Na klar, hab nur die Chrome Einträge entfernt, da der Fehler nur im Firefox war und der Code sonst so lange ist. Aber gerne hier nochmals OTL.exe, aufgesplittet in zwei Teileb:
OTL Logfiles:
#1 Code:
OTL logfile created on: 02.01.2014 15:45:47 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = D:\Anwenderdaten\A. M. \Downloads
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16476)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
7,69 Gb Total Physical Memory | 3,63 Gb Available Physical Memory | 47,26% Memory free
9,21 Gb Paging File | 3,90 Gb Available in Paging File | 42,30% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 118,90 Gb Total Space | 53,19 Gb Free Space | 44,73% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 29,78 Gb Free Space | 6,39% Space Free | Partition Type: NTFS
Computer Name: THINKPADT430 | User Name: Andreas M. | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Program Files (x86)\Java\jre7\bin\javaw.exe (Oracle Corporation)
PRC - D:\Anwenderdaten\A. M. \Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Users\Andreas M. \AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Lenovo\SettingsDependency\SettingsService.exe (Lenovo Group Limited)
PRC - C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe ()
PRC - C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe ()
PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Programme\Lenovo\Communications Utility\AVControlCenter32.exe (Lenovo Corporation)
PRC - C:\Programme\Lenovo\Communications Utility\vcamsvchlpr.exe (Lenovo Corporation)
PRC - C:\Programme\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Corporation)
PRC - C:\Programme\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited)
PRC - C:\Programme\Lenovo\Communications Utility\TpKnrres.exe (Lenovo Corporation)
PRC - C:\Programme\Lenovo\Communications Utility\CamMute.exe (Lenovo Corporation)
PRC - C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE (Lenovo)
PRC - C:\Programme\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited)
PRC - C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
PRC - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe (Microsoft Corporation.)
========== Modules (No Company Name) ==========
MOD - C:\Users\Andreas M. \AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll ()
MOD - C:\Users\Andreas M. \AppData\Roaming\Dropbox\bin\libcef.dll ()
MOD - C:\Program Files (x86)\Microsoft Office\Office15\ADDINS\UmOutlookAddin.dll ()
MOD - C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll ()
MOD - C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll ()
MOD - C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll ()
========== Services (SafeList) ==========
SRV:64bit: - (IBMPMSVC) -- C:\Windows\SysNative\ibmpmsvc.exe (Lenovo.)
SRV:64bit: - (AppXSvc) -- C:\Windows\SysNative\AppXDeploymentServer.dll (Microsoft Corporation)
SRV:64bit: - (workfolderssvc) -- C:\Windows\SysNative\workfolderssvc.dll (Microsoft Corporation)
SRV:64bit: - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:64bit: - (WSService) -- C:\Windows\SysNative\WSService.dll (Microsoft Corporation)
SRV:64bit: - (AppReadiness) -- C:\Windows\SysNative\AppReadiness.dll (Microsoft Corporation)
SRV:64bit: - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SRV:64bit: - (BrokerInfrastructure) -- C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SRV:64bit: - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
SRV:64bit: - (BcmBtRSupport) -- C:\Windows\SysNative\BtwRSupportService.exe (Broadcom Corporation.)
SRV:64bit: - (lfsvc) -- C:\Windows\SysNative\GeofenceMonitorService.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (MsKeyboardFilter) -- C:\Windows\SysNative\KeyboardFilterSvc.dll (Microsoft Corporation)
SRV:64bit: - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV:64bit: - (WEPHOSTSVC) -- C:\Windows\SysNative\wephostsvc.dll (Microsoft Corporation)
SRV:64bit: - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SRV:64bit: - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation)
SRV:64bit: - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation)
SRV:64bit: - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation)
SRV:64bit: - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicvss) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicrdv) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicguestinterface) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SRV:64bit: - (smphost) -- C:\Windows\SysNative\smphost.dll (Microsoft Corporation)
SRV:64bit: - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SRV:64bit: - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (ScDeviceEnum) -- C:\Windows\SysNative\ScDeviceEnum.dll (Microsoft Corporation)
SRV:64bit: - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SRV:64bit: - (TimeBroker) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SRV:64bit: - (NcbService) -- C:\Windows\SysNative\ncbservice.dll (Microsoft Corporation)
SRV:64bit: - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SRV:64bit: - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation)
SRV:64bit: - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)
SRV:64bit: - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
SRV:64bit: - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation)
SRV:64bit: - (TPHDEXLGSVC) -- C:\Windows\SysNative\TPHDEXLG64.exe (Lenovo.)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (Lenovo Settings Service) -- C:\Programme\Lenovo\SettingsDependency\SettingsService.exe (Lenovo Group Limited)
SRV - (LocationTaskManager) -- C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe ()
SRV - (AVControlCenter) -- C:\Programme\Lenovo\Communications Utility\AVControlCenter32.exe (Lenovo Corporation)
SRV - (LENOVO.TVTVCAM) -- C:\Programme\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Corporation)
SRV - (LENOVO.TPKNRSVC) -- C:\Programme\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited)
SRV - (LENOVO.CAMMUTE) -- C:\Programme\Lenovo\Communications Utility\CamMute.exe (Lenovo Corporation)
SRV - (Power Manager DBC Service) -- C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE (Lenovo)
SRV - (SUService) -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe ()
SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (lfsvc) -- C:\Windows\SysWOW64\GeofenceMonitorService.dll (Microsoft Corporation)
SRV - (PrintNotify) -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV - (StorSvc) -- C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation)
SRV - (smphost) -- C:\Windows\SysWOW64\smphost.dll (Microsoft Corporation)
SRV - (LENOVO.MICMUTE) -- C:\Programme\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited)
SRV - (TPHKLOAD) -- C:\Programme\Lenovo\HOTKEY\tphkload.exe (Lenovo Group Limited)
SRV - (btwdins) -- C:\Programme\ThinkPad\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV - (BrYNSvc) -- C:\Program Files (x86)\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
SRV - (PelService) -- C:\Programme\Lenovo\Lenovo Mouse Suite\PelService.exe ()
SRV - (BBUpdate) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe (Microsoft Corporation.)
SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.exe (Microsoft Corporation.)
========== Driver Services (SafeList) ==========
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avnetflt) -- C:\Windows\SysNative\drivers\avnetflt.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (TPPWRIF) -- C:\Windows\SysNative\drivers\TPPWR64V.SYS (Lenovo Group Limited)
DRV:64bit: - (BrSerIb) -- C:\Windows\SysNative\drivers\BrSerIb.sys (Brother Industries Ltd.)
DRV:64bit: - (BrUsbSIb) -- C:\Windows\SysNative\drivers\BrUsbSib.sys (Brother Industries Ltd.)
DRV:64bit: - (IBMPMDRV) -- C:\Windows\SysNative\drivers\ibmpmdrv.sys (Lenovo.)
DRV:64bit: - (intelpep) -- C:\Windows\SysNative\drivers\intelpep.sys (Microsoft Corporation)
DRV:64bit: - (USBXHCI) -- C:\Windows\SysNative\drivers\USBXHCI.SYS (Microsoft Corporation)
DRV:64bit: - (pdc) -- C:\Windows\SysNative\drivers\pdc.sys (Microsoft Corporation)
DRV:64bit: - (spaceport) -- C:\Windows\SysNative\drivers\spaceport.sys (Microsoft Corporation)
DRV:64bit: - (SerCx2) -- C:\Windows\SysNative\drivers\SerCx2.sys (Microsoft Corporation)
DRV:64bit: - (WFPLWFS) -- C:\Windows\SysNative\drivers\wfplwfs.sys (Microsoft Corporation)
DRV:64bit: - (stornvme) -- C:\Windows\SysNative\drivers\stornvme.sys (Microsoft Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (intaud_WaveExtensible) -- C:\Windows\SysNative\drivers\intelaud.sys (Intel Corporation)
DRV:64bit: - (iwdbus) -- C:\Windows\SysNative\drivers\iwdbus.sys (Intel Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (USBHUB3) -- C:\Windows\SysNative\drivers\USBHUB3.SYS (Microsoft Corporation)
DRV:64bit: - (VerifierExt) -- C:\Windows\SysNative\drivers\VerifierExt.sys (Microsoft Corporation)
DRV:64bit: - (risdxc) -- C:\Windows\SysNative\drivers\risdxc64.sys (REDC)
DRV:64bit: - (NETwNe64) -- C:\Windows\SysNative\drivers\NETwew00.sys (Intel Corporation)
DRV:64bit: - (kbldfltr) -- C:\Windows\SysNative\drivers\kbldfltr.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (Vid) -- C:\Windows\SysNative\drivers\Vid.sys (Microsoft Corporation)
DRV:64bit: - (vmbusr) -- C:\Windows\SysNative\drivers\vmbusr.sys (Microsoft Corporation)
DRV:64bit: - (storvsp) -- C:\Windows\SysNative\drivers\storvsp.sys (Microsoft Corporation)
DRV:64bit: - (vpcivsp) -- C:\Windows\SysNative\drivers\vpcivsp.sys (Microsoft Corporation)
DRV:64bit: - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (condrv) -- C:\Windows\SysNative\drivers\condrv.sys (Microsoft Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (dam) -- C:\Windows\SysNative\drivers\dam.sys (Microsoft Corporation)
DRV:64bit: - (acpiex) -- C:\Windows\SysNative\drivers\acpiex.sys (Microsoft Corporation)
DRV:64bit: - (TPM) -- C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation)
DRV:64bit: - (mvumis) -- C:\Windows\SysNative\drivers\mvumis.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (GPIOClx0101) -- C:\Windows\SysNative\drivers\msgpioclx.sys (Microsoft Corporation)
DRV:64bit: - (msgpiowin32) -- C:\Windows\SysNative\drivers\msgpiowin32.sys (Microsoft Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (LSI_SSS) -- C:\Windows\SysNative\drivers\lsi_sss.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (LSI_SAS3) -- C:\Windows\SysNative\drivers\lsi_sas3.sys (LSI Corporation)
DRV:64bit: - (ADP80XX) -- C:\Windows\SysNative\drivers\adp80xx.sys (PMC-Sierra)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (3ware) -- C:\Windows\SysNative\drivers\3ware.sys (LSI)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (EhStorTcgDrv) -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys (Microsoft Corporation)
DRV:64bit: - (EhStorClass) -- C:\Windows\SysNative\drivers\EhStorClass.sys (Microsoft Corporation)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (VSTXRAID) -- C:\Windows\SysNative\drivers\VSTXRAID.SYS (VIA Corporation)
DRV:64bit: - (UCX01000) -- C:\Windows\SysNative\drivers\UCX01000.SYS (Microsoft Corporation)
DRV:64bit: - (UASPStor) -- C:\Windows\SysNative\drivers\uaspstor.sys (Microsoft Corporation)
DRV:64bit: - (sdstor) -- C:\Windows\SysNative\drivers\sdstor.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology, Inc.)
