Trojaner-Board - PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - PUP.VShare.Redir und PUP.Optional.Open Candy auf dem Rechner (https://www.trojaner-board.de/140194-pup-vshare-redir-pup-optional-open-candy-rechner.html)

Thundbird und vor allem Windows updaten.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Frisches FRST log bitte. Noch Probleme?

Hi,
ich bin leider schon beim update von windows zum x-ten Mal gescheitert: er meldet mir immer den Fehler 80004005. Das geht schon seit Wochen so. Wenn du da einen Tipp hättest, wäre ich echt dankbar!!!

Hi, ich noch mal. Jetzt hatte ich plötzlich schon wieder so einen virus-Browser-Ding Lyrixx oder so ähnlich. Ich habe AdwCleaner noch mal drüber laufen lassen. Ich schicke dir auch dazu das log noch mal. Tausend Dank für all deine Hilfe...

Code:

# AdwCleaner v3.001 - Report created 27/08/2013 at 19:44:19

# Updated 24/08/2013 by Xplode

# Operating System : Windows 7 Home Premium  (64 bits)

# Username : ADMIN - UTE-PC

# Running from : C:\Users\ADMIN\Downloads\adwcleaner.exe

# Option : Clean
 

***** [ Services ] *****
 

Service Deleted : BrowserDefendert
 

***** [ Files / Folders ] *****
 

Folder Deleted : C:\ProgramData\Babylon

[!] Folder Deleted : C:\ProgramData\BrowserDefender

Folder Deleted : C:\Program Files (x86)\delta

Folder Deleted : C:\Program Files (x86)\LyriXeeker

Folder Deleted : C:\Program Files (x86)\openit

Folder Deleted : C:\Program Files (x86)\optimizer pro

Folder Deleted : C:\Users\Ute\AppData\Roaming\optimizer pro

Folder Deleted : C:\Users\ADMIN\AppData\Roaming\BabSolution

Folder Deleted : C:\Users\ADMIN\AppData\Roaming\Babylon

Folder Deleted : C:\Users\ADMIN\AppData\Roaming\DSite

Folder Deleted : C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender

File Deleted : C:\Users\Public\Desktop\Open It!.lnk

File Deleted : C:\Users\Ute\AppData\Roaming\Mozilla\Firefox\Profiles\jdh84i10.default\bprotector_extensions.sqlite

File Deleted : C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default\bprotector_extensions.sqlite

File Deleted : C:\Users\Ute\AppData\Roaming\Mozilla\Firefox\Profiles\jdh84i10.default\bprotector_prefs.js

File Deleted : C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default\bprotector_prefs.js

File Deleted : C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default\user.js

File Deleted : C:\Windows\System32\Tasks\BrowserDefendert

File Deleted : C:\Windows\Tasks\DSite.job

File Deleted : C:\Windows\System32\Tasks\DSite

File Deleted : C:\Windows\System32\Tasks\EPUpdater
 

***** [ Shortcuts ] *****
 
 

***** [ Registry ] *****
 

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NTRedirect]

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore

Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore.1

Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd

Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1

Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr

Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1

Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane

Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc

Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1

Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS

Key Deleted : HKCU\Software\5b4ddd9b26dbe45

Key Deleted : HKLM\SOFTWARE\5b4ddd9b26dbe45

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]

Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Key Deleted : HKCU\Software\BabSolution

Key Deleted : HKCU\Software\DataMngr

[#] Key Deleted : HKCU\Software\DataMngr_Toolbar

Key Deleted : HKCU\Software\delta LTD

Key Deleted : HKCU\Software\Delta

Key Deleted : HKCU\Software\dsiteproducts

Key Deleted : HKCU\Software\InstallCore

Key Deleted : HKCU\Software\AppDataLow\Software\lyrixeeker

Key Deleted : HKLM\Software\BabylonToolbar

Key Deleted : HKLM\Software\DataMngr

Key Deleted : HKLM\Software\Delta

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\lyrix@lyrixeeker.co

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenIt Open It!

Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll
 

***** [ Browsers ] *****
 

-\\ Internet Explorer v8.0.7600.17267
 

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [bProtectTabs]
 

-\\ Mozilla Firefox v23.0.1 (de)
 

[ File : C:\Users\Ute\AppData\Roaming\Mozilla\Firefox\Profiles\jdh84i10.default\prefs.js ]
 
 

[ File : C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default\prefs.js ]
 

Line Deleted : user_pref("extensions.delta.admin", false);

Line Deleted : user_pref("extensions.delta.aflt", "babsst");

Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

Line Deleted : user_pref("extensions.delta.autoRvrt", "false");

Line Deleted : user_pref("extensions.delta.dfltLng", "de");

Line Deleted : user_pref("extensions.delta.excTlbr", false);

Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);

Line Deleted : user_pref("extensions.delta.id", "02306ab400000000000090e6ba5e556c");

Line Deleted : user_pref("extensions.delta.instlDay", "15942");

Line Deleted : user_pref("extensions.delta.instlRef", "sst");

Line Deleted : user_pref("extensions.delta.newTab", false);

Line Deleted : user_pref("extensions.delta.prdct", "delta");

Line Deleted : user_pref("extensions.delta.prtnrId", "delta");

Line Deleted : user_pref("extensions.delta.rvrt", "false");

Line Deleted : user_pref("extensions.delta.smplGrp", "none");

Line Deleted : user_pref("extensions.delta.tlbrId", "base");

Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");

Line Deleted : user_pref("extensions.delta.vrsn", "1.8.24.5");

Line Deleted : user_pref("extensions.delta.vrsni", "1.8.24.5");

Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.24.511:47:45");

Line Deleted : user_pref("extensions.delta_i.babExt", "");

Line Deleted : user_pref("extensions.delta_i.babTrack", "affID=119357&tt=200813_245&tsp=4985");

Line Deleted : user_pref("extensions.delta_i.srcExt", "ss");
 

[ File : C:\Users\Sicherheitstest\AppData\Roaming\Mozilla\Firefox\Profiles\ih00hz15.default\prefs.js ]
 
 

[ File : C:\Users\Kinder\AppData\Roaming\Mozilla\Firefox\Profiles\opdzutu7.default\prefs.js ]
 
 

*************************
 

AdwCleaner[R0].txt - [10606 octets] - [21/08/2013 21:01:08]

AdwCleaner[R1].txt - [1183 octets] - [22/08/2013 13:30:36]

AdwCleaner[R2].txt - [10628 octets] - [27/08/2013 19:42:05]

AdwCleaner[S0].txt - [10718 octets] - [21/08/2013 21:04:04]

AdwCleaner[S1].txt - [1245 octets] - [22/08/2013 13:32:23]

AdwCleaner[S2].txt - [10119 octets] - [27/08/2013 19:44:19]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [10180 octets] ##########

Guten Morgen,

ich habe nach AdwCleaner und Mbam erneut PUPs auf dem Rechner: PupOptional.BabylonA, BabSolution, -Delta, -LyricXeeker, -Optimizer... Habe sie gelöscht bzw. aus der Quarantäne gelöscht. Wo die her kommen, ist mir ein Rätsel. Ich schicke dir hier also auch noch mal das log von Mbam und lasse auch ein neues Frst erstellen. Mache vielleicht auch noch mal alle anderen Schritte, die du genannt hast. Aber noch mal wichtig: Hast du einen Tipp wg. Windows-Aktualisierung, die bei mir ja immer scheitert???

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.08.22.07
 

Windows 7 x64 NTFS

Internet Explorer 8.0.7600.16385

ADMIN :: UTE-PC [Administrator]
 

27.08.2013 21:14:47

mbam-log-2013-08-27 (21-14-47).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 602611

Laufzeit: 3 Stunde(n), 3 Minute(n), 15 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 8

C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\deltaApp.dll.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\deltaEng.dll.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\deltasrv.exe.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\deltaTlbr.dll.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.5\bh\delta.dll.vir (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\AdwCleaner\Quarantine\C\Program Files (x86)\LyriXeeker\Uninstall.exe.vir (PUP.Optional.LyricXeeker.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\AdwCleaner\Quarantine\C\Users\ADMIN\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\AdwCleaner\Quarantine\C\Users\ADMIN\AppData\Roaming\BabSolution\Shared\BUSolution.dll.vir (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

vorausschauend hier auch ein neues FRST + Add.log
FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013

Ran by ADMIN (administrator) on 28-08-2013 09:19:17

Running from C:\Users\ADMIN\Desktop

Windows 7 Home Premium (X64) OS Language: German Standard

Internet Explorer Version 8

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe

() C:\Program Files\ATKGFNEX\GFNEXSrv.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe

() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

() C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe

(PacketVideo) C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe

() C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe

(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe

() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16330272 2009-07-02] (NVIDIA Corporation)

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [617856 2009-07-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)

HKCU\...\Policies\system: [LogonHoursAction] 2

HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Cyberlink\MediaShowEspresso\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\Cyberlink\PowerDirector\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe [87336 2009-04-28] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-08-15] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [8493624 2009-07-07] (ASUS)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [159744 2009-04-20] (ASUS)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.)

HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1655296 2010-09-05] (Dominik Reichl)

HKU\Kinder\...\Policies\system: [LogonHoursAction] 2

HKU\Kinder\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\Sicherheitstest\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [975288 2012-07-02] (Samsung)

HKU\Sicherheitstest\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]

HKU\Sicherheitstest\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()

HKU\Sicherheitstest\...\Policies\system: [LogonHoursAction] 2

HKU\Sicherheitstest\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\Ute\...\Run: [SkypePM] - C:\Users\Ute\AppData\Local\Skype\SkypePM.exe [x]

HKU\Ute\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()

HKU\Ute\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Ute\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]

HKU\Ute\...\Policies\system: [LogonHoursAction] 2

HKU\Ute\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

AppInit_DLLs-x32: c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll [400704 2013-05-22] ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk

ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)

Startup: C:\Users\Sicherheitstest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk

ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()

Startup: C:\Users\Ute\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Product Registration.lnk

ShortcutTarget: Product Registration.lnk -> C:\Users\ADMIN\AppData\Local\Temp\is-D6743.tmp\ATR1.exe (No File)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search

BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO-x32: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File

DPF: HKLM-x32 {55963676-2F5E-4BAF-AC28-CF26AA587566} https://sslvpn.uni-potsdam.de/CACHE/stc/1/binaries/vpnweb.cab

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()

FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: No Name - C:\Users\ADMIN\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\128.xpi
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [108289 2009-05-13] (Avira GmbH)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [185089 2009-07-21] (Avira GmbH)

S2 ASUSRDVDService; C:\Program Files (x86)\ASUS\AI Recovery\ServiceSimple2.exe [109184 2009-09-11] ()

R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)

R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [344064 2009-04-08] (AVerMedia)

R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [405504 2008-12-09] ()

S2 FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [306232 2009-07-24] (ASUSTeK Computer Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-01-21] ()

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

R2 TwonkyProxy; C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe [545608 2012-07-09] ()

R2 TwonkyServer; C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe [549704 2012-07-09] (PacketVideo)

R2 TwonkyWebDav; C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe [271176 2012-07-09] ()
 

==================== Drivers (Whitelisted) ====================
 

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)

R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()

R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)

R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)

R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()

S3 AVerAF15DMBTH64; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [592256 2009-07-27] (AVerMedia TECHNOLOGIES, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [74880 2009-11-25] (Avira GmbH)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-05-20] ()

S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [203544 2013-02-06] (DEVGURU Co., LTD.(www.devguru.co.kr))

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-28 08:45 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe

2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe

2013-08-27 19:59 - 2013-08-27 20:00 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe

2013-08-27 19:40 - 2013-08-27 19:41 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe

2013-08-27 00:34 - 2013-08-27 00:34 - 00000000 ____D C:\Windows\system32\SPReview

2013-08-26 23:09 - 2013-08-26 23:47 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part

2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG

2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-08-26 20:15 - 2009-10-10 05:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird

2013-08-26 19:37 - 2013-08-26 19:38 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe

2013-08-26 17:33 - 2011-02-19 08:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions

2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt

2013-08-25 11:56 - 2013-08-25 11:57 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe

2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt

2013-08-23 10:35 - 2013-08-23 10:37 - 02347384 _____ (ESET) C:\Users\ADMIN\Downloads\esetsmartinstaller_enu.exe

