83E000EE1E5} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe No File
Task: {B1215B50-4E5E-4E9E-ADF5-169386D87890} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-15] (Google Inc.)
Task: {C73F37D2-045A-40BB-8BF3-3403BBCD1D24} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-15] (Google Inc.)
Task: {CCA023B3-E2B6-499A-BB73-8ABB375E2950} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/16/2013 06:29:41 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (06/16/2013 06:29:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (06/16/2013 06:29:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (06/16/2013 01:51:00 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (06/15/2013 07:11:37 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Beurer Health Manager.exe, Version: 2.2.0.0, Zeitstempel: 0x5194b04b
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b83c8a
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x14e8
Startzeit der fehlerhaften Anwendung: 0xBeurer Health Manager.exe0
Pfad der fehlerhaften Anwendung: Beurer Health Manager.exe1
Pfad des fehlerhaften Moduls: Beurer Health Manager.exe2
Berichtskennung: Beurer Health Manager.exe3
Error: (06/15/2013 07:11:35 PM) (Source: .NET Runtime) (User: )
Description: Anwendung: Beurer Health Manager.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.IO.FileNotFoundException
Stapel:
Error: (06/15/2013 05:54:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: spoolsv.exe, Version: 6.1.7601.17777, Zeitstempel: 0x4f35fc1d
Name des fehlerhaften Moduls: hpzllw71.dll, Version: 0.3.7071.0, Zeitstempel: 0x4a5bdf3d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000031aa
ID des fehlerhaften Prozesses: 0x5a4
Startzeit der fehlerhaften Anwendung: 0xspoolsv.exe0
Pfad der fehlerhaften Anwendung: spoolsv.exe1
Pfad des fehlerhaften Moduls: spoolsv.exe2
Berichtskennung: spoolsv.exe3
Error: (06/15/2013 02:33:38 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Beurer Health Manager.exe, Version: 2.2.0.0, Zeitstempel: 0x5194b04b
Name des fehlerhaften Moduls: PresentationCore.ni.dll, Version: 4.0.30319.18047, Zeitstempel: 0x51554fbe
Ausnahmecode: 0xc00000fd
Fehleroffset: 0x001c36dc
ID des fehlerhaften Prozesses: 0xb14
Startzeit der fehlerhaften Anwendung: 0xBeurer Health Manager.exe0
Pfad der fehlerhaften Anwendung: Beurer Health Manager.exe1
Pfad des fehlerhaften Moduls: Beurer Health Manager.exe2
Berichtskennung: Beurer Health Manager.exe3
Error: (06/15/2013 10:59:56 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DivXUpdate.exe, Version: 1.0.6.88, Zeitstempel: 0x511afc59
Name des fehlerhaften Moduls: netprofm.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a5bda75
Ausnahmecode: 0xc0000005
Fehleroffset: 0x736d31d5
ID des fehlerhaften Prozesses: 0xa90
Startzeit der fehlerhaften Anwendung: 0xDivXUpdate.exe0
Pfad der fehlerhaften Anwendung: DivXUpdate.exe1
Pfad des fehlerhaften Moduls: DivXUpdate.exe2
Berichtskennung: DivXUpdate.exe3
Error: (06/15/2013 10:42:57 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DivXUpdate.exe, Version: 1.0.6.88, Zeitstempel: 0x511afc59
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039342
ID des fehlerhaften Prozesses: 0xa14
Startzeit der fehlerhaften Anwendung: 0xDivXUpdate.exe0
Pfad der fehlerhaften Anwendung: DivXUpdate.exe1
Pfad des fehlerhaften Moduls: DivXUpdate.exe2
Berichtskennung: DivXUpdate.exe3
System errors:
=============
Error: (06/19/2013 08:35:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HitmanPro 3.7 Crusader (Boot)" wurde mit folgendem dienstspezifischem Fehler beendet: %%0.
Error: (06/16/2013 07:28:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/16/2013 07:24:49 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (06/16/2013 07:21:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/16/2013 00:58:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Bluetooth-Unterstützungsdienst" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (06/16/2013 00:58:19 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Bluetooth-Unterstützungsdienst erreicht.
Error: (06/15/2013 05:54:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/15/2013 03:31:31 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ?15.?06.?2013 um 14:45:20 unerwartet heruntergefahren.
Error: (06/15/2013 10:58:45 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ?15.?06.?2013 um 10:49:54 unerwartet heruntergefahren.
Error: (06/15/2013 10:45:08 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort2 gefunden.