DRV:64bit: - (storahci) -- C:\Windows\SysNative\drivers\storahci.sys (Microsoft Corporation)
DRV:64bit: - (SpbCx) -- C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
DRV:64bit: - (SerCx) -- C:\Windows\SysNative\drivers\SerCx.sys (Microsoft Corporation)
DRV:64bit: - (wpcfltr) -- C:\Windows\SysNative\drivers\wpcfltr.sys (Microsoft Corporation)
DRV:64bit: - (CLFS) -- C:\Windows\SysNative\drivers\clfs.sys (Microsoft Corporation)
DRV:64bit: - (ReFS) -- C:\Windows\SysNative\drivers\refs.sys (Microsoft Corporation)
DRV:64bit: - (UEFI) -- C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation)
DRV:64bit: - (vpci) -- C:\Windows\SysNative\drivers\vpci.sys (Microsoft Corporation)
DRV:64bit: - (WpdUpFltr) -- C:\Windows\SysNative\drivers\WpdUpFltr.sys (Microsoft Corporation)
DRV:64bit: - (WdFilter) -- C:\Windows\SysNative\drivers\WdFilter.sys (Microsoft Corporation)
DRV:64bit: - (WdNisDrv) -- C:\Windows\SysNative\drivers\WdNisDrv.sys (Microsoft Corporation)
DRV:64bit: - (WdBoot) -- C:\Windows\SysNative\drivers\WdBoot.sys (Microsoft Corporation)
DRV:64bit: - (ahcache) -- C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
DRV:64bit: - (BasicDisplay) -- C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
DRV:64bit: - (BasicRender) -- C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
DRV:64bit: - (HyperVideo) -- C:\Windows\SysNative\drivers\HyperVideo.sys (Microsoft Corporation)
DRV:64bit: - (mshidumdf) -- C:\Windows\SysNative\drivers\mshidumdf.sys (Microsoft Corporation)
DRV:64bit: - (acpitime) -- C:\Windows\SysNative\drivers\acpitime.sys (Microsoft Corporation)
DRV:64bit: - (acpipagr) -- C:\Windows\SysNative\drivers\acpipagr.sys (Microsoft Corporation)
DRV:64bit: - (BthAvrcpTg) -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys (Microsoft Corporation)
DRV:64bit: - (kdnic) -- C:\Windows\SysNative\drivers\kdnic.sys (Microsoft Corporation)
DRV:64bit: - (gencounter) -- C:\Windows\SysNative\drivers\vmgencounter.sys (Microsoft Corporation)
DRV:64bit: - (npsvctrig) -- C:\Windows\SysNative\drivers\npsvctrig.sys (Microsoft Corporation)
DRV:64bit: - (bthhfhid) -- C:\Windows\SysNative\drivers\BthhfHid.sys (Microsoft Corporation)
DRV:64bit: - (hyperkbd) -- C:\Windows\SysNative\drivers\hyperkbd.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (BthHFEnum) -- C:\Windows\SysNative\drivers\bthhfenum.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (hidi2c) -- C:\Windows\SysNative\drivers\hidi2c.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (netvsc) -- C:\Windows\SysNative\drivers\netvsc63.sys (Microsoft Corporation)
DRV:64bit: - (BthLEEnum) -- C:\Windows\SysNative\drivers\BthLEEnum.sys (Microsoft Corporation)
DRV:64bit: - (NdisVirtualBus) -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys (Microsoft Corporation)
DRV:64bit: - (NdisImPlatform) -- C:\Windows\SysNative\drivers\NdisImPlatform.sys (Microsoft Corporation)
DRV:64bit: - (MsLldp) -- C:\Windows\SysNative\drivers\mslldp.sys (Microsoft Corporation)
DRV:64bit: - (Ndu) -- C:\Windows\SysNative\drivers\Ndu.sys (Microsoft Corporation)
DRV:64bit: - (FxPPM) -- C:\Windows\SysNative\drivers\fxppm.sys (Microsoft Corporation)
DRV:64bit: - (bcmfn2) -- C:\Windows\SysNative\drivers\bcmfn2.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (iaStorAV) -- C:\Windows\SysNative\drivers\iaStorAV.sys (Intel Corporation)
DRV:64bit: - (Shockprf) -- C:\Windows\SysNative\drivers\ApsX64.sys (Lenovo.)
DRV:64bit: - (TPDIGIMN) -- C:\Windows\SysNative\drivers\ApsHM64.sys (Lenovo.)
DRV:64bit: - (iaLPSSi_GPIO) -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys (Intel Corporation)
DRV:64bit: - (iaLPSSi_I2C) -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys (Intel Corporation)
DRV:64bit: - (e1iexpress) -- C:\Windows\SysNative\drivers\e1i63x64.sys (Intel Corporation)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (bcbtums) -- C:\Windows\SysNative\drivers\bcbtums.sys (Broadcom Corporation.)
DRV:64bit: - (btwaudio) -- C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.)
DRV:64bit: - (btwavdt) -- C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.)
DRV:64bit: - (btwrchid) -- C:\Windows\SysNative\drivers\btwrchid.sys (Broadcom Corporation.)
DRV:64bit: - (btwampfl) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (BTWPANFL) -- C:\Windows\SysNative\drivers\btwpanfl.sys (Broadcom Corporation.)
DRV:64bit: - (LenovoRd) -- C:\Windows\SysNative\drivers\LenovoRd.sys (Gemalto)
DRV:64bit: - (LnvHIDHW) -- C:\Windows\SysNative\drivers\LnvHIDHW.sys (Lenovo)
DRV:64bit: - (btwl2cap) -- C:\Windows\SysNative\drivers\btwl2cap.sys (Broadcom Corporation.)
DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (pelmoubt) -- C:\Windows\SysNative\drivers\PELMOUBT.SYS (Primax Electronics Ltd.)
