Trojaner-Board
Seite 2 von 4 1 2 34
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows 7 und 8: Statt des Link Zieles kommt Werbung (Erneuern Sie Ihren ...) (https://www.trojaner-board.de/152460-windows-7-8-statt-link-zieles-kommt-werbung-erneuern-ihren.html)

schrauber 23.04.2014 13:58
Nö, aber dann würde ich es deinstallieren.

Das bitte machen:
http://www.trojaner-board.de/126216-...epair-aio.html

Dann ein frisches FRST und FSS log bitte.

Emmaline 24.04.2014 21:33
Liste der Anhänge anzeigen (Anzahl: 1)
Also, wenn ich die Datei runterlade, dann sieht das alles anders aus als in der Beschreibung und den Button "So it" gibts nicht. Was soll ich da jetzt machen?

Liebe Grüße
Emmaline

schrauber 25.04.2014 18:58
Immer auf NExt klicken, die einzelnen Schritte durchführen lassen, dann kommste auf das FEnster mit den Haken setzen.

Emmaline 26.04.2014 20:30
Hier die gewünschten Logs:
Zitat:
Done (26.04.2014 21:06:05)

14 - Repair Proxy Settings
Start (26.04.2014 21:06:05)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:06:09)

15 - Unhide Non System Files
Start (26.04.2014 21:06:09)
C:\ - Total Files Unhidden: 544 - Check Unhidden_Files.txt for list of files unhidden
D:\ - Total Files Unhidden: 20 - Check Unhidden_Files.txt for list of files unhidden
E:\ - Total Files Unhidden: 34 - Check Unhidden_Files.txt for list of files unhidden
Done (26.04.2014 21:07:18)

16 - Repair Windows Updates
Start (26.04.2014 21:07:18)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:07:42)

17 - Repair CD/DVD Missing/Not Working
Start (26.04.2014 21:07:42)
iTunes not found, not applying UpperFilters iTunes Reg Key
Done (26.04.2014 21:07:42)

18 - Repair Volume Shadow Copy Service
Start (26.04.2014 21:07:42)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:07:48)

19 - Repair Windows Sidebar/Gadgets
Start (26.04.2014 21:07:48)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:07:55)

20 - Repair MSI (Windows Installer)
Start (26.04.2014 21:07:55)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:04)

21 - Repair Windows Snipping Tool
Start (26.04.2014 21:08:04)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:09)

22.01 - Repair bat Association
Start (26.04.2014 21:08:09)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:13)

22.02 - Repair cmd Association
Start (26.04.2014 21:08:13)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:18)

22.03 - Repair com Association
Start (26.04.2014 21:08:18)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:23)

22.04 - Repair Directory Association
Start (26.04.2014 21:08:23)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:27)

22.05 - Repair Drive Association
Start (26.04.2014 21:08:27)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:32)

22.06 - Repair exe Association
Start (26.04.2014 21:08:32)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:37)

22.07 - Repair Folder Association
Start (26.04.2014 21:08:37)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:41)

22.08 - Repair inf Association
Start (26.04.2014 21:08:41)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:46)

22.09 - Repair lnk (Shortcuts) Association
Start (26.04.2014 21:08:46)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:51)

22.10 - Repair msc Association
Start (26.04.2014 21:08:51)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:08:56)

22.11 - Repair reg Association
Start (26.04.2014 21:08:56)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:09:00)

22.12 - Repair scr Association
Start (26.04.2014 21:09:00)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:09:05)

23 - Repair Windows Safe Mode
Start (26.04.2014 21:09:05)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:09:10)

24 - Repair Print Spooler
Start (26.04.2014 21:09:10)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:09:23)

25 - Restore Important Windows Services
Start (26.04.2014 21:09:23)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:09:29)

26 - Set Windows Services To Default Startup
Start (26.04.2014 21:09:29)
Running Repair Under Current User Account
Running Repair Under Current User Account
Done (26.04.2014 21:09:36)

Skipping Repair.
Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
Current version: 6.1

Skipping Repair.
Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
Current version: 6.1

Skipping Repair.
Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
Current version: 6.1

Cleaning up empty logs...

All Selected Repairs Done.
Done (26.04.2014 21:09:36)
Total Repair Time: 00:23:17


