| Rapunzel | 06.06.2014 07:10 |
Ich hätte gestern noch mehr geschrieben aber die paar Zeilen haben ne halbe Stunde gedauert.
Also Avast hat was gefunden gleich am 1 und 2.6. allerdings krieg ich die Funde hier nicht kopiert. Gibt es da bei Avast einen Trick? Er hat Silverlight.exe gefunden als Bedrohung:WIN32:Adware-BQN [Trj]
Am 2.6. hab ich dann einen Startzeitscan durchgeführt, da hat er gefunden:
C:\Users \Porstendörfer\Desktop\Sicherheit\Silverlight.exe Bedrohung:WIN32:Adware-BQN [Trj]
C:\Users\Porstendörfer\App Data\Local...\iminent4ie.exe PUP:Win32:Pup.gen [PUP]
C:\Program Files (x86)\Canon\IJPLM\setup.exe Bedrohung: Win32:Maleware-gen
Wenn du mir sagst wie ich das Logfile finde und kopieren kann poste ich das gerne auch noch.
Malewarebytes Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 04.06.2014
Suchlauf-Zeit: 10:43:58
Logdatei:
Administrator: Ja
Version: 2.00.2.1012
Malware Datenbank: v2014.06.04.04
Rootkit Datenbank: v2014.06.02.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Porstendörfer
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 324796
Verstrichene Zeit: 15 Min, 18 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Warnen
PUM: Aktiviert
Prozesse: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registrierungsschlüssel: 23
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [7cf8215383f8e94d25c85b12cb370af6],
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [7cf8215383f8e94d25c85b12cb370af6],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, In Quarantäne, [a9cb5024e299bc7a18428edf7b8710f0],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, In Quarantäne, [a9cb5024e299bc7a18428edf7b8710f0],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, In Quarantäne, [cba9f1836b1064d252e108660ff325db],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [ec88f084f883f3431e16f47ab0521ce4],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [92e2571d403b0d290dbb1d50659db848],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, In Quarantäne, [cca887edf883e84eb600c2f3c042f50b],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\suprasavings, In Quarantäne, [6e0603712655fd396b18604613ef11ef],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent, In Quarantäne, [1064096b0f6c112561964f90e51e23dd],
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, In Quarantäne, [3440066e651691a535686a2cd42e7888],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [fd778fe51b601d1946707f366a987789],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent, In Quarantäne, [a9cbef85e596a690df18d70837cc9b65],
PUP.Optional.HQVideoPro.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQ-Video-Pro-1.9, In Quarantäne, [a6cec3b1c1ba4de9283bf0bcdc26619f],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, In Quarantäne, [9ed6f282a6d5ec4ad64d28a4b251ed13],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, In Quarantäne, [92e26d07ccafeb4bc1e5854523e038c8],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, In Quarantäne, [8ee6f2821c5f072f3a6b735732d159a7],
PUP.Optional.Delta.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\delta LTD, In Quarantäne, [83f1abc92754b185c599f6d615eef20e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [ec88d1a37605989e192bb42b8a792cd4],
PUP.Optional.SupraSavings.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\suprasavings, In Quarantäne, [8ee61c58413a1a1cb6cf5551f30fa35d],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [a4d0b2c2413a1e188e3cae1c2cd7f30d],
PUP.Optional.Softonic.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, In Quarantäne, [591b571d6d0ea096cd90485b4ab8a55b],
PUP.Optional.HDVidCodec.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\1ClickDownload, In Quarantäne, [4f2594e0eb901323322d5230768c7888],
Registrierungswerte: 4
PUP.Optional.Iminent.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [92e2571d403b0d290dbb1d50659db848],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [cca8f48065161d198e3a313c7c8658a8],
PUP.Optional.BrowserProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|bProtectTabs, hxxp://www1.delta-search.com/?affID=119779&tt=gc_&babsrc=NT_ss&mntrId=988E18F46A0C1408, In Quarantäne, [40344a2abfbc67cfb46a19b52ed515eb]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1923626264-2341716953-3562644547-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, tCyC1K1M0V, In Quarantäne, [a4d0b2c2413a1e188e3cae1c2cd7f30d]
Registrierungsdaten: 0
(No malicious items detected)
Ordner: 13
PUP.Optional.HDVidCodec.A, C:\Users\Porstendörfer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com, In Quarantäne, [81f3fc78cbb02115634ed4f7f70ceb15],
PUP.Optional.Gophoto.A, C:\Program Files (x86)\Gophoto.it, In Quarantäne, [13619bd93b4026105e26ebe4de252cd4],
PUP.Optional.Iminent.A, C:\Users\Porstendörfer\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl, In Quarantäne, [abc9b4c03e3dea4ce6e3c5bba95922de],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar, In Quarantäne, [7bf9a3d14635b97da5419ae68f736997],
PUP.Optional.Iminent.A, C:\Users\Porstendörfer\AppData\Local\temp\Iminent, In Quarantäne, [da9a3c380a715bdb59af68197f83b14f],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com, In Quarantäne, [4f2594e0eb901323322d5230768c7888],
PUP.Optional.Iminent.A, C:\Users\Porstendörfer\AppData\Roaming\IminentToolbar, In Quarantäne, [5f15e68e06754ee8f6c1d4ae07fb8779],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\html, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\images, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\js, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.SimilarSites.A, C:\Users\Porstendörfer\AppData\Roaming\SimilarSites, In Quarantäne, [0c68fc78146765d186657810bc4647b9],
Dateien: 32
PUP.Optional.GenericExt.A, C:\Users\Porstendörfer\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\minibarchrome.exe, In Quarantäne, [e98bb6be631839fd58df4df03ac610f0],
PUP.Optional.SimilarSites.A, C:\Users\Porstendörfer\AppData\Local\temp\SimilarBundleGenericDl.exe, In Quarantäne, [d69e165edf9c80b61d291e1f4db33fc1],
PUP.Optional.ToolBarInstaller.A, C:\Users\Porstendörfer\AppData\Local\temp\BuenoSearchTB.exe, In Quarantäne, [4f25f57f3f3cdb5bd58d2316b74d02fe],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\temp\n1089\hqvideo_2305_DE-ae66e49a.exe, In Quarantäne, [6c08a9cba7d4e74fcf42e561fa0645bb],
PUP.Optional.Iminent.A, C:\Users\Porstendörfer\AppData\Local\temp\n1089\Iminent_1712-b2fcad5e.exe, In Quarantäne, [6014b6be3a4170c6348568dd1fe2eb15],
PUP.Optional.BundleInstaller.A, C:\Users\Porstendörfer\AppData\Local\temp\n1089\s1089.exe, In Quarantäne, [5f153a3a39424ee81456c97df60a768a],
PUP.Optional.SupraSavings.A, C:\Users\Porstendörfer\AppData\Local\temp\n1089\suprasavings_2703-e3e04064.exe, In Quarantäne, [da9adb9981fa44f2e791a787bc46768a],
PUP.Optional.Softonic.A, C:\Users\Porstendörfer\Downloads\SoftonicDownloader_fuer_tomtom-home.exe, In Quarantäne, [13615f151e5df640f1d3b46d639ee818],
PUP.Optional.Vid, C:\Users\Porstendörfer\Downloads\iLividSetup-r394-n-bf.exe, In Quarantäne, [e094f084bbc0a690045b7c8e4cb511ef],
PUP.Optional.RegCleanerPro, C:\Users\Porstendörfer\Downloads\rcpsetup_matomy_my77231.exe, In Quarantäne, [7bf9e193ccaf85b1dbc4040848b94cb4],