DRV:64bit: - (pelbtm) -- C:\Windows\SysNative\drivers\PELBTM.SYS (Primax Electronics Ltd.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2132384609-1576062560-950552869-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
IE - HKU\S-1-5-21-2132384609-1576062560-950552869-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKU\S-1-5-21-2132384609-1576062560-950552869-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C5 65 52 A0 ED F8 CE 01 [binary data]
IE - HKU\S-1-5-21-2132384609-1576062560-950552869-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2132384609-1576062560-950552869-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-2132384609-1576062560-950552869-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledAddons: %7Bdf4e4df5-5cb7-46b0-9aef-6c784c3249f8%7D:1.2.3
FF - prefs.js..extensions.enabledAddons: copy-urls-expert%40kashiif-gmail.com:2.2.1
FF - prefs.js..extensions.enabledAddons: %7B7f57cf46-4467-4c2d-adfa-0cba7c507e54%7D:3.0.0
FF - prefs.js..extensions.enabledAddons: %7Bf36c6cd1-da73-491d-b290-8fc9115bfa55%7D:3.0.8
FF - prefs.js..extensions.enabledAddons: info%40vitzo.com:2.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.12.15 16:36:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.12.14 19:29:16 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
[2013.12.14 18:03:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Andreas M. \AppData\Roaming\mozilla\Extensions
[2014.01.02 13:55:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Andreas M. \AppData\Roaming\mozilla\Firefox\Profiles\gw14tk9t.default\extensions
[2013.12.31 14:49:53 | 000,053,991 | ---- | M] () (No name found) -- C:\Users\Andreas M. \AppData\Roaming\mozilla\firefox\profiles\gw14tk9t.default\extensions\copy-urls-expert@kashiif-gmail.com.xpi
[2014.01.02 13:55:06 | 000,017,065 | ---- | M] () (No name found) -- C:\Users\Andreas M. \AppData\Roaming\mozilla\firefox\profiles\gw14tk9t.default\extensions\info@vitzo.com.xpi
[2013.12.31 19:24:18 | 000,536,875 | ---- | M] () (No name found) -- C:\Users\Andreas M. \AppData\Roaming\mozilla\firefox\profiles\gw14tk9t.default\extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}.xpi
[2013.12.20 18:32:37 | 000,915,554 | ---- | M] () (No name found) -- C:\Users\Andreas M. \AppData\Roaming\mozilla\firefox\profiles\gw14tk9t.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.12.20 18:31:47 | 000,026,290 | ---- | M] () (No name found) -- C:\Users\Andreas M. \AppData\Roaming\mozilla\firefox\profiles\gw14tk9t.default\extensions\{df4e4df5-5cb7-46b0-9aef-6c784c3249f8}.xpi
[2014.01.02 12:56:01 | 000,799,362 | ---- | M] () (No name found) -- C:\Users\Andreas M. \AppData\Roaming\mozilla\firefox\profiles\gw14tk9t.default\extensions\{f36c6cd1-da73-491d-b290-8fc9115bfa55}.xpi
[2013.12.31 19:24:53 | 000,490,887 | ---- | M] () (No name found) -- C:\Users\Andreas M. \AppData\Roaming\mozilla\firefox\profiles\gw14tk9t.default\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}.xpi
[2014.01.02 14:27:41 | 000,001,685 | ---- | M] () -- C:\Users\Andreas M. \AppData\Roaming\mozilla\firefox\profiles\gw14tk9t.default\searchplugins\heise-netze-whois.xml
[2013.12.14 18:02:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2013.12.14 18:02:39 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013.11.15 03:30:36 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - Extension: Google Docs = C:\Users\Andreas M. \AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\Andreas M. \AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Andreas M. \AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\Andreas M. \AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Linkclump = C:\Users\Andreas M. \AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj\2.7.2_0\
CHR - Extension: Google Wallet = C:\Users\Andreas M. \AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Get opened tabs URLs = C:\Users\Andreas M. \AppData\Local\Google\Chrome\User Data\Default\Extensions\npmcbpbplngfameipiobaemkcpnaiiic\0.2_0\
CHR - Extension: Gmail = C:\Users\Andreas M. \AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: No name found = C:\Users\Andreas M. \AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcbbjpbbmmjfiiadgklhocpdiildmca\2.21_0\
O1 HOSTS File: ([2013.08.22 14:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Programme\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)
O4:64bit: - HKLM..\Run: [Daemon for Mouse Suite] C:\Program Files\Lenovo\Lenovo Mouse Suite\ICO.EXE (Primax Electronics Ltd.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [LENOVO.TPKNRRES] C:\Program Files\Lenovo\Communications Utility\LibStartStub.dll (Lenovo Corporation)
O4:64bit: - HKLM..\Run: [LenovoOptMouseUpdate] C:\Programme\Lenovo\HOTKEY\extapsup.exe (Lenovo Group Limited)
O4:64bit: - HKLM..\Run: [Mouse Suite 98 Daemon] ICO.EXE File not found
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [TpShocks] C:\Windows\SysNative\TpShocks.exe (Lenovo.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [KeePass 2 PreLoad] C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe (Dominik Reichl)
O4 - HKLM..\Run: [PWMTRV] C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL (Lenovo Group Limited)
O4 - HKU\S-1-5-21-2132384609-1576062560-950552869-1001..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found
O4 - Startup: C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Andreas M. \AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~2\Office15\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~2\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~2\Office15\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~2\Office15\EXCEL.EXE/3000 File not found
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Lync: Anruf per Mausklick - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Lync: Anruf per Mausklick - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{186B4881-07D2-40E8-B6A0-CFB052CB208F}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E87F011D-D576-4FBB-9759-419F17450309}: DhcpNameServer = 192.168.100.32 192.168.100.31
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\osf - No CLSID value found
O18:64bit: - Protocol\Filter\text/xml {807583E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{2ddc015a-659f-11e3-8258-f4b7e2cf5017}\Shell - "" = AutoRun
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) #2 Code:
========== Files/Folders - Created Within 30 Days ==========
[2014.01.02 10:51:40 | 000,211,552 | ---- | C] (NirSoft) -- C:\Users\Andreas M. \Desktop\smsniff.exe
[2014.01.02 10:51:22 | 000,000,000 | ---D | C] -- C:\Program Files\smsniff-x64_2.07
[2013.12.31 18:47:51 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
[2013.12.31 18:47:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
