Trojaner-Board - Anhang geöffnet! RedTube: Streaming-Abmahnungen mit Trojaner

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Anhang geöffnet! RedTube: Streaming-Abmahnungen mit Trojaner (https://www.trojaner-board.de/145914-anhang-geoeffnet-redtube-streaming-abmahnungen-trojaner.html)

Anhang geöffnet! RedTube: Streaming-Abmahnungen mit Trojaner

Hallo zusammen,

habe gestern auch die Redtube Streaming Abmahnung per mail bekommen. Dummerweise hab ich den Anhang geöffnet.

Bin schon mit ESET online Scanner drüber. Der hat 3 gefunden. 1davon war
Wurden dann von ESET gelöscht.

Sind die jetzt sicher weg?

Danke

Grüße farley

:hallo:

Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
Bitte kein Crossposting ( posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
Poste die Logfiles direkt in deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 3 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst.

Ich bedanke mich für deine Geduld :)

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-12-2013 01

Ran by Mein (administrator) on MEIN-PC on 11-12-2013 10:03:57

Running from C:\Users\Mein\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe

(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe

(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Safer Networking Limited) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe

(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL3\KHALMNPR.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe

(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe

(AVM Berlin) C:\Users\Mein\AppData\Local\Apps\2.0\Q4AGNB1A.KK0\BTWG7O23.PYG\frit..tion_8488884cfbcefd60_0002.0003_f406d43803d5433d\fritzbox-usb-fernanschluss.exe

(ASUS) C:\Windows\AsScrPro.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)

HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)

HKCU\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2144088 2009-01-26] (Safer Networking Limited)

HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-26] (Samsung)

HKCU\...\Run: [AVMUSBFernanschluss] - C:\Users\Mein\AppData\Local\Apps\2.0\Q4AGNB1A.KK0\BTWG7O23.PYG\frit..tion_8488884cfbcefd60_0002.0003_f406d43803d5433d\AVMAutoStart.exe [139264 2013-01-24] (AVM Berlin)

HKCU\...\Run: [dnss] - C:\Users\Mein\AppData\Roaming\dnss.lnk

MountPoints2: {b754fe32-a532-11df-a835-485b39e6e6ca} - F:\setup.exe

MountPoints2: {b754fe5f-a532-11df-a835-485b39e6e6ca} - G:\setup.exe

MountPoints2: {b754fe74-a532-11df-a835-485b39e6e6ca} - F:\setup.exe

MountPoints2: {b754fe76-a532-11df-a835-485b39e6e6ca} - F:\setup.exe

MountPoints2: {e9b710aa-32d8-11e0-8a7d-485b39e6e6ca} - H:\setup.exe

MountPoints2: {e9b710ac-32d8-11e0-8a7d-485b39e6e6ca} - H:\setup.exe

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [7109248 2010-01-13] (ASUS)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-10-21] (NEC Electronics Corporation)

HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-26] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [250504 2013-03-15] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [205184 2013-03-15] (NVIDIA Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=82E11A4BD6F8F827&affID=119357&tsp=4983

SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default

FF user.js: detected! => C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\user.js

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @logitech.com/HarmonyRemote,version=1.0.0 - C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll (Logitech Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Mein\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\babylon.xml

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\BrowserDefender.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Виявлення пристроїв Logitech - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\DeviceDetection@logitech.com

FF Extension: Garmin Communicator - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

FF Extension: personas - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\personas@christopher.beard.xpi

FF Extension: toolbar_AVIRA-V7 - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi

FF Extension: DVDVideoSoft Menu - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi

FF Extension: Adblock Plus - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: dta - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi

FF HKLM-x32\...\Firefox\Extensions: [fe_15.0@nokia.com] - C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_15.0

FF HKCU\...\Firefox\Extensions: [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}] - C:\Program Files (x86)\LyricsPal\125.xpi
 

Chrome: 

=======

CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=82E11A4BD6F8F827&affID=119357&tsp=4983

CHR RestoreOnStartup: "hxxp://www.google.com/"

CHR DefaultSearchKeyword: google.de

CHR DefaultSearchProvider: Google

CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Java Deployment Toolkit 6.0.230.5) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U23) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Microsoft Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (3D RealityMaps Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprm3d.dll No File

CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File

CHR Plugin: (Harmony Firefox Plugin) - C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll (Logitech Inc.)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Unity Player) - C:\Users\Mein\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Extension: (YouTube) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (AdBlock) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0

CHR Extension: (Google Wallet) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (Gmail) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx

CHR HKLM-x32\...\Chrome\Extension: [mmiopbgcekanlhpjkonogoljpfmhpkhf] - C:\Program Files (x86)\LyricsPal\125.crx
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-11-26] (Avira Operations GmbH & Co. KG)

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-04] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-04] (BlueStack Systems, Inc.)

R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)

R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)

R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3304768 2010-12-23] (devolo AG)

S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2012-04-04] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 nosGetPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll [58944 2010-11-29] (NOS Microsystems Ltd.)

R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software)

R2 VMCService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [24576 2008-03-13] (Vodafone)

S3 w7Svc; C:\Program Files (x86)\webcam 7\wService.exe [5094200 2012-03-26] (Moonware Studios)
 

==================== Drivers (Whitelisted) ====================
 

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-11-26] (Avira Operations GmbH & Co. KG)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)

R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-26] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)

R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116096 2011-03-25] (AVM Berlin)

R3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [116480 2013-01-24] (AVM Berlin)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-11-26] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-04] (BlueStack Systems)

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-05-22] ()

S3 imhidusb; C:\Windows\System32\DRIVERS\imhidusb.sys [23040 2007-04-19] (Immersion Corporation)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )

R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM)

R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies)

S1 prodrv06; C:\Windows\SysWow64\drivers\prodrv06.sys [54272 2004-04-08] (Protection Technology)

S0 prohlp02; C:\Windows\SysWow64\drivers\prohlp02.sys [70400 2004-04-08] (Protection Technology)

S0 prosync1; C:\Windows\SysWow64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)

S0 sfhlp01; C:\Windows\SysWow64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-03-19] (CyberLink Corp.)

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-11 10:03 - 2013-12-11 10:03 - 00028297 _____ C:\Users\Mein\Downloads\FRST.txt

2013-12-11 09:59 - 2013-12-11 09:59 - 00043320 _____ C:\Users\Mein\Desktop\FRST.txt

2013-12-11 09:58 - 2013-12-11 09:58 - 00000000 ____D C:\Users\Mein\Downloads\FRST-OlderVersion

2013-12-11 09:16 - 2013-12-11 09:16 - 00000000 ____H C:\ProgramData\cm-lock

2013-12-11 09:02 - 2013-12-11 09:02 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Avira

2013-12-11 08:58 - 2013-12-11 08:58 - 00000000 ____D C:\ProgramData\AskPartnerNetwork

2013-12-11 08:58 - 2013-12-11 08:58 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Malwarebytes

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\ProgramData\APN

2013-12-11 08:56 - 2013-12-11 08:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-11 08:56 - 2013-12-11 08:56 - 00002072 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-11 08:56 - 2013-12-11 08:56 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-11 08:56 - 2013-12-11 08:56 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-11 08:56 - 2013-11-26 12:19 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-12-11 08:56 - 2013-11-26 12:19 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-11 08:56 - 2013-11-26 12:19 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-12-11 08:56 - 2013-11-26 12:19 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-12-11 08:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-12-11 08:32 - 2013-12-11 08:34 - 128337920 _____ C:\Users\Mein\Downloads\avira_free_antivirus_de.exe

2013-12-11 07:49 - 2013-12-11 07:49 - 00000373 _____ C:\Users\Mein\Desktop\troj.txt

2013-12-11 05:26 - 2013-12-11 05:26 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Mein\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-11 05:20 - 2013-12-11 05:20 - 00000000 ____D C:\Program Files (x86)\ESET

2013-12-11 05:16 - 2013-12-11 05:16 - 02347384 _____ (ESET) C:\Users\Mein\Downloads\esetsmartinstaller_deu.exe

2013-12-10 15:58 - 2013-12-11 09:58 - 00000000 ____D C:\FRST

2013-12-10 15:56 - 2013-12-11 09:58 - 01928212 _____ (Farbar) C:\Users\Mein\Downloads\FRST64.exe

2013-12-10 14:33 - 2013-12-10 14:33 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AVG2014

2013-12-10 14:32 - 2013-12-10 14:32 - 00000983 _____ C:\Users\Public\Desktop\AVG 2014.lnk

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ___HD C:\$AVG

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ____D C:\ProgramData\AVG2014

2013-12-10 14:31 - 2013-12-10 14:31 - 00000000 ____D C:\Program Files (x86)\AVG

2013-12-10 14:29 - 2013-12-10 14:29 - 04435768 _____ (AVG Technologies) C:\Users\Mein\Downloads\avg_avct_stb_all_2014_4259_cm10.exe

2013-12-10 14:18 - 2013-12-11 09:53 - 00000000 ____D C:\ProgramData\MFAData

2013-12-10 14:18 - 2013-12-10 14:49 - 00000000 ____D C:\Users\Mein\AppData\Local\Avg2014

2013-12-10 14:18 - 2013-12-10 14:18 - 00000000 ____D C:\Users\Mein\AppData\Local\MFAData

2013-12-10 10:28 - 2013-12-11 07:44 - 00000000 ___HD C:\Users\Mein\AppData\Roaming\Aysbnrwg

2013-12-07 13:50 - 2013-09-28 19:28 - 732325888 _____ C:\Users\Mein\Downloads\Think Bigger.avi

2013-12-07 10:17 - 2013-12-07 10:17 - 00000000 _____ C:\Users\Mein\Desktop\Neues Textdokument.txt

2013-12-07 10:07 - 2013-12-07 10:14 - 00000000 ____D C:\Users\Mein\Downloads\Die Kirche bleibt im Dorf - S01

2013-11-25 09:19 - 2013-11-25 09:19 - 27641005 _____ C:\Users\Mein\Downloads\s10a_38_pmw_deu.zip

2013-11-23 15:49 - 2013-11-23 15:49 - 00000000 ____D C:\Program Files (x86)\Yawcam

2013-11-23 15:48 - 2013-11-23 15:48 - 04675501 _____ (Magnus Lundvall                                             ) C:\Users\Mein\Downloads\yawcam_install.exe

2013-11-23 15:39 - 2013-11-23 15:39 - 00079964 _____ C:\Windows\AsCDProc.log

2013-11-23 15:39 - 2013-11-23 15:39 - 00002480 _____ C:\Windows\AsDebug.log

2013-11-23 15:32 - 2013-11-23 15:42 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AbelCam

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\Users\Mein\AppData\Local\IsolatedStorage

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\ProgramData\Caphyon

2013-11-23 15:30 - 2013-11-23 15:37 - 00000000 ____D C:\ProgramData\Seiz System Engineering

2013-11-23 15:27 - 2013-11-23 15:27 - 00715016 _____ C:\Users\Mein\Downloads\AbelCam_4_2_4.exe

2013-11-20 17:53 - 2013-11-20 17:58 - 00000000 ____D C:\Users\Mein\Desktop\2013_11_20

2013-11-16 13:35 - 2013-11-16 13:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\Documents\Corel PaintShop Pro

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Ulead Systems

2013-11-14 09:26 - 2013-11-14 09:26 - 00001168 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk

2013-11-14 09:23 - 2013-11-14 09:23 - 05831344 _____ (TeamViewer GmbH) C:\Users\Mein\Downloads\TeamViewer_Setup_de.exe