...YOU MUST RESTART YOUR SYSTEM...
Running Repair Under Current User Account

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-04-2014 03
Ran by Acidfree (administrator) on ACIDFREE-PC on 26-04-2014 21:24:36
Running from C:\Users\Acidfree\Desktop\Reparieren
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems Incorporated) E:\Photoshop\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
( ) C:\Windows\system32\lxczcoms.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Spotify Ltd) C:\Users\Acidfree\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Program Files (x86)\FastMediaConverter\FastMediaConverterApp.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Nullsoft, Inc.) D:\Winamp\winampa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [WinampAgent] => D:\Winamp\winampa.exe [74752 2011-07-11] (Nullsoft, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\Run: [ICQ] => D:\ICQ7.5\ICQ.exe [124480 2011-08-01] (ICQ, LLC.)
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\Run: [Spotify Web Helper] => C:\Users\Acidfree\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171000 2014-04-11] (Spotify Ltd)
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\Run: [Spotify] => C:\Users\Acidfree\AppData\Roaming\Spotify\Spotify.exe [6087224 2014-04-11] (Spotify Ltd)
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\Run: [PrivacyDr] => C:\Program Files (x86)\Privacy Dr\PrivacyDr.exe
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\MountPoints2: {237ce8bd-cee5-11e0-b0cf-00242178af47} - J:\Startme.exe
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\MountPoints2: {2518b13b-372c-11e2-87e8-00242178af47} - G:\pushinst.exe
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\MountPoints2: {5738becf-f4ff-11e1-8895-806e6f6e6963} - explorer index_GB.html
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\MountPoints2: {afbc22a3-b183-11e1-b4a9-00242178af47} - G:\Setup.exe
Startup: C:\Users\Acidfree\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Acidfree\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FastMediaConverter.lnk
ShortcutTarget: FastMediaConverter.lnk -> C:\Program Files (x86)\FastMediaConverter\FastMediaConverterApp.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x449DEC206E54CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: ICQ Sparberater - {5A0D6E4B-B0DF-4148-8B1E-F7A430FF5E24} - C:\Program Files (x86)\icq\Internet Explorer\icq.dll (solute gmbh)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: ICQ Search
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: ICQ Search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_182.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-26.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-27.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-28.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-29.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-30.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Evernote Web Clipper - C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2013-12-19]
FF Extension: DivX Web Player - C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\Extensions\DivXWebPlayer@divx.com.xpi [2012-03-01]
FF Extension: GMX MailCheck - C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\Extensions\toolbar@gmx.net.xpi [2012-05-04]
FF Extension: Ask Toolbar - C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\Extensions\toolbar_ORJ-V7C@apn.ask.com.xpi [2014-02-25]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-19]

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\pdf.dll No File
CHR Plugin: (Skype Toolbars) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll (Skype Technologies S.A.)
CHR Plugin: (registryAccess) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaangaohdajkgeopjhpbnlpkehbhmbj\7.15.1.0_0\background/registryAccess.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Unity Player) - C:\Users\Acidfree\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
CHR Extension: (No Name) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaangaohdajkgeopjhpbnlpkehbhmbj [2012-09-02]
CHR Extension: (Skype Click to Call) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2011-08-19]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-03-11]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor7.0; E:\Photoshop\PhotoshopElementsFileAgent.exe [169312 2008-09-16] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-03-26] (APN LLC.)
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
R2 lxcz_device; C:\Windows\SysWOW64\lxczcoms.exe [537520 2007-04-19] ( )
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 vosr; C:\Users\Acidfree\AppData\Roaming\VOPackage\VOsrv.exe [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-26] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-03-07] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [9584 2013-03-07] ()
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-26 20:46 - 2014-04-26 21:05 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-04-26 20:44 - 2014-04-26 20:44 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ACIDFREE-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat
2014-04-26 20:43 - 2014-04-26 20:43 - 00000000 ____D () C:\RegBackup
2014-04-26 20:26 - 2014-04-26 20:26 - 00003304 _____ () C:\bootsqm.dat
2014-04-23 04:34 - 2014-04-23 04:34 - 00000000 __SHD () C:\Users\Acidfree\AppData\Local\EmieUserList
2014-04-23 04:34 - 2014-04-23 04:34 - 00000000 __SHD () C:\Users\Acidfree\AppData\Local\EmieSiteList
2014-04-22 22:40 - 2014-04-26 21:24 - 00000000 ____D () C:\Users\Acidfree\Desktop\Reparieren