[2013.12.31 18:47:50 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Notepad++
[2013.12.31 18:47:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Notepad++
[2013.12.31 13:24:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
[2013.12.31 13:23:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2013.12.31 13:23:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2013.12.31 13:22:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2013.12.30 16:17:01 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \AppData\Roaming\Brother
[2013.12.30 11:59:54 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
[2013.12.30 11:59:54 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Apps
[2013.12.28 15:17:19 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2013.12.27 21:29:58 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\ControlCenter4
[2013.12.27 21:28:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
[2013.12.27 21:27:28 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\BrFaxRx
[2013.12.27 21:27:20 | 000,000,000 | ---D | C] -- C:\Brother
[2013.12.27 21:27:19 | 000,000,000 | ---D | C] -- C:\ProgramData\ControlCenter4
[2013.12.27 21:27:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ControlCenter4
[2013.12.27 21:27:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Browny02
[2013.12.27 21:27:17 | 000,290,304 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysNative\BrfxDA5c.dll
[2013.12.27 21:27:16 | 001,439,744 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysNative\BrWi209d.dll
[2013.12.27 21:27:16 | 000,278,528 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysNative\BrJDec.dll
[2013.12.27 21:27:16 | 000,050,688 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysNative\BrUsi09d.dll
[2013.12.27 21:27:15 | 000,245,760 | ---- | C] (brother) -- C:\Windows\SysWow64\NSSearch.dll
[2013.12.27 21:27:15 | 000,073,728 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2.dll
[2013.12.27 21:27:15 | 000,005,632 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2L.dll
[2013.12.27 21:27:15 | 000,005,120 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2S.dll
[2013.12.27 21:27:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Brother
[2013.12.27 21:26:50 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\InstallShield
[2013.12.27 21:22:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Brother
[2013.12.26 18:21:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2013.12.26 00:23:26 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Avira
[2013.12.26 00:21:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013.12.26 00:21:33 | 000,131,576 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
[2013.12.26 00:21:33 | 000,108,440 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2013.12.26 00:21:33 | 000,084,720 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys
[2013.12.26 00:21:33 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2013.12.26 00:21:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2013.12.26 00:21:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2013.12.25 23:53:09 | 000,000,000 | ---D | C] -- C:\FRST
[2013.12.25 15:56:01 | 000,000,000 | ---D | C] -- D:\Anwenderdaten\A. M. \Documents\Benutzerdefinierte Office-Vorlagen
[2013.12.24 23:11:23 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\ElevatedDiagnostics
[2013.12.21 09:58:26 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\FastCopy
[2013.12.21 09:58:25 | 000,000,000 | ---D | C] -- C:\Program Files\FastCopy
[2013.12.20 19:06:29 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\vlc
[2013.12.20 19:06:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013.12.20 19:06:11 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2013.12.18 20:45:48 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\TeamViewer
[2013.12.18 19:57:21 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Subversion
[2013.12.18 19:57:11 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\MathWorks
[2013.12.18 19:12:40 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\SumatraPDF
[2013.12.18 19:12:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SumatraPDF
[2013.12.15 16:44:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2013.12.15 15:25:27 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\gtk-2.0
[2013.12.15 15:22:58 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \.thumbnails
[2013.12.15 15:14:46 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\fontconfig
[2013.12.15 15:14:44 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\gegl-0.2
[2013.12.15 15:14:44 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \.gimp-2.8
[2013.12.15 14:29:49 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP 2
[2013.12.15 12:29:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB
[2013.12.15 12:08:41 | 000,000,000 | ---D | C] -- C:\Program Files\MATLAB
[2013.12.15 12:02:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
[2013.12.15 12:02:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2013.12.15 12:02:07 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2013.12.15 12:02:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server
[2013.12.15 12:01:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
[2013.12.15 12:01:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2013.12.15 12:01:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2013.12.15 12:00:54 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2013.12.15 11:55:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft
[2013.12.15 11:55:08 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\HpUpdate
[2013.12.15 11:54:52 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant
[2013.12.15 11:54:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool
[2013.12.15 11:54:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\HP
[2013.12.15 11:54:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Hewlett-Packard
[2013.12.15 11:54:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
[2013.12.15 11:54:03 | 000,000,000 | -H-D | C] -- C:\Config.Msi
[2013.12.15 11:53:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP
[2013.12.15 11:52:48 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2013.12.15 11:41:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.12.15 11:41:41 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013.12.15 11:28:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2013.12.15 10:45:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Mouse Suite
[2013.12.15 10:44:05 | 000,034,816 | ---- | C] (TPMX Electronics Ltd.) -- C:\Windows\SysNative\drivers\phidmice.SYS
[2013.12.15 10:44:05 | 000,034,816 | ---- | C] (TPMX Electronics Ltd.) -- C:\Windows\SysNative\drivers\PELUSBLF.SYS
[2013.12.15 10:44:05 | 000,023,040 | ---- | C] (TPMX Electronics Ltd.) -- C:\Windows\SysNative\drivers\pmouself.SYS