2013-08-22 21:19 - 2013-04-04 14:50 - 00887432 _____ (Malwarebytes Corporation) C:\Users\ADMIN\Desktop\mbam.exe

2013-08-22 15:12 - 2013-08-22 15:12 - 00032118 _____ C:\Users\ADMIN\Desktop\Addition.txt

2013-08-22 14:46 - 2013-08-22 14:46 - 00002092 _____ C:\Users\ADMIN\Desktop\JRT.txt

2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT

2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe

2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt

2013-08-22 11:40 - 2013-08-22 11:41 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt

2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-21 23:41 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys

2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files\iTunes

2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer

2013-08-21 23:01 - 2013-08-21 23:03 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe

2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI

2013-08-21 22:57 - 2013-08-21 22:58 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe

2013-08-21 21:00 - 2013-08-27 20:33 - 00000000 ____D C:\AdwCleaner

2013-08-21 17:22 - 2013-08-21 17:29 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe

2013-08-21 14:30 - 2013-08-21 14:31 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt

2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt

2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST

2013-08-21 14:24 - 2013-08-21 14:25 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe

2013-08-21 14:19 - 2013-08-21 14:20 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe

2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG

2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT

2013-08-21 12:56 - 2013-08-28 08:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job

2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler

2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk

2013-08-17 12:24 - 2013-08-25 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-15 11:32 - 2013-08-15 11:34 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk

2013-08-13 00:18 - 2010-09-14 08:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll

2013-08-13 00:18 - 2010-09-14 08:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll

2013-08-13 00:10 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-08-13 00:10 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2013-08-13 00:10 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2013-08-13 00:10 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2013-08-13 00:05 - 2013-08-15 10:53 - 00000000 ____D C:\Windows\system32\MRT

2013-08-12 23:55 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2013-08-12 23:55 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2013-08-12 23:55 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2013-08-12 23:55 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2013-08-12 23:55 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2013-08-12 23:55 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2013-08-12 23:55 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2013-08-12 23:55 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2013-08-12 10:42 - 2012-01-03 08:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2013-08-12 10:42 - 2012-01-03 07:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl

2013-08-12 10:42 - 2011-05-04 07:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2013-08-12 10:42 - 2011-05-04 07:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2013-08-12 10:42 - 2011-05-04 07:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2013-08-12 10:42 - 2011-05-04 07:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2013-08-12 10:42 - 2011-05-04 06:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-08-12 10:42 - 2011-05-04 06:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-08-12 10:42 - 2011-05-04 06:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-08-12 10:42 - 2011-05-04 06:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2013-08-12 10:42 - 2011-02-24 08:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2013-08-12 10:42 - 2011-02-24 07:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-08-12 10:42 - 2010-08-04 09:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2013-08-12 10:42 - 2010-01-19 11:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2013-08-12 10:42 - 2010-01-19 11:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2013-08-12 10:42 - 2010-01-19 11:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2013-08-12 10:42 - 2010-01-19 11:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2013-08-12 10:42 - 2010-01-19 01:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2013-08-12 10:42 - 2010-01-19 01:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2013-08-12 10:42 - 2010-01-19 01:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2013-08-12 10:42 - 2010-01-19 01:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2013-08-12 10:42 - 2010-01-19 01:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2013-08-12 10:42 - 2010-01-19 01:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2013-08-12 10:41 - 2012-07-06 21:58 - 00552448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2013-08-12 10:41 - 2012-01-04 11:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2013-08-12 10:41 - 2012-01-04 11:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2013-08-12 10:41 - 2011-06-16 07:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2013-08-12 10:41 - 2011-06-16 06:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll

2013-08-12 10:41 - 2011-02-26 08:23 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2013-08-12 10:41 - 2011-02-26 07:33 - 02614784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2013-08-12 10:40 - 2012-08-02 19:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-08-12 10:40 - 2012-08-02 19:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2013-08-12 10:40 - 2012-05-02 07:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2013-08-12 10:40 - 2011-04-22 22:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2013-08-12 10:40 - 2011-03-12 14:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2013-08-12 10:40 - 2011-03-12 13:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll

2013-08-12 10:40 - 2010-12-21 08:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll

2013-08-12 10:40 - 2010-12-21 08:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll

2013-08-12 10:40 - 2010-12-21 08:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll

2013-08-12 10:40 - 2010-12-21 07:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2013-08-12 10:39 - 2012-12-07 07:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2013-08-12 10:39 - 2012-12-07 07:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2013-08-12 10:39 - 2012-12-07 07:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2013-08-12 10:39 - 2012-12-07 06:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2013-08-12 10:39 - 2012-12-07 05:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs

2013-08-12 10:39 - 2012-11-22 12:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2013-08-12 10:39 - 2012-11-22 11:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2013-08-12 10:38 - 2012-11-30 01:21 - 00420032 _____ C:\Windows\SysWOW64\locale.nls

2013-08-12 10:38 - 2012-11-30 01:19 - 00420032 _____ C:\Windows\system32\locale.nls

2013-08-12 10:38 - 2012-04-07 14:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2013-08-12 10:38 - 2012-04-07 13:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2013-08-12 10:36 - 2011-03-25 05:23 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-08-12 10:36 - 2011-03-25 05:23 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-08-12 10:36 - 2011-03-25 05:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00187264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys

2013-08-12 10:36 - 2011-03-11 08:22 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys

2013-08-12 10:36 - 2011-03-11 08:22 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys

2013-08-12 10:36 - 2011-03-11 08:18 - 02566144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2013-08-12 10:36 - 2011-03-11 08:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe

2013-08-12 10:36 - 2011-03-11 07:39 - 01686016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2013-08-12 10:36 - 2011-03-11 07:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe

2013-08-12 10:36 - 2011-03-11 06:31 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2013-08-12 10:35 - 2013-01-24 07:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2013-08-12 10:35 - 2012-05-05 10:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2013-08-12 10:35 - 2012-05-05 09:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2013-08-12 10:35 - 2012-02-11 08:29 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2013-08-12 10:35 - 2012-02-11 08:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

2013-08-12 10:35 - 2011-03-25 05:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-08-12 10:35 - 2011-03-25 05:22 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2013-08-12 10:35 - 2011-03-25 05:22 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-08-12 10:35 - 2011-03-25 05:22 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-08-12 10:35 - 2011-02-18 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2013-08-12 10:35 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe

2013-08-12 10:01 - 2010-03-04 06:40 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys

2013-08-12 10:01 - 2010-03-04 06:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2

2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg

2013-08-09 14:35 - 2013-08-14 10:48 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service

2013-08-09 13:55 - 2013-08-09 16:09 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe

2013-08-09 13:52 - 2013-08-09 16:00 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe

2013-08-09 13:49 - 2013-08-11 21:55 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl

2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes
 

==================== One Month Modified Files and Folders =======
 

2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe

2013-08-28 09:12 - 2012-12-23 17:19 - 00000000 ____D C:\ProgramData\TwonkyServer

2013-08-28 09:06 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-28 09:06 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-28 09:00 - 2009-11-06 21:11 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-28 08:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-28 08:57 - 2009-10-08 05:25 - 01374633 _____ C:\Windows\WindowsUpdate.log

2013-08-28 08:57 - 2009-07-14 06:51 - 00240053 _____ C:\Windows\setupact.log

2013-08-28 08:56 - 2013-08-21 12:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job

2013-08-28 08:43 - 2013-08-28 08:45 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe

2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe

2013-08-28 08:27 - 2013-03-16 10:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-08-28 08:27 - 2009-11-06 21:11 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-28 07:20 - 2009-10-08 06:23 - 00051484 _____ C:\Windows\PFRO.log

2013-08-27 20:33 - 2013-08-21 21:00 - 00000000 ____D C:\AdwCleaner

2013-08-27 20:00 - 2013-08-27 19:59 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe

2013-08-27 19:41 - 2013-08-27 19:40 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe

2013-08-27 00:34 - 2013-08-27 00:34 - 00000000 ____D C:\Windows\system32\SPReview

2013-08-26 23:47 - 2013-08-26 23:09 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part

2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 21:57 - 2012-02-23 09:54 - 00008909 _____ C:\Windows\IE9_main.log

2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG

2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird

2013-08-26 19:38 - 2013-08-26 19:37 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe

2013-08-26 17:34 - 2013-01-04 15:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2013-08-25 23:06 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-25 21:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2013-08-25 13:18 - 2009-10-08 06:24 - 00001927 _____ C:\Windows\system32\ServiceFilter.ini

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions

2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt

2013-08-25 11:57 - 2013-08-25 11:56 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe

2013-08-25 11:47 - 2013-08-17 12:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt

2013-08-23 10:37 - 2013-08-23 10:35 - 02347384 _____ (ESET) C:\Users\ADMIN\Downloads\esetsmartinstaller_enu.exe

2013-08-23 10:37 - 2009-08-04 11:51 - 00654166 _____ C:\Windows\system32\perfh007.dat

2013-08-23 10:37 - 2009-08-04 11:51 - 00130006 _____ C:\Windows\system32\perfc007.dat

2013-08-23 10:37 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-22 18:38 - 2013-04-09 18:07 - 00000000 ___RD C:\Users\Ute\Dropbox

2013-08-22 18:38 - 2012-05-26 14:14 - 00000000 ____D C:\Users\Ute\AppData\Roaming\Dropbox

2013-08-22 15:12 - 2013-08-22 15:12 - 00032118 _____ C:\Users\ADMIN\Desktop\Addition.txt

2013-08-22 14:46 - 2013-08-22 14:46 - 00002092 _____ C:\Users\ADMIN\Desktop\JRT.txt

2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT

2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe

2013-08-22 13:36 - 2009-10-08 06:24 - 00002488 _____ C:\Windows\system32\AutoRunFilter.ini

2013-08-22 13:35 - 2009-07-14 06:45 - 00467816 _____ C:\Windows\system32\FNTCACHE.DAT

2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt

2013-08-22 11:41 - 2013-08-22 11:40 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt

2013-08-22 08:27 - 2009-11-11 01:08 - 00129424 _____ C:\Users\ADMIN\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-21 23:47 - 2010-02-14 22:28 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2

2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iTunes

2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer

2013-08-21 23:03 - 2013-08-21 23:01 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe

2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI

2013-08-21 22:58 - 2013-08-21 22:57 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe

2013-08-21 22:02 - 2009-10-30 18:54 - 00129424 _____ C:\Users\Ute\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-21 21:33 - 2012-01-15 21:41 - 00000000 ____D C:\Program Files (x86)\Free YouTube to MP3 Converter

2013-08-21 21:29 - 2013-02-22 12:55 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-08-21 21:29 - 2009-10-08 06:07 - 00000000 ____D C:\ProgramData\Adobe

2013-08-21 21:05 - 2012-05-18 20:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-08-21 18:41 - 2009-11-11 22:45 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Adobe

2013-08-21 17:31 - 2010-03-29 23:05 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2013-08-21 17:29 - 2013-08-21 17:22 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe

2013-08-21 14:31 - 2013-08-21 14:30 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt

2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt

2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST

2013-08-21 14:25 - 2013-08-21 14:24 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe

2013-08-21 14:20 - 2013-08-21 14:19 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe

2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG

2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT

2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler

2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk

2013-08-20 20:30 - 2013-03-16 10:32 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-08-20 20:30 - 2012-09-13 20:42 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-08-20 20:30 - 2011-11-19 21:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-08-20 19:42 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-08-16 11:51 - 2010-08-02 23:26 - 00000000 ____D C:\Program Files (x86)\ElsterFormular

2013-08-16 11:08 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN

2013-08-15 11:54 - 2013-07-22 17:57 - 00001111 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-08-15 11:54 - 2013-07-22 17:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-08-15 11:34 - 2013-08-15 11:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-08-15 10:55 - 2009-10-08 05:32 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-08-15 10:53 - 2013-08-13 00:05 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 10:49 - 2010-10-02 13:20 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-14 20:15 - 2012-05-09 14:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Adobe

2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk

2013-08-14 17:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-08-14 10:48 - 2013-08-09 14:35 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute

2013-08-14 10:48 - 2012-05-09 00:10 - 00129816 _____ C:\Users\Sicherheitstest\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-14 07:17 - 2010-02-14 22:32 - 00000000 ____D C:\Users\Ute\AppData\Roaming\KeePass