2014-04-22 22:12 - 2014-04-22 22:12 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-22 22:12 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-22 22:12 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-22 22:12 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-22 22:12 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-22 22:03 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-22 22:03 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-22 22:03 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 22:03 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-22 22:03 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 22:03 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 22:03 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 22:03 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 22:03 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 22:03 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 22:03 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-22 22:03 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 22:03 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 22:03 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 22:03 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 22:03 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 22:03 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 22:03 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 22:03 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 22:03 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 22:03 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 22:03 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 22:03 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 22:03 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 22:03 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 22:03 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 22:03 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 22:03 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 22:03 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 22:03 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 22:03 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 22:03 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 22:03 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 22:03 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 22:03 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 22:03 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 22:03 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 22:03 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 22:03 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 22:03 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 22:03 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 22:03 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 22:03 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 22:03 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 22:03 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 22:03 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 22:03 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 22:03 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-20 13:49 - 2014-04-20 13:49 - 00000000 ____D () C:\Windows\ERUNT
2014-04-20 13:17 - 2014-04-20 13:24 - 00000000 ____D () C:\AdwCleaner
2014-04-19 21:55 - 2014-04-19 21:55 - 423694260 _____ () C:\Windows\MEMORY.DMP
2014-04-19 21:55 - 2014-04-19 21:55 - 00298800 _____ () C:\Windows\Minidump\041914-17659-01.dmp
2014-04-19 21:13 - 2014-04-26 21:24 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-19 21:13 - 2014-04-19 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-19 21:13 - 2014-04-19 21:13 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-19 21:13 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-19 21:13 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-19 21:13 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-19 20:51 - 2014-04-19 20:51 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-18 12:01 - 2014-04-26 21:13 - 00000000 ____D () C:\Users\Acidfree\Documents\PrivacyDr
2014-04-18 12:01 - 2014-04-18 14:47 - 00003368 _____ () C:\Windows\System32\Tasks\PrivacyDr_Splash
2014-04-18 12:01 - 2014-04-18 12:01 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\HistoryCleaner
2014-04-18 11:58 - 2014-04-18 11:58 - 01097384 _____ (AnyProtect.com) C:\Users\Acidfree\AppData\Local\nsvD72C.tmp
2014-04-18 10:11 - 2014-04-18 10:11 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\Evernote
2014-04-18 10:10 - 2014-04-18 10:10 - 00000932 _____ () C:\Users\Acidfree\Desktop\Evernote.lnk
2014-04-18 10:10 - 2014-04-18 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2014-04-18 10:10 - 2014-04-18 10:10 - 00000000 ____D () C:\Program Files (x86)\Evernote
2014-04-18 10:00 - 2014-04-26 21:24 - 00000000 ____D () C:\FRST
2014-04-13 16:51 - 2014-04-26 21:13 - 00000000 ____D () C:\Program Files (x86)\FastMediaConverter
2014-04-13 16:51 - 2014-04-22 22:23 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-04-13 16:51 - 2014-04-13 16:51 - 00001146 _____ () C:\Users\Public\Desktop\Fast Media Converter.lnk
2014-04-13 16:51 - 2014-04-13 16:51 - 00000000 ____D () C:\Users\Acidfree\AppData\Roaming\FastMediaConverter
2014-04-13 16:51 - 2014-04-13 16:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast Media Converter
2014-04-09 07:24 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 07:24 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 07:24 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 07:24 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 07:24 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 07:24 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 07:24 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 07:24 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 07:24 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 07:24 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 07:24 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 07:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 07:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 07:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 07:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 07:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 07:24 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-06 17:19 - 2014-04-06 17:19 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-04-06 17:19 - 2014-04-06 17:19 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-04-06 17:18 - 2014-04-22 22:13 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-06 17:17 - 2014-04-06 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