[2013.12.15 10:44:05 | 000,023,040 | ---- | C] (TPMX Electronics Ltd.) -- C:\Windows\SysNative\drivers\PELMOUSE.SYS
[2013.12.15 10:44:05 | 000,022,528 | ---- | C] (Primax Electronics Ltd.) -- C:\Windows\SysNative\drivers\PELMOUBT.SYS
[2013.12.15 10:44:05 | 000,016,384 | ---- | C] (Primax Electronics Ltd.) -- C:\Windows\SysNative\drivers\PELBTM.SYS
[2013.12.15 10:44:05 | 000,014,336 | ---- | C] (Primax Electronics Ltd.) -- C:\Windows\SysNative\drivers\PELPS2M.SYS
[2013.12.15 10:44:05 | 000,012,288 | ---- | C] (TPMX Electronics Ltd.) -- C:\Windows\SysNative\drivers\pvendrlf.SYS
[2013.12.15 10:44:05 | 000,011,776 | ---- | C] (TPMX Electronics Ltd.) -- C:\Windows\SysNative\drivers\PELVENDR.SYS
[2013.12.15 10:43:19 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Broadcom
[2013.12.15 10:25:48 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2013.12.15 10:13:40 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Lenovo
[2013.12.15 10:13:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ThinkPad
[2013.12.15 10:09:12 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
[2013.12.15 00:27:42 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Macromedia
[2013.12.15 00:26:06 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Adobe
[2013.12.15 00:21:56 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2013.12.15 00:21:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PDF Architect
[2013.12.15 00:21:51 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\PDF Architect
[2013.12.15 00:19:30 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2013.12.15 00:19:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2013.12.15 00:14:01 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\KeePass
[2013.12.14 21:12:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KeePass Password Safe 2
[2013.12.14 19:32:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
[2013.12.14 19:32:17 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\pdfforge
[2013.12.14 19:32:15 | 000,110,264 | ---- | C] (pdfforge GmbH) -- C:\Windows\SysNative\pdfcmon.dll
[2013.12.14 19:32:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator
[2013.12.14 19:29:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2013.12.14 19:29:49 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer
[2013.12.14 19:29:49 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2013.12.14 19:29:49 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2013.12.14 19:29:30 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Thunderbird
[2013.12.14 19:29:30 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Thunderbird
[2013.12.14 19:29:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2013.12.14 19:24:45 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Dropbox
[2013.12.14 19:23:00 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Identities
[2013.12.14 19:19:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2013.12.14 19:19:02 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Microsoft Help
[2013.12.14 19:19:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2013.12.14 19:09:32 | 000,000,000 | ---D | C] -- C:\drivers
[2013.12.14 19:00:42 | 000,000,000 | ---D | C] -- C:\SWTOOLS
[2013.12.14 19:00:27 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Programs
[2013.12.14 18:32:29 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Tvsukernel
[2013.12.14 18:31:25 | 000,000,000 | ---D | C] -- C:\Program Files\ThinkPad
[2013.12.14 18:31:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Lenovo
[2013.12.14 18:31:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Lenovo
[2013.12.14 18:31:13 | 000,000,000 | ---D | C] -- C:\Program Files\Lenovo
[2013.12.14 18:28:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
[2013.12.14 18:28:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
[2013.12.14 18:28:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Lenovo
[2013.12.14 18:28:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lenovo
[2013.12.14 18:13:29 | 000,000,000 | R--D | C] -- C:\Windows\BrowserChoice
[2013.12.14 18:06:41 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2013.12.14 18:03:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.12.14 18:03:44 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Mozilla
[2013.12.14 18:03:44 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Mozilla
[2013.12.14 18:03:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2013.12.14 18:03:31 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Google
[2013.12.14 18:02:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2013.12.14 18:02:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2013.12.14 18:02:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.12.14 17:59:29 | 000,000,000 | ---D | C] -- C:\ProgramData\ClassicShell
[2013.12.14 17:59:28 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\ClassicShell
[2013.12.14 17:59:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
[2013.12.14 17:59:06 | 000,000,000 | ---D | C] -- C:\Program Files\Classic Shell
[2013.12.14 17:58:47 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2013.12.14 17:58:22 | 000,064,000 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.DLL
[2013.12.14 17:58:22 | 000,060,416 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.DLL
[2013.12.14 17:58:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2013.12.14 17:58:22 | 000,000,000 | ---D | C] -- C:\Intel
[2013.12.14 17:58:20 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2013.12.14 17:58:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel
[2013.12.14 17:57:53 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Macromedia
[2013.12.14 17:56:09 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013.12.14 17:56:09 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \Searches
[2013.12.14 17:56:09 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \Contacts
[2013.12.14 17:56:09 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013.12.14 17:56:08 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\VirtualStore
[2013.12.14 17:56:08 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Packages
[2013.12.14 17:56:08 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Adobe
[2013.12.14 17:56:06 | 000,000,000 | --SD | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft
[2013.12.14 17:56:06 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2013.12.14 17:56:06 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \Saved Games
[2013.12.14 17:56:06 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \Links
[2013.12.14 17:56:06 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \Favorites
[2013.12.14 17:56:06 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \Documents