2013-08-13 12:04 - 2011-04-06 21:23 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-08-11 22:06 - 2010-10-01 21:25 - 00000000 ____D C:\Windows\pss

2013-08-11 22:01 - 2009-12-19 00:27 - 00000000 ____D C:\Program Files (x86)\Spiele

2013-08-11 21:58 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic

2013-08-11 21:55 - 2013-08-09 13:49 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl

2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2

2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg

2013-08-09 16:09 - 2013-08-09 13:55 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe

2013-08-09 16:00 - 2013-08-09 13:52 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe

2013-08-09 14:35 - 2009-12-17 22:43 - 00001322 _____ C:\Windows\wiso.ini

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service

2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes

2013-08-08 23:03 - 2011-11-22 11:39 - 00002214 _____ C:\Users\Public\Desktop\Google Earth.lnk
 

Files to move or delete:

====================

C:\Users\Sicherheitstest\AppData\Local\Temp\drm_dyndata_7380006.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\isp7787.tmp\_Setup.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3_x64.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\msiexec.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\vcredist_x86.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DSETUP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\dsetup32.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DXSETUP.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\be29e7f1-71ae-4703-50cb-1d52be512f51\twapi-be29e7f1-71ae-4703-50cb-1d52be512f51.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe

C:\Users\Ute\AppData\Local\Temp\~nsu.tmp\Au_.exe

C:\Users\Ute\AppData\Local\Temp\{2650056B-FA80-44FF-836B-A7B42BAB0436}\InstallFlashPlayer.exe

C:\Users\Ute\AppData\Local\Temp\WLZ345C.tmp\CddbLangDE.dll

C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\DropboxNSISTools.dll

C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\UAC.dll

C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\DropboxNSISTools.dll

C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\UAC.dll

C:\Users\Ute\AppData\Local\Temp\MozUpdater-2\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater-1\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-3\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-2\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-1\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe

C:\Users\Ute\AppData\Local\Temp\IXP380.TMP\SetupAdmin.exe

C:\Users\Ute\AppData\Local\Temp\is357113909\OpenItSetup.exe

C:\Users\Ute\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-22 07:16
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2013

Ran by ADMIN at 2013-08-28 09:20:32

Running from C:\Users\ADMIN\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

   

 Update for Microsoft Office 2007 (KB2508958) (x32)

2007 Microsoft Office system (x32 Version: 12.0.6612.1000)

64 Bit HP CIO Components Installer (Version: 6.2.1)

8000A809 (x32 Version: 50.0.165.000)

8000A809_eDocs (x32 Version: 50.0.165.000)

8000A809_Help (x32 Version: 1.00.0000)

Acrobat.com (x32 Version: 1.6.65)

Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0)

Activation Assistant for the 2007 Microsoft Office suites (x32)

Actualização do Microsoft Office Excel 2007 Help (KB963678) (x32)

Actualização do Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

Actualização do Microsoft Office Word 2007 Help (KB963665) (x32)

Adobe Download Assistant (x32 Version: 1.2.5)

Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)

Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)

AGEIA PhysX v7.07.24 (x32 Version: 7.07.24)

ÅíçìåñùìÝíç Ýêäïóç Microsoft Office Excel 2007 Help (KB963678) (x32)

ÅíçìåñùìÝíç Ýêäïóç Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

ÅíçìåñùìÝíç Ýêäïóç Microsoft Office Word 2007 Help (KB963665) (x32)

Alcor Micro USB Card Reader (x32 Version: 1.2.17.25001)

Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17)

Apple Application Support (x32 Version: 2.3.4)

Apple Mobile Device Support (Version: 6.1.0.13)

Apple Software Update (x32 Version: 2.1.3.127)

ASUS AI Recovery (x32 Version: 1.0.6)

ASUS CopyProtect (x32 Version: 1.0.0015)

ASUS Data Security Manager (x32 Version: 1.00.0013)

ASUS FancyStart (x32 Version: 1.0.6)

ASUS LifeFrame3 (x32 Version: 3.0.20)

ASUS Live Update (x32 Version: 2.5.8)

ASUS MultiFrame (x32 Version: 1.0.0019)

ASUS Power4Gear Hybrid (Version: 1.1.20)

ASUS SmartLogon (x32 Version: 1.0.0007)

ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028)

ASUS Video Magic (x32 Version: 6.0.3212)

ASUS Virtual Camera (x32 Version: 1.0.18)

Asus_Camera_ScreenSaver (x32 Version: 2.0.0008)

Atheros Client Installation Program (x32 Version: 7.0)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.10)

ATK Generic Function Service (x32 Version: 1.00.0008)

ATK Hotkey (x32 Version: 1.0.0052)

ATK Media (x32 Version: 2.0.0005)

ATKOSD2 (x32 Version: 7.0.0005)

avast! Free Antivirus (x32 Version: 8.0.1489.0)

AVerMedia A850 USB DMB-TH 1.0.64.28 (x32 Version: 1.0.64.28)

AVerTV (x32 Version: 6.0.18)

Avira AntiVir Personal - Free Antivirus (x32)

BioShock (x32 Version: 2.62.0000)

Bonjour (Version: 3.0.0.10)

BPDSoftware (x32 Version: 50.0.165.000)

BPDSoftware_Ini (x32 Version: 1.00.0000)

BufferChm (x32 Version: 130.0.331.000)

Canon MP Navigator EX 4.0 (x32)

Canon Solution Menu EX (x32)

CanoScan LiDE 210 Scanner Driver

Choice Guard (x32 Version: 1.2.87.0)

Cisco AnyConnect VPN Client (x32 Version: 2.5.1025)

ControlDeck (x32 Version: 1.0.3)

Crazy Machines II - Gold (x32 Version: 1.03)

CyberLink LabelPrint (x32 Version: 2.5.1720)

CyberLink MediaShow Espresso (x32 Version: 5.0.0526)

CyberLink PhotoNow (x32 Version: 1.1.6622)

CyberLink Power2Go (x32 Version: 6.1.2713)

CyberLink PowerDirector (x32 Version: 7.0.3131)

CyberLink PowerDVD 9 (x32 Version: 9.0.1719)

DeviceDiscovery (x32 Version: 130.0.465.000)

ElsterFormular (x32 Version: 14.1.11318)

ElsterFormular für Unternehmer (x32 Version: 12.3.2.6814u)

Express Gate (x32 Version: 1.2.13.16)

Fallout 3 (HKCU Version: 1.00.0000)

Fast Boot (Version: 1.0.3)

Freemake Video Downloader (x32 Version: 3.0.0)

Gigaset QuickSync (x32 Version: 6.1.0822.15063)

Google Earth (x32 Version: 5.2.0.5932)

Google Earth (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.21.153)

Gothic 3 - Götterdämmerung (x32 Version: 1.0.0)

HP Imaging Device Functions 13.0 (Version: 13.0)

HP Officejet Pro 8000 A809 Series (Version: 13.0)

HP Photosmart Essential 3.5 (Version: 3.5)

HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000)

HPPhotosmartEssential (x32 Version: 2.04.0000)

iTunes (Version: 10.7.0.21)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

Junk Mail filter update (x32 Version: 14.0.8050.1202)

KeePass Password Safe 2.13 (x32)

Landwirtschafts Simulator 2013 (x32 Version: 1.0)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

MediaManager (x32 Version: 3.0.3 (60))

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.0.19.0)

Microsoft Office 2007 Service Pack 3 (SP3) (x32)

Microsoft Office Access MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (Greek) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel 2007 Help - Aggiornamento (KB963678) (x32)

Microsoft Office Excel 2007 Help §ó·sµ{¦¡ (KB963678) (x32)

Microsoft Office Excel 2007 Help Actualización (KB963678) (x32)

Microsoft Office Excel MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (Greek) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)

Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office IME (Chinese (Traditional)) 2007 (Version: 12.0.6612.1000)

Microsoft Office IME (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)

Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook 2007 Help - Aggiornamento (KB963677) (x32)

Microsoft Office Outlook 2007 Help Actualización (KB963677) (x32)

Microsoft Office Outlook Connector (x32 Version: 12.0.6414.1000)

Microsoft Office Outlook MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (Greek) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669) (x32)

Microsoft Office Powerpoint 2007 Help §ó·sµ{¦¡ (KB963669) (x32)

Microsoft Office Powerpoint 2007 Help Actualización (KB963669) (x32)

Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (Greek) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Professional Hybrid 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Arabic) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Basque) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Catalan) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Dutch) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Galician) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Greek) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Hebrew) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Portuguese (Brazil)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Russian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proofing (Chinese (Traditional)) 2007 (x32 Version: 12.0.4518.1014)

Microsoft Office Proofing (Dutch) 2007 (x32 Version: 12.0.4518.1017)

Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014)

Microsoft Office Proofing (French) 2007 (x32 Version: 12.0.4518.1014)

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)

Microsoft Office Proofing (Greek) 2007 (x32 Version: 12.0.4518.1029)

Microsoft Office Proofing (Hebrew) 2007 (x32 Version: 12.0.4518.1016)

Microsoft Office Proofing (Italian) 2007 (x32 Version: 12.0.4518.1018)

Microsoft Office Proofing (Portuguese (Portugal)) 2007 (x32 Version: 12.0.4518.1029)

Microsoft Office Proofing (Spanish) 2007 (x32 Version: 12.0.4518.1014)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)

Microsoft Office Publisher MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (Greek) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (Chinese (Traditional)) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (Dutch) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (French) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (Greek) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (Hebrew) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (Italian) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (Greek) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word 2007 Help - Aggiornamento (KB963665) (x32)

Microsoft Office Word 2007 Help §ó·sµ{¦¡ (KB963665) (x32)

Microsoft Office Word 2007 Help Actualización (KB963665) (x32)

Microsoft Office Word MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (Greek) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)

Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Works 6-9 Converter (x32 Version: 14.0.6120.5002)

Mise à jour Microsoft Office Excel 2007 Help  (KB963678) (x32)

Mise à jour Microsoft Office Outlook 2007 Help  (KB963677) (x32)

Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669) (x32)

Mise à jour Microsoft Office Word 2007 Help  (KB963665) (x32)

Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 23.0.1)

Mozilla Thunderbird (3.0.1) (x32 Version: 3.0.1 (de))

MSVCRT (x32 Version: 14.0.1468.721)

myPrintMileage (Officejet Pro 8000 A809) (x32 Version: 1.00.0000)

Network64 (Version: 130.0.579.000)

NVIDIA Drivers (Version: 1.4)

NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)

NVIDIA Install Application (Version: 2.1002.109.718)

òãëåï òáåø îñðï ãåàø äæáì ùì Microsoft Office Excel 2007 Help (KB963678) (x32)

òãëåï òáåø îñðï ãåàø äæáì ùì Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

òãëåï òáåø îñðï ãåàø äæáì ùì Microsoft Office Word 2007 Help (KB963665) (x32)

OpenAL (x32)

PC Beschleunigen (Version: 1.3.10.20086)

phase-6 2.1.2.1b (x32 Version: 2.1.2.1b)

Pospos - Im Land der Chuchuks  1.0.1b (x32)

ProductContext (x32 Version: 50.0.165.000)

QuickTime (x32 Version: 7.72.80.56)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.5904)

RollerCoaster Tycoon 3 (x32)

Samsung Kies (x32 Version: 2.3.2.12064_9)

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.6.0)

Skype web features (x32 Version: 1.0.3971)

Skype™ 5.10 (x32 Version: 5.10.116)

Spezialfahrzeuge-Simulator Version 1.45 (x32 Version: 1.45)

Spybot - Search & Destroy (x32 Version: 1.6.2)

SRS Premium Sound Control Panel (Version: 1.07.0100)

Status (x32 Version: 130.0.469.000)

Toolbox (x32 Version: 130.0.648.000)

TrayApp (x32 Version: 130.0.422.000)

Twonky Windows Components (x32 Version: 3.0.3)

Uninstall 1.0.0.1 (x32)

Update for 2007 Microsoft Office System (KB967642) (x32)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft Office 2007 Help for Common Features (KB963673) (x32)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)

Update for Microsoft Office Access 2007 Help (KB963663) (x32)

Update for Microsoft Office Excel 2007 Help (KB963678) (x32)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 Help (KB963677) (x32)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition (x32)

Update for Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

Update for Microsoft Office Publisher 2007 Help (KB963667) (x32)

Update for Microsoft Office Script Editor Help (KB963671) (x32)

Update for Microsoft Office Word 2007 Help (KB963665) (x32)