==================== One Month Modified Files and Folders =======

2014-04-26 21:24 - 2014-04-22 22:40 - 00000000 ____D () C:\Users\Acidfree\Desktop\Reparieren
2014-04-26 21:24 - 2014-04-19 21:13 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-26 21:24 - 2014-04-18 10:00 - 00000000 ____D () C:\FRST
2014-04-26 21:16 - 2009-07-14 06:45 - 00014016 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-26 21:16 - 2009-07-14 06:45 - 00014016 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-26 21:15 - 2011-08-06 20:48 - 01612532 _____ () C:\Windows\WindowsUpdate.log
2014-04-26 21:15 - 2009-07-14 19:58 - 00685570 _____ () C:\Windows\system32\perfh007.dat
2014-04-26 21:15 - 2009-07-14 19:58 - 00145402 _____ () C:\Windows\system32\perfc007.dat
2014-04-26 21:15 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-26 21:13 - 2014-04-18 12:01 - 00000000 ____D () C:\Users\Acidfree\Documents\PrivacyDr
2014-04-26 21:13 - 2014-04-13 16:51 - 00000000 ____D () C:\Program Files (x86)\FastMediaConverter
2014-04-26 21:12 - 2013-02-01 22:32 - 00000000 ____D () C:\Users\Acidfree\AppData\Roaming\Spotify
2014-04-26 21:12 - 2011-08-07 10:03 - 00000000 ____D () C:\Users\Acidfree\AppData\Roaming\ICQ
2014-04-26 21:11 - 2011-09-16 05:04 - 00136963 _____ () C:\Windows\setupact.log
2014-04-26 21:11 - 2011-08-19 21:27 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-26 21:11 - 2011-08-07 08:15 - 00066424 _____ () C:\Users\Acidfree\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-26 21:11 - 2011-08-06 21:24 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-26 21:11 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-26 21:11 - 2009-07-14 06:45 - 00315256 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-26 21:10 - 2011-10-21 08:26 - 00320312 _____ () C:\Windows\PFRO.log
2014-04-26 21:06 - 2012-11-02 09:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-26 21:05 - 2014-04-26 20:46 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-04-26 21:04 - 2009-07-14 04:34 - 00000439 _____ () C:\Windows\win.ini
2014-04-26 20:44 - 2014-04-26 20:44 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ACIDFREE-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat
2014-04-26 20:43 - 2014-04-26 20:43 - 00000000 ____D () C:\RegBackup
2014-04-26 20:26 - 2014-04-26 20:26 - 00003304 _____ () C:\bootsqm.dat
2014-04-26 17:27 - 2011-08-19 21:27 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-24 17:29 - 2013-05-23 19:02 - 00000000 ____D () C:\Windows\rescache
2014-04-23 04:34 - 2014-04-23 04:34 - 00000000 __SHD () C:\Users\Acidfree\AppData\Local\EmieUserList
2014-04-23 04:34 - 2014-04-23 04:34 - 00000000 __SHD () C:\Users\Acidfree\AppData\Local\EmieSiteList
2014-04-22 22:23 - 2014-04-13 16:51 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-04-22 22:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-04-22 22:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 22:13 - 2014-04-06 17:18 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-22 22:12 - 2014-04-22 22:12 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-22 22:12 - 2011-08-17 16:40 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-22 17:40 - 2013-02-01 22:33 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\Spotify
2014-04-20 13:49 - 2014-04-20 13:49 - 00000000 ____D () C:\Windows\ERUNT
2014-04-20 13:24 - 2014-04-20 13:17 - 00000000 ____D () C:\AdwCleaner
2014-04-20 13:23 - 2011-08-07 10:03 - 00000000 ____D () C:\ProgramData\ICQ
2014-04-19 22:47 - 2011-08-07 08:15 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-04-19 22:40 - 2011-08-06 21:29 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-04-19 21:55 - 2014-04-19 21:55 - 423694260 _____ () C:\Windows\MEMORY.DMP
2014-04-19 21:55 - 2014-04-19 21:55 - 00298800 _____ () C:\Windows\Minidump\041914-17659-01.dmp
2014-04-19 21:55 - 2011-08-08 06:57 - 00000000 ____D () C:\Windows\Minidump
2014-04-19 21:13 - 2014-04-19 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-19 21:13 - 2014-04-19 21:13 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-19 21:13 - 2012-09-03 16:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-19 21:11 - 2011-08-06 21:34 - 00001164 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-19 21:11 - 2011-08-06 21:34 - 00001152 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-19 21:11 - 2011-08-06 21:03 - 00001435 _____ () C:\Users\Acidfree\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-19 20:51 - 2014-04-19 20:51 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-18 14:47 - 2014-04-18 12:01 - 00003368 _____ () C:\Windows\System32\Tasks\PrivacyDr_Splash
2014-04-18 12:01 - 2014-04-18 12:01 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\HistoryCleaner
2014-04-18 11:58 - 2014-04-18 11:58 - 01097384 _____ (AnyProtect.com) C:\Users\Acidfree\AppData\Local\nsvD72C.tmp
2014-04-18 10:12 - 2011-08-06 21:03 - 00000000 ___RD () C:\Users\Acidfree\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-18 10:11 - 2014-04-18 10:11 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\Evernote
2014-04-18 10:10 - 2014-04-18 10:10 - 00000932 _____ () C:\Users\Acidfree\Desktop\Evernote.lnk
2014-04-18 10:10 - 2014-04-18 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2014-04-18 10:10 - 2014-04-18 10:10 - 00000000 ____D () C:\Program Files (x86)\Evernote
2014-04-14 20:13 - 2014-04-22 22:12 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-14 20:05 - 2014-04-22 22:12 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-14 20:05 - 2014-04-22 22:12 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-14 20:04 - 2014-04-22 22:12 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-14 04:21 - 2012-11-02 09:07 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-14 04:21 - 2012-10-03 13:28 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-14 04:21 - 2011-08-22 10:13 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\Adobe
2014-04-14 04:21 - 2011-08-07 08:14 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-13 16:51 - 2014-04-13 16:51 - 00001146 _____ () C:\Users\Public\Desktop\Fast Media Converter.lnk
2014-04-13 16:51 - 2014-04-13 16:51 - 00000000 ____D () C:\Users\Acidfree\AppData\Roaming\FastMediaConverter
2014-04-13 16:51 - 2014-04-13 16:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast Media Converter
2014-04-13 16:51 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-13 16:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-04-10 03:02 - 2013-07-24 21:34 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 03:01 - 2011-12-12 08:37 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-06 17:19 - 2014-04-06 17:19 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-04-06 17:19 - 2014-04-06 17:19 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-04-06 17:17 - 2014-04-06 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-03 09:51 - 2014-04-19 21:13 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-19 21:13 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-19 21:13 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-31 18:50 - 2013-12-18 19:25 - 00000202 _____ () C:\Users\Acidfree\AppData\Roaming\WB.CFG

Some content of TEMP:
====================
C:\Users\Acidfree\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-20 14:48

==================== End Of Log ============================
--- --- ---

--- --- ---


Zitat:
Farbar Service Scanner Version: 25-02-2014
Ran by Acidfree (administrator) on 26-04-2014 at 21:26:49
Running from "C:\Users\Acidfree\Desktop\Reparieren"
Microsoft Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to retrieve start type of WinDefend. The value does not exist.
Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of WinDefend. The value does not exist.
Unable to retrieve ServiceDll of WinDefend. The value does not exist.