[2013.12.14 17:56:06 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \Desktop
[2013.12.14 17:56:06 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013.12.14 17:56:06 | 000,000,000 | R--D | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \Vorlagen
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \AppData\Local\Verlauf
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \AppData\Local\Temporary Internet Files
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \Startmenü
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \SendTo
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \Recent
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \Netzwerkumgebung
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \Lokale Einstellungen
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \Eigene Dateien
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \Druckumgebung
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \Cookies
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \AppData\Local\Anwendungsdaten
[2013.12.14 17:56:06 | 000,000,000 | -HSD | C] -- C:\Users\Andreas M. \Anwendungsdaten
[2013.12.14 17:56:06 | 000,000,000 | -H-D | C] -- C:\Users\Andreas M. \AppData
[2013.12.14 17:56:06 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Temp
[2013.12.14 17:56:06 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \Music
[2013.12.14 17:56:06 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Local\Microsoft
[2013.12.14 17:56:06 | 000,000,000 | ---D | C] -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013.12.14 17:53:52 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013.12.14 16:52:52 | 000,000,000 | ---D | C] -- C:\Windows\CSC
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\Programme
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2013.12.14 16:49:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2013.12.14 16:49:11 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2013.12.14 16:48:35 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2013.12.14 16:48:05 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2014.01.02 15:13:00 | 000,001,162 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014.01.02 13:19:31 | 001,864,990 | ---- | M] () -- C:\Users\Andreas M. \Desktop\Linkgrabber Webportal - ReportBulk.mht
[2014.01.02 13:18:27 | 000,000,230 | ---- | M] () -- C:\Users\Andreas M. \Desktop\20140102_123745_KikeRiki-pute.part01.rar.csv
[2014.01.02 13:06:09 | 000,000,600 | ---- | M] () -- C:\Windows\tasks\MATLAB R2013b Startup Accelerator.job
[2014.01.02 10:48:39 | 000,008,798 | ---- | M] () -- C:\Users\Andreas M. \Desktop\KPassDatabase.kdbx
[2014.01.02 08:30:58 | 001,776,918 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014.01.02 08:30:58 | 000,765,582 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2014.01.02 08:30:58 | 000,722,476 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014.01.02 08:30:58 | 000,159,366 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2014.01.02 08:30:58 | 000,135,592 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014.01.02 08:27:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.01.01 20:16:30 | 000,044,641 | ---- | M] () -- C:\Users\Andreas M. \Desktop\test.ssp
[2014.01.01 20:14:35 | 000,211,552 | ---- | M] (NirSoft) -- C:\Users\Andreas M. \Desktop\smsniff.exe
[2014.01.01 18:55:05 | 000,050,636 | ---- | M] () -- C:\Users\Andreas M. \Desktop\DMCA - Your client vidxden.com is hosting illegal material.html
[2014.01.01 18:33:05 | 000,051,234 | ---- | M] () -- C:\Users\Andreas M. \Desktop\DMCA - Your clients divxstage.eu _ movshare.net _ nowvideo.eu _ nowvideo.ch _ novamov.com are hosting copyright infringing material.html
[2014.01.01 18:13:01 | 000,002,195 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014.01.01 18:13:00 | 000,001,158 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.12.31 14:21:49 | 000,000,681 | ---- | M] () -- C:\Users\Andreas M. \Desktop\JD.lnk
[2013.12.31 13:26:14 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys
[2013.12.27 21:51:14 | 013,707,278 | ---- | M] () -- C:\Users\Andreas M. \Desktop\BA_Hommrichhausen_Teil227122013.pdf
[2013.12.27 21:43:03 | 015,882,416 | ---- | M] () -- C:\Users\Andreas M. \Desktop\BA_Hommrichhausen27122013.pdf
[2013.12.27 21:29:11 | 2307,960,831 | -HS- | M] () -- C:\hiberfil.sys
[2013.12.27 21:28:20 | 000,002,071 | ---- | M] () -- C:\Users\Public\Desktop\Brother Utilities.lnk
[2013.12.27 21:28:17 | 000,000,245 | ---- | M] () -- C:\Windows\Brpfx04a.ini
[2013.12.27 21:28:17 | 000,000,064 | ---- | M] () -- C:\Windows\brpcfx.ini
[2013.12.27 21:27:28 | 000,000,066 | ---- | M] () -- C:\Windows\Brfaxrx.ini
[2013.12.25 15:52:47 | 000,001,065 | ---- | M] () -- C:\Users\Andreas M. \Desktop\Dropbox.lnk
[2013.12.21 09:58:26 | 000,000,977 | ---- | M] () -- C:\Users\Andreas M. \Desktop\FastCopy.lnk
[2013.12.20 13:41:05 | 000,001,075 | ---- | M] () -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013.12.15 16:40:15 | 000,482,104 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.12.15 15:42:38 | 000,005,713 | ---- | M] () -- C:\Users\Andreas M. \AppData\Local\recently-used.xbel
[2013.12.15 11:56:31 | 000,196,755 | ---- | M] () -- C:\Windows\hpwins27.dat
[2013.12.15 11:54:36 | 000,002,119 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2013.12.15 11:53:14 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2013.12.15 10:42:58 | 000,000,906 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2013.12.14 19:17:57 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2013.12.14 18:02:49 | 000,001,159 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.12.14 17:58:48 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2013.12.14 16:49:27 | 000,055,502 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2013.12.14 16:49:27 | 000,055,502 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2013.12.14 16:49:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WUDFUsbccidDriver_01_11_00.Wdf
[2013.12.09 11:37:19 | 000,131,576 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
[2013.12.09 11:37:19 | 000,084,720 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys
[2013.12.09 11:37:19 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2013.12.09 11:37:18 | 000,108,440 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2014.01.02 13:19:31 | 001,864,990 | ---- | C] () -- C:\Users\Andreas M. \Desktop\Linkgrabber Webportal - ReportBulk.mht
[2014.01.02 13:18:26 | 000,000,230 | ---- | C] () -- C:\Users\Andreas M. \Desktop\20140102_123745_KikeRiki-pute.part01.rar.csv
[2014.01.01 20:17:38 | 000,044,641 | ---- | C] () -- C:\Users\Andreas M. \Desktop\test.ssp
[2014.01.01 18:55:04 | 000,050,636 | ---- | C] () -- C:\Users\Andreas M. \Desktop\DMCA - Your client vidxden.com is hosting illegal material.html