PUP.Optional.Iminent.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, In Quarantäne, [353f462ea1dad85e901fa5f8a26052ae],
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, In Quarantäne, [ea8a52220a7136009119199526dcc937],
PUP.Optional.HDVidCodec.A, C:\Users\Porstendörfer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\HDVidCodec.lnk, In Quarantäne, [81f3fc78cbb02115634ed4f7f70ceb15],
PUP.Optional.HDVidCodec.A, C:\Users\Porstendörfer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\Uninstall.lnk, In Quarantäne, [81f3fc78cbb02115634ed4f7f70ceb15],
PUP.Optional.Gophoto.A, C:\Program Files (x86)\Gophoto.it\gophotoit14.crx, In Quarantäne, [13619bd93b4026105e26ebe4de252cd4],
PUP.Optional.Iminent.A, C:\Users\Porstendörfer\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\empty.localstorage, In Quarantäne, [abc9b4c03e3dea4ce6e3c5bba95922de],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\b.bmp, In Quarantäne, [4f2594e0eb901323322d5230768c7888],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\finish.bmp, In Quarantäne, [4f2594e0eb901323322d5230768c7888],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\FinishHDVID.exe, In Quarantäne, [4f2594e0eb901323322d5230768c7888],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\HDVidCodec.exe, In Quarantäne, [4f2594e0eb901323322d5230768c7888],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\HDvidCodec10.crx, In Quarantäne, [4f2594e0eb901323322d5230768c7888],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\hdvid_temp.bmp, In Quarantäne, [4f2594e0eb901323322d5230768c7888],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\uninst.exe, In Quarantäne, [4f2594e0eb901323322d5230768c7888],
PUP.Optional.Iminent.A, C:\Users\Porstendörfer\AppData\Roaming\IminentToolbar\sqlite3.dll, In Quarantäne, [5f15e68e06754ee8f6c1d4ae07fb8779],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\manifest.json, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\html\background.html, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\images\icon.128.png, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\images\icon.16.png, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\images\icon.48.png, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\js\background.js, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\js\ex.js, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
PUP.Optional.CrossRider.A, C:\Users\Porstendörfer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.1_0\js\jquery.js, In Quarantäne, [4d27d89c3d3e96a03694622336cc768a],
Physische Sektoren: 0
(No malicious items detected)
(end)
Und das hier ist das letzte Schutzprotokoll von Mailwarebytes: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Protection, 06.06.2014 07:17:48, SYSTEM, ANDREAS, Protection, Malware Protection, Starting,
Protection, 06.06.2014 07:17:48, SYSTEM, ANDREAS, Protection, Malware Protection, Started,
Protection, 06.06.2014 07:17:49, SYSTEM, ANDREAS, Protection, Malicious Website Protection, Starting,
Update, 06.06.2014 07:17:56, SYSTEM, ANDREAS, Scheduler, Malware Database, 2014.6.5.12, 2014.6.6.3,
Protection, 06.06.2014 07:18:01, SYSTEM, ANDREAS, Protection, Malicious Website Protection, Started,
Protection, 06.06.2014 07:18:09, SYSTEM, ANDREAS, Protection, Refresh, Starting,
Protection, 06.06.2014 07:18:09, SYSTEM, ANDREAS, Protection, Malicious Website Protection, Stopping,
Protection, 06.06.2014 07:18:09, SYSTEM, ANDREAS, Protection, Malicious Website Protection, Stopped,
Protection, 06.06.2014 07:18:19, SYSTEM, ANDREAS, Protection, Refresh, Success,
Protection, 06.06.2014 07:18:19, SYSTEM, ANDREAS, Protection, Malicious Website Protection, Starting,
Protection, 06.06.2014 07:18:20, SYSTEM, ANDREAS, Protection, Malicious Website Protection, Started,
(end)
Dann haben wir noch Eset: Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=40827b6ac8dffd42a5134a1665ecef3f
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-04-27 11:54:01
# local_time=2012-04-28 01:54:01 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5121 16777214 0 3 107580 107580 0 0
# compatibility_mode=5893 16776574 100 94 26138993 87196255 0 0
# compatibility_mode=8192 67108863 100 0 437 437 0 0
# scanned=216446
# found=0
# cleaned=0
# scan_time=4604
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=40827b6ac8dffd42a5134a1665ecef3f
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-04-28 12:21:55
# local_time=2012-04-28 02:21:55 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=5121 16777214 0 3 113631 113631 0 0
# compatibility_mode=5893 16776574 100 94 26145044 87202306 0 0
# compatibility_mode=8192 67108863 100 0 6488 6488 0 0
# scanned=535
# found=0
# cleaned=0
# scan_time=79
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=40827b6ac8dffd42a5134a1665ecef3f
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-09-26 09:54:52
# local_time=2012-09-26 11:54:52 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=5893 16776574 100 94 39221922 100279184 0 0
# compatibility_mode=8192 67108863 100 0 13083366 13083366 0 0
# scanned=103131
# found=1
# cleaned=0
# scan_time=4126
C:\Users\Porstendörfer\AppData\Local\temp\SetupDataMngr_Searchqu.exe multiple threats (unable to clean) 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=40827b6ac8dffd42a5134a1665ecef3f
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-09-26 04:12:00
# local_time=2012-09-26 06:12:00 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=5893 16776574 100 94 39248508 100305770 0 0
# compatibility_mode=8192 67108863 100 0 13109952 13109952 0 0
# scanned=22
# found=0
# cleaned=0
# scan_time=11
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=40827b6ac8dffd42a5134a1665ecef3f
# engine=18558
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-05 04:06:15
# local_time=2014-06-05 06:06:15 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=782 16777213 100 97 288550 166361665 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 92513763 153571025 0 0
# scanned=221874
# found=7
# cleaned=5
# scan_time=31412
sh=3972109B1974BEA7EAA2CFCAF92269548E9C2E72 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\43WFD7JQ\monetizationLoader[1].js"
sh=710CDC0F01EB25B609E4355FAB810E25344CA26C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AE9X83S7\monetizationLoader[1].js"
sh=9B65A06B630598916A1574E7A16201AAF04B430D ft=1 fh=afff72e543a80d66 vn="Win32/InstallCore.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\FLVPlayer\FLVPlayer.exe"
sh=52F11DD8D8841DC6518E0509E7993B99F9BCA9C6 ft=1 fh=af07e7ddbff033f0 vn="a variant of Win32/InstallCore.D potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\FLVPlayer\Uninstall\Uninstall.exe"
sh=710CDC0F01EB25B609E4355FAB810E25344CA26C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\Porstendörfer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3213CFO\monetizationLoader[1].js"
sh=3972109B1974BEA7EAA2CFCAF92269548E9C2E72 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\43WFD7JQ\monetizationLoader[1].js"
sh=710CDC0F01EB25B609E4355FAB810E25344CA26C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AE9X83S7\monetizationLoader[1].js"
Farbars mach ich gleich und poste es dann. Danke schon mal!