Other Services:
==============
Checking Start type iphlpsvc: ATTENTION!=====> Unable to retrieve start type of iphlpsvc. The value does not exist.
Checking ImagePath of iphlpsvc: ATTENTION!=====> Unable to retrieve ImagePath of iphlpsvc. The value does not exist.
Checking ServiceDll of iphlpsvc: ATTENTION!=====> Unable to retrieve ServiceDll of iphlpsvc. The value does not exist.


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****
Noch einen schönen Abend,
Emmaline

schrauber 27.04.2014 18:38
http://download.bleepingcomputer.com...7/iphlpsvc.reg
http://download.bleepingcomputer.com.../WinDefend.reg

Beide Dateien auf dem Desktop speichern und ausführen, erlauben. Rechner neu starten und frisches FSS log bitte.

Emmaline 27.04.2014 20:37
Hier das

FSS
Zitat:
Farbar Service Scanner Version: 25-02-2014
Ran by Acidfree (administrator) on 27-04-2014 at 21:35:21
Running from "C:\Users\Acidfree\Desktop\Reparieren"
Microsoft Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv: "C:\Windows\system32\wuaueng.dll".


Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****
Schöne neue Woche
Emmaline

schrauber 28.04.2014 09:01
http://download.bleepingcomputer.com...s/7/wscsvc.reg
http://download.bleepingcomputer.com...7/wuauserv.reg

Gleiche Spiel mit diesen beiden nochmal bitte.

Emmaline 28.04.2014 20:51
Bitteschön :-)

Zitat:
Farbar Service Scanner Version: 25-02-2014
Ran by Acidfree (administrator) on 28-04-2014 at 21:49:49
Running from "C:\Users\Acidfree\Desktop\Reparieren"
Microsoft Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****
Was nu?

Liebe Grüße
Emmaline

schrauber 29.04.2014 19:30
Besser :)

Noch Probleme?

Emmaline 29.04.2014 20:13
Ich hab ein Problem mit Java.

Ich habe auf der offiziellen Seite das aktuelle runtergeladen. Wenn ich das installiere sagt der "ist schon vorhanden". Das ist Version 7.55. Wenn ich jetzt aber bei mir schaue, dann habe ich Version 7.10. Eine ähnliche Info bekomme ich, wenn ich mir von der Trojana Board Seite anzeigen lasse was bei mir aktuell ist oder auch nicht. Da steht das mein Java entweder nicht installiert ist oder nicht aktuell.

Jetzt habe ich es gerade noch mal versucht und jetzt war irgendeine Datei "corrupt".

Sorry, dachte auch ich wäre mit dem PC durch.

Liebe Grüße
Emmaline

schrauber 30.04.2014 23:41
Deinstalliere mal alles an JAva und versuche dann Java neu zu installieren.

Emmaline 03.05.2014 20:20
So Java ist neu installiert und geht wieder. Etwas langsamer ist der PC geworden. Kann das an den Änderungen liegen? Was soll ich jetzt machen?

Liebe Grüsse
Emmaline

schrauber 04.05.2014 07:53
Wann genau langsam? Poste mal ein frisches FRST log.

Emmaline 04.05.2014 11:54
Also er braucht länger beim Hochfahren und an sich hat man das Gefühl, dass er langsamer ist. Ebenso läßt sih das cd Laufwerk nicht öffnen und es scheint immer was zu suchen. Es öffnen sich keine Fenster oder so, aber man hört immer was.


