Trojaner-Board - Windows 8: "TR/Crypt.XPACK.Gen2" / "ADWARE/Amonetize.U.3"

Danke für die schnelle Antwort! :daumenhoc

Hier die gewünschten Dateien...

FRST.txt:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013

Ran by Florian (administrator) on FLO-LAPTOP on 27-09-2013 21:05:06

Running from C:\Users\Florian\Downloads

Windows 8 Pro (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Microsoft Corporation) C:\Windows\system32\dashost.exe

(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe

() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe

() C:\Program Files (x86)\PHotkey\ATouch64.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Dropbox, Inc.) C:\Users\Florian\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe

(Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\avcenter.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1597864 2013-02-15] (Valve Corporation)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-15] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-22] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-05] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)

HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Florian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8E0C79738E0BCE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GbR)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
 

FireFox:

========

FF ProfilePath: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox

FF NewTab: about:blank

FF Homepage: https://anonymous-proxy-servers.net

FF NetworkProxy: "ftp", "127.0.0.1"

FF NetworkProxy: "ftp_port", 4001

FF NetworkProxy: "gopher", "127.0.0.1"

FF NetworkProxy: "gopher_port", 4001

FF NetworkProxy: "http", "127.0.0.1"

FF NetworkProxy: "http_port", 4001

FF NetworkProxy: "socks_remote_dns", true

FF NetworkProxy: "ssl", "127.0.0.1"

FF NetworkProxy: "ssl_port", 4001

FF NetworkProxy: "type", 1

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\duckduckgo-ssl-javascript-free.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de-ssl.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-encrypted-no-personalization.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---deutsch.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---english.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-eng-ger.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-esp-ale.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-fra-all.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\metager2.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-deutsch.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-english.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https---deutsch.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: HTTPS-Everywhere - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\https-everywhere@eff.org

FF Extension: Cookie Monster - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{45d8ff86-d909-11db-9705-005056c00008}

FF Extension: unplug - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\unplug@compunach.xpi

FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593}.xpi

FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4}.xpi

FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()

S2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [805888 2012-11-28] ()

R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-10] (pdfforge GbR)

S2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-10] (pdfforge GbR)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132088 2013-09-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG)

R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [117632 2013-06-01] (Microsoft Corporation)

R3 L1C; C:\Windows\system32\DRIVERS\l1c51x64.sys [73840 2010-08-25] (Atheros Communications, Inc.)

S2 WIBUKEY; C:\Windows\SysWow64\DRIVERS\Wibukey.sys [67072 2001-11-28] (WIBU-SYSTEMS AG)

S2 WIBUKEY; SYSTEM32\DRIVERS\Wibukey.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-27 21:05 - 2013-09-27 21:05 - 00000000 ____D C:\FRST

2013-09-27 21:03 - 2013-09-27 21:03 - 01953854 _____ (Farbar) C:\Users\Florian\Downloads\FRST64.exe

2013-09-27 08:37 - 2013-09-27 20:36 - 98267320 _____ C:\Windows\SysWOW64\ᑭ靯Lů

2013-09-26 09:50 - 2013-09-26 09:50 - 00363520 _____ C:\Users\Florian\Downloads\Student Induction Checklist V3 - amended 1Mar2012 (2).xls

2013-09-24 22:46 - 2013-09-24 22:47 - 00000000 ____D C:\Users\Florian\Desktop\Praxissemester

2013-09-24 22:27 - 2013-09-24 22:27 - 00000000 ___HD C:\Users\Florian\Documents\Privat

2013-09-24 22:20 - 2013-09-24 22:33 - 00000000 ____D C:\Users\Florian\Desktop\Roadtrip

2013-09-24 20:53 - 2013-09-24 20:53 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox

2013-09-24 20:40 - 2013-09-24 20:43 - 00000000 ____D C:\Users\Florian\AppData\Roaming\JonDo

2013-09-24 20:40 - 2013-09-24 20:40 - 00000000 ____D C:\ProgramData\Sun

2013-09-24 20:40 - 2013-09-24 20:40 - 00000000 ____D C:\ProgramData\Oracle

2013-09-24 20:39 - 2013-09-24 20:39 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00000000 ____D C:\Program Files (x86)\Java

2013-09-24 19:42 - 2013-09-24 19:42 - 00000000 ____D C:\ProgramData\APN

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader.com

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Users\Florian\AppData\Local\Cool_Mirage

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Program Files (x86)\PutLockerDownloader

2013-09-21 22:17 - 2013-09-21 22:17 - 00284928 _____ C:\Windows\Minidump\092113-63875-01.dmp

2013-09-21 22:17 - 2013-09-21 22:17 - 00000000 ____D C:\Windows\Minidump

2013-09-21 22:16 - 2013-09-21 22:16 - 653703298 _____ C:\Windows\MEMORY.DMP

2013-09-21 22:16 - 2013-09-21 22:16 - 00424616 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-20 01:12 - 2013-09-20 01:12 - 00001789 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-20 01:11 - 2013-09-20 01:12 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-20 01:11 - 2013-09-20 01:12 - 00000000 ____D C:\Program Files\iTunes

2013-09-20 01:11 - 2013-09-20 01:12 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-20 01:11 - 2013-09-20 01:11 - 00000000 ____D C:\Program Files\iPod

2013-09-19 11:58 - 2013-09-20 23:59 - 98481651 _____ C:\Windows\SysWOW64\᯾直ᯠÄ„

2013-09-17 01:34 - 2013-09-17 05:16 - 741343232 _____ C:\Users\Florian\Downloads\ubuntu-12.04.3-desktop-i386.iso

2013-09-16 18:31 - 2013-09-16 18:33 - 00000000 ____D C:\Users\Florian\AppData\Local\Apps\Windows 7 USB DVD Download Tool

2013-09-16 18:31 - 2013-09-16 18:31 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool

2013-09-16 18:29 - 2013-09-16 18:29 - 02721168 _____ (Microsoft Corporation) C:\Users\Florian\Downloads\Windows7-USB-DVD1024-tool.exe

2013-09-15 22:29 - 2013-09-15 22:29 - 00001959 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Canneverbe Limited

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\ProgramData\Canneverbe Limited

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP

2013-09-15 15:28 - 2013-09-15 15:28 - 00000000 ____D C:\Users\Florian\Downloads\Windows 7 Professional with Service Pack 1 (x86) - DVD (German)

2013-09-13 01:19 - 2013-09-13 01:19 - 00000000 ____D C:\Users\Florian\AppData\Roaming\e-academy Inc

2013-09-13 01:19 - 2013-09-13 01:19 - 00000000 ____D C:\Users\Florian\AppData\Local\e-academy Inc

2013-09-13 01:18 - 2013-09-13 01:18 - 00000029 _____ C:\Users\Florian\Documents\Windows 7 Key.txt

2013-09-13 00:49 - 2013-08-07 13:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll

2013-09-13 00:02 - 2013-08-16 13:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys

2013-09-13 00:02 - 2013-08-16 13:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll

2013-09-13 00:02 - 2013-08-16 13:39 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2013-09-13 00:02 - 2013-08-16 13:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe

2013-09-13 00:02 - 2013-08-16 13:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe

2013-09-13 00:02 - 2013-08-16 13:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2013-09-13 00:02 - 2013-08-16 13:21 - 03275776 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2013-09-13 00:02 - 2013-08-16 13:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2013-09-13 00:02 - 2013-08-16 06:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2013-09-13 00:02 - 2013-08-16 06:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll

2013-09-13 00:02 - 2013-08-16 06:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll

2013-09-13 00:00 - 2013-08-21 12:12 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-13 00:00 - 2013-08-21 12:12 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-13 00:00 - 2013-08-21 12:11 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-13 00:00 - 2013-08-21 10:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-13 00:00 - 2013-08-21 10:06 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-13 00:00 - 2013-08-21 10:06 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-13 00:00 - 2013-08-21 10:06 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-13 00:00 - 2013-08-21 09:43 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-13 00:00 - 2013-08-21 07:52 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll

2013-09-12 23:59 - 2013-07-09 16:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys

2013-09-12 23:59 - 2013-07-09 14:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe

2013-09-12 23:59 - 2013-07-09 12:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe

2013-09-12 23:59 - 2013-07-09 11:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll

2013-09-12 23:59 - 2013-07-09 06:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll

2013-09-12 23:59 - 2013-07-09 06:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll

2013-09-12 23:59 - 2013-07-09 06:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll

2013-09-12 23:59 - 2013-07-09 06:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll

2013-09-12 23:59 - 2013-07-06 08:16 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2013-09-12 23:59 - 2013-07-03 08:23 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2013-09-12 23:59 - 2013-07-03 08:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll

2013-09-12 23:59 - 2013-07-03 08:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2013-09-12 23:59 - 2013-07-03 08:22 - 01300480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2013-09-12 23:59 - 2013-07-03 08:11 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2013-09-12 23:59 - 2013-07-03 08:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll

2013-09-12 23:59 - 2013-07-03 08:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll

2013-09-12 23:59 - 2013-07-02 06:08 - 00387583 _____ C:\Windows\system32\ApnDatabase.xml

2013-09-12 23:59 - 2013-07-01 06:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe

2013-09-12 23:59 - 2013-07-01 06:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe

2013-09-12 23:59 - 2013-06-29 14:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2013-09-12 23:59 - 2013-06-29 14:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2013-09-12 23:59 - 2013-06-29 13:43 - 00327512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys

2013-09-12 23:59 - 2013-06-29 09:12 - 01022464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2013-09-12 23:59 - 2013-06-26 11:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys

2013-09-12 23:59 - 2013-06-26 10:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys

2013-09-12 23:59 - 2013-06-25 06:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2013-09-12 23:59 - 2013-06-25 06:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll

2013-09-12 23:59 - 2013-06-25 06:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2013-09-12 23:59 - 2013-06-19 13:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll

2013-09-12 23:59 - 2013-06-19 13:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll

2013-09-12 23:59 - 2013-06-19 06:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll

2013-09-12 23:59 - 2013-06-19 06:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll

2013-09-12 23:59 - 2013-06-12 07:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll

2013-09-12 23:59 - 2013-06-12 07:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll

2013-09-12 23:59 - 2013-06-11 05:17 - 00096512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys

2013-09-12 23:59 - 2013-06-11 03:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2013-09-12 23:59 - 2013-06-11 03:15 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2013-09-12 23:59 - 2013-06-11 03:15 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL

2013-09-12 23:59 - 2013-06-11 03:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2013-09-12 23:59 - 2013-06-11 03:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2013-09-12 23:59 - 2013-06-11 03:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2013-09-12 23:59 - 2013-06-06 16:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2013-09-12 23:58 - 2013-08-03 12:30 - 04038144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-09 05:39 - 2013-09-09 05:39 - 00003140 _____ C:\Windows\System32\Tasks\{AF9EB865-779F-446F-8D2D-A3CCC4CCB0D2}

2013-08-31 05:11 - 2013-08-31 05:13 - 00000000 ____D C:\Program Files (x86)\TmNationsForever

2013-08-31 02:01 - 2013-08-31 02:32 - 00000000 ____D C:\Users\Florian\Desktop\LAN-Party
 

==================== One Month Modified Files and Folders =======
 

2013-09-27 21:05 - 2013-09-27 21:05 - 00000000 ____D C:\FRST

2013-09-27 21:04 - 2013-02-15 22:53 - 01817704 _____ C:\Windows\WindowsUpdate.log

2013-09-27 21:03 - 2013-09-27 21:03 - 01953854 _____ (Farbar) C:\Users\Florian\Downloads\FRST64.exe

2013-09-27 21:00 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\system32\sru

2013-09-27 20:46 - 2013-05-15 00:17 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Skype

2013-09-27 20:36 - 2013-09-27 08:37 - 98267320 _____ C:\Windows\SysWOW64\ᑭ靯Lů

2013-09-27 20:27 - 2013-02-16 01:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-27 18:40 - 2013-02-16 00:14 - 00000000 ___RD C:\Users\Florian\Dropbox

2013-09-27 18:40 - 2013-02-16 00:10 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Dropbox

2013-09-27 18:38 - 2012-07-26 18:27 - 00753134 _____ C:\Windows\system32\perfh007.dat

2013-09-27 18:38 - 2012-07-26 18:27 - 00155826 _____ C:\Windows\system32\perfc007.dat

2013-09-27 18:38 - 2012-07-26 15:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-27 10:24 - 2013-03-13 05:44 - 00000000 ____D C:\Users\Florian\AppData\Roaming\DVDVideoSoft

2013-09-26 19:32 - 2012-07-26 15:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-26 19:31 - 2013-02-15 22:30 - 00112416 _____ C:\Windows\PFRO.log

2013-09-26 19:31 - 2012-07-26 13:26 - 00262144 ___SH C:\Windows\system32\config\BBI

2013-09-26 16:17 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\AUInstallAgent

2013-09-26 09:50 - 2013-09-26 09:50 - 00363520 _____ C:\Users\Florian\Downloads\Student Induction Checklist V3 - amended 1Mar2012 (2).xls

2013-09-24 22:47 - 2013-09-24 22:46 - 00000000 ____D C:\Users\Florian\Desktop\Praxissemester

2013-09-24 22:34 - 2013-07-24 21:51 - 00000000 ____D C:\Users\Florian\Desktop\Bafög

2013-09-24 22:33 - 2013-09-24 22:20 - 00000000 ____D C:\Users\Florian\Desktop\Roadtrip