Microsoft Office Sessions:
=========================
Error: (06/16/2013 06:29:41 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\DoVi\Downloads\esetsmartinstaller_enu.exe
Error: (06/16/2013 06:29:38 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\DoVi\Downloads\esetsmartinstaller_enu.exe
Error: (06/16/2013 06:29:38 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\DoVi\Downloads\esetsmartinstaller_enu.exe
Error: (06/16/2013 01:51:00 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\DoVi\Downloads\esetsmartinstaller_enu.exe
Error: (06/15/2013 07:11:37 PM) (Source: Application Error)(User: )
Description: Beurer Health Manager.exe2.2.0.05194b04bKERNELBASE.dll6.1.7601.1801550b83c8ae04343520000c41f14e801ce69eb63d38761C:\Users\DoVi\Desktop\Beurer Health Manager.exeC:\Windows\syswow64\KERNELBASE.dlla2fc191b-d5de-11e2-a791-001bdc0f4772
Error: (06/15/2013 07:11:35 PM) (Source: .NET Runtime)(User: )
Description: Anwendung: Beurer Health Manager.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.IO.FileNotFoundException
Stapel:
Error: (06/15/2013 05:54:45 PM) (Source: Application Error)(User: )
Description: spoolsv.exe6.1.7601.177774f35fc1dhpzllw71.dll0.3.7071.04a5bdf3dc000000500000000000031aa5a401ce69ccaca3a04dC:\Windows\System32\spoolsv.exeC:\Windows\System32\hpzllw71.dlle5d1de85-d5d3-11e2-a791-001bdc0f4772
Error: (06/15/2013 02:33:38 PM) (Source: Application Error)(User: )
Description: Beurer Health Manager.exe2.2.0.05194b04bPresentationCore.ni.dll4.0.30319.1804751554fbec00000fd001c36dcb1401ce69c36aa32aa4H:\Programme\Beurer\Beurer HealthManager\Beurer Health Manager.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\a2a69a7499d7944e5c7019349fe4aae2\PresentationCore.ni.dllcd3e4fc0-d5b7-11e2-b4cd-001bdc0f4772
Error: (06/15/2013 10:59:56 AM) (Source: Application Error)(User: )
Description: DivXUpdate.exe1.0.6.88511afc59netprofm.dll_unloaded0.0.0.04a5bda75c0000005736d31d5a9001ce69a69603bbb7C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exenetprofm.dllf2c2a2ae-d599-11e2-b4cd-001bdc0f4772
Error: (06/15/2013 10:42:57 AM) (Source: Application Error)(User: )
Description: DivXUpdate.exe1.0.6.88511afc59ole32.dll6.1.7601.175144ce7b96fc000000500039342a1401ce69a43e720471C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exeC:\Windows\syswow64\ole32.dll93afa6fa-d597-11e2-af07-001bdc0f4772
CodeIntegrity Errors:
===================================
Date: 2013-06-16 19:24:49.931
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-16 19:24:49.804
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 39%
Total physical RAM: 4095.24 MB
Available physical RAM: 2467.7 MB
Total Pagefile: 8188.67 MB
Available Pagefile: 6416.56 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:76.59 GB) (Free:34.13 GB) NTFS (Disk=0 Partition=2)
Drive e: (O2003_Pro_SP3) (CDROM) (Total:0.61 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 77 GB) (Disk ID: 13730B88)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=77 GB) - (Type=07 NTFS)
==================== End Of Log ============================
FRST.txt:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2013 02
Ran by DoVi (administrator) on 21-06-2013 20:42:57
Running from C:\Users\DoVi\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(www.shadowexplorer.com) C:\Program Files (x86)\ShadowExplorer\sesvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12856936 2011-09-09] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [478984 2012-12-15] (Adobe Systems Incorporated)
HKCU\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-20] (Microsoft Corporation)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" [x]
HKLM-x32\...\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345312 2013-05-10] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] ()
HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-05-11] (Adobe Systems Incorporated)
BootExecute: autocheck autochk * bootdelete
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=697eb3f8-478a-40ae-8046-265e3ca12e94&searchtype=hp&fr=linkury-tb&installDate=10/05/2013&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM-x32 SearchScopes: DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=697eb3f8-478a-40ae-8046-265e3ca12e94&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=10/05/2013&type=hp1000
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=697eb3f8-478a-40ae-8046-265e3ca12e94&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=10/05/2013&type=hp1000
HKCU SearchScopes: DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=697eb3f8-478a-40ae-8046-265e3ca12e94&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=10/05/2013&type=hp1000