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by Acidfree (administrator) on ACIDFREE-PC on 04-05-2014 12:53:37
Running from C:\Users\Acidfree\Desktop\Reparieren
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems Incorporated) E:\Photoshop\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
( ) C:\Windows\System32\lxczcoms.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Spotify Ltd) C:\Users\Acidfree\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Program Files (x86)\FastMediaConverter\FastMediaConverterApp.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Nullsoft, Inc.) D:\Winamp\winampa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [WinampAgent] => D:\Winamp\winampa.exe [74752 2011-07-11] (Nullsoft, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\Run: [ICQ] => D:\ICQ7.5\ICQ.exe [124480 2011-08-01] (ICQ, LLC.)
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\Run: [Spotify Web Helper] => C:\Users\Acidfree\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171000 2014-04-11] (Spotify Ltd)
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\Run: [Spotify] => C:\Users\Acidfree\AppData\Roaming\Spotify\Spotify.exe [6087224 2014-04-11] (Spotify Ltd)
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\Run: [PrivacyDr] => C:\Program Files (x86)\Privacy Dr\PrivacyDr.exe
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\MountPoints2: {237ce8bd-cee5-11e0-b0cf-00242178af47} - J:\Startme.exe
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\MountPoints2: {2518b13b-372c-11e2-87e8-00242178af47} - G:\pushinst.exe
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\MountPoints2: {5738becf-f4ff-11e1-8895-806e6f6e6963} - explorer index_GB.html
HKU\S-1-5-21-4292617380-400896395-2015133285-1000\...\MountPoints2: {afbc22a3-b183-11e1-b4a9-00242178af47} - G:\Setup.exe
Startup: C:\Users\Acidfree\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Acidfree\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FastMediaConverter.lnk
ShortcutTarget: FastMediaConverter.lnk -> C:\Program Files (x86)\FastMediaConverter\FastMediaConverterApp.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x449DEC206E54CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: ICQ Sparberater - {5A0D6E4B-B0DF-4148-8B1E-F7A430FF5E24} - C:\Program Files (x86)\icq\Internet Explorer\icq.dll (solute gmbh)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: ICQ Search
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: ICQ Search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-26.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-27.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-28.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-29.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\icqplugin-30.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Evernote Web Clipper - C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2013-12-19]
FF Extension: DivX Web Player - C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\Extensions\DivXWebPlayer@divx.com.xpi [2012-03-01]
FF Extension: GMX MailCheck - C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\Extensions\toolbar@gmx.net.xpi [2012-05-04]
FF Extension: Ask Toolbar - C:\Users\Acidfree\AppData\Roaming\Mozilla\Firefox\Profiles\bag98wu8.default\Extensions\toolbar_ORJ-V7C@apn.ask.com.xpi [2014-02-25]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-19]

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\pdf.dll No File
CHR Plugin: (Skype Toolbars) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll (Skype Technologies S.A.)
CHR Plugin: (registryAccess) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaangaohdajkgeopjhpbnlpkehbhmbj\7.15.1.0_0\background/registryAccess.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Unity Player) - C:\Users\Acidfree\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
CHR Extension: (No Name) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaangaohdajkgeopjhpbnlpkehbhmbj [2012-09-02]
CHR Extension: (Skype Click to Call) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2011-08-19]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Acidfree\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-03-11]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor7.0; E:\Photoshop\PhotoshopElementsFileAgent.exe [169312 2008-09-16] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-03-26] (APN LLC.)
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
R2 lxcz_device; C:\Windows\SysWOW64\lxczcoms.exe [537520 2007-04-19] ( )
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 vosr; C:\Users\Acidfree\AppData\Roaming\VOPackage\VOsrv.exe [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-03-07] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [9584 2013-03-07] ()
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-03 03:01 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-03 03:01 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-03 03:01 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-03 03:01 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 13:21 - 2014-05-01 13:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 13:21 - 2014-05-01 13:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 13:21 - 2014-05-01 13:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 13:21 - 2014-05-01 13:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 13:21 - 2014-05-01 13:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 13:21 - 2014-05-01 13:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-26 20:46 - 2014-04-26 21:05 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-04-26 20:44 - 2014-04-26 20:44 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ACIDFREE-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat
2014-04-26 20:43 - 2014-04-26 20:43 - 00000000 ____D () C:\RegBackup
2014-04-23 04:34 - 2014-04-23 04:34 - 00000000 __SHD () C:\Users\Acidfree\AppData\Local\EmieUserList
2014-04-23 04:34 - 2014-04-23 04:34 - 00000000 __SHD () C:\Users\Acidfree\AppData\Local\EmieSiteList
2014-04-22 22:40 - 2014-05-04 12:53 - 00000000 ____D () C:\Users\Acidfree\Desktop\Reparieren