2013-11-13 09:06 - 2013-11-13 09:06 - 00000000 ____D C:\Users\Mein\AppData\Local\LiveUpdate
 

==================== One Month Modified Files and Folders =======
 

2013-12-11 10:04 - 2013-12-11 10:03 - 00028297 _____ C:\Users\Mein\Downloads\FRST.txt

2013-12-11 09:59 - 2013-12-11 09:59 - 00043320 _____ C:\Users\Mein\Desktop\FRST.txt

2013-12-11 09:58 - 2013-12-11 09:58 - 00000000 ____D C:\Users\Mein\Downloads\FRST-OlderVersion

2013-12-11 09:58 - 2013-12-10 15:58 - 00000000 ____D C:\FRST

2013-12-11 09:58 - 2013-12-10 15:56 - 01928212 _____ (Farbar) C:\Users\Mein\Downloads\FRST64.exe

2013-12-11 09:53 - 2013-12-10 14:18 - 00000000 ____D C:\ProgramData\MFAData

2013-12-11 09:52 - 2013-02-24 17:09 - 00000000 ___RD C:\Users\Mein\Downloads\Treiber Medion

2013-12-11 09:48 - 2013-01-01 18:35 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-12-11 09:48 - 2013-01-01 18:35 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-11 09:48 - 2012-08-07 18:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-11 09:48 - 2012-06-20 05:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-11 09:24 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-11 09:24 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-11 09:20 - 2010-05-21 18:33 - 01373647 _____ C:\Windows\WindowsUpdate.log

2013-12-11 09:17 - 2010-08-12 09:19 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-11 09:17 - 2010-05-21 20:04 - 00002956 _____ C:\Windows\system32\AutoRunFilter.ini

2013-12-11 09:17 - 2010-05-21 20:04 - 00002849 _____ C:\Windows\system32\ServiceFilter.ini

2013-12-11 09:16 - 2013-12-11 09:16 - 00000000 ____H C:\ProgramData\cm-lock

2013-12-11 09:16 - 2010-09-12 17:43 - 00529120 _____ C:\Windows\PFRO.log

2013-12-11 09:16 - 2010-09-06 17:03 - 00083087 _____ C:\Windows\setupact.log

2013-12-11 09:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-11 09:11 - 2010-08-12 09:19 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-11 09:02 - 2013-12-11 09:02 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Avira

2013-12-11 08:58 - 2013-12-11 08:58 - 00000000 ____D C:\ProgramData\AskPartnerNetwork

2013-12-11 08:58 - 2013-12-11 08:58 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Malwarebytes

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\ProgramData\APN

2013-12-11 08:57 - 2013-12-11 08:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-11 08:56 - 2013-12-11 08:56 - 00002072 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-11 08:56 - 2013-12-11 08:56 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-11 08:56 - 2013-12-11 08:56 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-11 08:56 - 2013-08-08 13:08 - 00000000 ____D C:\ProgramData\Avira

2013-12-11 08:34 - 2013-12-11 08:32 - 128337920 _____ C:\Users\Mein\Downloads\avira_free_antivirus_de.exe

2013-12-11 07:49 - 2013-12-11 07:49 - 00000373 _____ C:\Users\Mein\Desktop\troj.txt

2013-12-11 07:44 - 2013-12-10 10:28 - 00000000 ___HD C:\Users\Mein\AppData\Roaming\Aysbnrwg

2013-12-11 07:44 - 2010-08-27 17:10 - 00000000 ____D C:\Users\Mein\Downloads\3D

2013-12-11 05:26 - 2013-12-11 05:26 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Mein\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-11 05:20 - 2013-12-11 05:20 - 00000000 ____D C:\Program Files (x86)\ESET

2013-12-11 05:16 - 2013-12-11 05:16 - 02347384 _____ (ESET) C:\Users\Mein\Downloads\esetsmartinstaller_deu.exe

2013-12-10 14:49 - 2013-12-10 14:18 - 00000000 ____D C:\Users\Mein\AppData\Local\Avg2014

2013-12-10 14:48 - 2012-07-22 10:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2013-12-10 14:33 - 2013-12-10 14:33 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AVG2014

2013-12-10 14:32 - 2013-12-10 14:32 - 00000983 _____ C:\Users\Public\Desktop\AVG 2014.lnk

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ___HD C:\$AVG

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ____D C:\ProgramData\AVG2014

2013-12-10 14:32 - 2010-08-11 09:36 - 00000000 ____D C:\Users\Mein\AppData\Roaming\TuneUp Software

2013-12-10 14:32 - 2010-05-21 19:59 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute

2013-12-10 14:31 - 2013-12-10 14:31 - 00000000 ____D C:\Program Files (x86)\AVG

2013-12-10 14:29 - 2013-12-10 14:29 - 04435768 _____ (AVG Technologies) C:\Users\Mein\Downloads\avg_avct_stb_all_2014_4259_cm10.exe

2013-12-10 14:18 - 2013-12-10 14:18 - 00000000 ____D C:\Users\Mein\AppData\Local\MFAData

2013-12-10 13:56 - 2009-08-04 10:51 - 00697082 _____ C:\Windows\system32\perfh007.dat

2013-12-10 13:56 - 2009-08-04 10:51 - 00148346 _____ C:\Windows\system32\perfc007.dat

2013-12-10 13:56 - 2009-07-14 06:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-10 11:15 - 2010-08-11 13:09 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2DECCA28-EE7F-4439-A7D5-6FF3F82C1154}

2013-12-08 18:24 - 2010-09-13 18:46 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Skype

2013-12-07 10:52 - 2010-08-11 09:17 - 00000000 ____D C:\Users\Mein

2013-12-07 10:17 - 2013-12-07 10:17 - 00000000 _____ C:\Users\Mein\Desktop\Neues Textdokument.txt

2013-12-07 10:14 - 2013-12-07 10:07 - 00000000 ____D C:\Users\Mein\Downloads\Die Kirche bleibt im Dorf - S01

2013-12-05 15:06 - 2010-08-12 09:19 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-05 15:06 - 2010-08-12 09:19 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-11-26 12:19 - 2013-12-11 08:56 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-11-26 12:19 - 2013-12-11 08:56 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-11-26 12:19 - 2013-12-11 08:56 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-11-26 12:19 - 2013-12-11 08:56 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-11-25 09:19 - 2013-11-25 09:19 - 27641005 _____ C:\Users\Mein\Downloads\s10a_38_pmw_deu.zip

2013-11-25 09:09 - 2013-08-08 14:43 - 00000000 ____D C:\Users\Mein\AppData\Roaming\TeamViewer

2013-11-25 08:58 - 2010-08-11 09:58 - 00000000 ____D C:\Users\Mein\AppData\Local\Adobe

2013-11-25 08:45 - 2009-07-14 05:45 - 00490224 _____ C:\Windows\system32\FNTCACHE.DAT

2013-11-25 08:43 - 2012-04-26 05:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-11-23 15:49 - 2013-11-23 15:49 - 00000000 ____D C:\Program Files (x86)\Yawcam

2013-11-23 15:48 - 2013-11-23 15:48 - 04675501 _____ (Magnus Lundvall                                             ) C:\Users\Mein\Downloads\yawcam_install.exe

2013-11-23 15:42 - 2013-11-23 15:32 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AbelCam

2013-11-23 15:39 - 2013-11-23 15:39 - 00079964 _____ C:\Windows\AsCDProc.log

2013-11-23 15:39 - 2013-11-23 15:39 - 00002480 _____ C:\Windows\AsDebug.log

2013-11-23 15:37 - 2013-11-23 15:30 - 00000000 ____D C:\ProgramData\Seiz System Engineering

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\Users\Mein\AppData\Local\IsolatedStorage

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\ProgramData\Caphyon

2013-11-23 15:27 - 2013-11-23 15:27 - 00715016 _____ C:\Users\Mein\Downloads\AbelCam_4_2_4.exe

2013-11-21 14:39 - 2013-10-14 11:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-11-20 17:58 - 2013-11-20 17:53 - 00000000 ____D C:\Users\Mein\Desktop\2013_11_20

2013-11-18 13:54 - 2010-08-11 09:17 - 00136696 _____ C:\Users\Mein\AppData\Local\GDIPFONTCACHEV1.DAT

2013-11-16 13:35 - 2013-11-16 13:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-16 08:53 - 2013-10-09 08:46 - 00000000 ____D C:\Program Files (x86)\Lexware

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\Documents\Corel PaintShop Pro

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Ulead Systems

2013-11-14 09:26 - 2013-11-14 09:26 - 00001168 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk

2013-11-14 09:26 - 2013-10-07 12:47 - 00000000 ____D C:\Program Files (x86)\TeamViewer

2013-11-14 09:23 - 2013-11-14 09:23 - 05831344 _____ (TeamViewer GmbH) C:\Users\Mein\Downloads\TeamViewer_Setup_de.exe

2013-11-13 09:06 - 2013-11-13 09:06 - 00000000 ____D C:\Users\Mein\AppData\Local\LiveUpdate
 

Some content of TEMP:

====================

C:\Users\Mein\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-11-20 20:25
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-12-2013 01

Ran by Mein at 2013-12-11 10:06:39

Running from C:\Users\Mein\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: AVG AntiVirus 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: AVG AntiVirus 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
 

==================== Installed Programs ======================
 

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)

Acrobat.com (x32 Version: 1.6.65)

Adobe AIR (x32 Version: 2.5.1.17730)

Adobe Download Manager (x32 Version: 1.6.2.97)

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)

Adobe Photoshop CS3 (x32 Version: 10.0)

Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)

Adobe Setup (x32 Version: 1.0)

Adobe Shockwave Player 11.6 (x32 Version: 11.6.8.638)

Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482)

Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17)

Angry Birds (x32 Version: 2.1.0)

Apple Application Support (x32 Version: 2.3.4)

Apple Mobile Device Support (Version: 6.1.0.13)

Apple Software Update (x32 Version: 2.1.3.127)

ASUS AI Recovery (x32 Version: 1.0.7)

ASUS AP Bank (x32 Version: 1.0.0.0)

ASUS CopyProtect (x32 Version: 1.0.0015)

ASUS FancyStart (x32 Version: 1.0.6)

ASUS LifeFrame3 (x32 Version: 3.0.20)

ASUS Live Update (x32 Version: 2.5.9)

ASUS MultiFrame (x32 Version: 1.0.0019)

ASUS Power4Gear Hybrid (Version: 1.1.30)

ASUS SmartLogon (x32 Version: 1.0.0008)

ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028)

ASUS Virtual Camera (x32 Version: 1.0.19)

ASUS WebStorage (Version: 2.0.40.1319)

ASUS_N_Series_Screensaver (x32)

ATK Package (x32 Version: 1.0.0002)

AVG 2014 (Version: 14.0.3658)

AVG 2014 (Version: 14.0.4259)

AVG 2014 (Version: 2014.0.4259)

Avira Free Antivirus (x32 Version: 14.0.1.759)

Avira SearchFree Toolbar (x32 Version: 12.6.0.1898)

BlueStacks App Player (x32 Version: 0.7.15.909)

BlueStacks Notification Center (x32 Version: 0.7.15.909)

Bonjour (Version: 3.0.0.10)

Canon Easy-PhotoPrint EX (x32 Version: 4.1.6)

Canon Easy-WebPrint EX (x32)

Canon MG5100 series Benutzerregistrierung (x32)

Canon MG5100 series MP Drivers

Canon MP Navigator EX 4.0 (x32)

Canon My Printer (x32)