2013-09-24 22:27 - 2013-09-24 22:27 - 00000000 ___HD C:\Users\Florian\Documents\Privat

2013-09-24 22:26 - 2013-02-16 03:44 - 00000000 ____D C:\Users\Florian\Desktop\Florian

2013-09-24 20:53 - 2013-09-24 20:53 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox

2013-09-24 20:43 - 2013-09-24 20:40 - 00000000 ____D C:\Users\Florian\AppData\Roaming\JonDo

2013-09-24 20:40 - 2013-09-24 20:40 - 00000000 ____D C:\ProgramData\Sun

2013-09-24 20:40 - 2013-09-24 20:40 - 00000000 ____D C:\ProgramData\Oracle

2013-09-24 20:39 - 2013-09-24 20:39 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00000000 ____D C:\Program Files (x86)\Java

2013-09-24 19:42 - 2013-09-24 19:42 - 00000000 ____D C:\ProgramData\APN

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader.com

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Users\Florian\AppData\Local\Cool_Mirage

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Program Files (x86)\PutLockerDownloader

2013-09-23 21:50 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\system32\NDF

2013-09-22 00:28 - 2013-03-09 05:19 - 00181248 ___SH C:\Users\Florian\Desktop\Thumbs.db

2013-09-21 22:17 - 2013-09-21 22:17 - 00284928 _____ C:\Windows\Minidump\092113-63875-01.dmp

2013-09-21 22:17 - 2013-09-21 22:17 - 00000000 ____D C:\Windows\Minidump

2013-09-21 22:16 - 2013-09-21 22:16 - 653703298 _____ C:\Windows\MEMORY.DMP

2013-09-21 22:16 - 2013-09-21 22:16 - 00424616 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-21 22:15 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\LiveKernelReports

2013-09-20 23:59 - 2013-09-19 11:58 - 98481651 _____ C:\Windows\SysWOW64\᯾直ᯠÄ„

2013-09-20 01:12 - 2013-09-20 01:12 - 00001789 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-20 01:12 - 2013-09-20 01:11 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-20 01:12 - 2013-09-20 01:11 - 00000000 ____D C:\Program Files\iTunes

2013-09-20 01:12 - 2013-09-20 01:11 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-20 01:11 - 2013-09-20 01:11 - 00000000 ____D C:\Program Files\iPod

2013-09-19 07:26 - 2012-07-26 16:14 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-19 07:26 - 2012-07-26 16:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-17 07:27 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\WinStore

2013-09-17 07:27 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-09-17 07:27 - 2012-07-26 13:38 - 00000000 ____D C:\Windows\system32\oobe

2013-09-17 05:16 - 2013-09-17 01:34 - 741343232 _____ C:\Users\Florian\Downloads\ubuntu-12.04.3-desktop-i386.iso

2013-09-17 01:53 - 2012-07-26 15:21 - 00017792 _____ C:\Windows\setupact.log

2013-09-16 18:33 - 2013-09-16 18:31 - 00000000 ____D C:\Users\Florian\AppData\Local\Apps\Windows 7 USB DVD Download Tool

2013-09-16 18:31 - 2013-09-16 18:31 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool

2013-09-16 18:29 - 2013-09-16 18:29 - 02721168 _____ (Microsoft Corporation) C:\Users\Florian\Downloads\Windows7-USB-DVD1024-tool.exe

2013-09-15 22:29 - 2013-09-15 22:29 - 00001959 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Canneverbe Limited

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\ProgramData\Canneverbe Limited

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP

2013-09-15 15:28 - 2013-09-15 15:28 - 00000000 ____D C:\Users\Florian\Downloads\Windows 7 Professional with Service Pack 1 (x86) - DVD (German)

2013-09-13 22:55 - 2013-02-17 21:25 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-13 01:19 - 2013-09-13 01:19 - 00000000 ____D C:\Users\Florian\AppData\Roaming\e-academy Inc

2013-09-13 01:19 - 2013-09-13 01:19 - 00000000 ____D C:\Users\Florian\AppData\Local\e-academy Inc

2013-09-13 01:18 - 2013-09-13 01:18 - 00000029 _____ C:\Users\Florian\Documents\Windows 7 Key.txt

2013-09-13 01:10 - 2013-08-16 00:56 - 00000000 ____D C:\Windows\system32\MRT

2013-09-13 01:08 - 2013-02-16 19:40 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-11 03:49 - 2013-02-16 01:20 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-09 05:40 - 2013-05-17 20:12 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-09-09 05:40 - 2013-05-15 00:17 - 00000000 ____D C:\ProgramData\Skype

2013-09-09 05:39 - 2013-09-09 05:39 - 00003140 _____ C:\Windows\System32\Tasks\{AF9EB865-779F-446F-8D2D-A3CCC4CCB0D2}

2013-09-02 21:24 - 2013-05-09 23:31 - 00082136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-02 21:24 - 2013-03-28 07:04 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-02 21:24 - 2013-03-28 07:04 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-31 05:37 - 2013-03-24 06:56 - 00000000 ____D C:\Users\Florian\Documents\TmForever

2013-08-31 05:13 - 2013-08-31 05:11 - 00000000 ____D C:\Program Files (x86)\TmNationsForever

2013-08-31 05:13 - 2013-03-24 03:28 - 00226837 _____ C:\Windows\Directx.log

2013-08-31 02:32 - 2013-08-31 02:01 - 00000000 ____D C:\Users\Florian\Desktop\LAN-Party

2013-08-31 01:42 - 2013-02-15 23:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-08-31 01:41 - 2012-07-26 16:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2013-08-31 01:41 - 2012-07-26 16:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2013-08-31 01:41 - 2012-07-26 16:12 - 00000000 ____D C:\Program Files\Windows Defender

2013-08-31 01:41 - 2012-07-26 16:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
 

Some content of TEMP:

====================

C:\Users\Florian\AppData\Local\Temp\AskSLib.dll

C:\Users\Florian\AppData\Local\Temp\drm_dialogs.dll

C:\Users\Florian\AppData\Local\Temp\drm_dyndata_7290008.dll

C:\Users\Florian\AppData\Local\Temp\jre1.7.offline.exe

C:\Users\Florian\AppData\Local\Temp\mgsqlite3.dll

C:\Users\Florian\AppData\Local\Temp\qab5pkwj.dll

C:\Users\Florian\AppData\Local\Temp\xmlUpdater.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-20 03:00
 

==================== End Of Log ============================

--- --- ---

und Addition.txt:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-09-2013

Ran by Florian at 2013-09-27 21:06:21

Running from C:\Users\Florian\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)

Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)

Alcor Micro USB Card Reader (x32 Version: 1.8.1217.36096)

Apple Application Support (x32 Version: 2.3.6)

Apple Mobile Device Support (Version: 7.0.0.117)

Apple Software Update (x32 Version: 2.1.3.127)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.44)

Audiosurf (x32)