2014-04-22 22:12 - 2014-04-22 22:12 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-22 22:03 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 22:03 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 22:03 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 22:03 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 22:03 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 22:03 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 22:03 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 22:03 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 22:03 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 22:03 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 22:03 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 22:03 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 22:03 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 22:03 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 22:03 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 22:03 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 22:03 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 22:03 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 22:03 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 22:03 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 22:03 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 22:03 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 22:03 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 22:03 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 22:03 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 22:03 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 22:03 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 22:03 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 22:03 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 22:03 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 22:03 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 22:03 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 22:03 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 22:03 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 22:03 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 22:03 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 22:03 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 22:03 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 22:03 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 22:03 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 22:03 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 22:03 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 22:03 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 22:03 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-20 13:49 - 2014-04-20 13:49 - 00000000 ____D () C:\Windows\ERUNT
2014-04-20 13:17 - 2014-04-20 13:24 - 00000000 ____D () C:\AdwCleaner
2014-04-19 21:55 - 2014-04-19 21:55 - 423694260 _____ () C:\Windows\MEMORY.DMP
2014-04-19 21:55 - 2014-04-19 21:55 - 00298800 _____ () C:\Windows\Minidump\041914-17659-01.dmp
2014-04-19 21:13 - 2014-05-03 12:15 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-19 21:13 - 2014-04-19 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-19 21:13 - 2014-04-19 21:13 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-19 21:13 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-19 21:13 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-19 21:13 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-19 20:51 - 2014-04-19 20:51 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-18 12:01 - 2014-04-26 21:13 - 00000000 ____D () C:\Users\Acidfree\Documents\PrivacyDr
2014-04-18 12:01 - 2014-04-18 14:47 - 00003368 _____ () C:\Windows\System32\Tasks\PrivacyDr_Splash
2014-04-18 12:01 - 2014-04-18 12:01 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\HistoryCleaner
2014-04-18 11:58 - 2014-04-18 11:58 - 01097384 _____ (AnyProtect.com) C:\Users\Acidfree\AppData\Local\nsvD72C.tmp
2014-04-18 10:11 - 2014-04-18 10:11 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\Evernote
2014-04-18 10:10 - 2014-04-18 10:10 - 00000932 _____ () C:\Users\Acidfree\Desktop\Evernote.lnk
2014-04-18 10:10 - 2014-04-18 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2014-04-18 10:10 - 2014-04-18 10:10 - 00000000 ____D () C:\Program Files (x86)\Evernote
2014-04-18 10:00 - 2014-05-04 12:53 - 00000000 ____D () C:\FRST
2014-04-13 16:51 - 2014-05-04 12:51 - 00000000 ____D () C:\Program Files (x86)\FastMediaConverter
2014-04-13 16:51 - 2014-04-22 22:23 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-04-13 16:51 - 2014-04-13 16:51 - 00001146 _____ () C:\Users\Public\Desktop\Fast Media Converter.lnk
2014-04-13 16:51 - 2014-04-13 16:51 - 00000000 ____D () C:\Users\Acidfree\AppData\Roaming\FastMediaConverter
2014-04-13 16:51 - 2014-04-13 16:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast Media Converter
2014-04-09 07:24 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 07:24 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 07:24 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 07:24 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 07:24 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 07:24 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 07:24 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 07:24 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 07:24 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 07:24 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 07:24 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 07:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 07:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 07:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 07:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 07:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 07:24 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-06 17:19 - 2014-04-06 17:19 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-04-06 17:19 - 2014-04-06 17:19 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-04-06 17:18 - 2014-05-01 13:23 - 00000000 ____D () C:\ProgramData\Oracle