Update für Microsoft Office Excel 2007 Help (KB963678) (x32)

Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

Update für Microsoft Office Word 2007 Help (KB963665) (x32)

Update voor Microsoft Office Excel 2007 Help (KB963678) (x32)

Update voor Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

Update voor Microsoft Office Word 2007 Help (KB963665) (x32)

Ware PS/2-x64 7.0.5.7_WHQL

WebReg (x32 Version: 130.0.132.017)

WIDCOMM Bluetooth Software (Version: 6.2.0.9600)

Winamp (x32 Version: 5.61 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Live Anmelde-Assistent (x32 Version: 5.000.818.6)

Windows Live Call (x32 Version: 14.0.8050.1202)

Windows Live Communications Platform (x32 Version: 14.0.8050.1202)

Windows Live Essentials (x32 Version: 14.0.8050.1202)

Windows Live Family Safety (Version: 14.0.8052.1208)

Windows Live Fotogalerie (x32 Version: 14.0.8051.1204)

Windows Live Mail (x32 Version: 14.0.8050.1202)

Windows Live Messenger (x32 Version: 14.0.8050.1202)

Windows Live Sync (x32 Version: 14.0.8050.1202)

Windows Live Writer (x32 Version: 14.0.8050.1202)

Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)

WinFlash (x32 Version: 2.26.0)

WinRAR (x32)

Wireless Console 3 (x32 Version: 3.0.10)

WISO Sparbuch 2009 (HKCU Version: 16.00.6228)

WISO Sparbuch 2010 (x32 Version: 17.00.6531)

WISO Steuer-Sparbuch 2011 (x32 Version: 18.00.6928)

WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7303)

World of Tanks (x32)
 

==================== Restore Points  =========================
 
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {03E8D2B6-0FA8-40E0-A8FB-793E643D37E0} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-08-04] (Microsoft Corporation)

Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)

Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)

Task: {1CFB9147-092D-400B-BEF5-64F87E95C0B5} - System32\Tasks\{4C86492E-7501-4045-9764-EAE8D57B44C7} => C:\Program Files (x86)\Microsoft Outlook2007 Academic\Office12\OUTLOOK.EXE [2013-06-21] (Microsoft Corporation)

Task: {1DE3F2ED-93F0-4B82-AD6A-6B2E45D2E1C2} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2009-07-14] (Microsoft Corporation)

Task: {1F328232-F0B5-49D2-8548-D370B1C0C6DE} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2009-07-14] (Microsoft Corporation)

Task: {24B09709-5B83-420E-8B38-E9A4360552EE} - System32\Tasks\{AD507736-6CAC-4129-BA1A-7F1955F91E53} => C:\Program Files (x86)\Spiele\WinLems\WinLems.exe No File

Task: {37DD69EA-A053-4A72-B1E7-D605C7C7CC18} - System32\Tasks\{3AC28431-7862-40DE-8E0C-A9726C8AC21C} => C:\Program Files (x86)\Microsoft Outlook2007 Academic\Office12\OUTLOOK.EXE [2013-06-21] (Microsoft Corporation)

Task: {3C0DD532-624F-44C8-83A8-0A90A0587D4A} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)

Task: {4442B19A-7BB0-4B68-B027-6E12811A8603} - System32\Tasks\P4GIntlCtrl => C:\Program Files\P4G\IntlCtrl.exe [2009-08-11] (TODO: <Company name>)

Task: {46554143-937C-4907-BFB7-14B717632FCC} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2009-07-14] (Microsoft Corporation)

Task: {4C75CC8B-79A5-4C0E-A825-C389B544895B} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)

Task: {5346BDA2-6241-4575-88F7-06682DF97D03} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-11-06] (Google Inc.)

Task: {53B54D29-E5F3-41BA-9D01-E907F66853E6} - System32\Tasks\{CC192D56-5326-4BA0-96BF-5637CF86437D} => C:\Program Files (x86)\Spiele\WinLems\WinLems.exe No File

Task: {5CF7C858-007D-44C4-91BE-F2EF2F6A425F} - \DSite No Task File

Task: {60925855-EC1B-4E4B-B805-F086F2D34F5E} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => C:\Windows\System32\dfdts.dll [2009-07-14] (Microsoft Corporation)

Task: {6CA9B0EC-35C5-4EBF-9A02-95172736089D} - System32\Tasks\P4G Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14] (Microsoft Corporation)

Task: {6DB2C1AB-8767-49B5-96D5-0CA86A29FC28} - System32\Tasks\MetaCrawler => C:\Users\ADMIN\AppData\Roaming\METACR~1\UPDATE~1\UPDATE~1.EXE No File

Task: {6F4D57DC-C4E7-4CE2-B276-9EF5787052A7} - System32\Tasks\{81804752-C995-4CA0-9BFF-28DC85F6D4AD} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)

Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks

Task: {78F1A2FF-3161-49D1-9E29-6DD418226CEE} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2009-09-11] (ASUSTek Computer Inc.)

Task: {7D34C13A-0576-4F47-B079-EBCD9C2757E2} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()

Task: {7F2D718C-D6E6-4052-8B04-E00EC64B0440} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-07-23] ()

Task: {87F1347F-410B-4764-A1CA-48924DC9DB02} - \BrowserDefendert No Task File

Task: {9701889A-5F93-46E3-9FB7-762B1BE0E40D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-20] (Adobe Systems Incorporated)

Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\System32\srrstr.dll [2009-07-14] (Microsoft Corporation)

Task: {9B7F808A-7F56-4E90-8161-6ED2CE68E9CF} - System32\Tasks\WPD\SqmUpload_S-1-5-21-423201937-815055215-1465012819-1003 => C:\Windows\System32\portabledeviceapi.dll [2009-07-14] (Microsoft Corporation)

Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\System32\aepdu.dll [2009-07-14] (Microsoft Corporation)

Task: {B78E9FDF-E3DE-46E8-BD4C-521FD03C1EDE} - \EPUpdater No Task File

Task: {CFFAB942-A04C-4023-A0AA-EB29E5849383} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2009-07-24] ()

Task: {D6AFF849-F59A-4599-B3B8-9E9BB191089B} - System32\Tasks\WPD\SqmUpload_S-1-5-21-423201937-815055215-1465012819-1004 => C:\Windows\System32\portabledeviceapi.dll [2009-07-14] (Microsoft Corporation)

Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => C:\Windows\System32\acproxy.dll [2009-07-14] (Microsoft Corporation)

Task: {D94B8963-B048-49FC-8DC8-D152D93C034D} - System32\Tasks\ASPG => C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe [2009-06-29] (ASUS)

Task: {DE9C283D-2323-4FED-9D6A-47CA60D2341F} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)

Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => C:\Windows\System32\bfe.dll [2009-07-14] (Microsoft Corporation)

Task: {E61F9DFF-9E43-4206-A231-139886E06D7F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-11-06] (Google Inc.)

Task: {F7E8F4FB-635E-482E-8F55-1B3C09A1A99E} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2009-08-11] (ATK)

Task: {FBF59EE6-CAFC-4E97-B1FE-E185B6F2312E} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)

Task: {FFE1B1F5-319C-4FE1-B386-9C81BD4FA22C} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-19] (ASUS)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\MetaCrawler.job => C:\Users\ADMIN\AppData\Roaming\METACR~1\UPDATE~1\UPDATE~1.EXE
 

==================== Alternate Data Streams (whitelisted) ==========
 

AlternateDataStreams: C:\ProgramData\Temp:373E1720

AlternateDataStreams: C:\Users\Ute\Desktop\Citrix XenApp - Anmeldung.url:favicon
 
 

==================== Faulty Device Manager Devices =============
 

Name: Officejet Pro 8000 A809

Description: Officejet Pro 8000 A809

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Cisco AnyConnect VPN Virtual Miniport Adapter for Windows x64

Description: Cisco AnyConnect VPN Virtual Miniport Adapter for Windows x64

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: vpnva

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (08/28/2013 08:59:28 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e

Name des fehlerhaften Moduls: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000f2b1

ID des fehlerhaften Prozesses: 0x8e0

Startzeit der fehlerhaften Anwendung: 0xFastBootAgent.exe0

Pfad der fehlerhaften Anwendung: FastBootAgent.exe1

Pfad des fehlerhaften Moduls: FastBootAgent.exe2

Berichtskennung: FastBootAgent.exe3
 

Error: (08/28/2013 08:43:46 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
 

Error: (08/28/2013 07:22:06 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e

Name des fehlerhaften Moduls: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000f2b1

ID des fehlerhaften Prozesses: 0xb8c

Startzeit der fehlerhaften Anwendung: 0xFastBootAgent.exe0

Pfad der fehlerhaften Anwendung: FastBootAgent.exe1

Pfad des fehlerhaften Moduls: FastBootAgent.exe2

Berichtskennung: FastBootAgent.exe3
 

Error: (08/28/2013 07:17:38 AM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 1699241
 

Error: (08/28/2013 07:17:38 AM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 1699241
 

Error: (08/28/2013 07:17:38 AM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (08/28/2013 06:34:11 AM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15391995
 

Error: (08/28/2013 06:34:11 AM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15391995
 

Error: (08/28/2013 06:34:11 AM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (08/27/2013 09:11:11 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e

Name des fehlerhaften Moduls: FastBootAgent.exe, Version: 1.0.0.0, Zeitstempel: 0x4a68233e

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000f2b1

ID des fehlerhaften Prozesses: 0xad8

Startzeit der fehlerhaften Anwendung: 0xFastBootAgent.exe0

Pfad der fehlerhaften Anwendung: FastBootAgent.exe1

Pfad des fehlerhaften Moduls: FastBootAgent.exe2

Berichtskennung: FastBootAgent.exe3
 
 

System errors:

=============

Error: (08/28/2013 09:19:21 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 

%%-2140993535
 

Error: (08/28/2013 09:19:21 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%-2140993535
 

Error: (08/28/2013 09:19:21 AM) (Source: PNRPSvc) (User: )

Description: 0x80630801
 

Error: (08/28/2013 09:12:32 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%-2140993535
 

Error: (08/28/2013 09:12:32 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 

%%-2140993535
 

Error: (08/28/2013 09:12:31 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%-2140993535
 

Error: (08/28/2013 09:12:31 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 

%%-2140993535
 

Error: (08/28/2013 09:12:32 AM) (Source: PNRPSvc) (User: )

Description: 0x80630801
 

Error: (08/28/2013 09:12:31 AM) (Source: PNRPSvc) (User: )

Description: 0x80630801
 

Error: (08/28/2013 09:12:16 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%-2140993535
 
 

Microsoft Office Sessions:

=========================

Error: (08/16/2013 02:43:10 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1322 seconds with 480 seconds of active time.  This session ended with a crash.
 

Error: (07/22/2012 00:23:11 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 9708 seconds with 240 seconds of active time.  This session ended with a crash.
 

Error: (07/05/2012 09:33:29 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6660 seconds with 2100 seconds of active time.  This session ended with a crash.
 

Error: (04/15/2012 08:53:22 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 13 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (12/31/2011 01:18:36 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 126 seconds with 60 seconds of active time.  This session ended with a crash.
 

Error: (12/22/2011 09:20:52 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1031 seconds with 840 seconds of active time.  This session ended with a crash.
 

Error: (10/19/2011 06:42:10 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 74 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (09/17/2011 07:26:58 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 856 seconds with 240 seconds of active time.  This session ended with a crash.
 