Canon Solution Menu EX (x32)

CardRecovery 6.00 (x32)

Command & Conquer 3 (x32 Version: 1.00.0000)

ControlDeck (x32 Version: 1.0.5)

Corel PaintShop Pro X6 (x32 Version: 16.0.0.113)

CyberLink PowerDVD 13 (x32 Version: 13.0.2720.57)

D3DX10 (x32 Version: 15.4.2368.0902)

DDBAC (x32 Version: 5.3.19)

Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition

devolo dLAN Cockpit (x32 Version: 3.0.0.0)

dLAN Cockpit (x32 Version: 3 (23.12.2010))

dLAN Cockpit (x32 Version: 3.23.12)

DVDFab 9.0.3.8 (29/04/2013) (x32)

eReg (x32 Version: 1.20.138.34)

ESET Online Scanner v3 (x32)

ETDWare PS/2-x64 7.0.5.9_WHQL

Euro-Überweisungs-Druckerei (x32)

Express Gate (x32 Version: 1.2.13.37)

Fast Boot (Version: 1.0.4)

Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.31.0)

FLV Player 2.0 (build 25) (x32 Version: 2.0 (build 25))

FormatFactory 3.0.1 (x32 Version: 3.0.1)

Fotogalerie (x32 Version: 16.4.3508.0205)

Free Audio CD to MP3 Converter version 1.3.12.1228 (x32 Version: 1.3.12.1228)

Free M4a to MP3 Converter 6.1 (x32)

Free YouTube Download version 3.1.37.918 (x32 Version: 3.1.37.918)

FRITZ!Box USB-Fernanschluss (HKCU Version: 2.3.0.2)

GameSpy Arcade (x32)

Garmin Trip and Waypoint Manager v4 (x32 Version: 4.0.0.0)

Garmin USB Drivers (x32 Version: 2.3.0.0)

Geogrid®-Viewer (x32 Version: 6.6.0.0000)

Google Chrome (x32 Version: 31.0.1650.63)

Google Earth (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.22.3)

GT Legends 1.0.0.0 (x32 Version: v1.0.0.0)

GTR 2 1.0.0.0 (x32 Version: v1.0.0.0)

GyroMeter (x32)

Hardcopy (C:\Program Files (x86)\Hardcopy) (x32 Version: 2010.08.19)

ICA (x32 Version: 16.0.0.113)

ImagXpress (x32 Version: 7.0.74.0)

inSSIDer (x32 Version: 2.1.5)

Intel PROSet Wireless

Intel(R) Control Center (x32 Version: 1.2.1.1007)

Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)

Intel(R) Processor Graphics (x32 Version: 8.15.10.2361)

Intel(R) PROSet/Wireless WiFi-Software (Version: 13.00.0000)

Intel(R) Turbo Boost Technology Monitor (Version: 1.0.115.11)

intelli-bit.fileSPLIT 1.08 (x32)

Internet-TV für Windows Media Center (x32 Version: 4.2.2.0)

IPM_PSP_COM (x32 Version: 16.0.0.113)

IPM_PSP_COM64 (Version: 16.0.0.113)

iTunes (Version: 11.0.5.5)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

KODAK Create@Home Software (für dm) (x32 Version: 7.6.1392)

Lexware Info Service (x32 Version: 2.90.00.0009)

Lexware online banking (x32 Version: 19.00.00.0059)

Logitech Harmony Remote Software (x32 Version: 1.0.110307)

Logitech Harmony Remote Software 7 (x32 Version: 7.7.0.0)

Logitech SetPoint 6.32 (Version: 6.32.20)

Logitech Vid (x32 Version: 1.10.1009)

Logitech Webcam Software (Version: 12.10.1113)

Logitech Webcam Software-Treiberpaket (Version: 12.10.1110)

MAGIX MP3 deluxe MX Download-Version (Version: 18.0.1.112)

MAGIX MP3 deluxe MX Download-Version (x32 Version: 18.0.1.112)

MAGIX Screenshare (Version: 4.3.6.1987)

MAGIX Screenshare (x32 Version: 4.3.6.1987)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6)

MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft – Speichern als PDF – Add-In für 2007 Microsoft Office-Programme (x32 Version: 12.0.4518.1014)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)

Microsoft .NET Framework 4 Extended (Version: 4.0.30320)

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30320)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Games for Windows - LIVE (x32 Version: 3.1.186.0)

Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Office 32-bit Components 2010 (Version: 14.0.6029.1000)

Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)

Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)

Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)

Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)

Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Outlook Hotmail Connector 64-Bit (Version: 14.0.5118.5000)

Microsoft Outlook Social Connector Provider for Windows Live Messenger 64-bit (Version: 14.0.5120.5000)

Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 8.0.50727.42)

Microsoft Search Enhancement Pack (x32 Version: 1.2.121.0)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)

Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)

Mobipocket Creator 4.2 (x32 Version: 4.2.41)

Movie Maker (x32 Version: 16.4.3508.0205)

MozBackup 1.5.1 (x32)

Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)

Mozilla Maintenance Service (x32 Version: 24.1.1)

Mozilla Thunderbird 24.1.1 (x86 de) (x32 Version: 24.1.1)

Mp3tag v2.53 (x32 Version: v2.53)

MSVC80_x64 (Version: 1.0.1.0)

MSVC80_x64_v2 (Version: 1.0.3.0)

MSVC80_x86 (x32 Version: 1.0.1.0)

MSVC80_x86_v2 (x32 Version: 1.0.3.0)

MSVC90_x64 (Version: 1.0.1.2)

MSVC90_x86 (x32 Version: 1.0.1.2)

MSVCRT (x32 Version: 15.4.2862.0708)

MSVCRT110 (x32 Version: 16.4.1108.0727)

MSVCRT110_amd64 (Version: 16.4.1109.0912)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)

MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)

MyFreeCodec (HKCU)

NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0)

Nero 12 (x32 Version: 12.0.02000)

Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0)

Nero BackItUp (x32 Version: 12.0.2001)

Nero BackItUp Help (CHM) (x32 Version: 12.0.3000)

Nero Blu-ray Player (x32 Version: 12.0.14300)

Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.4000)

Nero Burning ROM (x32 Version: 12.0.20000)

Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000)

Nero ControlCenter (x32 Version: 11.0.15200)

Nero ControlCenter Help (CHM) (x32 Version: 12.0.5000)

Nero Core Components (x32 Version: 11.0.18100)

Nero Disc Menus Basic (x32 Version: 12.0.11500)

Nero Effects Basic (x32 Version: 12.0.11500)

Nero Express (x32 Version: 12.0.20000)

Nero Express Help (CHM) (x32 Version: 12.0.5000)

Nero Kwik Media (x32 Version: 1.18.18200)

Nero Kwik Media Help (CHM) (x32 Version: 12.0.4000)

Nero Kwik Themes Basic (x32 Version: 12.0.11500)

Nero PiP Effects Basic (x32 Version: 12.0.11500)

Nero Recode (x32 Version: 12.0.24000)

Nero Recode Help (CHM) (x32 Version: 12.0.4000)

Nero RescueAgent (x32 Version: 12.0.9000)

Nero RescueAgent Help (CHM) (x32 Version: 12.0.3000)

Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0)

Nero Update (x32 Version: 11.0.11800.31.0)

Nero Video (x32 Version: 12.0.3000)

Nero Video Help (CHM) (x32 Version: 12.0.4000)

neroxml (x32 Version: 1.0.0)

Nokia Connectivity Cable Driver (x32 Version: 7.1.69.0)

Nokia Suite (x32 Version: 3.3.89.0)

NVIDIA 3D Vision Controller Driver (x32 Version: 280.19)

NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22)

NVIDIA Grafiktreiber 314.22 (Version: 314.22)

NVIDIA Install Application (Version: 2.1002.115.743)

NVIDIA Optimus 1.12.12 (Version: 1.12.12)

NVIDIA PhysX (x32 Version: 9.12.1031)

NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)

NVIDIA Systemsteuerung 314.22 (Version: 314.22)

NVIDIA Update 1.12.12 (Version: 1.12.12)

NVIDIA Update Components (Version: 1.12.12)

NVIDIA Updatus (x32 Version: 1.1.0)

Open Video Converter version 3.3 (x32)

Paint.NET v3.5.5 (Version: 3.55.0)

PC Connectivity Solution (x32 Version: 11.5.29.0)

PC Inspector smart recovery (x32 Version: 4.50)

PDF24 Creator 5.2.0 (x32)

Philips Phone Manager (x32 Version: 2.0.7.9)

Photo Common (x32 Version: 16.4.3508.0205)

Photo Gallery (x32 Version: 16.4.3508.0205)

PhotoScape (x32)

Prerequisite installer (x32 Version: 12.0.0002)

PSPPContent (x32 Version: 16.0.0.113)

PSPPHelp (x32 Version: 16.0.0.113)

PSPPro64 (Version: 16.0.0.113)

Python 2.7.1 (x32 Version: 2.7.1150)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6000)

Recuva (Version: 1.43)

Remote Control USB Driver (x32 Version: 2.3.2.317)

Revo Uninstaller Pro 3.0.7 (Version: 3.0.7)

Samsung AllShare (x32 Version: 2.1.0.12031_10)

Samsung Kies (x32 Version: 2.3.3.12085_7)

Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1)

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)

SDFormatter (x32 Version: 4.0.0)

Setup (x32 Version: 16.0.0.113)

Skype™ 6.0 (x32 Version: 6.0.126)

SnapIt 3.7 (x32 Version: 3.7)

Spybot - Search & Destroy (x32 Version: 1.6.2)

SRS Premium Sound Control Panel (Version: 1.8.2300)

Streamripper (Remove only) (x32)

swMSM (x32 Version: 12.0.0.1)

System Requirements Lab (x32)

System Requirements Lab for Intel (x32 Version: 4.4.24.0)

TeamViewer 8 (x32 Version: 8.0.22298)

Thrustmaster Calibration Tool (x32 Version: 1.03.0000)

Thrustmaster FFB Wheel driver (x32 Version: 2.FFJ.2007)

Tinypic 3.14 (x32 Version: Tinypic 3.14)

TmNationsForever (x32)

TomTom HOME 2.8.2.2264 (x32 Version: 2.8.2.2264)

TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2)

Toolbar Cleaner 1.1 (x32)

Top10 V1 Viewer (x32 Version: 6.6.0.0000)

TSR Watermark Image software version 2.2.0.7 (x32)

TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.89)

TuneUp Utilities 2014 (x32 Version: 14.0.1000.89)

Unity Web Player (HKCU Version: )

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)

Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition

Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition

Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition

Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition

Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition

Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition

Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition

Update for Microsoft Office 2010 (KB2767886) 64-Bit Edition

Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition

Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition

Update for Microsoft Office 2010 (KB2826026) 64-Bit Edition

Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition

Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition

Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition

Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition

Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition

Update for Microsoft Word 2010 (KB2827323) 64-Bit Edition

VBA (3821b) (x32 Version: 6.01.00.1234)

Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)

Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1)

VLC media player 2.0.0 (x32 Version: 2.0.0)

Vodafone Mobile Connect Lite Huawei (x32 Version: 9.3.0.9237)

VR-NetWorld (x32)

webcam 7 (x32 Version: 0.9.9.43)

Welcome App (Start-up experience) (x32 Version: 12.0.14000)

Win7codecs (x32 Version: 2.6.0)

Winamp (x32 Version: 5.621 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0)

Windows Live Communications Platform (x32 Version: 16.4.3508.0205)