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Porstendörfer (administrator) on ANDREAS on 06-06-2014 08:04:18
Running from C:\Users\Porstendörfer\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
() C:\Windows\PLFSetI.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(The Nielsen Company) C:\Program Files (x86)\NetRatingsNetSight\NetSight\NielsenUpdate.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
() C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.EXE
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(The Nielsen Company) C:\Program Files (x86)\NetRatingsNetSight\NetSight\NielsenOnline.exe
(The Nielsen Company) C:\Program Files (x86)\NetRatingsNetSight\NetSight\NielsenOnline.exe
(The Nielsen Company) C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\NielsenOnline64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [503864 2009-07-20] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [818720 2010-02-26] (Acer Incorporated)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-09-25] ()
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-03] (CANON INC.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [825864 2009-09-24] (Dritek System Inc.)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3888648 2014-05-27] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [NielsenOnline] => C:\Program Files (x86)\NetRatingsNetSight\NetSight\NielsenOnline.exe [91688 2014-04-07] (The Nielsen Company)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1923626264-2341716953-3562644547-1004\...\Run: [Facebook Update] => C:\Users\Porstendörfer\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-08-04] (Facebook Inc.)
HKU\S-1-5-21-1923626264-2341716953-3562644547-1004\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom)
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe ()
Startup: C:\Users\Porstendörfer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Porstendörfer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stillness Buddy.lnk
ShortcutTarget: Stillness Buddy.lnk -> C:\Stillness Buddy\Start Stillness Buddy.exe (No File)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type={partner_id}&p={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com/?&fr=hp-avast&type={partner_id}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=extensa_5635z&r=27360211b816l0413z135i6741u202
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=extensa_5635z&r=27360211b816l0413z135i6741u202
URLSearchHook: HKLM-x32 - Default Value = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM-x32 - DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type={partner_id}&p={searchTerms}
SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type={partner_id}&p={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.enhanced-search.com/?q={searchTerms}&babsrc=SP_ss_mib2&mntrId=988E18F46A0C1408&affID=128492&tsp=5201
SearchScopes: HKCU - {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type={partner_id}&p={searchTerms}
SearchScopes: HKCU - {5CFA3734-F2DB-4ECC-B719-1D6C7236F087} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE417DE417
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Porstendörfer\AppData\Roaming\Mozilla\Firefox\Profiles\g7glcx6n.default-1401870923548
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nielsen/FirefoxTracker - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll (Nielsen)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Porstendörfer\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Porstendörfer\AppData\Roaming\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: GMX MailCheck - C:\Users\Porstendörfer\AppData\Roaming\Mozilla\Firefox\Profiles\g7glcx6n.default-1401870923548\Extensions\toolbar@gmx.net.xpi [2014-06-04]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-05-01]
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi
FF Extension: Nielsen NetSight - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi [2014-06-06]
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-19] (Adobe Systems)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-08] (AVAST Software)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 NielsenUpdate; C:\Program Files (x86)\NetRatingsNetSight\NetSight\NielsenUpdate.exe [2854952 2014-04-07] (The Nielsen Company)
S2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2010-04-16] (NTI, Inc.)
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
S3 TermService; %SystemRoot%\System32\termsrv.dll [X]
S2 WinDefend; %ProgramFiles(x86)%\Windows Defender\mpsvc.dll [X]
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-08] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-04-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-08] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-08] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-06] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R1 nnfwdk; C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\nnfwdk64.sys [26664 2014-04-07] (The Nielsen Company)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S2 secdrv; No ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-06 08:04 - 2014-06-06 08:04 - 00019859 ____C () C:\Users\Porstendörfer\Desktop\FRST.txt
2014-06-06 08:02 - 2014-06-06 08:02 - 02068992 ____C (Farbar) C:\Users\Porstendörfer\Desktop\FRST64.exe
2014-06-05 19:55 - 2014-06-06 07:12 - 00000168 ____C () C:\Windows\setupact.log
2014-06-05 19:55 - 2014-06-05 19:55 - 00000584 ____C () C:\Windows\PFRO.log
2014-06-05 19:55 - 2014-06-05 19:55 - 00000000 ____C () C:\Windows\setuperr.log
2014-06-05 08:33 - 2014-06-05 08:33 - 00002788 ____C () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-06-05 08:33 - 2014-06-05 08:33 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-05 08:33 - 2014-06-05 08:33 - 00000000 ___DC () C:\Program Files\CCleaner
2014-06-05 08:31 - 2014-06-05 08:31 - 04748896 ____C (Piriform Ltd) C:\Users\Porstendörfer\Downloads\ccsetup414.exe
2014-06-05 08:01 - 2014-06-05 08:01 - 00003234 ____C () C:\Windows\System32\Tasks\{FB578874-50DC-4D74-8026-52C72111DE3F}
2014-06-04 10:43 - 2014-06-06 07:18 - 00122584 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-04 10:43 - 2014-06-04 10:43 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-04 10:43 - 2014-06-04 10:43 - 00000000 ___DC () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-04 10:43 - 2014-05-12 07:26 - 00091352 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-04 10:43 - 2014-05-12 07:26 - 00063704 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-04 10:40 - 2014-06-04 10:41 - 17292760 ____C (Malwarebytes Corporation ) C:\Users\Porstendörfer\Downloads\mbam-setup-2.0.2.1012.exe
2014-05-26 15:05 - 2014-05-26 15:05 - 00003052 ____C () C:\Windows\System32\Tasks\{650E0D19-B655-434A-A101-8D313D41F4FF}
2014-05-26 15:01 - 2014-05-26 15:01 - 00003052 ____C () C:\Windows\System32\Tasks\{F2766D69-96EB-4A68-93C0-47F4BABA3421}
2014-05-26 15:00 - 2014-05-26 15:00 - 00003052 ____C () C:\Windows\System32\Tasks\{22095F36-CBF9-4B5E-83B1-4229C8025218}
2014-05-26 11:56 - 2014-06-02 20:21 - 00000000 ___DC () C:\Program Files (x86)\globalUpdate
2014-05-26 11:56 - 2014-05-26 11:56 - 00000000 ___DC () C:\Users\Porstendörfer\AppData\Local\globalUpdate
2014-05-26 11:55 - 2014-05-26 11:55 - 00000000 ___DC () C:\Program Files\003
2014-05-24 15:46 - 2014-05-24 15:46 - 00003040 ____C () C:\Windows\System32\Tasks\{3EF8A789-04EE-42B1-860F-FB41AB790A16}
2014-05-24 15:45 - 2014-05-24 15:45 - 00003040 ____C () C:\Windows\System32\Tasks\{3A3207F0-C070-43C4-A3F7-AEAF82B4956E}
2014-05-20 12:26 - 2014-05-20 12:26 - 00000000 ___DC () C:\Users\Porstendörfer\Desktop\cars2
2014-05-14 20:14 - 2014-05-14 21:18 - 00000000 ___DC () C:\Users\Porstendörfer\AppData\Roaming\Spuk im Wirtshaus