Error: (06/27/2011 02:53:29 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 7 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (10/12/2010 11:47:51 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6541.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 7574 seconds with 4560 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 33%

Total physical RAM: 4095.24 MB

Available physical RAM: 2740.58 MB

Total Pagefile: 8188.61 MB

Available Pagefile: 6421.89 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:232.88 GB) (Free:149.46 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (DATA) (Fixed) (Total:218.23 GB) (Free:110 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: D9B3496E)

Partition 1: (Not Active) - (Size=15 GB) - (Type=1C)

Partition 2: (Active) - (Size=233 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=218 GB) - (Type=OF Extended)
 

==================== End Of Log ============================

hier das erneute jrt log

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 5.5.3 (08.21.2013:1)

OS: Windows 7 Home Premium x64

Ran by ADMIN on 28.08.2013 at  9:44:02,09

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs

Successfully deleted [Registry Value] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\bProtectTabs
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\open it!"
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\ADMIN\AppData\Roaming\mozilla\firefox\profiles\0yhqvmi4.default\minidumps [7 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 28.08.2013 at  9:52:24,86

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

hier neues frst nach jrt Durchlauf

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013

Ran by ADMIN (administrator) on 28-08-2013 10:15:34

Running from C:\Users\ADMIN\Desktop

Windows 7 Home Premium (X64) OS Language: German Standard

Internet Explorer Version 8

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe

() C:\Program Files\ATKGFNEX\GFNEXSrv.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe

() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

() C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe

(PacketVideo) C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe

() C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe

(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe

() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe

(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe

(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16330272 2009-07-02] (NVIDIA Corporation)

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [617856 2009-07-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)

HKCU\...\Policies\system: [LogonHoursAction] 2

HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Cyberlink\MediaShowEspresso\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\Cyberlink\PowerDirector\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe [87336 2009-04-28] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-08-15] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [8493624 2009-07-07] (ASUS)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [159744 2009-04-20] (ASUS)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.)

HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1655296 2010-09-05] (Dominik Reichl)

HKU\Kinder\...\Policies\system: [LogonHoursAction] 2

HKU\Kinder\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\Sicherheitstest\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [975288 2012-07-02] (Samsung)

HKU\Sicherheitstest\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]

HKU\Sicherheitstest\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()

HKU\Sicherheitstest\...\Policies\system: [LogonHoursAction] 2

HKU\Sicherheitstest\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\Ute\...\Run: [SkypePM] - C:\Users\Ute\AppData\Local\Skype\SkypePM.exe [x]

HKU\Ute\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()

HKU\Ute\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Ute\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]

HKU\Ute\...\Policies\system: [LogonHoursAction] 2

HKU\Ute\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk

ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)

Startup: C:\Users\Sicherheitstest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk

ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()

Startup: C:\Users\Ute\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Product Registration.lnk

ShortcutTarget: Product Registration.lnk -> C:\Users\ADMIN\AppData\Local\Temp\is-D6743.tmp\ATR1.exe (No File)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search

BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO-x32: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File

DPF: HKLM-x32 {55963676-2F5E-4BAF-AC28-CF26AA587566} https://sslvpn.uni-potsdam.de/CACHE/stc/1/binaries/vpnweb.cab

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()

FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: No Name - C:\Users\ADMIN\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\128.xpi
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [108289 2009-05-13] (Avira GmbH)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [185089 2009-07-21] (Avira GmbH)

S2 ASUSRDVDService; C:\Program Files (x86)\ASUS\AI Recovery\ServiceSimple2.exe [109184 2009-09-11] ()

R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)

R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [344064 2009-04-08] (AVerMedia)

R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [405504 2008-12-09] ()

S2 FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [306232 2009-07-24] (ASUSTeK Computer Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-01-21] ()

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

R2 TwonkyProxy; C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe [545608 2012-07-09] ()

R2 TwonkyServer; C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe [549704 2012-07-09] (PacketVideo)

R2 TwonkyWebDav; C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe [271176 2012-07-09] ()
 

==================== Drivers (Whitelisted) ====================
 

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)

R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()

R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)

R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)

R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()

S3 AVerAF15DMBTH64; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [592256 2009-07-27] (AVerMedia TECHNOLOGIES, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [74880 2009-11-25] (Avira GmbH)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-05-20] ()

S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [203544 2013-02-06] (DEVGURU Co., LTD.(www.devguru.co.kr))

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe

2013-08-28 08:45 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe

2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe

2013-08-27 19:59 - 2013-08-27 20:00 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe

2013-08-27 19:40 - 2013-08-27 19:41 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe

2013-08-27 00:34 - 2013-08-27 00:34 - 00000000 ____D C:\Windows\system32\SPReview

2013-08-26 23:09 - 2013-08-26 23:47 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part

2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG

2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-08-26 20:15 - 2009-10-10 05:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird

2013-08-26 19:37 - 2013-08-26 19:38 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe

2013-08-26 17:33 - 2011-02-19 08:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions

2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt

2013-08-25 11:56 - 2013-08-25 11:57 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe

2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt

2013-08-23 10:35 - 2013-08-23 10:37 - 02347384 _____ (ESET) C:\Users\ADMIN\Downloads\esetsmartinstaller_enu.exe

2013-08-22 21:19 - 2013-04-04 14:50 - 00887432 _____ (Malwarebytes Corporation) C:\Users\ADMIN\Desktop\mbam.exe

2013-08-22 15:12 - 2013-08-28 09:20 - 00039035 _____ C:\Users\ADMIN\Desktop\Addition.txt

2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT

2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe

2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt

2013-08-22 11:40 - 2013-08-22 11:41 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt

2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-21 23:41 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys

2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files\iTunes

2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer

2013-08-21 23:01 - 2013-08-21 23:03 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe

2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI

2013-08-21 22:57 - 2013-08-21 22:58 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe

2013-08-21 21:00 - 2013-08-27 20:33 - 00000000 ____D C:\AdwCleaner

2013-08-21 17:22 - 2013-08-21 17:29 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe

2013-08-21 14:30 - 2013-08-21 14:31 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt

2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt

2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST

2013-08-21 14:24 - 2013-08-21 14:25 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe

2013-08-21 14:19 - 2013-08-21 14:20 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe

2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG

2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT

2013-08-21 12:56 - 2013-08-28 08:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job

2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler

2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk

2013-08-17 12:24 - 2013-08-25 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-15 11:32 - 2013-08-15 11:34 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk

2013-08-13 00:18 - 2010-09-14 08:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll

2013-08-13 00:18 - 2010-09-14 08:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll

2013-08-13 00:10 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-08-13 00:10 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2013-08-13 00:10 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2013-08-13 00:10 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2013-08-13 00:05 - 2013-08-15 10:53 - 00000000 ____D C:\Windows\system32\MRT

2013-08-12 23:55 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2013-08-12 23:55 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2013-08-12 23:55 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2013-08-12 23:55 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2013-08-12 23:55 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2013-08-12 23:55 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2013-08-12 23:55 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2013-08-12 23:55 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2013-08-12 10:42 - 2012-01-03 08:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2013-08-12 10:42 - 2012-01-03 07:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl

2013-08-12 10:42 - 2011-05-04 07:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2013-08-12 10:42 - 2011-05-04 07:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2013-08-12 10:42 - 2011-05-04 07:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2013-08-12 10:42 - 2011-05-04 07:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2013-08-12 10:42 - 2011-05-04 06:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-08-12 10:42 - 2011-05-04 06:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-08-12 10:42 - 2011-05-04 06:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-08-12 10:42 - 2011-05-04 06:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2013-08-12 10:42 - 2011-02-24 08:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2013-08-12 10:42 - 2011-02-24 07:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-08-12 10:42 - 2010-08-04 09:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2013-08-12 10:42 - 2010-01-19 11:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2013-08-12 10:42 - 2010-01-19 11:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2013-08-12 10:42 - 2010-01-19 11:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2013-08-12 10:42 - 2010-01-19 11:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2013-08-12 10:42 - 2010-01-19 01:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2013-08-12 10:42 - 2010-01-19 01:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2013-08-12 10:42 - 2010-01-19 01:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2013-08-12 10:42 - 2010-01-19 01:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2013-08-12 10:42 - 2010-01-19 01:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2013-08-12 10:42 - 2010-01-19 01:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2013-08-12 10:41 - 2012-07-06 21:58 - 00552448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2013-08-12 10:41 - 2012-01-04 11:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2013-08-12 10:41 - 2012-01-04 11:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2013-08-12 10:41 - 2011-06-16 07:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2013-08-12 10:41 - 2011-06-16 06:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll

2013-08-12 10:41 - 2011-02-26 08:23 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2013-08-12 10:41 - 2011-02-26 07:33 - 02614784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2013-08-12 10:40 - 2012-08-02 19:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-08-12 10:40 - 2012-08-02 19:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2013-08-12 10:40 - 2012-05-02 07:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2013-08-12 10:40 - 2011-04-22 22:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2013-08-12 10:40 - 2011-03-12 14:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2013-08-12 10:40 - 2011-03-12 13:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll

2013-08-12 10:40 - 2010-12-21 08:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll

2013-08-12 10:40 - 2010-12-21 08:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll

2013-08-12 10:40 - 2010-12-21 08:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll

2013-08-12 10:40 - 2010-12-21 07:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2013-08-12 10:39 - 2012-12-07 07:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2013-08-12 10:39 - 2012-12-07 07:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2013-08-12 10:39 - 2012-12-07 07:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2013-08-12 10:39 - 2012-12-07 06:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2013-08-12 10:39 - 2012-12-07 05:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs

2013-08-12 10:39 - 2012-11-22 12:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2013-08-12 10:39 - 2012-11-22 11:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2013-08-12 10:38 - 2012-11-30 01:21 - 00420032 _____ C:\Windows\SysWOW64\locale.nls

2013-08-12 10:38 - 2012-11-30 01:19 - 00420032 _____ C:\Windows\system32\locale.nls

2013-08-12 10:38 - 2012-04-07 14:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2013-08-12 10:38 - 2012-04-07 13:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2013-08-12 10:36 - 2011-03-25 05:23 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-08-12 10:36 - 2011-03-25 05:23 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-08-12 10:36 - 2011-03-25 05:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00187264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys

2013-08-12 10:36 - 2011-03-11 08:22 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys

2013-08-12 10:36 - 2011-03-11 08:22 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys

2013-08-12 10:36 - 2011-03-11 08:18 - 02566144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2013-08-12 10:36 - 2011-03-11 08:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe

2013-08-12 10:36 - 2011-03-11 07:39 - 01686016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2013-08-12 10:36 - 2011-03-11 07:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe

2013-08-12 10:36 - 2011-03-11 06:31 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2013-08-12 10:35 - 2013-01-24 07:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2013-08-12 10:35 - 2012-05-05 10:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2013-08-12 10:35 - 2012-05-05 09:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2013-08-12 10:35 - 2012-02-11 08:29 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2013-08-12 10:35 - 2012-02-11 08:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

2013-08-12 10:35 - 2011-03-25 05:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-08-12 10:35 - 2011-03-25 05:22 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2013-08-12 10:35 - 2011-03-25 05:22 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-08-12 10:35 - 2011-03-25 05:22 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-08-12 10:35 - 2011-02-18 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2013-08-12 10:35 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe

2013-08-12 10:01 - 2010-03-04 06:40 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys

2013-08-12 10:01 - 2010-03-04 06:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2

2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg

2013-08-09 14:35 - 2013-08-14 10:48 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service

2013-08-09 13:55 - 2013-08-09 16:09 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe

2013-08-09 13:52 - 2013-08-09 16:00 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe

2013-08-09 13:49 - 2013-08-11 21:55 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl

2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes
 

==================== One Month Modified Files and Folders =======
 

2013-08-28 10:05 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-28 10:05 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-28 10:01 - 2009-11-06 21:11 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-28 09:57 - 2012-12-23 17:19 - 00000000 ____D C:\ProgramData\TwonkyServer

2013-08-28 09:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-28 09:56 - 2009-07-14 06:51 - 00240109 _____ C:\Windows\setupact.log

2013-08-28 09:55 - 2009-10-08 05:25 - 01379952 _____ C:\Windows\WindowsUpdate.log

2013-08-28 09:52 - 2013-08-28 09:52 - 00001102 _____ C:\Users\ADMIN\Desktop\JRT.txt

2013-08-28 09:25 - 2013-03-16 10:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-08-28 09:23 - 2009-11-06 21:11 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-28 09:20 - 2013-08-22 15:12 - 00039035 _____ C:\Users\ADMIN\Desktop\Addition.txt

2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe

2013-08-28 08:56 - 2013-08-21 12:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job

2013-08-28 08:43 - 2013-08-28 08:45 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe

2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe

2013-08-28 07:20 - 2009-10-08 06:23 - 00051484 _____ C:\Windows\PFRO.log

2013-08-27 20:33 - 2013-08-21 21:00 - 00000000 ____D C:\AdwCleaner

2013-08-27 20:00 - 2013-08-27 19:59 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe

2013-08-27 19:41 - 2013-08-27 19:40 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe

2013-08-27 00:34 - 2013-08-27 00:34 - 00000000 ____D C:\Windows\system32\SPReview

2013-08-26 23:47 - 2013-08-26 23:09 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part