Windows Live Essentials (x32 Version: 16.4.3508.0205)

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)

Windows Live Installer (x32 Version: 16.4.3508.0205)

Windows Live Photo Common (x32 Version: 16.4.3508.0205)

Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)

Windows Live SOXE (x32 Version: 16.4.3508.0205)

Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)

Windows Live Sync (x32 Version: 14.0.8050.1202)

Windows Live UX Platform (x32 Version: 16.4.3508.0205)

Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)

Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)

Windows-Treiberpaket - Koninklijke Philips Electronics N.V. (usbser) Ports  (05/31/2012 6.0.0.0) (Version: 05/31/2012 6.0.0.0)

Windows-Treiberpaket - Nokia Modem  (06/09/2010 4.5) (Version: 06/09/2010 4.5)

Windows-Treiberpaket - Nokia Modem  (06/09/2010 7.01.0.7) (Version: 06/09/2010 7.01.0.7)

Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0)

WinFlash (x32 Version: 2.29.0)

WinRAR 5.00 (64-Bit) (Version: 5.00.0)

WinX Free VOB to MP4 Converter 2.0.8 (x32)

Wireless Console 3 (x32 Version: 3.0.12)

WISO Steuer-Sparbuch 2013 (x32 Version: 20.03.8202)

wxPython 2.8.11.0 (unicode) for Python 2.7 (x32 Version: 2.8.11.0-unicode)

Xilisoft Video Converter Ultimate (x32 Version: 7.7.2.20130217)

Xvid 1.1.3 final uninstall (x32 Version: 1.1)

Yawcam 0.4.1 (x32)

Zak McKracken - Between Time and Space (x32)
 

==================== Restore Points  =========================
 

10-12-2013 13:31:11 Installed AVG 2014

10-12-2013 13:31:45 Installed AVG 2014
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {184BD705-0B9C-463F-88C6-9A6328364C85} - System32\Tasks\Adobe Updater => C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe

Task: {2DEF8262-2096-4ADD-AD26-936CFA8C3050} - System32\Tasks\{121683B2-F065-4C21-A539-A5D2BDC9F63D} => C:\Users\Mein\Downloads\Falcon\falcon3.exe

Task: {2F0C9D25-2E55-4979-9FDC-654DB8CD54E0} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-08-30] (TuneUp Software)

Task: {33B3D593-2EAA-48C2-A4CF-FABE544D35EC} - System32\Tasks\Google Updater and Installer => C:\Users\Mein\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {3ECC3334-C58A-472A-854A-089A24B09BE4} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)

Task: {49071B6F-59AF-4B1A-8DFD-B0E520422E16} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS)

Task: {50A50D3E-F6E3-47A9-BC1E-E90E223C30B8} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)

Task: {699BD882-CB24-499D-81B9-27A3F3187CE2} - System32\Tasks\{7A2B836C-77AC-4A21-97C8-606E6AE71000} => Firefox.exe hxxp://ui.skype.com/ui/0/4.2.0.187.259/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;disabled,google-chrome:notoffered;disabled

Task: {7F341C07-FEF6-489E-A7B2-52EDCDEE578A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)

Task: {83FFD59C-3F8A-4631-B5AA-921144283C35} - System32\Tasks\Lexware-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2011-07-31] (Haufe-Lexware GmbH & Co. KG)

Task: {89B72FC5-5C06-4B08-B4DD-B6A3ECB1AC2A} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] ()

Task: {9257A6CC-C335-445D-91F1-124CDF06E203} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-12] (Google Inc.)

Task: {94D17432-D773-43ED-BC8C-735FDBA3FA9C} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)

Task: {9E1FBEDF-D298-47F0-8E37-8B264FF4C71D} - System32\Tasks\{3CAB6F5D-4076-4AB5-9524-3069CFCFD201} => C:\Users\Mein\Downloads\Falcon\falcon3.exe

Task: {ACB23437-7B76-412A-BDC8-8CFFBCC10EBE} - System32\Tasks\{D2C65F2B-D2E6-4D02-A147-775A40A1E28E} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)

Task: {BDA4F92D-3772-4F80-A05B-341D2DB92B18} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-01-30] (ATK)

Task: {CAD2AD39-CF06-4FBC-813B-A85BD4648BFC} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()

Task: {E7BC7495-81AF-4F4D-AD4A-F0AB214EF06B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)

Task: {EBFA6F04-762B-4810-B35A-C5F4135A7476} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2009-09-16] ()

Task: {EF828F57-A79B-4B09-8E64-74B14E2228CE} - System32\Tasks\ASPG => C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe [2009-06-29] (ASUS)

Task: {F053D034-1BDE-4127-AD63-B9EF36271A44} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-12] (Google Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2011-12-25 20:49 - 2013-03-15 05:16 - 00086304 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2009-09-21 14:04 - 2009-09-21 14:04 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll

2013-08-30 08:51 - 2013-08-30 08:51 - 00757048 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll

2011-03-16 23:07 - 2011-03-16 23:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2008-10-01 07:02 - 2008-10-01 07:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll

2010-01-11 18:27 - 2010-01-11 18:27 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll

2010-01-26 22:21 - 2010-01-26 22:21 - 00032768 _____ () C:\Program Files\P4G\OvrClk.dll

2011-10-07 10:39 - 2011-10-07 10:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll

2011-04-10 09:40 - 2011-04-10 09:40 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2013-12-11 08:56 - 2013-11-26 12:19 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2011-11-01 23:26 - 2011-11-01 23:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2011-11-01 23:26 - 2011-11-01 23:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 01135616 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMSWrap.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00656896 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ContentDirectoryPresenter.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00105472 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMCDP.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00098816 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\FolderCDP.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00077312 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MetadataFramework.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 00520234 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\sqlite3.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 00450560 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MoodExtractor.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 05717504 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMImgExtractor.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00029184 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AutoChaptering.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 00147456 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexpat.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoThumb.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 04671488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avcodec-52.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 00070656 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avutil-50.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 00686080 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avformat-52.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 00152064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\swscale-0.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00027648 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AudioExtractor.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00063488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ID3Driver.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 00366592 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\tag.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00289792 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libThumbnail.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00023040 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RichInfoDriver.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoExtractor.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ThumbnailMaker.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00133120 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoMetadataDriver.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00290304 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libKeyFrame.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\SECMetaDriver.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ImageExtractor.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\photoDriver.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 00399826 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexif-12.dll.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00013824 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\TextExtractor.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00031232 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\Autobackup.dll

2012-02-22 15:46 - 2012-02-22 15:46 - 00054784 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RosettaAllShare.dll

2012-01-05 21:40 - 2012-01-05 21:40 - 00044032 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\us.dll

2013-11-16 13:35 - 2013-11-16 13:35 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\Temp:AB689DEA
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/11/2013 09:34:57 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/11/2013 09:34:55 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/11/2013 09:34:55 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/11/2013 09:34:23 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/11/2013 09:34:23 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/11/2013 09:16:51 AM) (Source: BstHdAndroidSvc) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/11/2013 08:55:46 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (12/11/2013 08:55:46 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (12/11/2013 08:37:57 AM) (Source: BstHdAndroidSvc) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/11/2013 05:20:03 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
 

System errors:

=============

Error: (12/11/2013 09:53:15 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Avira Browser-Schutz" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/11/2013 09:19:25 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (12/11/2013 09:19:25 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (12/11/2013 09:17:24 AM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

prodrv06

prohlp02

prosync1

sfhlp01
 

Error: (12/11/2013 09:16:51 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (12/11/2013 09:15:47 AM) (Source: Application Popup) (User: )

Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\drivers\prodrv06.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 

Error: (12/11/2013 08:40:10 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (12/11/2013 08:40:10 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (12/11/2013 08:38:08 AM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

prodrv06

prohlp02

prosync1

sfhlp01
 

Error: (12/11/2013 08:37:57 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 
 

Microsoft Office Sessions:

=========================

Error: (12/11/2013 09:34:57 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Mein\Downloads\esetsmartinstaller_deu.exe
 

Error: (12/11/2013 09:34:55 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Mein\Downloads\esetsmartinstaller_deu.exe
 

Error: (12/11/2013 09:34:55 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Mein\Downloads\esetsmartinstaller_deu.exe
 

Error: (12/11/2013 09:34:23 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Mein\Downloads\esetsmartinstaller_deu.exe
 

Error: (12/11/2013 09:34:23 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Mein\Downloads\esetsmartinstaller_deu.exe
 

Error: (12/11/2013 09:16:51 AM) (Source: BstHdAndroidSvc)(User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/11/2013 08:55:46 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Mein\Downloads\SoftonicDownloader_fuer_photoscape.exe
 

Error: (12/11/2013 08:55:46 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Mein\Downloads\SoftonicDownloader_fuer_free-vimeo-downloader.exe
 

Error: (12/11/2013 08:37:57 AM) (Source: BstHdAndroidSvc)(User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/11/2013 05:20:03 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Mein\Downloads\esetsmartinstaller_deu.exe
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-07-15 14:43:09.868

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-15 14:43:09.834

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-15 14:43:07.789

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-15 14:43:07.765

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-15 14:43:05.726

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-15 14:43:05.699

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-15 14:43:03.429

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-15 14:43:03.402

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-15 14:43:01.356

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-15 14:43:01.325

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 56%

Total physical RAM: 3885.54 MB

Available physical RAM: 1679.06 MB

Total Pagefile: 7769.25 MB

Available Pagefile: 4740.88 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:149.04 GB) (Free:14.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (DATA) (Fixed) (Total:430.52 GB) (Free:71.08 GB) NTFS

Drive e: (Technisat) (CDROM) (Total:0.04 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 596 GB) (Disk ID: 097C5D7D)

Partition 1: (Not Active) - (Size=17 GB) - (Type=1C)

Partition 2: (Active) - (Size=149 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=431 GB) - (Type=OF Extended)
 

==================== End Of Log ============================

Hoffe das passt so.
Danke

Hallo farley,
ja danke, das passt so. Wenn du noch die Funde von ESET und Malwarebytes hast, dann poste sie mir bitte.

Mehrere Anti-Virus-Programme

Code:

Avira

AVG

Mir ist aufgefallen, dass Du mehr als ein Anti-Virus-Programm mit Hintergrundwächter laufen hast. Das ist gefährlich, da sich die Programme in die Quere kommen können und dadurch Viren erst recht auf dem Rechner landen können. Ausserdem bremst es auch das System aus. Entscheide Dich für eine Variante und deinstalliere die andere über Systemsteuerung => Software.

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKCU\...\Run: [dnss] - C:\Users\Mein\AppData\Roaming\dnss.lnk

C:\Users\Mein\AppData\Roaming\dnss.lnk

C:\Users\Mein\AppData\Roaming\Aysbnrwg

HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)

C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe 

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=82E11A4BD6F8F827&affID=119357&tsp=4983

FF HKCU\...\Firefox\Extensions: [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}] - C:\Program Files (x86)\LyricsPal\125.xpi

C:\Program Files (x86)\LyricsPal\125.xpi

CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=82E11A4BD6F8F827&affID=119357&tsp=4983

CHR HKLM-x32\...\Chrome\Extension: [mmiopbgcekanlhpjkonogoljpfmhpkhf] - C:\Program Files (x86)\LyricsPal\125.crx

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2

Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-12-2013

Ran by Mein at 2013-12-12 09:01:27 Run:1

Running from C:\Users\Mein\Downloads

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

HKCU\...\Run: [dnss] - C:\Users\Mein\AppData\Roaming\dnss.lnk

C:\Users\Mein\AppData\Roaming\dnss.lnk

C:\Users\Mein\AppData\Roaming\Aysbnrwg

HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)

C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe 

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=82E11A4BD6F8F827&affID=119357&tsp=4983

FF HKCU\...\Firefox\Extensions: [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}] - C:\Program Files (x86)\LyricsPal\125.xpi

C:\Program Files (x86)\LyricsPal\125.xpi

CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=82E11A4BD6F8F827&affID=119357&tsp=4983

CHR HKLM-x32\...\Chrome\Extension: [mmiopbgcekanlhpjkonogoljpfmhpkhf] - C:\Program Files (x86)\LyricsPal\125.crx

         

*****************
 

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\dnss => Value deleted successfully.