Avira Free Antivirus (x32 Version: 13.0.0.4052)

Bonjour (Version: 3.0.0.10)

CDBurnerXP (x32 Version: 4.5.2.4255)

Dev-C++ 5 beta 9 release (4.9.9.2) (x32)

Dropbox (HKCU Version: 2.0.22)

FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2)

GIMP 2.8.4 (Version: 2.8.4)

HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (Version: 28.0.1313.0)

HP Deskjet 2050 J510 series Hilfe (x32 Version: 140.0.61.61)

HP Photo Creations (x32 Version: 1.0.0.7702)

HP Update (x32 Version: 5.003.003.001)

iCloud (Version: 2.1.2.8)

Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)

Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)

Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.3.0.0398)

Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)

Intel(R) WiDi (x32 Version: 2.1.39.0)

Intel(R) Wireless Display

Intel® Trusted Connect Service Client (Version: 1.24.388.1)

iTunes (Version: 11.1.0.126)

Java 7 Update 40 (x32 Version: 7.0.400)

Java Auto Updater (x32 Version: 2.1.9.8)

Microsoft Office 2007 Service Pack 3 (SP3) (x32)

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)

Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)

Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 23.0.1)

Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)

NeuroCheck 5.1 (x32 Version: 5.1.1038.0)

Notepad++ (x32 Version: 6.3)

PDF Architect (x32 Version: 1.0.52.8917)

PDFCreator (x32 Version: 1.6.2)

PHotkey (x32 Version: 1.00.0081)

QuickTime (x32 Version: 7.74.80.86)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.25.0)

Secure Download Manager (x32 Version: 3.1.10)

Skype™ 6.7 (x32 Version: 6.7.102)

Steam (x32 Version: 1.0.0.0)

Synaptics Pointing Device Driver (Version: 15.0.4.0)

TmNationsForever (x32)

Update for 2007 Microsoft Office System (KB967642) (x32)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825641) 32-Bit Edition (x32)

Update für Microsoft Office Excel 2007 Help (KB963678) (x32)

Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

Update für Microsoft Office Word 2007 Help (KB963665) (x32)

VLC media player 2.0.5 (x32 Version: 2.0.5)

WIBU-KEY Setup (WIBU-KEY Remove) (x32 Version: Version 3.10a of 2001-Nov-28 (Setup))

Windows 7 USB/DVD Download Tool (x32 Version: 1.0.30)

WinRAR 4.20 (64-Bit) (Version: 4.20.0)
 

==================== Restore Points  =========================
 

24-09-2013 12:37:58 Installed Java 7 Update 40
 

==================== Hosts content: ==========================
 

2012-07-26 13:26 - 2012-07-26 13:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {6E09B912-A02D-4E70-AC41-1A0B7A4A980C} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)

Task: {9565B700-8BF6-4BBA-8870-61E4D1BFDDCA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-02] (Apple Inc.)

Task: {D34EBB06-5064-4DA6-B56B-7B371F681DB2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-11] (Adobe Systems Incorporated)

Task: {FCF6665B-016C-4FEE-98D6-EE298B633A53} - System32\Tasks\{AF9EB865-779F-446F-8D2D-A3CCC4CCB0D2} => Firefox.exe hxxp://ui.skype.com/ui/0/6.7.0.102/de/abandoninstall?source=lightinstaller&amp;page=tsInstall

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) =============
 

2010-01-02 22:42 - 2010-01-02 22:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2013-04-05 18:58 - 2013-04-05 18:58 - 00954696 _____ () C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll

2012-06-18 23:24 - 2012-06-18 23:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll

2013-02-16 00:52 - 2013-02-16 01:35 - 00175008 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll

2012-12-14 09:42 - 2012-12-14 09:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2013-02-18 10:15 - 2012-12-18 16:31 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2012-11-28 21:13 - 2012-11-28 21:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2012-11-28 21:13 - 2012-11-28 21:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-08-23 05:21 - 2013-08-23 05:21 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\fa537a141e531b9b75b0728469fd8d2f\IsdiInterop.ni.dll

2013-02-18 10:04 - 2011-11-30 03:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2013-02-19 01:29 - 2012-10-26 16:01 - 01198912 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

2013-03-14 04:48 - 2013-03-14 04:48 - 24978944 _____ () C:\Users\Florian\AppData\Roaming\Dropbox\bin\libcef.dll

2013-08-18 02:51 - 2013-08-18 02:51 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/27/2013 06:39:40 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Name des fehlerhaften Moduls: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001014a

ID des fehlerhaften Prozesses: 0x3e4

Startzeit der fehlerhaften Anwendung: 0xPHotkey.exe0

Pfad der fehlerhaften Anwendung: PHotkey.exe1

Pfad des fehlerhaften Moduls: PHotkey.exe2

Berichtskennung: PHotkey.exe3

Vollständiger Name des fehlerhaften Pakets: PHotkey.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: PHotkey.exe5
 

Error: (09/27/2013 01:55:24 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Name des fehlerhaften Moduls: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001014a

ID des fehlerhaften Prozesses: 0x154

Startzeit der fehlerhaften Anwendung: 0xPHotkey.exe0

Pfad der fehlerhaften Anwendung: PHotkey.exe1

Pfad des fehlerhaften Moduls: PHotkey.exe2

Berichtskennung: PHotkey.exe3

Vollständiger Name des fehlerhaften Pakets: PHotkey.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: PHotkey.exe5
 

Error: (09/27/2013 08:35:24 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Name des fehlerhaften Moduls: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001014a

ID des fehlerhaften Prozesses: 0x758

Startzeit der fehlerhaften Anwendung: 0xPHotkey.exe0

Pfad der fehlerhaften Anwendung: PHotkey.exe1

Pfad des fehlerhaften Moduls: PHotkey.exe2

Berichtskennung: PHotkey.exe3

Vollständiger Name des fehlerhaften Pakets: PHotkey.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: PHotkey.exe5
 

Error: (09/26/2013 07:37:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: FLO-LAPTOP)

Description: Die App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (09/26/2013 07:32:55 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Name des fehlerhaften Moduls: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001014a

ID des fehlerhaften Prozesses: 0xb38

Startzeit der fehlerhaften Anwendung: 0xPHotkey.exe0

Pfad der fehlerhaften Anwendung: PHotkey.exe1

Pfad des fehlerhaften Moduls: PHotkey.exe2

Berichtskennung: PHotkey.exe3

Vollständiger Name des fehlerhaften Pakets: PHotkey.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: PHotkey.exe5
 

Error: (09/26/2013 06:54:46 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Name des fehlerhaften Moduls: PHotkey.exe, Version: 1.0.0.83, Zeitstempel: 0x50b46952