2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 21:57 - 2012-02-23 09:54 - 00008909 _____ C:\Windows\IE9_main.log

2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG

2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird

2013-08-26 19:38 - 2013-08-26 19:37 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe

2013-08-26 17:34 - 2013-01-04 15:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2013-08-25 23:06 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-25 21:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2013-08-25 13:18 - 2009-10-08 06:24 - 00001927 _____ C:\Windows\system32\ServiceFilter.ini

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions

2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt

2013-08-25 11:57 - 2013-08-25 11:56 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe

2013-08-25 11:47 - 2013-08-17 12:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt

2013-08-23 10:37 - 2013-08-23 10:35 - 02347384 _____ (ESET) C:\Users\ADMIN\Downloads\esetsmartinstaller_enu.exe

2013-08-23 10:37 - 2009-08-04 11:51 - 00654166 _____ C:\Windows\system32\perfh007.dat

2013-08-23 10:37 - 2009-08-04 11:51 - 00130006 _____ C:\Windows\system32\perfc007.dat

2013-08-23 10:37 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-22 18:38 - 2013-04-09 18:07 - 00000000 ___RD C:\Users\Ute\Dropbox

2013-08-22 18:38 - 2012-05-26 14:14 - 00000000 ____D C:\Users\Ute\AppData\Roaming\Dropbox

2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT

2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe

2013-08-22 13:36 - 2009-10-08 06:24 - 00002488 _____ C:\Windows\system32\AutoRunFilter.ini

2013-08-22 13:35 - 2009-07-14 06:45 - 00467816 _____ C:\Windows\system32\FNTCACHE.DAT

2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt

2013-08-22 11:41 - 2013-08-22 11:40 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt

2013-08-22 08:27 - 2009-11-11 01:08 - 00129424 _____ C:\Users\ADMIN\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-21 23:47 - 2010-02-14 22:28 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2

2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iTunes

2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer

2013-08-21 23:03 - 2013-08-21 23:01 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe

2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI

2013-08-21 22:58 - 2013-08-21 22:57 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe

2013-08-21 22:02 - 2009-10-30 18:54 - 00129424 _____ C:\Users\Ute\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-21 21:33 - 2012-01-15 21:41 - 00000000 ____D C:\Program Files (x86)\Free YouTube to MP3 Converter

2013-08-21 21:29 - 2013-02-22 12:55 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-08-21 21:29 - 2009-10-08 06:07 - 00000000 ____D C:\ProgramData\Adobe

2013-08-21 21:05 - 2012-05-18 20:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-08-21 18:41 - 2009-11-11 22:45 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Adobe

2013-08-21 17:31 - 2010-03-29 23:05 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2013-08-21 17:29 - 2013-08-21 17:22 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe

2013-08-21 14:31 - 2013-08-21 14:30 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt

2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt

2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST

2013-08-21 14:25 - 2013-08-21 14:24 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe

2013-08-21 14:20 - 2013-08-21 14:19 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe

2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG

2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT

2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler

2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk

2013-08-20 20:30 - 2013-03-16 10:32 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-08-20 20:30 - 2012-09-13 20:42 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-08-20 20:30 - 2011-11-19 21:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-08-20 19:42 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-08-16 11:51 - 2010-08-02 23:26 - 00000000 ____D C:\Program Files (x86)\ElsterFormular

2013-08-16 11:08 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN

2013-08-15 11:54 - 2013-07-22 17:57 - 00001111 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-08-15 11:54 - 2013-07-22 17:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-08-15 11:34 - 2013-08-15 11:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-08-15 10:55 - 2009-10-08 05:32 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-08-15 10:53 - 2013-08-13 00:05 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 10:49 - 2010-10-02 13:20 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-14 20:15 - 2012-05-09 14:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Adobe

2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk

2013-08-14 17:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-08-14 10:48 - 2013-08-09 14:35 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute

2013-08-14 10:48 - 2012-05-09 00:10 - 00129816 _____ C:\Users\Sicherheitstest\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-14 07:17 - 2010-02-14 22:32 - 00000000 ____D C:\Users\Ute\AppData\Roaming\KeePass

2013-08-13 12:04 - 2011-04-06 21:23 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-08-11 22:06 - 2010-10-01 21:25 - 00000000 ____D C:\Windows\pss

2013-08-11 22:01 - 2009-12-19 00:27 - 00000000 ____D C:\Program Files (x86)\Spiele

2013-08-11 21:58 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic

2013-08-11 21:55 - 2013-08-09 13:49 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl

2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2

2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg

2013-08-09 16:09 - 2013-08-09 13:55 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe

2013-08-09 16:00 - 2013-08-09 13:52 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe

2013-08-09 14:35 - 2009-12-17 22:43 - 00001322 _____ C:\Windows\wiso.ini

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service

2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes

2013-08-08 23:03 - 2011-11-22 11:39 - 00002214 _____ C:\Users\Public\Desktop\Google Earth.lnk
 

Files to move or delete:

====================

C:\Users\ADMIN\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

C:\Users\Sicherheitstest\AppData\Local\Temp\drm_dyndata_7380006.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\isp7787.tmp\_Setup.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3_x64.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\msiexec.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\vcredist_x86.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DSETUP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\dsetup32.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DXSETUP.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\be29e7f1-71ae-4703-50cb-1d52be512f51\twapi-be29e7f1-71ae-4703-50cb-1d52be512f51.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe

C:\Users\Ute\AppData\Local\Temp\~nsu.tmp\Au_.exe

C:\Users\Ute\AppData\Local\Temp\{2650056B-FA80-44FF-836B-A7B42BAB0436}\InstallFlashPlayer.exe

C:\Users\Ute\AppData\Local\Temp\WLZ345C.tmp\CddbLangDE.dll

C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\DropboxNSISTools.dll

C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\UAC.dll

C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\DropboxNSISTools.dll

C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\UAC.dll

C:\Users\Ute\AppData\Local\Temp\MozUpdater-2\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater-1\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-3\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-2\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-1\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe

C:\Users\Ute\AppData\Local\Temp\IXP380.TMP\SetupAdmin.exe

C:\Users\Ute\AppData\Local\Temp\is357113909\OpenItSetup.exe

C:\Users\Ute\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-22 07:16
 

==================== End Of Log ============================

--- --- ---

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Guten Morgen,
ich habe gestern den ganzen Tag eset laufen lassen, leider kann ich dir das log nicht schicken, weil ich blöderweise den "uninstall"-button gedrückt hatte beim finish :-( Das Programm hatte aber drei Orte gefunden mit Threats, die ich mir notiert hatte:

C:/AdwCleaner/Quarantine/C/ProgramFiles(x86)/LyriXeeker/
C:/AdwCleaner/Quarantine/C/ProgramFiles(x86)/LyriXeeker/...
C:/AdwCleaner/Quarantine/C/ProgramFiles(x86)/Optimizer Pro

wenn ich in C:/AdwCleaner/Quarantine/C/ProgramFiles(x86) hineingehe, finden sich da auch noch "Common Files", "Delta", "Mozilla Firefox", "Openit", "vShare.TV Plugin".

Kann ich das alles mit Rechtsklick auf der Maus löschen? Muss ich etwas bedenken? Kann ich alles unter "Quarantine" mit Löschtaste löschen????

Ich wäre dir sehr dankbar für einen Tipp!

Hier nun noch log txt von security check, es folgt aktuelles frstlog...

Code:

 

Results of screen317's Security Check version 0.99.72  

 Windows 7  x64 (UAC is enabled)  

 Out of date service pack!! 
 ``````````````Antivirus/Firewall Check:`````````````` 

avast! Antivirus   

AntiVir Desktop    

 Antivirus up to date!   
 `````````Anti-malware/Other Utilities Check:````````` 

 Spybot - Search & Destroy 

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 Java 7 Update 25  

 Adobe Flash Player 11.8.800.94  

 Adobe Reader XI  

 Mozilla Firefox (23.0.1) 