"C:\Users\Mein\AppData\Roaming\dnss.lnk" => File/Directory not found.

C:\Users\Mein\AppData\Roaming\Aysbnrwg => Moved successfully.

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ApnTBMon => Value not found.

"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" => File/Directory not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully.

HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.

HKCU\Software\Mozilla\Firefox\Extensions\\{9309FA47-1B48-4768-AFA4-9E0556F5DC81} => Value deleted successfully.

"C:\Program Files (x86)\LyricsPal\125.xpi" => File/Directory not found.

CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=82E11A4BD6F8F827&affID=119357&tsp=4983 ==> The Chrome "Settings" can be used to fix the entry.

HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mmiopbgcekanlhpjkonogoljpfmhpkhf => Key deleted successfully.

"C:\Program Files (x86)\LyricsPal\125.crx" => File/Directory not found.
 

==== End of Fixlog ====

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-12-2013

Ran by Mein (administrator) on MEIN-PC on 12-12-2013 09:08:09

Running from C:\Users\Mein\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe

(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe

(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe

(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe

(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL3\KHALMNPR.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(AVM Berlin) C:\Users\Mein\AppData\Local\Apps\2.0\Q4AGNB1A.KK0\BTWG7O23.PYG\frit..tion_8488884cfbcefd60_0002.0003_f406d43803d5433d\fritzbox-usb-fernanschluss.exe

(ASUS) C:\Windows\AsScrPro.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)

HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)

HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-26] (Samsung)

HKCU\...\Run: [AVMUSBFernanschluss] - C:\Users\Mein\AppData\Local\Apps\2.0\Q4AGNB1A.KK0\BTWG7O23.PYG\frit..tion_8488884cfbcefd60_0002.0003_f406d43803d5433d\AVMAutoStart.exe [139264 2013-01-24] (AVM Berlin)

MountPoints2: {b754fe32-a532-11df-a835-485b39e6e6ca} - F:\setup.exe

MountPoints2: {b754fe5f-a532-11df-a835-485b39e6e6ca} - G:\setup.exe

MountPoints2: {b754fe74-a532-11df-a835-485b39e6e6ca} - F:\setup.exe

MountPoints2: {b754fe76-a532-11df-a835-485b39e6e6ca} - F:\setup.exe

MountPoints2: {e9b710aa-32d8-11e0-8a7d-485b39e6e6ca} - H:\setup.exe

MountPoints2: {e9b710ac-32d8-11e0-8a7d-485b39e6e6ca} - H:\setup.exe

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [7109248 2010-01-13] (ASUS)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-10-21] (NEC Electronics Corporation)

HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)

HKU\UpdatusUser\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [250504 2013-03-15] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [205184 2013-03-15] (NVIDIA Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default

FF user.js: detected! => C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\user.js

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @logitech.com/HarmonyRemote,version=1.0.0 - C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll (Logitech Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Mein\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\babylon.xml

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\BrowserDefender.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Виявлення пристроїв Logitech - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\DeviceDetection@logitech.com

FF Extension: Garmin Communicator - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

FF Extension: personas - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\personas@christopher.beard.xpi

FF Extension: DVDVideoSoft Menu - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi

FF Extension: Adblock Plus - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: dta - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi

FF HKLM-x32\...\Firefox\Extensions: [fe_15.0@nokia.com] - C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_15.0
 

Chrome: 

=======

CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=82E11A4BD6F8F827&affID=119357&tsp=4983

CHR RestoreOnStartup: "hxxp://www.google.com/"

CHR DefaultSearchKeyword: google.de

CHR DefaultSearchProvider: Google

CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Java Deployment Toolkit 6.0.230.5) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U23) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Microsoft Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (3D RealityMaps Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprm3d.dll No File

CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File

CHR Plugin: (Harmony Firefox Plugin) - C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll (Logitech Inc.)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Unity Player) - C:\Users\Mein\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Extension: (YouTube) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (AdBlock) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0

CHR Extension: (Google Wallet) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (Gmail) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
 

==================== Services (Whitelisted) =================
 

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-04] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-04] (BlueStack Systems, Inc.)

R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)

R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)

R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3304768 2010-12-23] (devolo AG)

S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2012-04-04] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 nosGetPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll [58944 2010-11-29] (NOS Microsystems Ltd.)

R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software)

R2 VMCService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [24576 2008-03-13] (Vodafone)

S3 w7Svc; C:\Program Files (x86)\webcam 7\wService.exe [5094200 2012-03-26] (Moonware Studios)
 

==================== Drivers (Whitelisted) ====================
 

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)

R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)

R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116096 2011-03-25] (AVM Berlin)

R3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [116480 2013-01-24] (AVM Berlin)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-04] (BlueStack Systems)

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-05-22] ()

S3 imhidusb; C:\Windows\System32\DRIVERS\imhidusb.sys [23040 2007-04-19] (Immersion Corporation)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )

R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM)

R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies)

S1 prodrv06; C:\Windows\SysWow64\drivers\prodrv06.sys [54272 2004-04-08] (Protection Technology)

S0 prohlp02; C:\Windows\SysWow64\drivers\prohlp02.sys [70400 2004-04-08] (Protection Technology)

S0 prosync1; C:\Windows\SysWow64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)

S0 sfhlp01; C:\Windows\SysWow64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-03-19] (CyberLink Corp.)

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-12 09:08 - 2013-12-12 09:08 - 00024768 _____ C:\Users\Mein\Downloads\FRST.txt

2013-12-12 08:56 - 2013-12-12 08:56 - 00001130 _____ C:\Users\Mein\Desktop\FRST64.exe - Verknüpfung.lnk

2013-12-12 08:55 - 2013-12-12 08:55 - 00000000 ____H C:\ProgramData\cm-lock

2013-12-12 08:52 - 2013-12-12 08:52 - 00000000 ____D C:\Users\Mein\Desktop\2013_12_12

2013-12-11 09:58 - 2013-12-12 09:00 - 00000000 ____D C:\Users\Mein\Downloads\FRST-OlderVersion

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Malwarebytes

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\ProgramData\APN

2013-12-11 08:56 - 2013-12-11 08:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-11 08:56 - 2013-12-11 08:56 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-11 08:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-12-11 08:32 - 2013-12-11 08:34 - 128337920 _____ C:\Users\Mein\Downloads\avira_free_antivirus_de.exe

2013-12-11 07:49 - 2013-12-11 07:49 - 00000373 _____ C:\Users\Mein\Desktop\troj.txt

2013-12-11 05:26 - 2013-12-11 05:26 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Mein\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-11 05:20 - 2013-12-11 05:20 - 00000000 ____D C:\Program Files (x86)\ESET

2013-12-11 05:16 - 2013-12-11 05:16 - 02347384 _____ (ESET) C:\Users\Mein\Downloads\esetsmartinstaller_deu.exe

2013-12-10 15:58 - 2013-12-12 09:00 - 00000000 ____D C:\FRST

2013-12-10 15:56 - 2013-12-12 09:00 - 01927106 _____ (Farbar) C:\Users\Mein\Downloads\FRST64.exe

2013-12-10 14:33 - 2013-12-10 14:33 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AVG2014

2013-12-10 14:32 - 2013-12-10 14:32 - 00000983 _____ C:\Users\Public\Desktop\AVG 2014.lnk

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ___HD C:\$AVG

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ____D C:\ProgramData\AVG2014

2013-12-10 14:31 - 2013-12-10 14:31 - 00000000 ____D C:\Program Files (x86)\AVG

2013-12-10 14:29 - 2013-12-10 14:29 - 04435768 _____ (AVG Technologies) C:\Users\Mein\Downloads\avg_avct_stb_all_2014_4259_cm10.exe

2013-12-10 14:18 - 2013-12-12 09:02 - 00000000 ____D C:\ProgramData\MFAData

2013-12-10 14:18 - 2013-12-10 14:49 - 00000000 ____D C:\Users\Mein\AppData\Local\Avg2014

2013-12-10 14:18 - 2013-12-10 14:18 - 00000000 ____D C:\Users\Mein\AppData\Local\MFAData

2013-12-07 13:50 - 2013-09-28 19:28 - 732325888 _____ C:\Users\Mein\Downloads\Think Bigger.avi

2013-12-07 10:17 - 2013-12-07 10:17 - 00000000 _____ C:\Users\Mein\Desktop\Neues Textdokument.txt

2013-12-07 10:07 - 2013-12-07 10:14 - 00000000 ____D C:\Users\Mein\Downloads\Die Kirche bleibt im Dorf - S01

2013-11-25 09:19 - 2013-11-25 09:19 - 27641005 _____ C:\Users\Mein\Downloads\s10a_38_pmw_deu.zip

2013-11-23 15:49 - 2013-11-23 15:49 - 00000000 ____D C:\Program Files (x86)\Yawcam

2013-11-23 15:48 - 2013-11-23 15:48 - 04675501 _____ (Magnus Lundvall                                             ) C:\Users\Mein\Downloads\yawcam_install.exe

2013-11-23 15:39 - 2013-11-23 15:39 - 00079964 _____ C:\Windows\AsCDProc.log

2013-11-23 15:39 - 2013-11-23 15:39 - 00002480 _____ C:\Windows\AsDebug.log

2013-11-23 15:32 - 2013-11-23 15:42 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AbelCam

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\Users\Mein\AppData\Local\IsolatedStorage

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\ProgramData\Caphyon

2013-11-23 15:30 - 2013-11-23 15:37 - 00000000 ____D C:\ProgramData\Seiz System Engineering

2013-11-23 15:27 - 2013-11-23 15:27 - 00715016 _____ C:\Users\Mein\Downloads\AbelCam_4_2_4.exe

2013-11-20 17:53 - 2013-11-20 17:58 - 00000000 ____D C:\Users\Mein\Desktop\2013_11_20

2013-11-16 13:35 - 2013-11-16 13:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\Documents\Corel PaintShop Pro

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Ulead Systems

2013-11-14 09:26 - 2013-11-14 09:26 - 00001168 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk

2013-11-14 09:23 - 2013-11-14 09:23 - 05831344 _____ (TeamViewer GmbH) C:\Users\Mein\Downloads\TeamViewer_Setup_de.exe

2013-11-13 09:06 - 2013-11-13 09:06 - 00000000 ____D C:\Users\Mein\AppData\Local\LiveUpdate
 

==================== One Month Modified Files and Folders =======
 

2013-12-12 09:09 - 2013-12-12 09:08 - 00024768 _____ C:\Users\Mein\Downloads\FRST.txt

2013-12-12 09:02 - 2013-12-10 14:18 - 00000000 ____D C:\ProgramData\MFAData

2013-12-12 09:02 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-12 09:02 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-12 09:00 - 2013-12-11 09:58 - 00000000 ____D C:\Users\Mein\Downloads\FRST-OlderVersion