2014-05-14 20:12 - 2009-09-04 17:44 - 00517960 ____C (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-05-14 20:12 - 2009-09-04 17:44 - 00515416 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-05-14 20:12 - 2009-09-04 17:44 - 00238936 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-05-14 20:12 - 2009-09-04 17:44 - 00176968 ____C (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-05-14 20:12 - 2009-09-04 17:44 - 00073544 ____C (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-05-14 20:12 - 2009-09-04 17:44 - 00069464 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 05554512 ____C (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 05501792 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 02582888 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 02475352 ____C (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 01974616 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 01892184 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 00523088 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 00453456 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 00285024 ____C (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-05-14 20:12 - 2009-09-04 17:29 - 00235344 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-05-14 20:12 - 2009-03-16 14:18 - 00521560 ____C (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-05-14 20:12 - 2009-03-16 14:18 - 00517448 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-05-14 20:12 - 2009-03-16 14:18 - 00235352 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-05-14 20:12 - 2009-03-16 14:18 - 00174936 ____C (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-05-14 20:12 - 2009-03-16 14:18 - 00024920 ____C (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-05-14 20:12 - 2009-03-16 14:18 - 00022360 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-05-14 20:12 - 2009-03-09 15:27 - 05425496 ____C (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-05-14 20:12 - 2009-03-09 15:27 - 04178264 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-05-14 20:12 - 2009-03-09 15:27 - 02430312 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-05-14 20:12 - 2009-03-09 15:27 - 01846632 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-05-14 20:12 - 2009-03-09 15:27 - 00520544 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-05-14 20:12 - 2009-03-09 15:27 - 00453456 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-05-14 20:12 - 2008-10-27 10:04 - 00518480 ____C (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-05-14 20:12 - 2008-10-27 10:04 - 00514384 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-05-14 20:12 - 2008-10-27 10:04 - 00235856 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-05-14 20:12 - 2008-10-27 10:04 - 00175440 ____C (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-05-14 20:12 - 2008-10-27 10:04 - 00074576 ____C (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-05-14 20:12 - 2008-10-27 10:04 - 00070992 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-05-14 20:12 - 2008-10-27 10:04 - 00025936 ____C (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-05-14 20:12 - 2008-10-27 10:04 - 00023376 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-05-14 20:12 - 2008-10-15 06:22 - 05631312 ____C (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-05-14 20:12 - 2008-10-15 06:22 - 04379984 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-05-14 20:12 - 2008-10-15 06:22 - 02605920 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-05-14 20:12 - 2008-10-15 06:22 - 02036576 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-05-14 20:12 - 2008-10-15 06:22 - 00519000 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-05-14 20:12 - 2008-10-15 06:22 - 00452440 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-05-14 20:12 - 2008-07-31 10:41 - 00238088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-05-14 20:12 - 2008-07-31 10:41 - 00177672 ____C (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-05-14 20:12 - 2008-07-31 10:41 - 00072200 ____C (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-05-14 20:12 - 2008-07-31 10:41 - 00068616 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-05-14 20:12 - 2008-07-31 10:40 - 00513544 ____C (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-05-14 20:12 - 2008-07-31 10:40 - 00509448 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-05-14 20:12 - 2008-07-10 11:01 - 00467984 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-05-14 20:12 - 2008-07-10 11:00 - 04992520 ____C (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-05-14 20:12 - 2008-07-10 11:00 - 03851784 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-05-14 20:12 - 2008-07-10 11:00 - 01942552 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-05-14 20:12 - 2008-07-10 11:00 - 01493528 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-05-14 20:12 - 2008-07-10 11:00 - 00540688 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-05-14 20:12 - 2008-05-30 14:19 - 00511496 ____C (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-05-14 20:12 - 2008-05-30 14:19 - 00507400 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-05-14 20:12 - 2008-05-30 14:18 - 00238088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-05-14 20:12 - 2008-05-30 14:18 - 00177672 ____C (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-05-14 20:12 - 2008-05-30 14:17 - 00068104 ____C (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-05-14 20:12 - 2008-05-30 14:17 - 00065032 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-05-14 20:12 - 2008-05-30 14:17 - 00025608 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-05-14 20:12 - 2008-05-30 14:16 - 00028168 ____C (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-05-14 20:12 - 2008-05-30 14:11 - 04991496 ____C (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-05-14 20:12 - 2008-05-30 14:11 - 03850760 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-05-14 20:12 - 2008-05-30 14:11 - 01941528 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-05-14 20:12 - 2008-05-30 14:11 - 01491992 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-05-14 20:12 - 2008-05-30 14:11 - 00540688 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-05-14 20:12 - 2008-05-30 14:11 - 00467984 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-05-14 20:12 - 2008-03-05 16:04 - 00489480 ____C (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-05-14 20:12 - 2008-03-05 16:03 - 00479752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-05-14 20:12 - 2008-03-05 16:03 - 00238088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-05-14 20:12 - 2008-03-05 16:03 - 00177672 ____C (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-05-14 20:12 - 2008-03-05 16:00 - 00028168 ____C (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-05-14 20:12 - 2008-03-05 16:00 - 00025608 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-05-14 20:12 - 2008-03-05 15:56 - 04910088 ____C (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-05-14 20:12 - 2008-03-05 15:56 - 03786760 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-05-14 20:12 - 2008-03-05 15:56 - 01860120 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-05-14 20:12 - 2008-03-05 15:56 - 01420824 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-05-14 20:12 - 2008-02-05 23:07 - 00529424 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-05-14 20:12 - 2008-02-05 23:07 - 00462864 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-05-14 20:12 - 2007-10-22 03:40 - 00411656 ____C (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-05-14 20:12 - 2007-10-22 03:39 - 00267272 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-05-14 20:12 - 2007-10-22 03:37 - 00021000 ____C (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-05-14 20:12 - 2007-10-22 03:37 - 00017928 ____C (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-05-14 20:12 - 2007-10-12 15:14 - 05081608 ____C (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-05-14 20:12 - 2007-10-12 15:14 - 03734536 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-05-14 20:12 - 2007-10-12 15:14 - 02006552 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-05-14 20:12 - 2007-10-12 15:14 - 01374232 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-05-14 20:12 - 2007-10-02 09:56 - 00508264 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-05-14 20:12 - 2007-10-02 09:56 - 00444776 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-05-14 20:12 - 2007-07-20 00:57 - 00411496 ____C (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-05-14 20:12 - 2007-07-20 00:57 - 00267112 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-05-14 20:12 - 2007-07-19 18:14 - 05073256 ____C (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-05-14 20:12 - 2007-07-19 18:14 - 03727720 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-05-14 