==================== One Month Modified Files and Folders =======

2014-05-04 12:53 - 2014-04-22 22:40 - 00000000 ____D () C:\Users\Acidfree\Desktop\Reparieren
2014-05-04 12:53 - 2014-04-18 10:00 - 00000000 ____D () C:\FRST
2014-05-04 12:51 - 2014-04-13 16:51 - 00000000 ____D () C:\Program Files (x86)\FastMediaConverter
2014-05-04 12:39 - 2009-07-14 06:45 - 00014016 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-04 12:39 - 2009-07-14 06:45 - 00014016 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-04 12:38 - 2009-07-14 19:58 - 00685570 _____ () C:\Windows\system32\perfh007.dat
2014-05-04 12:38 - 2009-07-14 19:58 - 00145402 _____ () C:\Windows\system32\perfc007.dat
2014-05-04 12:38 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-04 12:36 - 2011-08-07 10:03 - 00000000 ____D () C:\Users\Acidfree\AppData\Roaming\ICQ
2014-05-04 12:35 - 2013-02-01 22:32 - 00000000 ____D () C:\Users\Acidfree\AppData\Roaming\Spotify
2014-05-04 12:34 - 2011-09-16 05:04 - 00137803 _____ () C:\Windows\setupact.log
2014-05-04 12:34 - 2011-08-19 21:27 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-04 12:34 - 2011-08-06 21:24 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-04 12:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-03 13:27 - 2011-08-19 21:27 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-03 13:27 - 2011-08-06 20:48 - 02071905 _____ () C:\Windows\WindowsUpdate.log
2014-05-03 13:06 - 2012-11-02 09:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-03 12:15 - 2014-04-19 21:13 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-01 13:23 - 2014-04-06 17:18 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-01 13:21 - 2014-05-01 13:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 13:21 - 2014-05-01 13:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 13:21 - 2014-05-01 13:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 13:21 - 2014-05-01 13:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 13:21 - 2014-05-01 13:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 13:21 - 2014-05-01 13:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-29 20:06 - 2012-11-02 09:07 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 20:06 - 2012-10-03 13:28 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 20:06 - 2011-08-07 08:14 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 16:01 - 2014-05-03 03:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-03 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-03 03:01 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-03 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-28 15:44 - 2013-02-01 22:33 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\Spotify
2014-04-26 21:13 - 2014-04-18 12:01 - 00000000 ____D () C:\Users\Acidfree\Documents\PrivacyDr
2014-04-26 21:11 - 2011-08-07 08:15 - 00066424 _____ () C:\Users\Acidfree\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-26 21:11 - 2009-07-14 06:45 - 00315256 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-26 21:10 - 2011-10-21 08:26 - 00320312 _____ () C:\Windows\PFRO.log
2014-04-26 21:05 - 2014-04-26 20:46 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-04-26 21:04 - 2009-07-14 04:34 - 00000439 _____ () C:\Windows\win.ini
2014-04-26 20:44 - 2014-04-26 20:44 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ACIDFREE-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat
2014-04-26 20:43 - 2014-04-26 20:43 - 00000000 ____D () C:\RegBackup
2014-04-24 17:29 - 2013-05-23 19:02 - 00000000 ____D () C:\Windows\rescache
2014-04-23 04:34 - 2014-04-23 04:34 - 00000000 __SHD () C:\Users\Acidfree\AppData\Local\EmieUserList
2014-04-23 04:34 - 2014-04-23 04:34 - 00000000 __SHD () C:\Users\Acidfree\AppData\Local\EmieSiteList
2014-04-22 22:23 - 2014-04-13 16:51 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-04-22 22:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-04-22 22:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 22:12 - 2014-04-22 22:12 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-20 13:49 - 2014-04-20 13:49 - 00000000 ____D () C:\Windows\ERUNT
2014-04-20 13:24 - 2014-04-20 13:17 - 00000000 ____D () C:\AdwCleaner
2014-04-20 13:23 - 2011-08-07 10:03 - 00000000 ____D () C:\ProgramData\ICQ
2014-04-19 22:47 - 2011-08-07 08:15 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-04-19 22:40 - 2011-08-06 21:29 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-04-19 21:55 - 2014-04-19 21:55 - 423694260 _____ () C:\Windows\MEMORY.DMP
2014-04-19 21:55 - 2014-04-19 21:55 - 00298800 _____ () C:\Windows\Minidump\041914-17659-01.dmp
2014-04-19 21:55 - 2011-08-08 06:57 - 00000000 ____D () C:\Windows\Minidump
2014-04-19 21:13 - 2014-04-19 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-19 21:13 - 2014-04-19 21:13 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-19 21:13 - 2012-09-03 16:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-19 21:11 - 2011-08-06 21:34 - 00001164 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-19 21:11 - 2011-08-06 21:34 - 00001152 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-19 21:11 - 2011-08-06 21:03 - 00001435 _____ () C:\Users\Acidfree\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-19 20:51 - 2014-04-19 20:51 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-18 14:47 - 2014-04-18 12:01 - 00003368 _____ () C:\Windows\System32\Tasks\PrivacyDr_Splash
2014-04-18 12:01 - 2014-04-18 12:01 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\HistoryCleaner
2014-04-18 11:58 - 2014-04-18 11:58 - 01097384 _____ (AnyProtect.com) C:\Users\Acidfree\AppData\Local\nsvD72C.tmp
2014-04-18 10:12 - 2011-08-06 21:03 - 00000000 ___RD () C:\Users\Acidfree\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-18 10:11 - 2014-04-18 10:11 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\Evernote
2014-04-18 10:10 - 2014-04-18 10:10 - 00000932 _____ () C:\Users\Acidfree\Desktop\Evernote.lnk
2014-04-18 10:10 - 2014-04-18 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2014-04-18 10:10 - 2014-04-18 10:10 - 00000000 ____D () C:\Program Files (x86)\Evernote
2014-04-14 04:21 - 2011-08-22 10:13 - 00000000 ____D () C:\Users\Acidfree\AppData\Local\Adobe
2014-04-13 16:51 - 2014-04-13 16:51 - 00001146 _____ () C:\Users\Public\Desktop\Fast Media Converter.lnk
2014-04-13 16:51 - 2014-04-13 16:51 - 00000000 ____D () C:\Users\Acidfree\AppData\Roaming\FastMediaConverter
2014-04-13 16:51 - 2014-04-13 16:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast Media Converter
2014-04-13 16:51 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-13 16:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-04-10 03:02 - 2013-07-24 21:34 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 03:01 - 2011-12-12 08:37 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-06 17:19 - 2014-04-06 17:19 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-04-06 17:19 - 2014-04-06 17:19 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork

Some content of TEMP:
====================
C:\Users\Acidfree\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 16:32

==================== End Of Log ============================
--- --- ---


Danke

schrauber 04.05.2014 19:57
Lade dir mal den Ccleaner, Temps bereinigen, Autostart alles deaktivieren bis auf AV PRogramm und Sachen vom Hersteller des Rechners, alles raus was nit unbedingt im Autostart sein muss.


Alle Zeitangaben in WEZ +1. Es ist jetzt 07:20 Uhr.
Seite 2 von 4 1 2 34
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131