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=697eb3f8-478a-40ae-8046-265e3ca12e94&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=10/05/2013&type=hp1000
SearchScopes: HKCU - {2BB66685-6DC6-44F5-99CD-1D2E58E3D32B} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=3ffd23a8-9bf6-4fc9-9ee2-58edab5384c3&apn_sauid=73CE9AC4-0EBD-4988-9B18-431F52E92818
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\..\Interfaces\{8065767C-012C-45E0-BAE7-A0A0519054C5}: [NameServer]193.189.250.101 193.189.250.100
FireFox:
========
FF ProfilePath: C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default
FF NewTab: about:blank
FF SelectedSearchEngine: Web Search
FF Homepage: hxxp://www.google.de/
FF NetworkProxy: "http", "localhost"
FF NetworkProxy: "http_port", 9666
FF NetworkProxy: "socks", "localhost"
FF NetworkProxy: "socks_port", 9050
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "ssl", "localhost"
FF NetworkProxy: "ssl_port", 9666
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Extension: Move Media Player - C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default\Extensions\moveplayer@movenetworks.com
FF Extension: webmiles-Sammelfreund - C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default\Extensions\sammelfreund@webmiles.de
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default\Extensions\toolbar@ask.com
FF Extension: DownloadHelper - C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: toolbar - C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default\Extensions\toolbar@web.de.xpi
FF Extension: No Name - C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF Extension: No Name - C:\Users\DoVi\AppData\Roaming\Mozilla\Firefox\Profiles\p55f7vxu.default\Extensions\{dd05fd3d-18df-4ce4-ae53-e795339c5f01}.xpi
Chrome:
=======
CHR HomePage: hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=697eb3f8-478a-40ae-8046-265e3ca12e94&searchtype=hp&fr=linkury-tb&installDate=10/05/2013&type=hp1000
CHR RestoreOnStartup: "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=697eb3f8-478a-40ae-8046-265e3ca12e94&searchtype=hp&fr=linkury-tb&installDate=10/05/2013&type=hp1000"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files (x86)\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-05-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-05-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [562744 2013-05-10] (Avira Operations GmbH & Co. KG)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 sesvc; C:\Program Files (x86)\ShadowExplorer\sesvc.exe [9216 2013-01-02] (www.shadowexplorer.com)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-05-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-05-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-05-10] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-10] (DT Soft Ltd)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32000 2013-06-19] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 MSICDSetup; \??\E:\CDriver64.sys [x]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-21 20:42 - 2013-06-21 20:42 - 01930924 ____A (Farbar) C:\Users\DoVi\Downloads\FRST64.exe
2013-06-21 20:42 - 2013-06-21 20:42 - 00000000 ____D C:\FRST
2013-06-21 20:38 - 2013-06-21 20:38 - 00001031 ____A C:\Users\Public\Desktop\MozBackup.lnk
2013-06-19 20:51 - 2013-06-19 20:51 - 00040610 ____A C:\Users\DoVi\Downloads\OTL.zip
2013-06-19 20:32 - 2013-06-19 20:32 - 00028540 ____A C:\Windows\System32\.crusader
2013-06-19 20:23 - 2013-06-19 20:34 - 00032000 ____A C:\Windows\System32\Drivers\hitmanpro37.sys
2013-06-19 17:25 - 2013-06-19 17:25 - 00088990 ____A C:\Users\DoVi\Downloads\HitmanPro_20130619_1725.xml
2013-06-19 17:25 - 2013-06-19 17:25 - 00073648 ____A C:\Users\DoVi\Downloads\HitmanPro_20130619_1725.log
2013-06-19 17:25 - 2013-06-19 17:25 - 00005811 ____A C:\Users\DoVi\Downloads\HitmanPro_20130619_1725.zip
2013-06-19 17:18 - 2013-06-19 17:18 - 00000000 ____D C:\Program Files\HitmanPro
2013-06-19 17:17 - 2013-06-19 20:32 - 00000000 ____D C:\ProgramData\HitmanPro
2013-06-19 17:17 - 2013-06-19 17:17 - 09833328 ____A (SurfRight B.V.) C:\Users\DoVi\Downloads\HitmanPro_x64.exe
2013-06-17 15:08 - 2012-08-23 16:13 - 00243200 ____A (Microsoft Corporation) C:\Windows\System32\rdpudd.dll
2013-06-17 15:08 - 2012-08-23 16:10 - 00019456 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpvideominiport.sys
2013-06-17 15:08 - 2012-08-23 16:07 - 00057856 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt.sys