20:12 - 2007-07-19 18:14 - 01985904 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-05-14 20:12 - 2007-07-19 18:14 - 01358192 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-05-14 20:12 - 2007-07-19 18:14 - 00508264 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-05-14 20:12 - 2007-07-19 18:14 - 00444776 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-05-14 20:12 - 2007-06-20 20:49 - 00409960 ____C (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-05-14 20:12 - 2007-06-20 20:46 - 00266088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-05-14 20:12 - 2007-05-16 16:45 - 04496232 ____C (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-05-14 20:12 - 2007-05-16 16:45 - 03497832 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-05-14 20:12 - 2007-05-16 16:45 - 01401200 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-05-14 20:12 - 2007-05-16 16:45 - 01124720 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-05-14 20:12 - 2007-05-16 16:45 - 00506728 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-05-14 20:12 - 2007-05-16 16:45 - 00443752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-05-14 20:12 - 2007-04-04 18:55 - 00403304 ____C (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-05-14 20:12 - 2007-04-04 18:55 - 00261480 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-05-14 20:12 - 2007-04-04 18:54 - 00107368 ____C (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-05-14 20:12 - 2007-04-04 18:53 - 00081768 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-05-14 20:12 - 2007-03-15 16:57 - 00506728 ____C (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-05-14 20:12 - 2007-03-15 16:57 - 00443752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-05-14 20:12 - 2007-03-12 16:42 - 04494184 ____C (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-05-14 20:12 - 2007-03-12 16:42 - 03495784 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-05-14 20:12 - 2007-03-12 16:42 - 01400176 ____C (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-05-14 20:12 - 2007-03-12 16:42 - 01123696 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-05-14 20:11 - 2007-03-05 12:42 - 00017688 ____C (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-05-14 20:11 - 2007-03-05 12:42 - 00015128 ____C (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-05-14 20:08 - 2014-05-14 20:08 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unheimliche Geschichten
2014-05-14 20:06 - 2014-05-14 20:08 - 00000000 ___DC () C:\Program Files (x86)\Unheimliche Geschichten
2014-05-14 11:04 - 2014-05-14 11:04 - 00000000 ___HC () C:\Windows\system32\Drivers\Msft_Kernel_nnfwdk64_01009.Wdf
2014-05-14 10:58 - 2014-05-14 10:58 - 00000890 ____C () C:\nsinst.log
2014-05-14 10:58 - 2014-05-14 10:58 - 00000000 ___DC () C:\Program Files (x86)\NetRatingsNetSight
2014-05-11 12:52 - 2014-05-11 12:53 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 12:33 - 2014-05-09 12:33 - 00264616 ____C (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-09 12:33 - 2014-05-09 12:33 - 00096168 ____C (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-09 12:33 - 2014-05-09 12:32 - 00175528 ____C (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-09 12:33 - 2014-05-09 12:32 - 00175016 ____C (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-08 13:42 - 2014-05-08 13:42 - 00043152 ____C (AVAST Software) C:\Windows\avastSS.scr
2014-05-08 13:42 - 2014-05-08 13:42 - 00029208 ____C () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-08 12:32 - 2014-05-08 12:31 - 00313256 ____C (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-08 12:31 - 2014-05-08 12:31 - 00189352 ____C (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-08 12:31 - 2014-05-08 12:31 - 00189352 ____C (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-08 12:31 - 2014-05-08 12:31 - 00108968 ____C (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-08 12:30 - 2014-05-08 12:30 - 00000000 ___DC () C:\Program Files\Java
==================== One Month Modified Files and Folders =======
2014-06-06 08:04 - 2014-06-06 08:04 - 00019859 ____C () C:\Users\Porstendörfer\Desktop\FRST.txt
2014-06-06 08:04 - 2012-04-27 01:40 - 00000000 ___DC () C:\FRST
2014-06-06 08:04 - 2012-04-26 20:19 - 00000000 ___DC () C:\Users\Porstendörfer\AppData\Local\temp
2014-06-06 08:02 - 2014-06-06 08:02 - 02068992 ____C (Farbar) C:\Users\Porstendörfer\Desktop\FRST64.exe
2014-06-06 07:31 - 2012-08-29 07:34 - 00000884 ____C () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-06 07:21 - 2009-07-14 06:45 - 00009696 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-06 07:21 - 2009-07-14 06:45 - 00009696 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-06 07:18 - 2014-06-04 10:43 - 00122584 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-06 07:18 - 2010-09-25 14:07 - 01830488 ____C () C:\Windows\WindowsUpdate.log
2014-06-06 07:17 - 2012-06-14 09:37 - 00000000 ___DC () C:\Users\Porstendörfer\Desktop\Sicherheit
2014-06-06 07:14 - 2012-07-11 17:33 - 00004182 ____C () C:\Windows\System32\Tasks\avast! Emergency Update
2014-06-06 07:12 - 2014-06-05 19:55 - 00000168 ____C () C:\Windows\setupact.log
2014-06-06 07:12 - 2009-07-14 07:08 - 00000006 ___HC () C:\Windows\Tasks\SA.DAT
2014-06-05 21:19 - 2013-08-04 15:14 - 00000960 ____C () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1923626264-2341716953-3562644547-1004UA.job
2014-06-05 19:55 - 2014-06-05 19:55 - 00000584 ____C () C:\Windows\PFRO.log
2014-06-05 19:55 - 2014-06-05 19:55 - 00000000 ____C () C:\Windows\setuperr.log
2014-06-05 08:42 - 2011-02-02 11:45 - 00000000 ___DC () C:\Users\Porstendörfer\AppData\Local\Google
2014-06-05 08:42 - 2010-04-08 17:15 - 00000000 ___DC () C:\Program Files (x86)\Google
2014-06-05 08:34 - 2007-07-12 03:49 - 00000000 ___DC () C:\Windows\Panther
2014-06-05 08:33 - 2014-06-05 08:33 - 00002788 ____C () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-06-05 08:33 - 2014-06-05 08:33 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-05 08:33 - 2014-06-05 08:33 - 00000000 ___DC () C:\Program Files\CCleaner
2014-06-05 08:31 - 2014-06-05 08:31 - 04748896 ____C (Piriform Ltd) C:\Users\Porstendörfer\Downloads\ccsetup414.exe
2014-06-05 08:01 - 2014-06-05 08:01 - 00003234 ____C () C:\Windows\System32\Tasks\{FB578874-50DC-4D74-8026-52C72111DE3F}
2014-06-05 06:05 - 2013-01-13 15:38 - 00000000 ___DC () C:\Program Files (x86)\FLVPlayer
2014-06-04 20:11 - 2013-08-04 15:14 - 00000938 ____C () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1923626264-2341716953-3562644547-1004Core.job
2014-06-04 10:43 - 2014-06-04 10:43 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-04 10:43 - 2014-06-04 10:43 - 00000000 ___DC () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-04 10:43 - 2012-04-26 20:24 - 00000000 ___DC () C:\Users\Porstendörfer\AppData\Roaming\Malwarebytes
2014-06-04 10:43 - 2012-04-26 20:23 - 00000000 ___DC () C:\ProgramData\Malwarebytes
2014-06-04 10:41 - 2014-06-04 10:40 - 17292760 ____C (Malwarebytes Corporation ) C:\Users\Porstendörfer\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-04 10:35 - 2013-05-23 15:32 - 00000000 ___DC () C:\Users\Porstendörfer\Desktop\Alte Firefox-Daten
2014-06-04 10:09 - 2013-07-08 20:35 - 00000000 ___DC () C:\Users\Porstendörfer\AppData\Roaming\Skype
2014-06-04 06:24 - 2013-09-06 11:48 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills
2014-06-04 06:22 - 2013-08-12 20:29 - 00000000 ___DC () C:\ProgramData\Trymedia
2014-06-02 20:21 - 2014-05-26 11:56 - 00000000 ___DC () C:\Program Files (x86)\globalUpdate
2014-06-01 21:55 - 2011-03-16 18:00 - 00000000 ___DC () C:\ProgramData\CanonIJPLM
2014-06-01 21:41 - 2013-07-24 15:18 - 00000000 ___DC () C:\Users\Porstendörfer\AppData\Roaming\Systweak
2014-05-26 15:05 - 2014-05-26 15:05 - 00003052 ____C () C:\Windows\System32\Tasks\{650E0D19-B655-434A-A101-8D313D41F4FF}
2014-05-26 15:01 - 2014-05-26 15:01 - 00003052 ____C () C:\Windows\System32\Tasks\{F2766D69-96EB-4A68-93C0-47F4BABA3421}
2014-05-26 15:00 - 2014-05-26 15:00 - 00003052 ____C () C:\Windows\System32\Tasks\{22095F36-CBF9-4B5E-83B1-4229C8025218}
2014-05-26 11:56 - 2014-05-26 11:56 - 00000000 ___DC () C:\Users\Porstendörfer\AppData\Local\globalUpdate
2014-05-26 11:55 - 2014-05-26 11:55 - 00000000 ___DC () C:\Program Files\003