[2014.01.01 18:33:05 | 000,051,234 | ---- | C] () -- C:\Users\Andreas M. \Desktop\DMCA - Your clients divxstage.eu _ movshare.net _ nowvideo.eu _ nowvideo.ch _ novamov.com are hosting copyright infringing material.html
[2013.12.31 14:16:48 | 000,000,681 | ---- | C] () -- C:\Users\Andreas M. \Desktop\JD.lnk
[2013.12.27 21:51:12 | 013,707,278 | ---- | C] () -- C:\Users\Andreas M. \Desktop\BA_Hommrichhausen_Teil227122013.pdf
[2013.12.27 21:43:01 | 015,882,416 | ---- | C] () -- C:\Users\Andreas M. \Desktop\BA_Hommrichhausen27122013.pdf
[2013.12.27 21:28:20 | 000,002,071 | ---- | C] () -- C:\Users\Public\Desktop\Brother Utilities.lnk
[2013.12.27 21:28:17 | 000,000,245 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2013.12.27 21:28:17 | 000,000,064 | ---- | C] () -- C:\Windows\brpcfx.ini
[2013.12.27 21:27:17 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2013.12.27 21:27:17 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2013.12.25 15:52:47 | 000,001,065 | ---- | C] () -- C:\Users\Andreas M. \Desktop\Dropbox.lnk
[2013.12.21 09:58:26 | 000,001,007 | ---- | C] () -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FastCopy.lnk
[2013.12.21 09:58:26 | 000,000,977 | ---- | C] () -- C:\Users\Andreas M. \Desktop\FastCopy.lnk
[2013.12.18 19:12:40 | 000,001,941 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SumatraPDF.lnk
[2013.12.15 15:42:38 | 000,005,713 | ---- | C] () -- C:\Users\Andreas M. \AppData\Local\recently-used.xbel
[2013.12.15 14:30:18 | 000,000,910 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
[2013.12.15 12:29:26 | 000,001,315 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB R2013b.lnk
[2013.12.15 12:29:07 | 000,000,600 | ---- | C] () -- C:\Windows\tasks\MATLAB R2013b Startup Accelerator.job
[2013.12.15 11:55:11 | 000,001,080 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
[2013.12.15 11:54:36 | 000,002,119 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2013.12.15 11:53:45 | 000,196,755 | ---- | C] () -- C:\Windows\hpwins27.dat
[2013.12.15 11:53:45 | 000,000,513 | ---- | C] () -- C:\Windows\hpwmdl27.dat
[2013.12.15 11:53:14 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2013.12.15 10:42:37 | 000,000,906 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2013.12.15 10:25:59 | 000,001,075 | ---- | C] () -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013.12.14 21:13:33 | 000,008,798 | ---- | C] () -- C:\Users\Andreas M. \Desktop\KPassDatabase.kdbx
[2013.12.14 21:12:41 | 000,001,129 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
[2013.12.14 19:29:22 | 000,002,110 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
[2013.12.14 19:17:57 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2013.12.14 18:28:55 | 000,002,149 | ---- | C] () -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DesktopToastsForCriticalUpdates.lnk
[2013.12.14 18:03:55 | 000,002,195 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013.12.14 18:03:36 | 000,001,162 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.12.14 18:03:36 | 000,001,158 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.12.14 18:03:30 | 000,385,528 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml
[2013.12.14 18:02:49 | 000,001,171 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013.12.14 18:02:49 | 000,001,159 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.12.14 17:58:48 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2013.12.14 17:56:08 | 000,001,450 | ---- | C] () -- C:\Users\Andreas M. \AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013.12.14 17:55:21 | 001,776,918 | ---- | C] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.12.14 16:49:37 | 2307,960,831 | -HS- | C] () -- C:\hiberfil.sys
[2013.12.14 16:49:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WUDFUsbccidDriver_01_11_00.Wdf
[2013.12.14 16:49:00 | 016,777,216 | -HS- | C] () -- C:\swapfile.sys
[2013.11.21 01:32:12 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\BRTCPCON.DLL
[2013.11.21 01:32:08 | 000,000,114 | ---- | C] () -- C:\Windows\SysWow64\BRLMW03A.INI
[2013.10.03 23:42:46 | 000,343,040 | ---- | C] () -- C:\Windows\SysWow64\igdmd32.dll
[2013.10.03 23:42:40 | 000,180,736 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2013.10.03 23:42:38 | 000,142,848 | ---- | C] () -- C:\Windows\SysWow64\igdail32.dll
[2013.08.22 16:36:43 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2013.08.22 16:36:42 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2013.08.22 15:46:23 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2013.08.22 08:01:23 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2013.08.22 04:32:36 | 000,046,080 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2013.08.22 04:17:46 | 000,103,936 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
[2013.08.22 00:55:20 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2013.08.22 00:52:39 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
========== ZeroAccess Check ==========
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.11.05 21:21:27 | 021,196,664 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.11.05 19:51:37 | 018,642,504 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013.08.22 10:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2013.08.22 03:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013.08.22 10:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2014.01.02 15:45:29 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\ClassicShell
[2013.12.27 21:29:59 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\ControlCenter4
[2014.01.02 15:43:20 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\Dropbox
[2013.12.21 10:04:06 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\FastCopy
[2013.12.31 13:26:13 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\KeePass
[2013.12.31 18:47:56 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\Notepad++
[2013.12.15 00:21:51 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\PDF Architect
[2013.12.14 19:32:17 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\pdfforge
[2013.12.18 19:57:21 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\Subversion
[2013.12.18 19:12:56 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\SumatraPDF
[2013.12.18 21:03:16 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\TeamViewer
[2013.12.14 19:29:30 | 000,000,000 | ---D | M] -- C:\Users\Andreas M. \AppData\Roaming\Thunderbird
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 60 bytes -> D:\Anwenderdaten\A. M. \Documents\GlobalDriveMexico:AFP_AfpInfo
< End of report >
--- --- ---
Der Fehler ist nun auch nicht mehr aufgetreten. Bin aber unsicher, ob der Trojaner noch drauf ist. Daher bin ich für Deine/Eure Hilfe sehr dankbar!
Viele Grüße
Tambo |