2013-06-17 15:08 - 2012-08-23 15:47 - 00046592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-06-17 15:08 - 2012-08-23 15:46 - 00016896 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-06-17 15:08 - 2012-08-23 15:41 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
2013-06-17 15:08 - 2012-08-23 15:40 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
2013-06-17 15:08 - 2012-08-23 15:24 - 00015360 ____A (Microsoft Corporation) C:\Windows\System32\RdpGroupPolicyExtension.dll
2013-06-17 15:08 - 2012-08-23 15:20 - 00054272 ____A (Microsoft Corporation) C:\Windows\System32\MsRdpWebAccess.dll
2013-06-17 15:08 - 2012-08-23 15:18 - 00037376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-06-17 15:08 - 2012-08-23 15:17 - 00018432 ____A (Microsoft Corporation) C:\Windows\System32\wksprtPS.dll
2013-06-17 15:08 - 2012-08-23 15:06 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\TsUsbGDCoInstaller.dll
2013-06-17 15:08 - 2012-08-23 14:52 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-06-17 15:08 - 2012-08-23 13:20 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2013-06-17 15:08 - 2012-08-23 13:15 - 00269312 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-06-17 15:08 - 2012-08-23 13:14 - 00384000 ____A (Microsoft Corporation) C:\Windows\System32\wksprt.exe
2013-06-17 15:08 - 2012-08-23 13:12 - 00192000 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2013-06-17 15:08 - 2012-08-23 12:54 - 00322560 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-06-17 15:08 - 2012-08-23 12:51 - 00228864 ____A (Microsoft Corporation) C:\Windows\System32\rdpendp_winip.dll
2013-06-17 15:08 - 2012-08-23 12:39 - 01048064 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-06-17 15:08 - 2012-08-23 12:22 - 01123840 ____A (Microsoft Corporation) C:\Windows\System32\mstsc.exe
2013-06-17 15:08 - 2012-08-23 11:51 - 03174912 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2013-06-17 15:08 - 2012-08-23 10:19 - 04916224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-06-17 15:08 - 2012-08-23 10:13 - 05773824 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-06-17 15:07 - 2012-08-24 20:13 - 00154480 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2013-06-17 15:07 - 2012-08-24 20:09 - 00458712 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2013-06-17 15:07 - 2012-08-24 20:05 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll
2013-06-17 15:07 - 2012-08-24 20:03 - 01448448 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2013-06-17 15:07 - 2012-08-24 18:57 - 00247808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-06-17 15:07 - 2012-08-24 18:57 - 00022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-06-17 15:07 - 2012-08-24 18:53 - 00096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-06-17 15:07 - 2012-05-04 13:00 - 00366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2013-06-17 15:07 - 2012-05-04 11:59 - 00514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-06-17 14:55 - 2013-06-17 14:52 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\DoVi\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-16 19:44 - 2013-06-16 19:44 - 00027522 ____A C:\ComboFix.txt
2013-06-16 19:15 - 2013-06-16 19:44 - 00000000 ____D C:\Qoobox
2013-06-16 19:15 - 2013-06-16 19:39 - 00000000 ____D C:\Windows\erdnt
2013-06-16 19:15 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-16 19:15 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-16 19:15 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-16 19:15 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-16 19:15 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-16 19:15 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-16 19:15 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-16 19:15 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-16 19:13 - 2013-06-16 19:13 - 05080151 ____R (Swearware) C:\Users\DoVi\Downloads\ComboFix.exe
2013-06-16 19:03 - 2013-06-16 19:03 - 02237968 ____A (Kaspersky Lab ZAO) C:\Users\DoVi\Downloads\tdsskiller.exe
2013-06-16 18:19 - 2013-06-17 14:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-16 18:19 - 2013-06-16 18:19 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\Malwarebytes
2013-06-16 18:19 - 2013-06-16 18:19 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-16 18:19 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-16 13:56 - 2013-06-16 13:56 - 00049537 ____A C:\Users\DoVi\Downloads\OLT.zip
2013-06-16 13:20 - 2013-06-19 20:46 - 00484250 ____A C:\Users\DoVi\Downloads\OTL.Txt