 Mozilla Thunderbird (17.0.8) 
 ````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbamgui.exe  

 Spybot Teatimer.exe is disabled! 

 Avira Antivir avguard.exe 

 Malwarebytes' Anti-Malware mbamscheduler.exe   

 AVAST Software Avast AvastSvc.exe  

 AVAST Software Avast AvastUI.exe  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

P.S.: Zum Out of Date Service Pack für Windows: Wie schon gesagt, jedes Mal kommt der Fehler beim Versuch die Aktualisierung des ServicePacks downzuloaden. Hast du auch da einen Rat???

Nachtrag:
Hier das Frst-Log:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013

Ran by ADMIN (administrator) on 29-08-2013 08:49:46

Running from C:\Users\ADMIN\Desktop

Windows 7 Home Premium (X64) OS Language: German Standard

Internet Explorer Version 8

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe

() C:\Program Files\ATKGFNEX\GFNEXSrv.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe

() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

() C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe

(PacketVideo) C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe

() C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe

(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe

() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe

(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [16330272 2009-07-02] (NVIDIA Corporation)

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [617856 2009-07-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)

HKCU\...\Policies\system: [LogonHoursAction] 2

HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Cyberlink\MediaShowEspresso\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\Cyberlink\PowerDirector\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe [87336 2009-04-28] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-08-15] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [8493624 2009-07-07] (ASUS)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [159744 2009-04-20] (ASUS)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.)

HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1655296 2010-09-05] (Dominik Reichl)

HKU\Kinder\...\Policies\system: [LogonHoursAction] 2

HKU\Kinder\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\Sicherheitstest\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [975288 2012-07-02] (Samsung)

HKU\Sicherheitstest\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]

HKU\Sicherheitstest\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()

HKU\Sicherheitstest\...\Policies\system: [LogonHoursAction] 2

HKU\Sicherheitstest\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\Ute\...\Run: [SkypePM] - C:\Users\Ute\AppData\Local\Skype\SkypePM.exe [x]

HKU\Ute\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-02] ()

HKU\Ute\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Ute\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]

HKU\Ute\...\Policies\system: [LogonHoursAction] 2

HKU\Ute\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk

ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)

Startup: C:\Users\Sicherheitstest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk

ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()

Startup: C:\Users\Ute\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Product Registration.lnk

ShortcutTarget: Product Registration.lnk -> C:\Users\ADMIN\AppData\Local\Temp\is-D6743.tmp\ATR1.exe (No File)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search

BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO-x32: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File

DPF: HKLM-x32 {55963676-2F5E-4BAF-AC28-CF26AA587566} https://sslvpn.uni-potsdam.de/CACHE/stc/1/binaries/vpnweb.cab

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\0yhqvmi4.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()

FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: No Name - C:\Users\ADMIN\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\128.xpi
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [108289 2009-05-13] (Avira GmbH)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [185089 2009-07-21] (Avira GmbH)

S2 ASUSRDVDService; C:\Program Files (x86)\ASUS\AI Recovery\ServiceSimple2.exe [109184 2009-09-11] ()

R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)

R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [344064 2009-04-08] (AVerMedia)

R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [405504 2008-12-09] ()

S2 FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [306232 2009-07-24] (ASUSTeK Computer Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-01-21] ()

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

R2 TwonkyProxy; C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe [545608 2012-07-09] ()

R2 TwonkyServer; C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe [549704 2012-07-09] (PacketVideo)

R2 TwonkyWebDav; C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe [271176 2012-07-09] ()
 

==================== Drivers (Whitelisted) ====================
 

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)

R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()

R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)

R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)

R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()

S3 AVerAF15DMBTH64; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [592256 2009-07-27] (AVerMedia TECHNOLOGIES, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [74880 2009-11-25] (Avira GmbH)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-05-20] ()

S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [203544 2013-02-06] (DEVGURU Co., LTD.(www.devguru.co.kr))

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-29 08:05 - 2013-08-25 11:57 - 00891115 _____ C:\Users\ADMIN\Desktop\SecurityCheck.exe

2013-08-28 23:54 - 2013-08-28 23:54 - 00000000 ____D C:\Windows\system32\SPReview

2013-08-28 09:52 - 2013-08-28 09:52 - 00001102 _____ C:\Users\ADMIN\Desktop\JRT.txt

2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe

2013-08-28 08:45 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe

2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe

2013-08-27 19:59 - 2013-08-27 20:00 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe

2013-08-27 19:40 - 2013-08-27 19:41 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe

2013-08-26 23:09 - 2013-08-26 23:47 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part

2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG

2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-08-26 20:15 - 2009-10-10 05:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys

2013-08-26 20:09 - 2013-08-29 08:30 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird

2013-08-26 19:37 - 2013-08-26 19:38 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe

2013-08-26 17:33 - 2011-02-19 08:37 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions

2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt

2013-08-25 11:56 - 2013-08-25 11:57 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe

2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt

2013-08-22 21:19 - 2013-04-04 14:50 - 00887432 _____ (Malwarebytes Corporation) C:\Users\ADMIN\Desktop\mbam.exe

2013-08-22 15:12 - 2013-08-28 09:20 - 00039035 _____ C:\Users\ADMIN\Desktop\Addition.txt

2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT

2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe

2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt

2013-08-22 11:40 - 2013-08-22 11:41 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt

2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-21 23:41 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys

2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files\iTunes

2013-08-21 23:40 - 2013-08-21 23:41 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer

2013-08-21 23:01 - 2013-08-21 23:03 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe

2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI

2013-08-21 22:57 - 2013-08-21 22:58 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe

2013-08-21 21:00 - 2013-08-27 20:33 - 00000000 ____D C:\AdwCleaner

2013-08-21 17:22 - 2013-08-21 17:29 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe

2013-08-21 14:30 - 2013-08-21 14:31 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt

2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt

2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST

2013-08-21 14:24 - 2013-08-21 14:25 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe

2013-08-21 14:19 - 2013-08-21 14:20 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe

2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG

2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT

2013-08-21 12:56 - 2013-08-29 07:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job

2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler

2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk

2013-08-17 12:24 - 2013-08-25 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-15 11:32 - 2013-08-15 11:34 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk

2013-08-13 00:18 - 2010-09-14 08:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll

2013-08-13 00:18 - 2010-09-14 08:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll

2013-08-13 00:10 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-08-13 00:10 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2013-08-13 00:10 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2013-08-13 00:10 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2013-08-13 00:05 - 2013-08-15 10:53 - 00000000 ____D C:\Windows\system32\MRT

2013-08-12 23:55 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2013-08-12 23:55 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2013-08-12 23:55 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2013-08-12 23:55 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2013-08-12 23:55 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2013-08-12 23:55 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2013-08-12 23:55 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2013-08-12 23:55 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2013-08-12 10:42 - 2012-01-03 08:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2013-08-12 10:42 - 2012-01-03 07:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl

2013-08-12 10:42 - 2011-05-04 07:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2013-08-12 10:42 - 2011-05-04 07:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2013-08-12 10:42 - 2011-05-04 07:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2013-08-12 10:42 - 2011-05-04 07:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2013-08-12 10:42 - 2011-05-04 07:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2013-08-12 10:42 - 2011-05-04 06:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-08-12 10:42 - 2011-05-04 06:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-08-12 10:42 - 2011-05-04 06:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-08-12 10:42 - 2011-05-04 06:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-08-12 10:42 - 2011-05-04 06:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2013-08-12 10:42 - 2011-02-24 08:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2013-08-12 10:42 - 2011-02-24 07:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-08-12 10:42 - 2010-08-04 09:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2013-08-12 10:42 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2013-08-12 10:42 - 2010-01-19 11:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2013-08-12 10:42 - 2010-01-19 11:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2013-08-12 10:42 - 2010-01-19 11:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2013-08-12 10:42 - 2010-01-19 11:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2013-08-12 10:42 - 2010-01-19 01:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2013-08-12 10:42 - 2010-01-19 01:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2013-08-12 10:42 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2013-08-12 10:42 - 2010-01-19 01:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2013-08-12 10:42 - 2010-01-19 01:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2013-08-12 10:42 - 2010-01-19 01:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2013-08-12 10:42 - 2010-01-19 01:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2013-08-12 10:41 - 2012-07-06 21:58 - 00552448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2013-08-12 10:41 - 2012-01-04 11:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2013-08-12 10:41 - 2012-01-04 11:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2013-08-12 10:41 - 2011-06-16 07:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2013-08-12 10:41 - 2011-06-16 06:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll

2013-08-12 10:41 - 2011-02-26 08:23 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2013-08-12 10:41 - 2011-02-26 07:33 - 02614784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2013-08-12 10:40 - 2012-08-02 19:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-08-12 10:40 - 2012-08-02 19:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2013-08-12 10:40 - 2012-05-02 07:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2013-08-12 10:40 - 2011-04-22 22:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2013-08-12 10:40 - 2011-03-12 14:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2013-08-12 10:40 - 2011-03-12 13:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2013-08-12 10:40 - 2010-12-21 08:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll

2013-08-12 10:40 - 2010-12-21 08:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll

2013-08-12 10:40 - 2010-12-21 08:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll

2013-08-12 10:40 - 2010-12-21 08:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll

2013-08-12 10:40 - 2010-12-21 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll

2013-08-12 10:40 - 2010-12-21 07:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2013-08-12 10:39 - 2012-12-07 07:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2013-08-12 10:39 - 2012-12-07 07:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2013-08-12 10:39 - 2012-12-07 07:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2013-08-12 10:39 - 2012-12-07 06:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2013-08-12 10:39 - 2012-12-07 05:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2013-08-12 10:39 - 2012-12-07 05:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs

2013-08-12 10:39 - 2012-12-07 05:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs

2013-08-12 10:39 - 2012-11-22 12:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2013-08-12 10:39 - 2012-11-22 11:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2013-08-12 10:38 - 2012-11-30 01:21 - 00420032 _____ C:\Windows\SysWOW64\locale.nls

2013-08-12 10:38 - 2012-11-30 01:19 - 00420032 _____ C:\Windows\system32\locale.nls

2013-08-12 10:38 - 2012-04-07 14:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2013-08-12 10:38 - 2012-04-07 13:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2013-08-12 10:36 - 2011-03-25 05:23 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-08-12 10:36 - 2011-03-25 05:23 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-08-12 10:36 - 2011-03-25 05:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00187264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys

2013-08-12 10:36 - 2011-03-11 08:23 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys

2013-08-12 10:36 - 2011-03-11 08:22 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys

2013-08-12 10:36 - 2011-03-11 08:22 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys

2013-08-12 10:36 - 2011-03-11 08:18 - 02566144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2013-08-12 10:36 - 2011-03-11 08:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe

2013-08-12 10:36 - 2011-03-11 07:39 - 01686016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2013-08-12 10:36 - 2011-03-11 07:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe

2013-08-12 10:36 - 2011-03-11 06:31 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2013-08-12 10:35 - 2013-01-24 07:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2013-08-12 10:35 - 2012-05-05 10:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2013-08-12 10:35 - 2012-05-05 09:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2013-08-12 10:35 - 2012-02-11 08:29 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2013-08-12 10:35 - 2012-02-11 08:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

2013-08-12 10:35 - 2011-03-25 05:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-08-12 10:35 - 2011-03-25 05:22 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2013-08-12 10:35 - 2011-03-25 05:22 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-08-12 10:35 - 2011-03-25 05:22 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-08-12 10:35 - 2011-02-18 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2013-08-12 10:35 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe

2013-08-12 10:01 - 2010-03-04 06:40 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys

2013-08-12 10:01 - 2010-03-04 06:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2

2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg

2013-08-09 14:35 - 2013-08-14 10:48 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service

2013-08-09 13:55 - 2013-08-09 16:09 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe

2013-08-09 13:52 - 2013-08-09 16:00 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe

2013-08-09 13:49 - 2013-08-11 21:55 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl

2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes
 

==================== One Month Modified Files and Folders =======
 

2013-08-29 08:30 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Thunderbird

2013-08-29 08:30 - 2012-05-18 20:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-08-29 08:30 - 2010-02-05 23:42 - 00002088 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk

2013-08-29 08:30 - 2010-02-05 23:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-08-29 08:25 - 2013-08-29 08:22 - 19681592 _____ (Mozilla) C:\Users\ADMIN\Downloads\Thunderbird_Setup_17.0.8.exe

2013-08-29 08:25 - 2013-03-16 10:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-08-29 08:23 - 2009-11-06 21:11 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-29 07:56 - 2013-08-21 12:56 - 00000292 _____ C:\Windows\Tasks\MetaCrawler.job

2013-08-29 07:56 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-29 07:56 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-29 07:53 - 2009-11-06 21:11 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-29 07:48 - 2012-12-23 17:19 - 00000000 ____D C:\ProgramData\TwonkyServer

2013-08-29 07:47 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-29 07:47 - 2009-07-14 06:51 - 00240221 _____ C:\Windows\setupact.log

2013-08-28 23:58 - 2009-10-08 05:25 - 01494175 _____ C:\Windows\WindowsUpdate.log

2013-08-28 23:54 - 2013-08-28 23:54 - 00000000 ____D C:\Windows\system32\SPReview

2013-08-28 09:52 - 2013-08-28 09:52 - 00001102 _____ C:\Users\ADMIN\Desktop\JRT.txt

2013-08-28 09:20 - 2013-08-22 15:12 - 00039035 _____ C:\Users\ADMIN\Desktop\Addition.txt

2013-08-28 09:15 - 2013-08-28 09:15 - 01579080 _____ (Farbar) C:\Users\ADMIN\Desktop\FRST64.exe

2013-08-28 08:43 - 2013-08-28 08:45 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Desktop\TFC.exe

2013-08-28 08:43 - 2013-08-28 08:43 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe

2013-08-28 07:20 - 2009-10-08 06:23 - 00051484 _____ C:\Windows\PFRO.log

2013-08-27 20:33 - 2013-08-21 21:00 - 00000000 ____D C:\AdwCleaner

2013-08-27 20:00 - 2013-08-27 19:59 - 00994642 _____ C:\Users\ADMIN\Downloads\adwcleaner(1).exe

2013-08-27 19:41 - 2013-08-27 19:40 - 00994642 _____ C:\Users\ADMIN\Desktop\adwcleaner.exe

2013-08-26 23:47 - 2013-08-26 23:09 - 252113830 _____ (Microsoft Corporation) C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe.part

2013-08-26 23:09 - 2013-08-26 23:09 - 00000000 _____ C:\Users\Ute\Downloads\windows6.1-KB976932-X64.exe

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 21:57 - 2013-08-26 21:57 - 00000134 _____ C:\Users\Default User\Desktop\Internet Explorer-Problembehebung.url

2013-08-26 21:57 - 2012-02-23 09:54 - 00008909 _____ C:\Windows\IE9_main.log

2013-08-26 20:46 - 2013-08-26 20:46 - 00000056 _____ C:\Users\ADMIN\AppData\Roaming\WB.CFG

2013-08-26 20:43 - 2013-08-26 20:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-08-26 20:09 - 2013-08-26 20:09 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Thunderbird

2013-08-26 19:38 - 2013-08-26 19:37 - 00714816 _____ C:\Users\Ute\Downloads\ZipOpenerSetup.exe

2013-08-26 17:34 - 2013-01-04 15:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2013-08-25 23:06 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-25 21:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2013-08-25 13:18 - 2009-10-08 06:24 - 00001927 _____ C:\Windows\system32\ServiceFilter.ini

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\searchplugins

2013-08-25 12:37 - 2013-08-25 12:37 - 00000000 ____D C:\Windows\SysWOW64\Extensions

2013-08-25 12:13 - 2013-08-25 12:13 - 00001354 _____ C:\Users\ADMIN\Downloads\checkup security check.txt

2013-08-25 11:57 - 2013-08-29 08:05 - 00891115 _____ C:\Users\ADMIN\Desktop\SecurityCheck.exe

2013-08-25 11:57 - 2013-08-25 11:56 - 00891115 _____ C:\Users\ADMIN\Downloads\SecurityCheck.exe

2013-08-25 11:47 - 2013-08-17 12:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-23 17:45 - 2013-08-23 17:45 - 00000394 _____ C:\Users\ADMIN\Downloads\gefundene dinge.txt

2013-08-23 10:37 - 2009-08-04 11:51 - 00654166 _____ C:\Windows\system32\perfh007.dat

2013-08-23 10:37 - 2009-08-04 11:51 - 00130006 _____ C:\Windows\system32\perfc007.dat

2013-08-23 10:37 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-22 18:38 - 2013-04-09 18:07 - 00000000 ___RD C:\Users\Ute\Dropbox

2013-08-22 18:38 - 2012-05-26 14:14 - 00000000 ____D C:\Users\Ute\AppData\Roaming\Dropbox

2013-08-22 14:37 - 2013-08-22 14:37 - 00000000 ____D C:\Windows\ERUNT

2013-08-22 14:33 - 2013-08-22 14:33 - 01021455 _____ (Thisisu) C:\Users\ADMIN\Desktop\JRT.exe

2013-08-22 13:36 - 2009-10-08 06:24 - 00002488 _____ C:\Windows\system32\AutoRunFilter.ini

2013-08-22 13:35 - 2009-07-14 06:45 - 00467816 _____ C:\Windows\system32\FNTCACHE.DAT

2013-08-22 11:41 - 2013-08-22 11:41 - 00047924 _____ C:\Users\ADMIN\Downloads\FRST.txt

2013-08-22 11:41 - 2013-08-22 11:40 - 00036951 _____ C:\Users\ADMIN\Downloads\Addition.txt

2013-08-22 08:27 - 2009-11-11 01:08 - 00129424 _____ C:\Users\ADMIN\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-21 23:47 - 2010-02-14 22:28 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2

2013-08-21 23:42 - 2013-08-21 23:42 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iTunes

2013-08-21 23:41 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-08-21 23:40 - 2013-08-21 23:40 - 00000000 ____D C:\Program Files\iPod

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer

2013-08-21 23:38 - 2013-08-21 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer

2013-08-21 23:03 - 2013-08-21 23:01 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup.exe

2013-08-21 22:59 - 2013-08-21 22:59 - 00000000 ____D C:\Users\ADMIN\AppData\Local\Secunia PSI

2013-08-21 22:58 - 2013-08-21 22:57 - 03272136 _____ (Secunia) C:\Users\ADMIN\Downloads\PSISetup711.exe

2013-08-21 22:02 - 2009-10-30 18:54 - 00129424 _____ C:\Users\Ute\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-21 21:33 - 2012-01-15 21:41 - 00000000 ____D C:\Program Files (x86)\Free YouTube to MP3 Converter

2013-08-21 21:29 - 2013-02-22 12:55 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-08-21 21:29 - 2009-10-08 06:07 - 00000000 ____D C:\ProgramData\Adobe

2013-08-21 18:41 - 2009-11-11 22:45 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Adobe

2013-08-21 17:31 - 2010-03-29 23:05 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2013-08-21 17:29 - 2013-08-21 17:22 - 22240760 _____ (Mozilla) C:\Users\Ute\Downloads\Firefox Setup 23.0.1.exe

2013-08-21 14:31 - 2013-08-21 14:30 - 00044552 _____ C:\Users\Ute\Downloads\FRST.txt

2013-08-21 14:30 - 2013-08-21 14:30 - 00031682 _____ C:\Users\Ute\Downloads\Addition.txt

2013-08-21 14:27 - 2013-08-21 14:27 - 00000000 ____D C:\FRST

2013-08-21 14:25 - 2013-08-21 14:24 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64(1).exe

2013-08-21 14:20 - 2013-08-21 14:19 - 01576164 _____ (Farbar) C:\Users\Ute\Downloads\FRST64.exe

2013-08-21 13:55 - 2013-08-21 13:55 - 00000053 _____ C:\Users\Ute\AppData\Roaming\WB.CFG

2013-08-21 13:55 - 2013-08-21 13:55 - 00000005 _____ C:\Users\Ute\AppData\Roaming\WBPU-TTL.DAT

2013-08-21 12:56 - 2013-08-21 12:56 - 00003228 _____ C:\Windows\System32\Tasks\MetaCrawler

2013-08-21 12:54 - 2013-08-21 12:54 - 00001118 _____ C:\Users\Ute\Desktop\Continue Zip Opener Installation.lnk

2013-08-20 20:30 - 2013-03-16 10:32 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-08-20 20:30 - 2012-09-13 20:42 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-08-20 20:30 - 2011-11-19 21:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-08-20 19:42 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-08-16 11:51 - 2010-08-02 23:26 - 00000000 ____D C:\Program Files (x86)\ElsterFormular

2013-08-16 11:08 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN

2013-08-15 11:54 - 2013-07-22 17:57 - 00001111 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-08-15 11:54 - 2013-07-22 17:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-08-15 11:34 - 2013-08-15 11:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Ute\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-08-15 10:55 - 2009-10-08 05:32 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-08-15 10:53 - 2013-08-13 00:05 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 10:49 - 2010-10-02 13:20 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-14 20:15 - 2012-05-09 14:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Adobe

2013-08-14 19:29 - 2013-08-14 19:29 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk

2013-08-14 17:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-08-14 10:48 - 2013-08-09 14:35 - 00000000 ____D C:\Users\Sicherheitstest\Documents\Mein Steuer-Sparbuch Heute

2013-08-14 10:48 - 2012-05-09 00:10 - 00129816 _____ C:\Users\Sicherheitstest\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-14 07:17 - 2010-02-14 22:32 - 00000000 ____D C:\Users\Ute\AppData\Roaming\KeePass

2013-08-13 12:04 - 2011-04-06 21:23 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-08-11 22:06 - 2010-10-01 21:25 - 00000000 ____D C:\Windows\pss

2013-08-11 22:01 - 2009-12-19 00:27 - 00000000 ____D C:\Program Files (x86)\Spiele

2013-08-11 21:58 - 2009-11-11 01:07 - 00000000 ____D C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic

2013-08-11 21:55 - 2013-08-09 13:49 - 00003166 _____ C:\Windows\System32\Tasks\P4GIntlCtrl

2013-08-11 21:38 - 2013-08-11 21:38 - 00000000 ____D C:\5ff303b7a65d552e5c5f5d9f2de871d2

2013-08-11 18:14 - 2013-08-11 18:14 - 00007602 _____ C:\Users\Sicherheitstest\AppData\Local\Resmon.ResmonCfg

2013-08-09 16:09 - 2013-08-09 13:55 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317(1).exe

2013-08-09 16:00 - 2013-08-09 13:52 - 122679152 _____ C:\Users\Sicherheitstest\Downloads\WISOSteuersoftware2013Update208317.exe

2013-08-09 14:35 - 2009-12-17 22:43 - 00001322 _____ C:\Windows\wiso.ini

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Buhl Data Service

2013-08-09 14:05 - 2013-08-09 14:05 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Local\Buhl Data Service

2013-08-09 13:48 - 2013-08-09 13:48 - 00000000 ____D C:\Users\Sicherheitstest\AppData\Roaming\Malwarebytes

2013-08-08 23:03 - 2011-11-22 11:39 - 00002214 _____ C:\Users\Public\Desktop\Google Earth.lnk
 

Files to move or delete:

====================

C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Objlist.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\runprocesses.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\uninstalllist.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Other\cmdinfo.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Other\nircmdc.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Other\sed.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX1\SecurityCheck\Other\swreg.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Objlist.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\runprocesses.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\uninstalllist.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\cmdinfo.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\nircmdc.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\sed.exe

C:\Users\ADMIN\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\swreg.exe

C:\Users\ADMIN\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

C:\Users\Sicherheitstest\AppData\Local\Temp\drm_dyndata_7380006.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\isp7787.tmp\_Setup.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\dotnetfx3_x64.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\msiexec.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\G4WL\vcredist_x86.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DSETUP.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\dsetup32.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\DXREDIST\DXSETUP.exe

C:\Users\Sicherheitstest\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\be29e7f1-71ae-4703-50cb-1d52be512f51\twapi-be29e7f1-71ae-4703-50cb-1d52be512f51.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll

C:\Users\Sicherheitstest\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe

C:\Users\Ute\AppData\Local\Temp\~nsu.tmp\Au_.exe

C:\Users\Ute\AppData\Local\Temp\{2650056B-FA80-44FF-836B-A7B42BAB0436}\InstallFlashPlayer.exe

C:\Users\Ute\AppData\Local\Temp\WLZ345C.tmp\CddbLangDE.dll

C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\DropboxNSISTools.dll

C:\Users\Ute\AppData\Local\Temp\nskD620.tmp\UAC.dll

C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\DropboxNSISTools.dll

C:\Users\Ute\AppData\Local\Temp\nsj57F1.tmp\UAC.dll

C:\Users\Ute\AppData\Local\Temp\MozUpdater-2\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater-1\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-3\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-2\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate-1\updater.exe

C:\Users\Ute\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe

C:\Users\Ute\AppData\Local\Temp\IXP380.TMP\SetupAdmin.exe

C:\Users\Ute\AppData\Local\Temp\is357113909\OpenItSetup.exe

C:\Users\Ute\AppData\Local\Temp\eddc7256-89db-4cca-b033-99dfb18a93e9\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\d21c1630-fbb1-4fab-80f8-4131da508a52\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\c5b8145d-bf0f-4917-b9d7-e6d9a53cb9be\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\99cab429-f99d-4f69-9d04-113ad532bd0f\CliSecureRT.dll

C:\Users\Ute\AppData\Local\Temp\8617058b-a3d3-48b4-a4d4-721e1c253de4\CliSecureRT.dll
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-22 07:16
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Tausend Dank im Voraus für deine Antwort!!!

Zitat:

Kann ich das alles mit Rechtsklick auf der Maus löschen? Muss ich etwas bedenken? Kann ich alles unter "Quarantine" mit Löschtaste löschen????

Finger weg, das ist in Quarantäne von AdwCleaner. Das wird alles entfernt wenn wir unsere Tools entfernen, und zwar automatisch :)

Zitat:

P.S.: Zum Out of Date Service Pack für Windows: Wie schon gesagt, jedes Mal kommt der Fehler beim Versuch die Aktualisierung des ServicePacks downzuloaden. Hast du auch da einen Rat???

Schon mal versucht das Servicepack als Offline-Paket herunter zu laden und zu installieren? Also nicht über die Win Update Funtkion?

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Hi, ich wieder... also vielen Dank schon mal für deine Antworten!!! Ich versuche gleich das Servicepack offline herunterzuladen von der Microsoft-Windows-Seite... ; die drei Dateien von AdwCleaner Quarantäne hab ich also nicht mehr angefasst. Wann muss ich denn die Tools entfernen??? Und wie? Ach ja, bei Malwarebytes habe ich unlängst in dem Fenster, wo er einem die Viren anzeigt, die in Quarantäne stehen, auf den Button "Alle löschen" gedrückt. War das auch total falsch??? (Schreck!) Hier aber zunächst das fix log:

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-08-2013

Ran by ADMIN at 2013-08-29 10:28:43 Run:1

Running from C:\Users\ADMIN\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

HKU\Ute\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]

*****************
 

HKU\Ute\Software\Microsoft\Windows\CurrentVersion\Run\\Optimizer Pro => Value deleted successfully.
 

==== End of Fixlog ====

Nee passt, Quarantäne in MBAM kannste leeren :)

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Hallo, tausend Dank noch Mal für deine Geduld! Und deine sehr hilfreichen Tipps, die ich nach Möglichkeit alle umsetzen werde!!! Hier noch die letzten Dinge:

- Also, das Löschen aller Scanner etc. hat gut geklappt (ich hatte aber weder Defogger noch Combofix im Einsatz. Ich hoffe, da hatte ich nichts übersehen bei deinen Anweisungen!)

- Noch eine Nachfrage: In den Downloads einer der User-Konten finde ich immer noch den ZipOpenerSetup.exe; kann ich den einfach anklicken und mit Rechtsklick löschen??? Oder nicht anfassen?

Zum ewig scheiternden Windows 7 Servicepack 1-Update: Liegt wahrscheinlich laut microsoft an einer "Inkonsistenz im Windows Servicing Store", ich lade mir jetzt ein Systemupdate-Vorbereitungstool herunter und dann klappt es ja vielleicht...

P.S.: bin mit dem Update des Servicepacks trotzdem gescheitert. Weiß echt nicht, woran es noch liegen könnte :-(((

Zitat:

- Noch eine Nachfrage: In den Downloads einer der User-Konten finde ich immer noch den ZipOpenerSetup.exe; kann ich den einfach anklicken und mit Rechtsklick löschen??? Oder nicht anfassen?

einfach genau so löschen :)

Zitat:

P.S.: bin mit dem Update des Servicepacks trotzdem gescheitert. Weiß echt nicht, woran es noch liegen könnte :-(((

Update schon mal als Offline-Installation ( also nicht über Windows Update) geladen und versucht?