2013-12-12 09:00 - 2013-12-10 15:58 - 00000000 ____D C:\FRST

2013-12-12 09:00 - 2013-12-10 15:56 - 01927106 _____ (Farbar) C:\Users\Mein\Downloads\FRST64.exe

2013-12-12 09:00 - 2010-08-11 13:09 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2DECCA28-EE7F-4439-A7D5-6FF3F82C1154}

2013-12-12 08:56 - 2013-12-12 08:56 - 00001130 _____ C:\Users\Mein\Desktop\FRST64.exe - Verknüpfung.lnk

2013-12-12 08:55 - 2013-12-12 08:55 - 00000000 ____H C:\ProgramData\cm-lock

2013-12-12 08:55 - 2010-08-12 09:19 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-12 08:54 - 2010-09-12 17:43 - 00534092 _____ C:\Windows\PFRO.log

2013-12-12 08:54 - 2010-09-06 17:03 - 00083143 _____ C:\Windows\setupact.log

2013-12-12 08:54 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-12 08:53 - 2010-05-21 18:33 - 01382550 _____ C:\Windows\WindowsUpdate.log

2013-12-12 08:52 - 2013-12-12 08:52 - 00000000 ____D C:\Users\Mein\Desktop\2013_12_12

2013-12-12 08:52 - 2009-08-04 10:51 - 00697082 _____ C:\Windows\system32\perfh007.dat

2013-12-12 08:52 - 2009-08-04 10:51 - 00148346 _____ C:\Windows\system32\perfc007.dat

2013-12-12 08:52 - 2009-07-14 06:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-12 08:50 - 2012-05-31 20:34 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-12-12 08:50 - 2012-05-31 20:34 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy

2013-12-12 08:48 - 2013-08-08 13:08 - 00000000 ____D C:\ProgramData\Avira

2013-12-12 08:48 - 2013-01-01 18:35 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-12 08:46 - 2010-08-12 09:19 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-11 09:52 - 2013-02-24 17:09 - 00000000 ___RD C:\Users\Mein\Downloads\Treiber Medion

2013-12-11 09:48 - 2013-01-01 18:35 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-12-11 09:48 - 2012-08-07 18:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-11 09:48 - 2012-06-20 05:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-11 09:17 - 2010-05-21 20:04 - 00002956 _____ C:\Windows\system32\AutoRunFilter.ini

2013-12-11 09:17 - 2010-05-21 20:04 - 00002849 _____ C:\Windows\system32\ServiceFilter.ini

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Malwarebytes

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\ProgramData\APN

2013-12-11 08:57 - 2013-12-11 08:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-11 08:56 - 2013-12-11 08:56 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-11 08:34 - 2013-12-11 08:32 - 128337920 _____ C:\Users\Mein\Downloads\avira_free_antivirus_de.exe

2013-12-11 07:49 - 2013-12-11 07:49 - 00000373 _____ C:\Users\Mein\Desktop\troj.txt

2013-12-11 07:44 - 2010-08-27 17:10 - 00000000 ____D C:\Users\Mein\Downloads\3D

2013-12-11 05:26 - 2013-12-11 05:26 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Mein\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-11 05:20 - 2013-12-11 05:20 - 00000000 ____D C:\Program Files (x86)\ESET

2013-12-11 05:16 - 2013-12-11 05:16 - 02347384 _____ (ESET) C:\Users\Mein\Downloads\esetsmartinstaller_deu.exe

2013-12-10 14:49 - 2013-12-10 14:18 - 00000000 ____D C:\Users\Mein\AppData\Local\Avg2014

2013-12-10 14:48 - 2012-07-22 10:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2013-12-10 14:33 - 2013-12-10 14:33 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AVG2014

2013-12-10 14:32 - 2013-12-10 14:32 - 00000983 _____ C:\Users\Public\Desktop\AVG 2014.lnk

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ___HD C:\$AVG

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ____D C:\ProgramData\AVG2014

2013-12-10 14:32 - 2010-08-11 09:36 - 00000000 ____D C:\Users\Mein\AppData\Roaming\TuneUp Software

2013-12-10 14:32 - 2010-05-21 19:59 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute

2013-12-10 14:31 - 2013-12-10 14:31 - 00000000 ____D C:\Program Files (x86)\AVG

2013-12-10 14:29 - 2013-12-10 14:29 - 04435768 _____ (AVG Technologies) C:\Users\Mein\Downloads\avg_avct_stb_all_2014_4259_cm10.exe

2013-12-10 14:18 - 2013-12-10 14:18 - 00000000 ____D C:\Users\Mein\AppData\Local\MFAData

2013-12-08 18:24 - 2010-09-13 18:46 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Skype

2013-12-07 10:52 - 2010-08-11 09:17 - 00000000 ____D C:\Users\Mein

2013-12-07 10:17 - 2013-12-07 10:17 - 00000000 _____ C:\Users\Mein\Desktop\Neues Textdokument.txt

2013-12-07 10:14 - 2013-12-07 10:07 - 00000000 ____D C:\Users\Mein\Downloads\Die Kirche bleibt im Dorf - S01

2013-12-05 15:06 - 2010-08-12 09:19 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-05 15:06 - 2010-08-12 09:19 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-11-25 09:19 - 2013-11-25 09:19 - 27641005 _____ C:\Users\Mein\Downloads\s10a_38_pmw_deu.zip

2013-11-25 09:09 - 2013-08-08 14:43 - 00000000 ____D C:\Users\Mein\AppData\Roaming\TeamViewer

2013-11-25 08:58 - 2010-08-11 09:58 - 00000000 ____D C:\Users\Mein\AppData\Local\Adobe

2013-11-25 08:45 - 2009-07-14 05:45 - 00490224 _____ C:\Windows\system32\FNTCACHE.DAT

2013-11-25 08:43 - 2012-04-26 05:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-11-23 15:49 - 2013-11-23 15:49 - 00000000 ____D C:\Program Files (x86)\Yawcam

2013-11-23 15:48 - 2013-11-23 15:48 - 04675501 _____ (Magnus Lundvall                                             ) C:\Users\Mein\Downloads\yawcam_install.exe

2013-11-23 15:42 - 2013-11-23 15:32 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AbelCam

2013-11-23 15:39 - 2013-11-23 15:39 - 00079964 _____ C:\Windows\AsCDProc.log

2013-11-23 15:39 - 2013-11-23 15:39 - 00002480 _____ C:\Windows\AsDebug.log

2013-11-23 15:37 - 2013-11-23 15:30 - 00000000 ____D C:\ProgramData\Seiz System Engineering

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\Users\Mein\AppData\Local\IsolatedStorage

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\ProgramData\Caphyon

2013-11-23 15:27 - 2013-11-23 15:27 - 00715016 _____ C:\Users\Mein\Downloads\AbelCam_4_2_4.exe

2013-11-21 14:39 - 2013-10-14 11:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-11-20 17:58 - 2013-11-20 17:53 - 00000000 ____D C:\Users\Mein\Desktop\2013_11_20

2013-11-18 13:54 - 2010-08-11 09:17 - 00136696 _____ C:\Users\Mein\AppData\Local\GDIPFONTCACHEV1.DAT

2013-11-16 13:35 - 2013-11-16 13:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-16 08:53 - 2013-10-09 08:46 - 00000000 ____D C:\Program Files (x86)\Lexware

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\Documents\Corel PaintShop Pro

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Ulead Systems

2013-11-14 09:26 - 2013-11-14 09:26 - 00001168 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk

2013-11-14 09:26 - 2013-10-07 12:47 - 00000000 ____D C:\Program Files (x86)\TeamViewer

2013-11-14 09:23 - 2013-11-14 09:23 - 05831344 _____ (TeamViewer GmbH) C:\Users\Mein\Downloads\TeamViewer_Setup_de.exe

2013-11-13 09:06 - 2013-11-13 09:06 - 00000000 ____D C:\Users\Mein\AppData\Local\LiveUpdate
 

Some content of TEMP:

====================

C:\Users\Mein\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-11-20 20:25
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Hallo farley,
ich hatte dich nach Funden von ESET und Malwarebytes gefragt. Falls du die Logs noch hast, dann poste sie mir bitte, wenn nicht, wäre es schön, wenn du mir das mitteilen könntest. :)
Die Logs von ESET findest du unter:
C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt]
Die Logs von MBAM befinden sich unter:
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-yyyy-mm-dd
Hier findest du eine Anleitung dazu.

Wie läuft dein Rechner momentan? Hast du noch Probleme?

Falls Du mit Malwarebytes noch keinen Scan gemacht hast, mache bitte einen Quickscan:
Schritt 1
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 2
Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Sorry das mit ESET und Malwarebytes hab ich überlesen.

Hab nochmal Malwarebytes laufen lassen.

Code:

Malwarebytes Anti-Malware (Test) 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.12.13.03
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16721

Mein :: MEIN-PC [Administrator]
 

Schutz: Aktiviert
 

13.12.2013 08:49:00

mbam-log-2013-12-13 (08-49-00).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 237511

Laufzeit: 9 Minute(n), 57 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-12-2013 01

Ran by Mein (administrator) on MEIN-PC on 13-12-2013 09:05:06

Running from C:\Users\Mein\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe

(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe

(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe

(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe

(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL3\KHALMNPR.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(AVM Berlin) C:\Users\Mein\AppData\Local\Apps\2.0\Q4AGNB1A.KK0\BTWG7O23.PYG\frit..tion_8488884cfbcefd60_0002.0003_f406d43803d5433d\fritzbox-usb-fernanschluss.exe

(ASUS) C:\Windows\AsScrPro.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)

HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)

HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-26] (Samsung)

HKCU\...\Run: [AVMUSBFernanschluss] - C:\Users\Mein\AppData\Local\Apps\2.0\Q4AGNB1A.KK0\BTWG7O23.PYG\frit..tion_8488884cfbcefd60_0002.0003_f406d43803d5433d\AVMAutoStart.exe [139264 2013-01-24] (AVM Berlin)

MountPoints2: {b754fe32-a532-11df-a835-485b39e6e6ca} - F:\setup.exe

MountPoints2: {b754fe5f-a532-11df-a835-485b39e6e6ca} - G:\setup.exe

MountPoints2: {b754fe74-a532-11df-a835-485b39e6e6ca} - F:\setup.exe

MountPoints2: {b754fe76-a532-11df-a835-485b39e6e6ca} - F:\setup.exe

MountPoints2: {e9b710aa-32d8-11e0-8a7d-485b39e6e6ca} - H:\setup.exe

MountPoints2: {e9b710ac-32d8-11e0-8a7d-485b39e6e6ca} - H:\setup.exe

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [7109248 2010-01-13] (ASUS)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-10-21] (NEC Electronics Corporation)

HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)

HKU\UpdatusUser\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [250504 2013-03-15] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [205184 2013-03-15] (NVIDIA Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default

FF user.js: detected! => C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\user.js

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @logitech.com/HarmonyRemote,version=1.0.0 - C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll (Logitech Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Mein\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\babylon.xml

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\BrowserDefender.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Виявлення пристроїв Logitech - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\DeviceDetection@logitech.com

FF Extension: Garmin Communicator - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

FF Extension: personas - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\personas@christopher.beard.xpi

FF Extension: DVDVideoSoft Menu - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi

FF Extension: Adblock Plus - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: dta - C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi

FF HKLM-x32\...\Firefox\Extensions: [fe_15.0@nokia.com] - C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_15.0
 

Chrome: 

=======

CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=82E11A4BD6F8F827&affID=119357&tsp=4983

CHR RestoreOnStartup: "hxxp://www.google.com/"

CHR DefaultSearchKeyword: google.de

CHR DefaultSearchProvider: Google

CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Java Deployment Toolkit 6.0.230.5) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U23) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Microsoft Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (3D RealityMaps Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprm3d.dll No File

CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File

CHR Plugin: (Harmony Firefox Plugin) - C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll (Logitech Inc.)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Unity Player) - C:\Users\Mein\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Extension: (YouTube) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (AdBlock) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0

CHR Extension: (Google Wallet) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (Gmail) - C:\Users\Mein\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
 

==================== Services (Whitelisted) =================
 

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-04] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-04] (BlueStack Systems, Inc.)