2014-05-24 16:01 - 2013-04-04 11:45 - 00000000 ___DC () C:\Users\Porstendörfer\Documents\Mein Steuer-Sparbuch Heute
2014-05-24 15:46 - 2014-05-24 15:46 - 00003040 ____C () C:\Windows\System32\Tasks\{3EF8A789-04EE-42B1-860F-FB41AB790A16}
2014-05-24 15:45 - 2014-05-24 15:45 - 00003040 ____C () C:\Windows\System32\Tasks\{3A3207F0-C070-43C4-A3F7-AEAF82B4956E}
2014-05-23 09:15 - 2012-04-25 08:44 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-21 12:00 - 2012-04-28 18:56 - 00002441 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-21 11:12 - 2010-09-25 23:58 - 00716208 ____C () C:\Windows\system32\perfh007.dat
2014-05-21 11:12 - 2010-09-25 23:58 - 00156302 ____C () C:\Windows\system32\perfc007.dat
2014-05-21 11:12 - 2009-07-14 07:13 - 01659858 ____C () C:\Windows\system32\PerfStringBackup.INI
2014-05-20 12:26 - 2014-05-20 12:26 - 00000000 ___DC () C:\Users\Porstendörfer\Desktop\cars2
2014-05-15 19:52 - 2014-03-29 21:16 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Firefox.bak
2014-05-15 13:42 - 2014-01-10 19:10 - 00085328 ____C (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-05-15 13:42 - 2012-05-01 20:24 - 01039096 ____C (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-05-15 13:42 - 2012-05-01 20:24 - 00423240 ____C (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-05-15 12:08 - 2012-08-29 07:34 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-15 12:08 - 2012-04-28 19:05 - 00692400 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-15 12:08 - 2011-06-11 06:25 - 00070832 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 21:18 - 2014-05-14 20:14 - 00000000 ___DC () C:\Users\Porstendörfer\AppData\Roaming\Spuk im Wirtshaus
2014-05-14 20:08 - 2014-05-14 20:08 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unheimliche Geschichten
2014-05-14 20:08 - 2014-05-14 20:06 - 00000000 ___DC () C:\Program Files (x86)\Unheimliche Geschichten
2014-05-14 11:04 - 2014-05-14 11:04 - 00000000 ___HC () C:\Windows\system32\Drivers\Msft_Kernel_nnfwdk64_01009.Wdf
2014-05-14 10:58 - 2014-05-14 10:58 - 00000890 ____C () C:\nsinst.log
2014-05-14 10:58 - 2014-05-14 10:58 - 00000000 ___DC () C:\Program Files (x86)\NetRatingsNetSight
2014-05-12 07:26 - 2014-06-04 10:43 - 00091352 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-04 10:43 - 00063704 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2012-04-26 20:23 - 00025816 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-11 12:53 - 2014-05-11 12:52 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 20:28 - 2011-03-27 16:35 - 00000000 ___DC () C:\Users\Porstendörfer\Desktop\Andreas
2014-05-09 13:14 - 2011-04-12 13:44 - 00000000 ___DC () C:\Program Files (x86)\Buhl finance
2014-05-09 13:14 - 2010-04-08 16:31 - 00000000 __HDC () C:\Program Files (x86)\InstallShield Installation Information
2014-05-09 13:13 - 2009-07-14 05:20 - 00000000 __RDC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-09 12:39 - 2013-07-01 17:14 - 00001074 ____C () C:\Users\Public\Desktop\VLC media player.lnk
2014-05-09 12:38 - 2013-09-26 11:52 - 00000000 ___DC () C:\ProgramData\Oracle
2014-05-09 12:33 - 2014-05-09 12:33 - 00264616 ____C (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-09 12:33 - 2014-05-09 12:33 - 00096168 ____C (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-09 12:32 - 2014-05-09 12:33 - 00175528 ____C (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-09 12:32 - 2014-05-09 12:33 - 00175016 ____C (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-09 12:32 - 2012-04-28 17:13 - 00000000 ___DC () C:\Program Files (x86)\Java
2014-05-08 13:42 - 2014-05-08 13:42 - 00043152 ____C (AVAST Software) C:\Windows\avastSS.scr
2014-05-08 13:42 - 2014-05-08 13:42 - 00029208 ____C () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-08 13:42 - 2013-03-20 13:37 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-05-08 13:42 - 2013-03-20 13:37 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-05-08 13:42 - 2012-05-01 20:24 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1400154147536
2014-05-08 13:42 - 2012-05-01 20:24 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1400154147536
2014-05-08 13:42 - 2012-05-01 20:24 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-05-08 13:42 - 2012-05-01 20:23 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-08 13:42 - 2012-05-01 20:23 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-05-08 12:31 - 2014-05-08 12:32 - 00313256 ____C (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-08 12:31 - 2014-05-08 12:31 - 00189352 ____C (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-08 12:31 - 2014-05-08 12:31 - 00189352 ____C (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-08 12:31 - 2014-05-08 12:31 - 00108968 ____C (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-08 12:30 - 2014-05-08 12:30 - 00000000 ___DC () C:\Program Files\Java
Some content of TEMP:
====================
C:\Users\Porstendörfer\AppData\Local\temp\BuenoSearchTB[1].exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-29 21:40
==================== End Of Log ============================
--- --- ---
--- --- ---
[/CODE] Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014
Ran by Porstendörfer at 2014-06-06 08:04:59
Running from C:\Users\Porstendörfer\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 2 (SP2) (x32 Version: - Microsoft) Hidden
Acer Crystal Eye webcam Ver:1.1.160.210 (HKLM-x32\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.160.210 - Chicony Electronics Co.,Ltd.)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 4.05.3007 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3011 - Acer Incorporated)
Acer GameZone Console (HKLM-x32\...\{ABEE079E-648E-488B-8301-0C3DB48C1BCE}_is1) (Version: 6.1.0.2 - Oberon Media, Inc.)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.11.1209 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated)
Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3002 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden
Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adressenverwaltung (HKLM-x32\...\{F4A841BD-7E4D-4F6E-9347-68139A80D70A}) (Version: 5.0.08 - VR-Software)
Ahnenblatt 2.64 (HKLM-x32\...\Ahnenblatt_is1) (Version: 2.64.1.3 - Dirk Boettcher)
Amazonia (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}) (Version: - Oberon Media)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.17 - Atheros Communications Inc.)
avast! Pro Antivirus (HKLM-x32\...\avast) (Version: 9.0.2018 - Avast Software)
Big Fish Games: Game Manager (HKLM-x32\...\BFGC) (Version: 3.0.1.60 - )
Business Contact Manager für Outlook 2007 SP2 (HKLM-x32\...\Business Contact Manager) (Version: 3.0.8619.1 - Microsoft Corporation)
Business Contact Manager für Outlook 2007 SP2 (x32 Version: 3.0.8619.1 - Microsoft Corporation) Hidden
Cake Mania (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}) (Version: - Oberon Media)
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version: - )
Canon MP260 series Benutzerregistrierung (HKLM-x32\...\Canon MP260 series Benutzerregistrierung) (Version: - )
Canon MP260 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP260_series) (Version: - )
Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - )
Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version: - Oberon Media)
Cisco WebEx Meetings (HKCU\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.98.9.0 - Conexant)
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version: - Oberon Media)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{4FE6ABAF-20F3-4F5F-A966-380FDAE9A31A}) (Version: - Microsoft)
dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA)
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version: - Oberon Media)
eBay Worldwide (HKLM-x32\...\{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}) (Version: 2.1.0901 - OEM)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
Farm Frenzy 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}) (Version: - Oberon Media)
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Finanzfuchs Haushaltsbuch 2005 2.08 (HKLM-x32\...\Finanzfuchs Haushaltsbuch 2005) (Version: 2.08 - Franzis)
FLV Player Packages (HKCU\...\FLV Player Packages) (Version: - ) <==== ATTENTION
Galapago (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}) (Version: - Oberon Media)
Graboid Video 2.03 (HKLM-x32\...\Graboid Video) (Version: 2.03 - Graboid Inc.)