2013-06-16 13:20 - 2013-06-16 13:20 - 00060098 ____A C:\Users\DoVi\Downloads\Extras.Txt
2013-06-16 13:20 - 2013-06-16 13:20 - 00060098 ____A C:\Users\DoVi\Documents\Extras.Txt
2013-06-16 13:07 - 2013-06-16 13:07 - 02347384 ____A (ESET) C:\Users\DoVi\Downloads\esetsmartinstaller_enu.exe
2013-06-16 13:04 - 2013-06-16 13:04 - 00602112 ____A (OldTimer Tools) C:\Users\DoVi\Downloads\OTL.exe
2013-06-16 12:58 - 2013-06-16 12:58 - 00000000 ____A C:\Users\DoVi\Documents\Neues Textdokument.txt
2013-06-16 12:53 - 2013-06-16 12:54 - 00000023 ____A C:\Users\DoVi\Desktop\Dektop.ini
2013-06-16 12:42 - 2013-06-16 12:42 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\www.shadowexplorer.com
2013-06-16 12:41 - 2013-06-16 12:41 - 00000000 ____D C:\Program Files (x86)\ShadowExplorer
2013-06-16 12:40 - 2013-06-16 12:40 - 00969845 ____A (ShadowExplorer.com ) C:\Users\DoVi\Downloads\ShadowExplorer-0.9-setup.exe
2013-06-16 12:28 - 2013-06-16 12:28 - 00002558 ____A C:\Users\DoVi\Documents\Test.pfx
2013-06-16 11:10 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-16 11:10 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-16 11:10 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-16 11:10 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-16 11:10 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-16 11:10 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-16 11:10 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-16 11:10 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-16 11:10 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-16 11:10 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-16 11:10 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-16 11:10 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-15 19:20 - 2013-06-15 19:20 - 00002105 ____A C:\Users\Public\Desktop\Beurer HealthManager.lnk
2013-06-15 19:20 - 2013-06-15 19:20 - 00000000 ____D C:\ProgramData\Beurer
2013-06-15 19:20 - 2013-06-15 19:20 - 00000000 ____D C:\Program Files (x86)\Beurer
2013-06-14 12:22 - 2013-06-14 12:22 - 00000000 ____D C:\Users\DoVi\AppData\Local\Beurer
2013-06-14 12:10 - 2013-06-14 12:10 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\Beurer HealthManager
2013-06-13 22:32 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-13 22:32 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-13 22:32 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-13 22:32 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-13 22:32 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-13 22:32 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-13 22:32 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-13 22:32 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-13 22:32 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-13 22:32 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-13 22:32 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-13 22:32 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-13 22:32 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-13 22:32 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-13 22:32 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-13 22:32 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-13 22:32 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-13 22:32 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-13 22:32 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-13 11:37 - 2013-06-13 11:37 - 00057692 ____A C:\Users\DoVi\AppData\Local\recently-used.xbel
2013-06-13 11:36 - 2013-06-12 19:11 - 00083742 ____A C:\Users\DoVi\Desktop\Frankfurtt.skb
2013-06-12 18:31 - 2013-06-13 11:36 - 00083744 ____A C:\Users\DoVi\Desktop\Frankfurtt.skp
2013-06-12 18:05 - 2013-06-12 18:05 - 00002025 ____A C:\Users\Public\Desktop\Google SketchUp 8.lnk
2013-06-12 18:05 - 2013-06-12 18:05 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\Google
2013-06-12 18:05 - 2013-06-12 18:05 - 00000000 ____D C:\ProgramData\Google
2013-06-12 17:59 - 2013-06-12 17:59 - 40341776 ____A (Google Inc.) C:\Users\DoVi\Desktop\googlesketchupwde.exe