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001014a

ID des fehlerhaften Prozesses: 0x132c

Startzeit der fehlerhaften Anwendung: 0xPHotkey.exe0

Pfad der fehlerhaften Anwendung: PHotkey.exe1

Pfad des fehlerhaften Moduls: PHotkey.exe2

Berichtskennung: PHotkey.exe3

Vollständiger Name des fehlerhaften Pakets: PHotkey.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: PHotkey.exe5
 

Error: (09/26/2013 06:01:29 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15500
 

Error: (09/26/2013 06:01:29 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15500
 

Error: (09/26/2013 06:01:29 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (09/26/2013 11:58:07 AM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 3797
 
 

System errors:

=============

Error: (09/26/2013 07:34:48 PM) (Source: DCOM) (User: FLO-LAPTOP)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Flo-LaptopFlorianS-1-5-21-3365742614-2828042178-2579881344-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (09/26/2013 07:34:47 PM) (Source: DCOM) (User: FLO-LAPTOP)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Flo-LaptopFlorianS-1-5-21-3365742614-2828042178-2579881344-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (09/26/2013 07:34:46 PM) (Source: DCOM) (User: FLO-LAPTOP)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Flo-LaptopFlorianS-1-5-21-3365742614-2828042178-2579881344-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (09/26/2013 07:34:46 PM) (Source: DCOM) (User: FLO-LAPTOP)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Flo-LaptopFlorianS-1-5-21-3365742614-2828042178-2579881344-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (09/26/2013 07:34:45 PM) (Source: DCOM) (User: FLO-LAPTOP)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Flo-LaptopFlorianS-1-5-21-3365742614-2828042178-2579881344-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (09/26/2013 07:34:43 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Systemereignissebroker" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/26/2013 07:34:43 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SystemEventsBroker erreicht.
 

Error: (09/26/2013 07:34:13 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Schedule erreicht.
 

Error: (09/26/2013 07:33:43 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst iphlpsvc erreicht.
 

Error: (09/26/2013 07:33:13 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.
 
 

Microsoft Office Sessions:

=========================

Error: (09/24/2013 04:28:22 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5001, Microsoft Office Version: 12.0.6612.1000. This session lasted 6995 seconds with 60 seconds of active time.  This session ended with a crash.
 

Error: (07/24/2013 09:13:29 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 546 seconds with 540 seconds of active time.  This session ended with a crash.
 

Error: (07/24/2013 09:03:50 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 262 seconds with 240 seconds of active time.  This session ended with a crash.
 

Error: (07/24/2013 08:59:12 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 26 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (07/24/2013 08:58:26 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 55 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (07/24/2013 08:57:21 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 202 seconds with 180 seconds of active time.  This session ended with a crash.
 

Error: (07/24/2013 08:53:48 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1659 seconds with 1320 seconds of active time.  This session ended with a crash.
 

Error: (06/06/2013 03:00:20 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 19384 seconds with 13680 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 55%

Total physical RAM: 4007.12 MB

Available physical RAM: 1780.21 MB

Total Pagefile: 8103.12 MB

Available Pagefile: 5706.48 MB

Total Virtual: 8192 MB

Available Virtual: 8191.77 MB
 

==================== Drives ================================
 

Drive c: (SYSTEM) (Fixed) (Total:600.64 GB) (Free:503.55 GB) NTFS

Drive d: (DATA) (Fixed) (Total:97.66 GB) (Free:96.04 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 2BD2C32A)

Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=601 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=98 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Ok also los... :)

ESET Online Scanner (hat 2 Sachen gefunden):

Code:

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=537998b5218cfb43a4bd286005bf3e6f

# engine=15299

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-09-29 03:57:37

# local_time=2013-09-29 11:57:37 (+0800, Malaiische Halbinsel Normalzeit)

# country="Germany"

# lang=1033

# osver=6.2.9200 NT 

# compatibility_mode=1799 16775165 100 96 0 245889947 0 0

# compatibility_mode=5893 16776574 100 94 2585752 22011929 0 0

# scanned=221701

# found=2

# cleaned=0

# scan_time=5751

sh=843A748B9F9694D4A051125ED322AFDA8658E095 ft=1 fh=4b99fa48bcfeea67 vn="Win32/KillFiles.NEQ trojan" ac=I fn="C:\Users\Florian\Dropbox\Semester Übersicht\Semester 2\Informatik 2 Projekt WS 12\Informatik\Informatik fuer O&E\Vorlesung\Masch-10-SS\C\00.exe"

sh=A0AC2EF060C27275F2C0768DAF18A02FC0A6E168 ft=0 fh=0000000000000000 vn="Archbomb.RAR trojan" ac=I fn="C:\Users\Florian\Dropbox\Semester Übersicht\Semester 3\Mathe 3\Ergebnisse.rar"

Security Check:

Code:

 Results of screen317's Security Check version 0.99.73  

   x64 (UAC is enabled)  

 Internet Explorer 10  
 ``````````````Antivirus/Firewall Check:`````````````` 

Windows Defender   

Avira Desktop      

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 Java 7 Update 40  

 Java version out of Date! 

 Adobe Flash Player         11.8.800.168  

 Adobe Reader XI  

 Mozilla Firefox (23.0.1) 

 Mozilla Thunderbird (17.0.8) 
 ````````Process Check: objlist.exe by Laurent````````  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

FRST log:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013 02

Ran by Florian (administrator) on FLO-LAPTOP on 30-09-2013 00:15:21

Running from C:\Users\Florian\Desktop

Windows 8 Pro (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Microsoft Corporation) C:\Windows\system32\dashost.exe

(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe

() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe

() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe

() C:\Program Files (x86)\PHotkey\ATouch64.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Dropbox, Inc.) C:\Users\Florian\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1597864 2013-02-15] (Valve Corporation)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-15] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-22] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-05] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)

HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Florian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8E0C79738E0BCE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GbR)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
 

FireFox:

========

FF ProfilePath: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox

FF NewTab: about:blank

FF Homepage: https://anonymous-proxy-servers.net

FF NetworkProxy: "ftp", "127.0.0.1"

FF NetworkProxy: "ftp_port", 4001

FF NetworkProxy: "gopher", "127.0.0.1"

FF NetworkProxy: "gopher_port", 4001

FF NetworkProxy: "http", "127.0.0.1"

FF NetworkProxy: "http_port", 4001

FF NetworkProxy: "socks_remote_dns", true

FF NetworkProxy: "ssl", "127.0.0.1"

FF NetworkProxy: "ssl_port", 4001

FF NetworkProxy: "type", 1

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\duckduckgo-ssl-javascript-free.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de-ssl.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-encrypted-no-personalization.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---deutsch.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---english.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-eng-ger.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-esp-ale.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-fra-all.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\metager2.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-deutsch.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-english.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https---deutsch.xml

FF SearchPlugin: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: HTTPS-Everywhere - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\https-everywhere@eff.org

FF Extension: Cookie Monster - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{45d8ff86-d909-11db-9705-005056c00008}

FF Extension: unplug - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\unplug@compunach.xpi

FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593}.xpi

FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4}.xpi

FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()

S2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [805888 2012-11-28] ()

R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-10] (pdfforge GbR)

R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-10] (pdfforge GbR)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132088 2013-09-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG)

S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [117632 2013-06-01] (Microsoft Corporation)

R3 L1C; C:\Windows\system32\DRIVERS\l1c51x64.sys [73840 2010-08-25] (Atheros Communications, Inc.)