Granny In Paradise (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}) (Version: - Oberon Media)
Heroes of Hellas (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}) (Version: - Oberon Media)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
Inkjet Printer/Scanner Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - )
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.2202 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
InterVideo WinDVD 8 (HKLM-x32\...\InstallShield_{5FEBF468-5AC2-4C66-AD80-DF85C085AA73}) (Version: 8.5.10.75 - InterVideo Inc.)
InterVideo WinDVD 8 (x32 Version: 8.5.10.75 - InterVideo Inc.) Hidden
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 3.0.04 - Acer Inc.)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
MD Adressbuch 2011 (HKLM-x32\...\MD Adressbuch 2011_is1) (Version: - Stefan Göppert Softwareentwicklung)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office 2003 Web Components (HKLM-x32\...\{90A40407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8003.0 - Microsoft Corporation)
Microsoft Office 2007 Primary Interop Assemblies (HKLM-x32\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{9BD40163-B95D-4B07-8991-0AB775B6D88B}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 2 (SP2) (x32 Version: - Microsoft) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (x32 Version: - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Office O MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2) (x32 Version: - Microsoft) Hidden
Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Small Business Connectivity Components (HKLM-x32\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office X MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server Native Client (HKLM\...\{7C39E0D1-E138-42B1-B083-213EC2CF7692}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{1FBEA8BA-D40B-48BC-85BC-EE2D5575F27C}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MiniTool Partition Wizard Home Edition 8.1.1 (HKLM-x32\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyHeritage Family Tree Builder (HKLM-x32\...\Family Tree Builder) (Version: 5.0.0.1168 - MyHeritage.com)
Nielsen (HKLM-x32\...\NetSight) (Version: - )
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.36 - Symantec)
NTI Backup Now 5 (HKLM-x32\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.630 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.630 - NewTech Infosystems) Hidden
NTI Media Maker 8 (HKLM-x32\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6635 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6635 - NewTech Infosystems) Hidden
Oddly Enough: Der Rattenfänger von Hameln (HKLM-x32\...\BFG-Oddly Enough - Der Rattenfaenger von Hameln) (Version: - )
PDF24 Creator 5.4.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Pixum Fotobuch (HKLM-x32\...\Pixum Fotobuch) (Version: - )
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30094 - Realtek Semiconductor Corp.)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Softwarenetz Haushaltsbuch5 (HKLM-x32\...\Haushaltsbuch5) (Version: - Softwarenetz)
Spin & Win (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110300453}) (Version: - Oberon Media)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated)
TomTom HOME (HKLM-x32\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Unheimliche Geschichten (HKLM-x32\...\Unheimliche Geschichten) (Version: - )
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM-x32\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.5000.00 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft Excel 2010 (KB2553439) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{3D1F379C-AA64-4823-90A4-A8DDD4B48C21}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{7AC49FC8-F8D2-4DD8-9086-09E52385A21F}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{48E1B6C2-7299-4F3F-AA63-42F0ACE55AA4}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{18B3CF2A-73F7-4716-B1AE-86D68726D408}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{E6EAF5E1-5E2A-4E4F-847E-97B45179E45B}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{17E7B9AB-2DD2-457D-8D8E-CD14ACA973FE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{15058154-469F-4794-ACD5-94F8420F9B80}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0410-0000-0000000FF1CE}_Office14.PROPLUSR_{D1688F5A-9A61-42F0-B8D0-2C9DF315A141}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (HKLM-x32\...\{90140000-006E-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{32E700B9-1A94-48B4-99E1-CB8BD5F7340A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{C8694FF0-8203-483B-A07A-2BC40433167D}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{28FAC187-7C0E-413A-B90A-76F19D0FBF30}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{ED31DE9A-3E13-4E2C-9106-E0D8AFFB9FA6}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{4D98EEEA-A31B-42FA-991A-F989594F4DA5}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{4D98EEEA-A31B-42FA-991A-F989594F4DA5}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{BEBC2484-290C-46AD-9834-6DAD1FA80273}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (HKLM-x32\...\{90140000-00A1-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{0C175ED0-26B9-4B09-AFA9-3F16A03A29B9}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{BEBC2484-290C-46AD-9834-6DAD1FA80273}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{FB95DCF2-C3FD-44E4-ABFC-1B082885703F}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{38990592-F6A1-4A26-96C7-0600E36AE794}) (Version: - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{81CA2EFA-7250-4B1E-B3A6-E0595224E2CD}) (Version: - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{BC6DFBFD-16DD-47E1-A7EF-2C062930FA4F}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WebEx Event-Manager für Firefox oder Chrome (HKLM-x32\...\{2E732021-24C0-4D96-9B27-1876A7A143A2}) (Version: 28.11.0.16469 - Cisco WebEx LLC)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.01.3002 - Acer Incorporated)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8091.0730 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{BF0EA47F-0ED2-44CE-A8A4-644A85274F0D}) (Version: 21.00.8480 - Buhl Data Service GmbH)
==================== Restore Points =========================
24-05-2014 13:48:03 Removed Microsoft Silverlight
24-05-2014 14:09:25 Removed Microsoft Silverlight
26-05-2014 09:50:26 Removed Microsoft Silverlight
01-06-2014 19:51:30 Removed Microsoft Silverlight
==================== Hosts content: ==========================
2009-07-14 04:34 - 2012-09-28 07:26 - 00000098 ___AC C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {118DAEDE-6B0D-406E-B8FC-59D94D580C2F} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {2467DCFC-DACF-48D3-BDCC-8DB1884B0A4C} - System32\Tasks\{22095F36-CBF9-4B5E-83B1-4229C8025218} => C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe
Task: {246C348E-20A1-4E68-99B4-294CEA2596C4} - System32\Tasks\{F2766D69-96EB-4A68-93C0-47F4BABA3421} => C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe
Task: {58E04CEE-D69C-492F-96FB-B1422820A054} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
Task: {63EC71BD-0843-4D07-A24C-7E9637399B5B} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-05-08] (AVAST Software)
Task: {8124C7DF-66A3-4EF1-8BDB-848F53F8DC6B} - System32\Tasks\{3EF8A789-04EE-42B1-860F-FB41AB790A16} => C:\Program Files\Microsoft Silverlight\5.1.30214.0\Silverlight.Configuration.exe
Task: {93C02BEF-B409-4040-8F6D-FE4942334474} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-15] (Adobe Systems Incorporated)
Task: {A85C86D4-ED82-4599-B959-D0E99CBFF70E} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1923626264-2341716953-3562644547-1004UA => C:\Users\Porstendörfer\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-08-04] (Facebook Inc.)
Task: {B6B6C620-67CC-48AF-A651-CBCFE6C64676} - System32\Tasks\{3A3207F0-C070-43C4-A3F7-AEAF82B4956E} => C:\Program Files\Microsoft Silverlight\5.1.30214.0\Silverlight.Configuration.exe
Task: {C230C4A9-A80A-4A68-9E8B-11B8456B19A4} - System32\Tasks\{650E0D19-B655-434A-A101-8D313D41F4FF} => C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe
Task: {E53A11DE-35DB-4BFF-859E-01D0A7B284B2} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1923626264-2341716953-3562644547-1004Core => C:\Users\Porstendörfer\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-08-04] (Facebook Inc.)