2013-06-12 13:12 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 13:12 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 13:12 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 13:12 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 13:12 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 13:12 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 13:12 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 13:12 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 13:12 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 13:12 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 13:12 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 13:12 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 13:12 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 13:12 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 13:12 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 13:12 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 13:12 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 13:12 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 13:12 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-12 11:42 - 2013-06-12 11:43 - 00000000 ___AD C:\Users\DoVi\Desktop\USB Karte
2013-06-11 12:50 - 2013-06-11 12:51 - 00000000 ___AD C:\Users\DoVi\Desktop\Preventivi
2013-06-09 19:22 - 2013-06-09 19:22 - 00000000 ____D C:\Users\DoVi\AppData\Local\roomeon
2013-06-09 19:21 - 2013-06-09 19:21 - 00000000 ____D C:\Program Files (x86)\roomeon 3D-Planer
2013-06-06 11:41 - 2013-06-15 15:36 - 00000000 ___AD C:\Users\DoVi\Desktop\Verknüpfungen
2013-06-05 17:21 - 2013-06-16 12:28 - 00000000 __RAD C:\Users\DoVi\Desktop\Mussana
2013-06-05 16:39 - 2013-06-05 16:43 - 00000000 ___AD C:\Users\DoVi\Desktop\Sanomat
2013-06-03 14:46 - 2013-06-03 14:47 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\PDF Architect
2013-06-03 14:28 - 2013-06-19 17:26 - 00000000 ____D C:\Users\DoVi\AppData\Local\DoNotTrackPlus
2013-06-03 11:35 - 2013-06-03 11:35 - 00020992 __ASH C:\Users\DoVi\Desktop\Thumbs.db
2013-06-02 19:02 - 2013-06-02 19:02 - 00000000 ____D C:\Users\DoVi\Documents\PDF Architect Files
2013-06-02 19:02 - 2013-06-02 19:02 - 00000000 ____D C:\Program Files (x86)\PDF Architect
2013-06-02 19:01 - 2013-06-02 19:02 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-06-02 19:01 - 2013-06-02 19:01 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\pdfforge
2013-06-02 19:01 - 2013-04-09 15:13 - 00110264 ____A (pdfforge GmbH) C:\Windows\System32\pdfcmon.dll
2013-06-02 19:01 - 2013-01-09 15:52 - 01070152 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2013-06-02 19:01 - 2012-05-05 11:54 - 00662288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2013-06-02 19:01 - 2012-05-05 11:54 - 00137000 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2013-06-02 19:01 - 2012-05-05 11:54 - 00023552 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2013-06-02 19:01 - 1998-07-06 18:56 - 00125712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2013-06-02 19:01 - 1998-07-06 18:55 - 00158208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2013-06-02 19:01 - 1998-07-06 18:55 - 00064512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2013-06-02 12:14 - 2013-06-02 12:14 - 00000000 ____D C:\Users\DoVi\AppData\Local\TSR_Software
2013-05-30 17:09 - 2013-05-30 17:09 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\LaserWare
2013-05-30 13:30 - 2013-05-30 15:15 - 00000000 ___AD C:\Users\DoVi\Desktop\Carte
2013-05-30 13:24 - 2013-05-30 13:24 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-05-29 12:32 - 2013-05-29 12:33 - 00000000 ___AD C:\Users\DoVi\Desktop\Usb stick
2013-05-28 15:53 - 2013-06-10 15:06 - 00000000 ___AD C:\Users\DoVi\Desktop\Grundrisse
2013-05-27 12:13 - 2013-05-27 12:24 - 00000924 ____A C:\Users\DoVi\Desktop\GIMP 2.lnk
2013-05-23 22:10 - 2013-05-23 22:10 - 00000000 ____D C:\ProgramData\Mozilla
2013-05-23 22:10 - 2013-05-23 22:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-22 20:02 - 2013-05-22 20:02 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
==================== One Month Modified Files and Folders =======
2013-06-21 20:42 - 2013-06-21 20:42 - 01930924 ____A (Farbar) C:\Users\DoVi\Downloads\FRST64.exe
2013-06-21 20:42 - 2013-06-21 20:42 - 00000000 ____D C:\FRST
2013-06-21 20:42 - 2009-07-14 19:58 - 00699092 ____A C:\Windows\System32\perfh007.dat
2013-06-21 20:42 - 2009-07-14 19:58 - 00149232 ____A C:\Windows\System32\perfc007.dat
2013-06-21 20:42 - 2009-07-14 07:13 - 01619284 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-21 20:38 - 2013-06-21 20:38 - 00001031 ____A C:\Users\Public\Desktop\MozBackup.lnk
2013-06-21 20:37 - 2013-05-15 15:31 - 00001102 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-21 20:37 - 2013-05-10 18:15 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-21 20:37 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-21 20:37 - 2009-07-14 06:51 - 00028429 ____A C:\Windows\setupact.log
2013-06-19 23:26 - 2013-05-10 22:06 - 01923291 ____A C:\Windows\WindowsUpdate.log