S2 WIBUKEY; C:\Windows\SysWow64\DRIVERS\Wibukey.sys [67072 2001-11-28] (WIBU-SYSTEMS AG)

S2 WIBUKEY; SYSTEM32\DRIVERS\Wibukey.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-30 00:13 - 2013-09-30 00:13 - 00042153 _____ C:\Users\Florian\Downloads\FRST.txt

2013-09-30 00:12 - 2013-09-30 00:12 - 01953880 _____ (Farbar) C:\Users\Florian\Desktop\FRST64.exe

2013-09-29 22:03 - 2013-09-29 22:03 - 02347384 _____ (ESET) C:\Users\Florian\Downloads\esetsmartinstaller_enu(1).exe

2013-09-29 22:03 - 2013-09-29 22:03 - 00891144 _____ C:\Users\Florian\Desktop\SecurityCheck.exe

2013-09-29 22:00 - 2013-09-29 22:01 - 02347384 _____ (ESET) C:\Users\Florian\Downloads\esetsmartinstaller_enu.exe

2013-09-27 23:00 - 2013-09-27 23:00 - 00399347 _____ C:\Users\Florian\Downloads\Secure Banking v1.5.1.rar

2013-09-27 22:52 - 2013-09-27 22:52 - 05701712 _____ C:\Users\Florian\Downloads\bitdefender-isecurity.exe

2013-09-27 21:05 - 2013-09-27 21:05 - 00000000 ____D C:\FRST

2013-09-27 08:37 - 2013-09-29 21:55 - 98463575 _____ C:\Windows\SysWOW64\ᑭ靯Lů

2013-09-26 09:50 - 2013-09-26 09:50 - 00363520 _____ C:\Users\Florian\Downloads\Student Induction Checklist V3 - amended 1Mar2012 (2).xls

2013-09-24 22:46 - 2013-09-28 22:19 - 00000000 ____D C:\Users\Florian\Desktop\Praxissemester

2013-09-24 22:27 - 2013-09-24 22:27 - 00000000 ___HD C:\Users\Florian\Documents\Privat

2013-09-24 22:20 - 2013-09-28 22:19 - 00000000 ____D C:\Users\Florian\Desktop\Roadtrip

2013-09-24 20:53 - 2013-09-24 20:53 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox

2013-09-24 20:40 - 2013-09-24 20:43 - 00000000 ____D C:\Users\Florian\AppData\Roaming\JonDo

2013-09-24 20:40 - 2013-09-24 20:40 - 00000000 ____D C:\ProgramData\Sun

2013-09-24 20:40 - 2013-09-24 20:40 - 00000000 ____D C:\ProgramData\Oracle

2013-09-24 20:39 - 2013-09-24 20:39 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00000000 ____D C:\Program Files (x86)\Java

2013-09-24 19:42 - 2013-09-24 19:42 - 00000000 ____D C:\ProgramData\APN

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader.com

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Users\Florian\AppData\Local\Cool_Mirage

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Program Files (x86)\PutLockerDownloader

2013-09-21 22:17 - 2013-09-21 22:17 - 00284928 _____ C:\Windows\Minidump\092113-63875-01.dmp

2013-09-21 22:17 - 2013-09-21 22:17 - 00000000 ____D C:\Windows\Minidump

2013-09-21 22:16 - 2013-09-21 22:16 - 653703298 _____ C:\Windows\MEMORY.DMP

2013-09-21 22:16 - 2013-09-21 22:16 - 00424616 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-20 01:12 - 2013-09-20 01:12 - 00001789 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-20 01:11 - 2013-09-20 01:12 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-20 01:11 - 2013-09-20 01:12 - 00000000 ____D C:\Program Files\iTunes

2013-09-20 01:11 - 2013-09-20 01:12 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-20 01:11 - 2013-09-20 01:11 - 00000000 ____D C:\Program Files\iPod

2013-09-19 11:58 - 2013-09-20 23:59 - 98481651 _____ C:\Windows\SysWOW64\᯾直ᯠÄ„

2013-09-17 01:34 - 2013-09-17 05:16 - 741343232 _____ C:\Users\Florian\Downloads\ubuntu-12.04.3-desktop-i386.iso

2013-09-16 18:31 - 2013-09-16 18:33 - 00000000 ____D C:\Users\Florian\AppData\Local\Apps\Windows 7 USB DVD Download Tool

2013-09-16 18:31 - 2013-09-16 18:31 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool

2013-09-16 18:29 - 2013-09-16 18:29 - 02721168 _____ (Microsoft Corporation) C:\Users\Florian\Downloads\Windows7-USB-DVD1024-tool.exe

2013-09-15 22:29 - 2013-09-15 22:29 - 00001959 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Canneverbe Limited

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\ProgramData\Canneverbe Limited

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP

2013-09-15 15:28 - 2013-09-15 15:28 - 00000000 ____D C:\Users\Florian\Downloads\Windows 7 Professional with Service Pack 1 (x86) - DVD (German)

2013-09-13 01:19 - 2013-09-13 01:19 - 00000000 ____D C:\Users\Florian\AppData\Roaming\e-academy Inc

2013-09-13 01:19 - 2013-09-13 01:19 - 00000000 ____D C:\Users\Florian\AppData\Local\e-academy Inc

2013-09-13 01:18 - 2013-09-13 01:18 - 00000029 _____ C:\Users\Florian\Documents\Windows 7 Key.txt

2013-09-13 00:49 - 2013-08-07 13:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll

2013-09-13 00:02 - 2013-08-16 13:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys

2013-09-13 00:02 - 2013-08-16 13:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll

2013-09-13 00:02 - 2013-08-16 13:39 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2013-09-13 00:02 - 2013-08-16 13:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe

2013-09-13 00:02 - 2013-08-16 13:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe

2013-09-13 00:02 - 2013-08-16 13:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2013-09-13 00:02 - 2013-08-16 13:21 - 03275776 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2013-09-13 00:02 - 2013-08-16 13:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2013-09-13 00:02 - 2013-08-16 13:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll

2013-09-13 00:02 - 2013-08-16 06:43 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2013-09-13 00:02 - 2013-08-16 06:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2013-09-13 00:02 - 2013-08-16 06:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll

2013-09-13 00:02 - 2013-08-16 06:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll

2013-09-13 00:00 - 2013-08-21 12:12 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-13 00:00 - 2013-08-21 12:12 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-13 00:00 - 2013-08-21 12:11 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-13 00:00 - 2013-08-21 12:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-13 00:00 - 2013-08-21 10:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-13 00:00 - 2013-08-21 10:06 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-13 00:00 - 2013-08-21 10:06 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-13 00:00 - 2013-08-21 10:06 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-13 00:00 - 2013-08-21 10:05 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-13 00:00 - 2013-08-21 09:43 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-13 00:00 - 2013-08-21 07:52 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll

2013-09-12 23:59 - 2013-07-09 16:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys

2013-09-12 23:59 - 2013-07-09 14:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe

2013-09-12 23:59 - 2013-07-09 12:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe

2013-09-12 23:59 - 2013-07-09 11:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll

2013-09-12 23:59 - 2013-07-09 06:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll

2013-09-12 23:59 - 2013-07-09 06:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll

2013-09-12 23:59 - 2013-07-09 06:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll

2013-09-12 23:59 - 2013-07-09 06:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll

2013-09-12 23:59 - 2013-07-06 08:16 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2013-09-12 23:59 - 2013-07-03 08:23 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2013-09-12 23:59 - 2013-07-03 08:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll

2013-09-12 23:59 - 2013-07-03 08:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2013-09-12 23:59 - 2013-07-03 08:22 - 01300480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2013-09-12 23:59 - 2013-07-03 08:11 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2013-09-12 23:59 - 2013-07-03 08:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll

2013-09-12 23:59 - 2013-07-03 08:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll

2013-09-12 23:59 - 2013-07-02 06:08 - 00387583 _____ C:\Windows\system32\ApnDatabase.xml

2013-09-12 23:59 - 2013-07-01 06:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe

2013-09-12 23:59 - 2013-07-01 06:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe

2013-09-12 23:59 - 2013-06-29 14:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2013-09-12 23:59 - 2013-06-29 14:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2013-09-12 23:59 - 2013-06-29 13:43 - 00327512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys

2013-09-12 23:59 - 2013-06-29 09:12 - 01022464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2013-09-12 23:59 - 2013-06-26 11:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys

2013-09-12 23:59 - 2013-06-26 10:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys

2013-09-12 23:59 - 2013-06-25 06:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2013-09-12 23:59 - 2013-06-25 06:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll

2013-09-12 23:59 - 2013-06-25 06:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2013-09-12 23:59 - 2013-06-19 13:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll

2013-09-12 23:59 - 2013-06-19 13:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll

2013-09-12 23:59 - 2013-06-19 06:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll

2013-09-12 23:59 - 2013-06-19 06:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll

2013-09-12 23:59 - 2013-06-12 07:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll

2013-09-12 23:59 - 2013-06-12 07:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll

2013-09-12 23:59 - 2013-06-11 05:17 - 00096512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys

2013-09-12 23:59 - 2013-06-11 03:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2013-09-12 23:59 - 2013-06-11 03:15 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2013-09-12 23:59 - 2013-06-11 03:15 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL

2013-09-12 23:59 - 2013-06-11 03:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2013-09-12 23:59 - 2013-06-11 03:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2013-09-12 23:59 - 2013-06-11 03:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2013-09-12 23:59 - 2013-06-06 16:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2013-09-12 23:58 - 2013-08-03 12:30 - 04038144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-09 05:39 - 2013-09-09 05:39 - 00003140 _____ C:\Windows\System32\Tasks\{AF9EB865-779F-446F-8D2D-A3CCC4CCB0D2}

2013-08-31 05:11 - 2013-08-31 05:13 - 00000000 ____D C:\Program Files (x86)\TmNationsForever

2013-08-31 02:01 - 2013-08-31 02:32 - 00000000 ____D C:\Users\Florian\Desktop\LAN-Party
 

==================== One Month Modified Files and Folders =======
 

2013-09-30 00:13 - 2013-09-30 00:13 - 00042153 _____ C:\Users\Florian\Downloads\FRST.txt

2013-09-30 00:12 - 2013-09-30 00:12 - 01953880 _____ (Farbar) C:\Users\Florian\Desktop\FRST64.exe

2013-09-29 23:27 - 2013-02-16 01:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-29 23:00 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\system32\sru

2013-09-29 22:14 - 2013-02-15 22:53 - 01906148 _____ C:\Windows\WindowsUpdate.log

2013-09-29 22:05 - 2012-07-26 18:27 - 00753134 _____ C:\Windows\system32\perfh007.dat

2013-09-29 22:05 - 2012-07-26 18:27 - 00155826 _____ C:\Windows\system32\perfc007.dat

2013-09-29 22:05 - 2012-07-26 15:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-29 22:03 - 2013-09-29 22:03 - 02347384 _____ (ESET) C:\Users\Florian\Downloads\esetsmartinstaller_enu(1).exe

2013-09-29 22:03 - 2013-09-29 22:03 - 00891144 _____ C:\Users\Florian\Desktop\SecurityCheck.exe

2013-09-29 22:01 - 2013-09-29 22:00 - 02347384 _____ (ESET) C:\Users\Florian\Downloads\esetsmartinstaller_enu.exe

2013-09-29 21:55 - 2013-09-27 08:37 - 98463575 _____ C:\Windows\SysWOW64\ᑭ靯Lů

2013-09-29 21:55 - 2013-02-16 00:14 - 00000000 ___RD C:\Users\Florian\Dropbox

2013-09-29 21:55 - 2013-02-16 00:10 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Dropbox

2013-09-28 23:37 - 2013-05-15 00:17 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Skype

2013-09-28 22:19 - 2013-09-24 22:46 - 00000000 ____D C:\Users\Florian\Desktop\Praxissemester

2013-09-28 22:19 - 2013-09-24 22:20 - 00000000 ____D C:\Users\Florian\Desktop\Roadtrip

2013-09-27 23:00 - 2013-09-27 23:00 - 00399347 _____ C:\Users\Florian\Downloads\Secure Banking v1.5.1.rar

2013-09-27 22:52 - 2013-09-27 22:52 - 05701712 _____ C:\Users\Florian\Downloads\bitdefender-isecurity.exe

2013-09-27 21:05 - 2013-09-27 21:05 - 00000000 ____D C:\FRST

2013-09-27 10:24 - 2013-03-13 05:44 - 00000000 ____D C:\Users\Florian\AppData\Roaming\DVDVideoSoft

2013-09-26 19:32 - 2012-07-26 15:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-26 19:31 - 2013-02-15 22:30 - 00112416 _____ C:\Windows\PFRO.log

2013-09-26 19:31 - 2012-07-26 13:26 - 00262144 ___SH C:\Windows\system32\config\BBI

2013-09-26 16:17 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\AUInstallAgent

2013-09-26 09:50 - 2013-09-26 09:50 - 00363520 _____ C:\Users\Florian\Downloads\Student Induction Checklist V3 - amended 1Mar2012 (2).xls