Task: {E85745B3-7DCD-462D-AB0A-F67E7006F719} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1923626264-2341716953-3562644547-1004Core.job => C:\Users\Porstendörfer\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1923626264-2341716953-3562644547-1004UA.job => C:\Users\Porstendörfer\AppData\Local\Facebook\Update\FacebookUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-03-17 00:07 - 2011-03-17 00:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-09-25 14:22 - 2010-09-25 14:22 - 00206208 _____ () C:\Windows\PLFSetI.exe
2011-03-16 18:00 - 2008-01-22 10:35 - 00103808 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2014-02-20 10:16 - 2014-02-28 18:49 - 01429808 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe
2014-06-05 19:58 - 2014-06-05 19:58 - 02775040 _____ () C:\Program Files\AVAST Software\Avast\defs\14060500\algo.dll
2014-06-06 07:14 - 2014-06-06 07:14 - 02775040 _____ () C:\Program Files\AVAST Software\Avast\defs\14060503\algo.dll
2014-05-11 12:53 - 2014-05-11 12:53 - 03839088 ____C () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-05-14 11:04 - 2014-04-07 22:33 - 00504832 ____C () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\communication.dll
2014-05-14 10:58 - 2014-04-07 22:38 - 00504320 ____C () C:\Program Files (x86)\NetRatingsNetSight\NetSight\nsmmc.dll
2011-03-17 00:11 - 2011-03-17 00:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-02-20 10:13 - 2014-02-28 18:49 - 09666864 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wgui14.dll
2014-02-20 10:14 - 2014-02-28 18:48 - 00035120 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsdcom48.dll
2014-02-20 10:14 - 2014-02-28 18:48 - 00309040 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\rscorewinapi48.dll
2014-02-20 10:14 - 2014-02-28 18:48 - 00321840 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsguiwinapi48.dll
2014-02-20 10:13 - 2014-02-28 18:48 - 03786544 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wcore14.dll
2014-02-20 10:14 - 2014-02-28 18:48 - 00136496 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsodbc48.dll
2014-02-20 10:13 - 2014-02-28 18:49 - 02674480 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wfvie14.dll
2014-02-20 10:14 - 2014-02-28 18:48 - 01982256 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wsteu14.dll
2014-02-20 10:14 - 2014-02-28 18:48 - 01915184 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wreli14.dll
2014-02-20 10:13 - 2014-03-03 11:46 - 04329776 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wauff14.dll
2014-02-20 10:14 - 2014-02-11 12:53 - 01043456 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-core.dll
2014-02-20 10:14 - 2014-02-11 12:53 - 00094720 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-shared.dll
2014-02-20 10:14 - 2014-02-11 12:53 - 00250368 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-contribs-lib.dll
2014-02-20 10:14 - 2014-03-03 11:46 - 01512752 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wmain14.dll
2014-02-20 10:13 - 2014-02-28 18:49 - 05099312 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae114.dll
2014-02-20 10:13 - 2014-02-28 18:49 - 01690416 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae214.dll
2014-02-20 10:13 - 2014-02-28 18:49 - 01801008 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae314.dll
2014-02-20 10:13 - 2014-02-28 18:49 - 01627952 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae414.dll
2014-02-20 10:14 - 2014-02-28 18:49 - 01115440 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\whau114.dll
2014-02-20 10:14 - 2014-02-28 18:49 - 01322288 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\whau214.dll
2014-02-20 10:14 - 2014-02-28 18:49 - 01245488 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wwerb14.dll
2014-02-20 10:14 - 2014-02-28 18:50 - 07319344 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wkont14.dll
2014-02-20 10:14 - 2014-02-28 18:49 - 01277232 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wimp14.dll
2014-02-20 10:13 - 2014-02-28 18:49 - 01330480 ____C () C:\Program Files (x86)\WISO\Steuersoftware 2014\wfabu14.dll
2013-12-03 12:44 - 2013-12-03 12:44 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-05-14 11:04 - 2014-04-07 22:34 - 01246720 ____C () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\npffaddons.dll
2014-05-14 11:04 - 2014-04-07 22:35 - 00851968 ____C () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\npfirefoxprocessor.dll
2014-05-14 11:04 - 2014-04-07 22:33 - 00150528 ____C () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\npsp1.dll
2014-05-14 11:04 - 2014-04-07 22:34 - 00228864 ____C () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\npsurvey.dll
2014-05-14 11:04 - 2014-04-07 22:34 - 00224768 ____C () C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\npwmi.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:0B9176C0
AlternateDataStreams: C:\ProgramData\TEMP:11590865
AlternateDataStreams: C:\ProgramData\TEMP:12258D63
AlternateDataStreams: C:\ProgramData\TEMP:363E775E
AlternateDataStreams: C:\ProgramData\TEMP:4D066AD2
AlternateDataStreams: C:\ProgramData\TEMP:4E79C4F8
AlternateDataStreams: C:\ProgramData\TEMP:53BA2DF6
AlternateDataStreams: C:\ProgramData\TEMP:5D7E5A8F
AlternateDataStreams: C:\ProgramData\TEMP:762408BA
AlternateDataStreams: C:\ProgramData\TEMP:798A3728
AlternateDataStreams: C:\ProgramData\TEMP:93DE1838
AlternateDataStreams: C:\ProgramData\TEMP:93EB7685
AlternateDataStreams: C:\ProgramData\TEMP:A9056F42
AlternateDataStreams: C:\ProgramData\TEMP:ABE89FFE
AlternateDataStreams: C:\ProgramData\TEMP:B0A727D1
AlternateDataStreams: C:\ProgramData\TEMP:D7D0B4AF
AlternateDataStreams: C:\ProgramData\TEMP:E36F5B57
AlternateDataStreams: C:\ProgramData\TEMP:F68CB1A4
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Security Driver
Description: Security Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: secdrv
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/06/2014 07:59:04 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (06/06/2014 07:58:23 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (06/05/2014 07:58:35 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/05/2014 07:58:35 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/05/2014 07:58:35 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/05/2014 07:58:35 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490)
Error: (06/05/2014 07:58:33 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/05/2014 07:58:33 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800)
Error: (06/05/2014 07:58:33 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/05/2014 07:58:33 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (06/06/2014 07:14:22 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Defender" wurde mit folgendem Fehler beendet:
%%126
Error: (06/06/2014 07:14:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Security Driver" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/06/2014 07:14:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NTI Backup Now 5 Scheduler Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (06/06/2014 07:14:11 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst NTI Backup Now 5 Scheduler Service erreicht.
Error: (06/06/2014 07:13:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (06/06/2014 07:13:28 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst MBAMService erreicht.
Error: (06/06/2014 07:12:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMScheduler" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (06/06/2014 07:12:54 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst MBAMScheduler erreicht.
Error: (06/05/2014 07:59:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/05/2014 07:58:35 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.
Microsoft Office Sessions:
=========================
Error: (06/06/2014 07:59:04 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (06/06/2014 07:58:23 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Porstendörfer\Desktop\Sicherheit\esetsmartinstaller_enu.exe
Error: (06/05/2014 07:58:35 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/05/2014 07:58:35 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/05/2014 07:58:35 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (06/05/2014 07:58:35 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer
Error: (06/05/2014 07:58:33 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore
Error: (06/05/2014 07:58:33 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800)
Error: (06/05/2014 07:58:33 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt
Error: (06/05/2014 07:58:33 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
4700
CodeIntegrity Errors:
===================================
Date: 2012-04-26 18:45:47.461
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-04-26 18:45:47.367
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 42%
Total physical RAM: 3996.93 MB
Available physical RAM: 2309.18 MB
Total Pagefile: 7992.05 MB
Available Pagefile: 6120.12 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:284.99 GB) (Free:190.85 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: A2488D17)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=285 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
FRST 32-Bit | FRST 64-Bit
Lesestoff:
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