2013-06-19 22:57 - 2013-05-12 16:42 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-19 22:36 - 2013-05-15 15:31 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-19 20:51 - 2013-06-19 20:51 - 00040610 ____A C:\Users\DoVi\Downloads\OTL.zip
2013-06-19 20:48 - 2009-07-14 06:45 - 00018832 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-19 20:48 - 2009-07-14 06:45 - 00018832 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-19 20:46 - 2013-06-16 13:20 - 00484250 ____A C:\Users\DoVi\Downloads\OTL.Txt
2013-06-19 20:34 - 2013-06-19 20:23 - 00032000 ____A C:\Windows\System32\Drivers\hitmanpro37.sys
2013-06-19 20:32 - 2013-06-19 20:32 - 00028540 ____A C:\Windows\System32\.crusader
2013-06-19 20:32 - 2013-06-19 17:17 - 00000000 ____D C:\ProgramData\HitmanPro
2013-06-19 17:26 - 2013-06-03 14:28 - 00000000 ____D C:\Users\DoVi\AppData\Local\DoNotTrackPlus
2013-06-19 17:25 - 2013-06-19 17:25 - 00088990 ____A C:\Users\DoVi\Downloads\HitmanPro_20130619_1725.xml
2013-06-19 17:25 - 2013-06-19 17:25 - 00073648 ____A C:\Users\DoVi\Downloads\HitmanPro_20130619_1725.log
2013-06-19 17:25 - 2013-06-19 17:25 - 00005811 ____A C:\Users\DoVi\Downloads\HitmanPro_20130619_1725.zip
2013-06-19 17:18 - 2013-06-19 17:18 - 00000000 ____D C:\Program Files\HitmanPro
2013-06-19 17:17 - 2013-06-19 17:17 - 09833328 ____A (SurfRight B.V.) C:\Users\DoVi\Downloads\HitmanPro_x64.exe
2013-06-17 17:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-17 15:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-17 14:57 - 2013-06-16 18:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-17 14:52 - 2013-06-17 14:55 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\DoVi\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-16 20:16 - 2013-05-10 19:49 - 00120192 ____A C:\Windows\PFRO.log
2013-06-16 19:44 - 2013-06-16 19:44 - 00027522 ____A C:\ComboFix.txt
2013-06-16 19:44 - 2013-06-16 19:15 - 00000000 ____D C:\Qoobox
2013-06-16 19:44 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default
2013-06-16 19:39 - 2013-06-16 19:15 - 00000000 ____D C:\Windows\erdnt
2013-06-16 19:29 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-06-16 19:13 - 2013-06-16 19:13 - 05080151 ____R (Swearware) C:\Users\DoVi\Downloads\ComboFix.exe
2013-06-16 19:03 - 2013-06-16 19:03 - 02237968 ____A (Kaspersky Lab ZAO) C:\Users\DoVi\Downloads\tdsskiller.exe
2013-06-16 18:19 - 2013-06-16 18:19 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\Malwarebytes
2013-06-16 18:19 - 2013-06-16 18:19 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-16 13:56 - 2013-06-16 13:56 - 00049537 ____A C:\Users\DoVi\Downloads\OLT.zip
2013-06-16 13:20 - 2013-06-16 13:20 - 00060098 ____A C:\Users\DoVi\Downloads\Extras.Txt
2013-06-16 13:20 - 2013-06-16 13:20 - 00060098 ____A C:\Users\DoVi\Documents\Extras.Txt
2013-06-16 13:07 - 2013-06-16 13:07 - 02347384 ____A (ESET) C:\Users\DoVi\Downloads\esetsmartinstaller_enu.exe
2013-06-16 13:04 - 2013-06-16 13:04 - 00602112 ____A (OldTimer Tools) C:\Users\DoVi\Downloads\OTL.exe
2013-06-16 12:58 - 2013-06-16 12:58 - 00000000 ____A C:\Users\DoVi\Documents\Neues Textdokument.txt
2013-06-16 12:54 - 2013-06-16 12:53 - 00000023 ____A C:\Users\DoVi\Desktop\Dektop.ini
2013-06-16 12:42 - 2013-06-16 12:42 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\www.shadowexplorer.com
2013-06-16 12:41 - 2013-06-16 12:41 - 00000000 ____D C:\Program Files (x86)\ShadowExplorer
2013-06-16 12:40 - 2013-06-16 12:40 - 00969845 ____A (ShadowExplorer.com ) C:\Users\DoVi\Downloads\ShadowExplorer-0.9-setup.exe
2013-06-16 12:28 - 2013-06-16 12:28 - 00002558 ____A C:\Users\DoVi\Documents\Test.pfx
2013-06-16 12:28 - 2013-06-05 17:21 - 00000000 __RAD C:\Users\DoVi\Desktop\Mussana
2013-06-15 19:20 - 2013-06-15 19:20 - 00002105 ____A C:\Users\Public\Desktop\Beurer HealthManager.lnk
2013-06-15 19:20 - 2013-06-15 19:20 - 00000000 ____D C:\ProgramData\Beurer
2013-06-15 19:20 - 2013-06-15 19:20 - 00000000 ____D C:\Program Files (x86)\Beurer
2013-06-15 15:36 - 2013-06-06 11:41 - 00000000 ___AD C:\Users\DoVi\Desktop\Verknüpfungen
2013-06-14 12:22 - 2013-06-14 12:22 - 00000000 ____D C:\Users\DoVi\AppData\Local\Beurer
2013-06-14 12:10 - 2013-06-14 12:10 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\Beurer HealthManager
2013-06-14 12:10 - 2013-05-10 21:17 - 01592320 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-13 11:37 - 2013-06-13 11:37 - 00057692 ____A C:\Users\DoVi\AppData\Local\recently-used.xbel
2013-06-13 11:37 - 2013-05-12 13:56 - 00000000 ____D C:\Users\DoVi\.gimp-2.8
2013-06-13 11:36 - 2013-06-12 18:31 - 00083744 ____A C:\Users\DoVi\Desktop\Frankfurtt.skp