2013-09-24 22:34 - 2013-07-24 21:51 - 00000000 ____D C:\Users\Florian\Desktop\Bafög

2013-09-24 22:27 - 2013-09-24 22:27 - 00000000 ___HD C:\Users\Florian\Documents\Privat

2013-09-24 22:26 - 2013-02-16 03:44 - 00000000 ____D C:\Users\Florian\Desktop\Florian

2013-09-24 20:53 - 2013-09-24 20:53 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox

2013-09-24 20:43 - 2013-09-24 20:40 - 00000000 ____D C:\Users\Florian\AppData\Roaming\JonDo

2013-09-24 20:40 - 2013-09-24 20:40 - 00000000 ____D C:\ProgramData\Sun

2013-09-24 20:40 - 2013-09-24 20:40 - 00000000 ____D C:\ProgramData\Oracle

2013-09-24 20:39 - 2013-09-24 20:39 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-09-24 20:39 - 2013-09-24 20:39 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-09-24 20:39 - 2013-09-24 20:39 - 00000000 ____D C:\Program Files (x86)\Java

2013-09-24 19:42 - 2013-09-24 19:42 - 00000000 ____D C:\ProgramData\APN

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader.com

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Users\Florian\AppData\Local\Cool_Mirage

2013-09-24 19:41 - 2013-09-24 19:41 - 00000000 ____D C:\Program Files (x86)\PutLockerDownloader

2013-09-23 21:50 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\system32\NDF

2013-09-22 00:28 - 2013-03-09 05:19 - 00181248 ___SH C:\Users\Florian\Desktop\Thumbs.db

2013-09-21 22:17 - 2013-09-21 22:17 - 00284928 _____ C:\Windows\Minidump\092113-63875-01.dmp

2013-09-21 22:17 - 2013-09-21 22:17 - 00000000 ____D C:\Windows\Minidump

2013-09-21 22:16 - 2013-09-21 22:16 - 653703298 _____ C:\Windows\MEMORY.DMP

2013-09-21 22:16 - 2013-09-21 22:16 - 00424616 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-21 22:15 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\LiveKernelReports

2013-09-20 23:59 - 2013-09-19 11:58 - 98481651 _____ C:\Windows\SysWOW64\᯾直ᯠÄ„

2013-09-20 01:12 - 2013-09-20 01:12 - 00001789 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-20 01:12 - 2013-09-20 01:11 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-20 01:12 - 2013-09-20 01:11 - 00000000 ____D C:\Program Files\iTunes

2013-09-20 01:12 - 2013-09-20 01:11 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-20 01:11 - 2013-09-20 01:11 - 00000000 ____D C:\Program Files\iPod

2013-09-19 07:26 - 2012-07-26 16:14 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-19 07:26 - 2012-07-26 16:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-17 07:27 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\WinStore

2013-09-17 07:27 - 2012-07-26 16:12 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-09-17 07:27 - 2012-07-26 13:38 - 00000000 ____D C:\Windows\system32\oobe

2013-09-17 05:16 - 2013-09-17 01:34 - 741343232 _____ C:\Users\Florian\Downloads\ubuntu-12.04.3-desktop-i386.iso

2013-09-17 01:53 - 2012-07-26 15:21 - 00017792 _____ C:\Windows\setupact.log

2013-09-16 18:33 - 2013-09-16 18:31 - 00000000 ____D C:\Users\Florian\AppData\Local\Apps\Windows 7 USB DVD Download Tool

2013-09-16 18:31 - 2013-09-16 18:31 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool

2013-09-16 18:29 - 2013-09-16 18:29 - 02721168 _____ (Microsoft Corporation) C:\Users\Florian\Downloads\Windows7-USB-DVD1024-tool.exe

2013-09-15 22:29 - 2013-09-15 22:29 - 00001959 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Canneverbe Limited

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\ProgramData\Canneverbe Limited

2013-09-15 22:29 - 2013-09-15 22:29 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP

2013-09-15 15:28 - 2013-09-15 15:28 - 00000000 ____D C:\Users\Florian\Downloads\Windows 7 Professional with Service Pack 1 (x86) - DVD (German)

2013-09-13 22:55 - 2013-02-17 21:25 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-13 01:19 - 2013-09-13 01:19 - 00000000 ____D C:\Users\Florian\AppData\Roaming\e-academy Inc

2013-09-13 01:19 - 2013-09-13 01:19 - 00000000 ____D C:\Users\Florian\AppData\Local\e-academy Inc

2013-09-13 01:18 - 2013-09-13 01:18 - 00000029 _____ C:\Users\Florian\Documents\Windows 7 Key.txt

2013-09-13 01:10 - 2013-08-16 00:56 - 00000000 ____D C:\Windows\system32\MRT

2013-09-13 01:08 - 2013-02-16 19:40 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-11 03:49 - 2013-02-16 01:20 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-09 05:40 - 2013-05-17 20:12 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-09-09 05:40 - 2013-05-15 00:17 - 00000000 ____D C:\ProgramData\Skype

2013-09-09 05:39 - 2013-09-09 05:39 - 00003140 _____ C:\Windows\System32\Tasks\{AF9EB865-779F-446F-8D2D-A3CCC4CCB0D2}

2013-09-02 21:24 - 2013-05-09 23:31 - 00082136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-02 21:24 - 2013-03-28 07:04 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-02 21:24 - 2013-03-28 07:04 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-31 05:37 - 2013-03-24 06:56 - 00000000 ____D C:\Users\Florian\Documents\TmForever

2013-08-31 05:13 - 2013-08-31 05:11 - 00000000 ____D C:\Program Files (x86)\TmNationsForever

2013-08-31 05:13 - 2013-03-24 03:28 - 00226837 _____ C:\Windows\Directx.log

2013-08-31 02:32 - 2013-08-31 02:01 - 00000000 ____D C:\Users\Florian\Desktop\LAN-Party

2013-08-31 01:42 - 2013-02-15 23:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-08-31 01:41 - 2012-07-26 16:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2013-08-31 01:41 - 2012-07-26 16:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2013-08-31 01:41 - 2012-07-26 16:12 - 00000000 ____D C:\Program Files\Windows Defender

2013-08-31 01:41 - 2012-07-26 16:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
 

Some content of TEMP:

====================

C:\Users\Florian\AppData\Local\Temp\AskSLib.dll

C:\Users\Florian\AppData\Local\Temp\drm_dialogs.dll

C:\Users\Florian\AppData\Local\Temp\drm_dyndata_7290008.dll

C:\Users\Florian\AppData\Local\Temp\jre1.7.offline.exe

C:\Users\Florian\AppData\Local\Temp\mgsqlite3.dll

C:\Users\Florian\AppData\Local\Temp\qab5pkwj.dll

C:\Users\Florian\AppData\Local\Temp\xmlUpdater.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-29 11:56
 

==================== End Of Log ============================

--- --- ---