R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)

R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)

R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3304768 2010-12-23] (devolo AG)

S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2012-04-04] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 nosGetPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll [58944 2010-11-29] (NOS Microsystems Ltd.)

R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software)

R2 VMCService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [24576 2008-03-13] (Vodafone)

S3 w7Svc; C:\Program Files (x86)\webcam 7\wService.exe [5094200 2012-03-26] (Moonware Studios)
 

==================== Drivers (Whitelisted) ====================
 

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)

R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)

R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116096 2011-03-25] (AVM Berlin)

R3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [116480 2013-01-24] (AVM Berlin)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-04] (BlueStack Systems)

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-05-22] ()

S3 imhidusb; C:\Windows\System32\DRIVERS\imhidusb.sys [23040 2007-04-19] (Immersion Corporation)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )

R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM)

R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies)

S1 prodrv06; C:\Windows\SysWow64\drivers\prodrv06.sys [54272 2004-04-08] (Protection Technology)

S0 prohlp02; C:\Windows\SysWow64\drivers\prohlp02.sys [70400 2004-04-08] (Protection Technology)

S0 prosync1; C:\Windows\SysWow64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)

S0 sfhlp01; C:\Windows\SysWow64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-03-19] (CyberLink Corp.)

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-13 08:42 - 2013-12-13 08:42 - 00000000 ____D C:\Users\Mein\Desktop\Neuer Ordner

2013-12-12 09:08 - 2013-12-13 09:05 - 00024957 _____ C:\Users\Mein\Downloads\FRST.txt

2013-12-12 08:55 - 2013-12-12 08:55 - 00000000 ____H C:\ProgramData\cm-lock

2013-12-12 08:52 - 2013-12-12 08:52 - 00000000 ____D C:\Users\Mein\Desktop\2013_12_12

2013-12-11 09:58 - 2013-12-13 09:02 - 00000000 ____D C:\Users\Mein\Downloads\FRST-OlderVersion

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Malwarebytes

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\ProgramData\APN

2013-12-11 08:56 - 2013-12-11 08:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-11 08:56 - 2013-12-11 08:56 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-11 08:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-12-11 08:32 - 2013-12-11 08:34 - 128337920 _____ C:\Users\Mein\Downloads\avira_free_antivirus_de.exe

2013-12-11 07:49 - 2013-12-11 07:49 - 00000373 _____ C:\Users\Mein\Desktop\troj.txt

2013-12-11 05:26 - 2013-12-11 05:26 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Mein\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-11 05:20 - 2013-12-11 05:20 - 00000000 ____D C:\Program Files (x86)\ESET

2013-12-11 05:16 - 2013-12-11 05:16 - 02347384 _____ (ESET) C:\Users\Mein\Downloads\esetsmartinstaller_deu.exe

2013-12-10 15:58 - 2013-12-13 09:02 - 00000000 ____D C:\FRST

2013-12-10 15:56 - 2013-12-13 09:02 - 01927462 _____ (Farbar) C:\Users\Mein\Downloads\FRST64.exe

2013-12-10 14:33 - 2013-12-10 14:33 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AVG2014

2013-12-10 14:32 - 2013-12-10 14:32 - 00000983 _____ C:\Users\Public\Desktop\AVG 2014.lnk

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ___HD C:\$AVG

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ____D C:\ProgramData\AVG2014

2013-12-10 14:31 - 2013-12-10 14:31 - 00000000 ____D C:\Program Files (x86)\AVG

2013-12-10 14:29 - 2013-12-10 14:29 - 04435768 _____ (AVG Technologies) C:\Users\Mein\Downloads\avg_avct_stb_all_2014_4259_cm10.exe

2013-12-10 14:18 - 2013-12-13 09:02 - 00000000 ____D C:\ProgramData\MFAData

2013-12-10 14:18 - 2013-12-10 14:49 - 00000000 ____D C:\Users\Mein\AppData\Local\Avg2014

2013-12-10 14:18 - 2013-12-10 14:18 - 00000000 ____D C:\Users\Mein\AppData\Local\MFAData

2013-12-07 13:50 - 2013-09-28 19:28 - 732325888 _____ C:\Users\Mein\Downloads\Think Bigger.avi

2013-12-07 10:17 - 2013-12-07 10:17 - 00000000 _____ C:\Users\Mein\Desktop\Neues Textdokument.txt

2013-12-07 10:07 - 2013-12-07 10:14 - 00000000 ____D C:\Users\Mein\Downloads\Die Kirche bleibt im Dorf - S01

2013-11-25 09:19 - 2013-11-25 09:19 - 27641005 _____ C:\Users\Mein\Downloads\s10a_38_pmw_deu.zip

2013-11-23 15:49 - 2013-11-23 15:49 - 00000000 ____D C:\Program Files (x86)\Yawcam

2013-11-23 15:48 - 2013-11-23 15:48 - 04675501 _____ (Magnus Lundvall                                             ) C:\Users\Mein\Downloads\yawcam_install.exe

2013-11-23 15:39 - 2013-11-23 15:39 - 00079964 _____ C:\Windows\AsCDProc.log

2013-11-23 15:39 - 2013-11-23 15:39 - 00002480 _____ C:\Windows\AsDebug.log

2013-11-23 15:32 - 2013-11-23 15:42 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AbelCam

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\Users\Mein\AppData\Local\IsolatedStorage

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\ProgramData\Caphyon

2013-11-23 15:30 - 2013-11-23 15:37 - 00000000 ____D C:\ProgramData\Seiz System Engineering

2013-11-23 15:27 - 2013-11-23 15:27 - 00715016 _____ C:\Users\Mein\Downloads\AbelCam_4_2_4.exe

2013-11-20 17:53 - 2013-11-20 17:58 - 00000000 ____D C:\Users\Mein\Desktop\2013_11_20

2013-11-16 13:35 - 2013-11-16 13:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\Documents\Corel PaintShop Pro

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Ulead Systems

2013-11-14 09:26 - 2013-11-14 09:26 - 00001168 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk

2013-11-14 09:23 - 2013-11-14 09:23 - 05831344 _____ (TeamViewer GmbH) C:\Users\Mein\Downloads\TeamViewer_Setup_de.exe

2013-11-13 09:06 - 2013-11-13 09:06 - 00000000 ____D C:\Users\Mein\AppData\Local\LiveUpdate
 

==================== One Month Modified Files and Folders =======
 

2013-12-13 09:05 - 2013-12-12 09:08 - 00024957 _____ C:\Users\Mein\Downloads\FRST.txt

2013-12-13 09:02 - 2013-12-11 09:58 - 00000000 ____D C:\Users\Mein\Downloads\FRST-OlderVersion

2013-12-13 09:02 - 2013-12-10 15:58 - 00000000 ____D C:\FRST

2013-12-13 09:02 - 2013-12-10 15:56 - 01927462 _____ (Farbar) C:\Users\Mein\Downloads\FRST64.exe

2013-12-13 09:02 - 2013-12-10 14:18 - 00000000 ____D C:\ProgramData\MFAData

2013-12-13 08:56 - 2010-08-12 09:19 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-13 08:48 - 2013-01-01 18:35 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-13 08:42 - 2013-12-13 08:42 - 00000000 ____D C:\Users\Mein\Desktop\Neuer Ordner

2013-12-13 08:42 - 2010-08-12 09:19 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-13 08:42 - 2010-05-21 18:33 - 01384104 _____ C:\Windows\WindowsUpdate.log

2013-12-12 09:02 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-12 09:02 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-12 09:00 - 2010-08-11 13:09 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2DECCA28-EE7F-4439-A7D5-6FF3F82C1154}

2013-12-12 08:55 - 2013-12-12 08:55 - 00000000 ____H C:\ProgramData\cm-lock

2013-12-12 08:54 - 2010-09-12 17:43 - 00534092 _____ C:\Windows\PFRO.log

2013-12-12 08:54 - 2010-09-06 17:03 - 00083143 _____ C:\Windows\setupact.log

2013-12-12 08:54 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-12 08:52 - 2013-12-12 08:52 - 00000000 ____D C:\Users\Mein\Desktop\2013_12_12

2013-12-12 08:52 - 2009-08-04 10:51 - 00697082 _____ C:\Windows\system32\perfh007.dat

2013-12-12 08:52 - 2009-08-04 10:51 - 00148346 _____ C:\Windows\system32\perfc007.dat

2013-12-12 08:52 - 2009-07-14 06:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-12 08:50 - 2012-05-31 20:34 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-12-12 08:50 - 2012-05-31 20:34 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy

2013-12-12 08:48 - 2013-08-08 13:08 - 00000000 ____D C:\ProgramData\Avira

2013-12-11 09:52 - 2013-02-24 17:09 - 00000000 ___RD C:\Users\Mein\Downloads\Treiber Medion

2013-12-11 09:48 - 2013-01-01 18:35 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-12-11 09:48 - 2012-08-07 18:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-11 09:48 - 2012-06-20 05:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-11 09:17 - 2010-05-21 20:04 - 00002956 _____ C:\Windows\system32\AutoRunFilter.ini

2013-12-11 09:17 - 2010-05-21 20:04 - 00002849 _____ C:\Windows\system32\ServiceFilter.ini

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Malwarebytes

2013-12-11 08:57 - 2013-12-11 08:57 - 00000000 ____D C:\ProgramData\APN

2013-12-11 08:57 - 2013-12-11 08:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-11 08:56 - 2013-12-11 08:56 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-11 08:34 - 2013-12-11 08:32 - 128337920 _____ C:\Users\Mein\Downloads\avira_free_antivirus_de.exe

2013-12-11 07:49 - 2013-12-11 07:49 - 00000373 _____ C:\Users\Mein\Desktop\troj.txt

2013-12-11 07:44 - 2010-08-27 17:10 - 00000000 ____D C:\Users\Mein\Downloads\3D

2013-12-11 05:26 - 2013-12-11 05:26 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Mein\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-11 05:20 - 2013-12-11 05:20 - 00000000 ____D C:\Program Files (x86)\ESET

2013-12-11 05:16 - 2013-12-11 05:16 - 02347384 _____ (ESET) C:\Users\Mein\Downloads\esetsmartinstaller_deu.exe

2013-12-10 14:49 - 2013-12-10 14:18 - 00000000 ____D C:\Users\Mein\AppData\Local\Avg2014

2013-12-10 14:48 - 2012-07-22 10:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2013-12-10 14:33 - 2013-12-10 14:33 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AVG2014

2013-12-10 14:32 - 2013-12-10 14:32 - 00000983 _____ C:\Users\Public\Desktop\AVG 2014.lnk

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ___HD C:\$AVG

2013-12-10 14:32 - 2013-12-10 14:32 - 00000000 ____D C:\ProgramData\AVG2014

2013-12-10 14:32 - 2010-08-11 09:36 - 00000000 ____D C:\Users\Mein\AppData\Roaming\TuneUp Software

2013-12-10 14:32 - 2010-05-21 19:59 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute

2013-12-10 14:31 - 2013-12-10 14:31 - 00000000 ____D C:\Program Files (x86)\AVG

2013-12-10 14:29 - 2013-12-10 14:29 - 04435768 _____ (AVG Technologies) C:\Users\Mein\Downloads\avg_avct_stb_all_2014_4259_cm10.exe

2013-12-10 14:18 - 2013-12-10 14:18 - 00000000 ____D C:\Users\Mein\AppData\Local\MFAData

2013-12-08 18:24 - 2010-09-13 18:46 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Skype

2013-12-07 10:52 - 2010-08-11 09:17 - 00000000 ____D C:\Users\Mein

2013-12-07 10:17 - 2013-12-07 10:17 - 00000000 _____ C:\Users\Mein\Desktop\Neues Textdokument.txt

2013-12-07 10:14 - 2013-12-07 10:07 - 00000000 ____D C:\Users\Mein\Downloads\Die Kirche bleibt im Dorf - S01

2013-12-05 15:06 - 2010-08-12 09:19 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-05 15:06 - 2010-08-12 09:19 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-11-25 09:19 - 2013-11-25 09:19 - 27641005 _____ C:\Users\Mein\Downloads\s10a_38_pmw_deu.zip

2013-11-25 09:09 - 2013-08-08 14:43 - 00000000 ____D C:\Users\Mein\AppData\Roaming\TeamViewer

2013-11-25 08:58 - 2010-08-11 09:58 - 00000000 ____D C:\Users\Mein\AppData\Local\Adobe

2013-11-25 08:45 - 2009-07-14 05:45 - 00490224 _____ C:\Windows\system32\FNTCACHE.DAT

2013-11-25 08:43 - 2012-04-26 05:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-11-23 15:49 - 2013-11-23 15:49 - 00000000 ____D C:\Program Files (x86)\Yawcam

2013-11-23 15:48 - 2013-11-23 15:48 - 04675501 _____ (Magnus Lundvall                                             ) C:\Users\Mein\Downloads\yawcam_install.exe

2013-11-23 15:42 - 2013-11-23 15:32 - 00000000 ____D C:\Users\Mein\AppData\Roaming\AbelCam

2013-11-23 15:39 - 2013-11-23 15:39 - 00079964 _____ C:\Windows\AsCDProc.log

2013-11-23 15:39 - 2013-11-23 15:39 - 00002480 _____ C:\Windows\AsDebug.log

2013-11-23 15:37 - 2013-11-23 15:30 - 00000000 ____D C:\ProgramData\Seiz System Engineering

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\Users\Mein\AppData\Local\IsolatedStorage

2013-11-23 15:31 - 2013-11-23 15:31 - 00000000 ____D C:\ProgramData\Caphyon

2013-11-23 15:27 - 2013-11-23 15:27 - 00715016 _____ C:\Users\Mein\Downloads\AbelCam_4_2_4.exe

2013-11-21 14:39 - 2013-10-14 11:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-11-20 17:58 - 2013-11-20 17:53 - 00000000 ____D C:\Users\Mein\Desktop\2013_11_20

2013-11-18 13:54 - 2010-08-11 09:17 - 00136696 _____ C:\Users\Mein\AppData\Local\GDIPFONTCACHEV1.DAT

2013-11-16 13:35 - 2013-11-16 13:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-16 08:53 - 2013-10-09 08:46 - 00000000 ____D C:\Program Files (x86)\Lexware

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\Documents\Corel PaintShop Pro

2013-11-14 10:06 - 2013-11-14 10:06 - 00000000 ____D C:\Users\Mein\AppData\Roaming\Ulead Systems

2013-11-14 09:26 - 2013-11-14 09:26 - 00001168 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk

2013-11-14 09:26 - 2013-10-07 12:47 - 00000000 ____D C:\Program Files (x86)\TeamViewer

2013-11-14 09:23 - 2013-11-14 09:23 - 05831344 _____ (TeamViewer GmbH) C:\Users\Mein\Downloads\TeamViewer_Setup_de.exe

2013-11-13 09:06 - 2013-11-13 09:06 - 00000000 ____D C:\Users\Mein\AppData\Local\LiveUpdate
 

Some content of TEMP:

====================

C:\Users\Mein\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-11-20 20:25
 

==================== End Of Log ============================

--- --- ---

Hallo farley,
der neue Scan nutzt mir leider nicht viel. Ich brauche die alten Logs, um zu sehen wo was gefunden wurde und ob noch Reste vorhanden sind, die ich so nicht sehe.

Führe nochmal einen Fix mit FRST durch.
Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\babylon.xml

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\BrowserDefender.xml

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Hi hab die logfile von ESET gefunden.

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=3d4b9a0a92521649a79c88a0675fd0cc

# engine=16223

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-12-11 06:45:09

# local_time=2013-12-11 07:45:09 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=1797 16774142 0 5 62739 77995 0 0

# compatibility_mode=5893 16776574 100 94 2805277 138374159 0 0

# scanned=358535

# found=3

# cleaned=3

# scan_time=8596

sh=BBDB3F41F6B391BA1B7B0174EE9C28788813250E ft=1 fh=3772e498c6f04009 vn="Win32/Spy.Bebloh.K Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Mein\AppData\Roaming\dnss.exe"

sh=C02D100FFABCDE20C31743B4919AEA8EF777C218 ft=1 fh=6c7075a69c25ebb1 vn="Win32/Trustezeb.E Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Mein\AppData\Roaming\Aysbnrwg\nhfkpcbv.exe"

sh=3447D76E589D474FD1E4FA5E921EDF7B149CC6E6 ft=1 fh=5222ab19ade81bf5 vn="Win32/Inject.NDT Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Mein\Downloads\3D\3D SexVilla v2.54OxS!®.exe"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=3d4b9a0a92521649a79c88a0675fd0cc

# engine=16223

# end=stopped

# remove_checked=false

# archives_checked=false

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-12-11 08:35:40

# local_time=2013-12-11 09:35:40 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=1799 16775165 100 94 4757 1289772 0 0

# compatibility_mode=5893 16776574 100 94 2815508 138380790 0 0

# scanned=220

# found=0

# cleaned=0

# scan_time=11

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=3d4b9a0a92521649a79c88a0675fd0cc

# engine=16238

# end=stopped

# remove_checked=false

# archives_checked=false

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-12-12 08:11:47

# local_time=2013-12-12 09:11:47 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=5893 16776574 100 94 2900475 138465757 0 0

# scanned=279

# found=0

# cleaned=0

# scan_time=12

Hab den Fix mit FRST auch noch gemacht wie angegeben.

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-12-2013 01

Ran by Mein at 2013-12-14 08:08:29 Run:2

Running from C:\Users\Mein\Downloads

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\babylon.xml

FF SearchPlugin: C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\BrowserDefender.xml

         

*****************
 

C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\babylon.xml => Moved successfully.

C:\Users\Mein\AppData\Roaming\Mozilla\Firefox\Profiles\jd6cvv7a.default\searchplugins\BrowserDefender.xml => Moved successfully.
 

==== End of Fixlog ====

PC läuft normal wie immer.

Hallo farley,
sehr schön. Danke dir.

Schritt 1
In deinem Chrome Browser ist deltasearch als Startseite eingetragen
Stelle nach dieser Anleitung deine Startseite neu ein.

OK
So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber.
Abschließend räumen wir noch etwas auf, führen Updates durch und dann bekommst du noch etwas Lesestoff von mir.

Schritt 1
Falls Du Malwarebytes-Antimalware und den ESET-Onlinescan nicht mehr benötigst, kannst Du beide Programme einfach über die Programmdeinstallation deinstallieren.
Ich empfehle Dir aber zumindest Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen.

Schritt 2
Downloade dir bitte delfix auf deinen Desktop.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.
DelFix entfernt u. a. alle verwendeten Programme und löscht sich abschließend selbst.

Updates / Programme aktualisieren

Internetexplorer
Dein InternetExplorer ist nicht mehr aktuell. Besuche diese Microsoftseite und lade dir von dort den neuesten Internetexplorer für dein Betriebssystem herunter

FlashPlayer

Deine FlashPlayer für Firefox und den Internet Explorer sind nicht mehr aktuell.

Deinstalliere die alten Versionen.
Öffne nacheinander mit beiden Browsern folgenden Link Adobe - Adobe Flash Player installieren und lade Dir von dort die neueste Version herunter.
Entferne den Haken bei McAfee Security Plus.

Aktualisierung einstellen
Stelle sicher, dass dein FlashPlayer nach Updates sucht. Den FlashPlayer kann man direkt bei der Installation so konfigurieren, dass er nach Updates automatisch sucht, nachträglich kann man das über folgenden Link machen:
Adobe - Flash Player: Einstellungsmanager - Globale Benachrichtigungseinstellungen

Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems.

Aktualität des Systems
Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.

Bitte überprüfe, ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.

Java

Java ist eine große Sicherheitslücke auf deinem System, es werden immer wieder neue Schwachstellen entdeckt, die ausgenutzt werden um Rechner zu infizieren.
Sofern du Java nicht zwingend benötigst, solltest du es komplett deinstallieren.

Windows XP
Gehe auf:
Start --> Systemsteuerung --> Software --> Javaversionen auswählen --> entfernen
Windows Vista
Gehe auf:
Start --> Systemsteuerung -- > Programme --> Programme deinstallieren --> Javaversionen suchen --> entfernen
Windows 7
Dazu gehe auf:
den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Javaversionen --> entfernen
Windows 8
Dazu drücke auf:
Windowstaste und X
dann:
Programme und Funktionen -->Javaversionen auswählen --> entfernen

Falls du Java doch unbedingt benötigst, dann

Downloade dir bitte die neueste Java-Version von hier
Speichere die jxpiinstall.exe
Schließe alle laufenden Programme. Speziell deinen Browser.
Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 45 ) herunter laden.
Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.

und sorge dafür, dass Java automatisch updated.
Dazu:

öffne Java
klicke auf den Reiter Update
klicke auf: Benachrichtung ausgeben: Vor dem Download setze den Haken bei Automatisch nach Updates suchen
klicke auf Erweitert
ändere das Intervall mindestens auf wöchentlich

und schalte das Browser-Plugin aus.
Hier findest du eine Anleitung dazu.

Antivirensoftware

Gehe sicher immer eine Antiviren Software installiert zu haben und halte diese unbedingt aktuell.

Zusätzlicher Schutz

MalwareBytes Anti-Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On-Demand Scantool welches viele aktuelle Malware erkennt und auch entfernt.
Aktualisiere das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf einen Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Systemleistung
Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu TFC
Halte dich fern von jeglichen Registry Cleanern.
Diese schaden deinem System mehr als dass sie es schneller machen.

Verhaltensregeln zum sichereren Surfen

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun.

Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun.

Alles wieder in Ordnung.

Vielen Vielen Dank für deine Hilfe. Hab alles soweit erledigt wie es auf der Liste stand.
Muss einfach wieder vorsichtiger werden. Hab an meinem PC alles etwas schleifen lassen.

Danke nochmals.

Gruß Farley

Hallo farley,

Gern geschehen und vielen Dank für deine Rückmeldung.

Dieses Thema scheint erledigt und wird aus meinen Abonnements gelöscht, somit bekomme ich keine Benachrichtigungen mehr über neue Antworten.
Solltest Du noch Fragen oder Probleme haben, so schicke mir bitte eine PM