2013-06-13 10:41 - 2013-05-10 20:01 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 19:11 - 2013-06-13 11:36 - 00083742 ____A C:\Users\DoVi\Desktop\Frankfurtt.skb
2013-06-12 18:05 - 2013-06-12 18:05 - 00002025 ____A C:\Users\Public\Desktop\Google SketchUp 8.lnk
2013-06-12 18:05 - 2013-06-12 18:05 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\Google
2013-06-12 18:05 - 2013-06-12 18:05 - 00000000 ____D C:\ProgramData\Google
2013-06-12 18:05 - 2013-05-15 15:31 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-12 17:59 - 2013-06-12 17:59 - 40341776 ____A (Google Inc.) C:\Users\DoVi\Desktop\googlesketchupwde.exe
2013-06-12 11:43 - 2013-06-12 11:42 - 00000000 ___AD C:\Users\DoVi\Desktop\USB Karte
2013-06-12 10:57 - 2013-05-12 16:42 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 10:57 - 2013-05-12 16:42 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-11 12:51 - 2013-06-11 12:50 - 00000000 ___AD C:\Users\DoVi\Desktop\Preventivi
2013-06-10 15:06 - 2013-05-28 15:53 - 00000000 ___AD C:\Users\DoVi\Desktop\Grundrisse
2013-06-09 19:22 - 2013-06-09 19:22 - 00000000 ____D C:\Users\DoVi\AppData\Local\roomeon
2013-06-09 19:21 - 2013-06-09 19:21 - 00000000 ____D C:\Program Files (x86)\roomeon 3D-Planer
2013-06-08 16:08 - 2013-06-16 11:10 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-16 11:10 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-16 11:10 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-16 11:10 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-16 11:10 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-16 11:10 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-16 11:10 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-16 11:10 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-16 11:10 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-16 11:10 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-16 11:10 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-16 11:10 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-05 16:43 - 2013-06-05 16:39 - 00000000 ___AD C:\Users\DoVi\Desktop\Sanomat
2013-06-03 14:47 - 2013-06-03 14:46 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\PDF Architect
2013-06-03 11:35 - 2013-06-03 11:35 - 00020992 __ASH C:\Users\DoVi\Desktop\Thumbs.db
2013-06-03 11:29 - 2013-05-10 18:31 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\Winamp
2013-06-02 19:04 - 2013-05-15 15:37 - 00000000 ____D C:\Windows\System32\appmgmt
2013-06-02 19:02 - 2013-06-02 19:02 - 00000000 ____D C:\Users\DoVi\Documents\PDF Architect Files
2013-06-02 19:02 - 2013-06-02 19:02 - 00000000 ____D C:\Program Files (x86)\PDF Architect
2013-06-02 19:02 - 2013-06-02 19:01 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-06-02 19:01 - 2013-06-02 19:01 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\pdfforge
2013-06-02 18:54 - 2013-05-19 14:47 - 00000000 ____D C:\Program Files (x86)\PDF Password Remover v3.1
2013-06-02 12:14 - 2013-06-02 12:14 - 00000000 ____D C:\Users\DoVi\AppData\Local\TSR_Software
2013-06-02 12:01 - 2013-05-10 18:30 - 00000000 ____D C:\Users\DoVi\Documents\TSR Software
2013-06-02 11:58 - 2009-07-14 20:18 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-06-02 11:47 - 2013-05-12 16:34 - 00000000 ____D C:\Users\DoVi\AppData\Local\Google
2013-05-30 17:09 - 2013-05-30 17:09 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\LaserWare
2013-05-30 15:15 - 2013-05-30 13:30 - 00000000 ___AD C:\Users\DoVi\Desktop\Carte
2013-05-30 13:24 - 2013-05-30 13:24 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-05-29 12:33 - 2013-05-29 12:32 - 00000000 ___AD C:\Users\DoVi\Desktop\Usb stick
2013-05-27 12:24 - 2013-05-27 12:13 - 00000924 ____A C:\Users\DoVi\Desktop\GIMP 2.lnk
2013-05-26 12:45 - 2013-05-12 14:11 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\Adobe
2013-05-26 12:04 - 2013-05-12 14:09 - 00000000 ____D C:\ProgramData\Adobe
2013-05-23 22:10 - 2013-05-23 22:10 - 00000000 ____D C:\ProgramData\Mozilla
2013-05-23 22:10 - 2013-05-23 22:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-23 22:10 - 2013-05-10 17:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-22 20:02 - 2013-05-22 20:02 - 00000000 ____D C:\Users\DoVi\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-05-22 18:00 - 2013-05-19 19:36 - 00000000 ____D C:\Users\DoVi\Documents\PDF Password Remover Output
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-13 11:19
==================== End Of Log ============================
--- --- ---
--- --- --- |
TDSSKiller.exe und speichere diese Datei auf dem Desktop
So funktioniert es: