Trojaner-Board - Probleme mit Laptop Langsam geworden

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-09-2014

Ran by 1860 at 2014-09-16 15:14:47

Running from C:\Users\1860\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

1&1 Surf-Stick (HKLM-x32\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.2 - )

Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)

Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version:  3.0 - Adobe Systems, Inc.)

Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)

Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

arCV (HKLM-x32\...\{ACC1683B-5AB9-429A-88C2-D575424009D0}) (Version: 4.3.3 - Arne Reuter)

Avira (HKLM-x32\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)

Avira (x32 Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)

Belarc Advisor 8.4 (HKLM-x32\...\Belarc Advisor) (Version: 8.4.0.0 - Belarc Inc.)

BEWERBUNGSMASTER (HKLM-x32\...\ST6UNST #1) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.17 - Piriform)

CopyTrans Control Center deinstallieren (HKCU\...\CopyTrans Suite) (Version: 3.003 - WindSolutions)

CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 7.0.0.0816 - CyberLink Corp.)

CyberLink Power2Go (x32 Version: 7.0.0.0816 - CyberLink Corp.) Hidden

DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)

Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.4 - Dolby Laboratories Inc)

eLearn CDROM 1.0 (HKLM-x32\...\eLearn 1.2.1_is1) (Version:  - FIAT Auto S.p.A.)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)

Flat Trader (HKCU\...\InstallShield_{E56B8E1D-8E90-46DC-AE55-EBA87ED69A5F}) (Version: 2.38.56.7.2.1 - FX Flat)

Flat Trader (x32 Version: 2.38.56.7.2.1 - FX Flat) Hidden

Gameforge Live 2.0.4 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.4 - Gameforge)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

iTunes (HKLM\...\{77DE5105-D05E-448C-96CB-7FA381903753}) (Version: 11.3.1.2 - Apple Inc.)

Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)

Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Metin2 (HKLM-x32\...\Metin2_is1) (Version:  - Gameforge 4D GmbH)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden

Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden

MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden

MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden

MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden

MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6321 - Realtek Semiconductor Corp.)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)

Spotify (HKCU\...\Spotify) (Version: 0.9.12.10.g89b2a4fc - Spotify AB)

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.31064 - TeamViewer)

Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)

Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)

WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XMedia Recode Version 3.1.8.8 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.8.8 - XMedia Recode)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

28-08-2014 04:45:27 arCV wird installiert

29-08-2014 16:31:57 Installed Python 2.7.2

31-08-2014 15:57:27 ComboFix created restore point

03-09-2014 12:24:13 Windows Update

10-09-2014 12:37:53 Removed Microsoft Office Professional Plus 2013

10-09-2014 12:38:42 PROPLUSR

10-09-2014 13:04:55 Nokia Connectivity Cable Driver wird entfernt

10-09-2014 13:46:34 Removed Python 2.7.2

10-09-2014 15:03:03 Removed Bonjour

11-09-2014 18:46:39 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2014-09-11 19:03 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0FA62DF7-79A8-4232-9582-F1718B017E20} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {15B696BE-385F-45D0-81E0-F1B0ADEDC9AD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25] (Google Inc.)

Task: {208AA79F-9418-4C41-BF4E-687CE6F0BEF9} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1495459556-2568946141-1351117670-1000UA => C:\Users\1860\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-03-10] (Facebook Inc.)

Task: {64BDF030-3E0D-4454-8A97-14E4F61D526A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-08-21] (Piriform Ltd)

Task: {6FAEB5A2-5CEE-43D7-8950-05A6AC803870} - System32\Tasks\{7D477009-58F9-4698-B334-40CE5E979124} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=6.18.0.106&amp;LastError=12007

Task: {C5352DB3-4A18-4108-80C6-540773412094} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25] (Google Inc.)

Task: {C58DCE38-CD62-4901-9381-A142415BFC59} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1495459556-2568946141-1351117670-1000Core => C:\Users\1860\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-03-10] (Facebook Inc.)

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1495459556-2568946141-1351117670-1000Core.job => C:\Users\1860\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1495459556-2568946141-1351117670-1000UA.job => C:\Users\1860\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-03-18 16:08 - 2009-08-13 13:06 - 00177152 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxdndrpp.dll

2014-08-15 19:34 - 2011-08-25 10:50 - 00270672 _____ () C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe

2013-10-31 11:24 - 2013-10-31 11:24 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2014-08-27 15:00 - 2014-08-27 15:00 - 00139056 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll

2014-08-27 15:00 - 2014-08-27 15:00 - 00066864 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-09-13 20:28 - 2014-08-27 15:00 - 00052472 _____ () C:\Users\1860\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2010-06-25 13:49 - 2010-06-25 13:49 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll

2010-06-25 13:49 - 2010-06-25 13:49 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll

2014-03-04 10:30 - 2014-03-02 04:35 - 00051016 _____ () C:\Windows.old\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll

2014-03-04 10:30 - 2014-03-02 04:35 - 00716616 _____ () C:\Windows.old\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libglesv2.dll

2014-03-04 10:30 - 2014-03-02 04:35 - 00100168 _____ () C:\Windows.old\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libegl.dll

2014-03-04 10:30 - 2014-03-02 04:35 - 04061000 _____ () C:\Windows.old\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll

2014-03-04 10:30 - 2014-03-02 04:35 - 00394568 _____ () C:\Windows.old\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll

2014-03-04 10:30 - 2014-03-02 04:35 - 01647432 _____ () C:\Windows.old\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: Apple Mobile Device => 2

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: iPod Service => 3

MSCONFIG\Services: MBAMService => 2

MSCONFIG\Services: ServiceLayer => 3

MSCONFIG\Services: ST2012_Svc => 2

MSCONFIG\Services: TeamViewer9 => 2

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"

MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

MSCONFIG\startupreg: Dolby Advanced Audio v2 => "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart

MSCONFIG\startupreg: Facebook Update => "C:\Users\1860\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

MSCONFIG\startupreg: GoogleChromeAutoLaunch_643ADABA1D5F8841A8D9FF4E8733D2D0 => "C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray

MSCONFIG\startupreg: Power2GoExpress => "C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe"

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Spotify => "C:\Users\1860\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\1860\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

MSCONFIG\startupreg: SpywareTerminatorShield => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe

MSCONFIG\startupreg: SpywareTerminatorUpdater => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe

MSCONFIG\startupreg: UIExec => "C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe"
 

==================== Faulty Device Manager Devices =============
 

Name: Bluetooth-Peripheriegerät

Description: Bluetooth-Peripheriegerät

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Bluetooth-Peripheriegerät

Description: Bluetooth-Peripheriegerät

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/16/2014 01:17:56 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: Volume "Boot (C:)" wurde aufgrund eines Fehlers nicht defragmentiert: Die Startoptimierung konnte aufgrund fehlenden Speicherplatzes nicht abgeschlossen werden. (0x89000019)
 

Error: (09/14/2014 08:51:47 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/14/2014 04:32:14 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/14/2014 04:32:11 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
 

System errors:

=============

Error: (09/16/2014 05:35:32 AM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (09/16/2014 05:35:32 AM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (09/16/2014 05:35:31 AM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (09/16/2014 05:35:30 AM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (09/16/2014 05:35:30 AM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (09/16/2014 05:35:29 AM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (09/15/2014 02:57:28 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C}
 
 

Microsoft Office Sessions:

=========================

Error: (09/16/2014 01:17:56 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: Boot (C:)Die Startoptimierung konnte aufgrund fehlenden Speicherplatzes nicht abgeschlossen werden. (0x89000019)
 

Error: (09/14/2014 08:51:47 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (09/14/2014 04:32:14 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\1860\Downloads\esetsmartinstaller_deu (1).exe
 

Error: (09/14/2014 04:32:11 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\1860\Downloads\esetsmartinstaller_deu (1).exe
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-09-11 19:01:04.629

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-09-11 19:01:04.524

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-09-11 19:01:04.419

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-09-11 19:01:04.314

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-08-31 18:04:29.418

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-08-31 18:04:29.313

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-08-31 18:04:29.208

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-08-31 18:04:29.099

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-08-31 17:59:39.599

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-08-31 17:59:39.493

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz

Percentage of memory in use: 53%

Total physical RAM: 4003 MB

Available physical RAM: 1860.86 MB

Total Pagefile: 8004.19 MB

Available Pagefile: 5586.31 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: (Boot) (Fixed) (Total:657.53 GB) (Free:298.66 GB) NTFS

Drive d: (Recover) (Fixed) (Total:38 GB) (Free:16.33 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E47B19CB)

Partition 1: (Active) - (Size=101 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=657.5 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=40 GB) - (Type=OF Extended)

Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
 

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-09-2014

Ran by 1860 (administrator) on 1860-PC on 16-09-2014 15:14:22

Running from C:\Users\1860\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

( ) C:\Windows\System32\lxdncoms.exe

() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

(Google Inc.) C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11780712 2011-03-24] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-24] (Realtek Semiconductor)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-1495459556-2568946141-1351117670-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)

HKU\S-1-5-21-1495459556-2568946141-1351117670-1000\...\Run: [GoogleChromeAutoLaunch_643ADABA1D5F8841A8D9FF4E8733D2D0] => C:\Windows.old\Program Files (x86)\Google\Chrome\Application\chrome.exe [859464 2014-03-02] (Google Inc.)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} -  No File

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll (Belarc, Inc.)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\1860\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\1860\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.google.com/

CHR StartupUrls: Default -> "hxxp://www.google.com/"

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}

CHR Profile: C:\Users\1860\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\1860\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-06]

CHR Extension: (Google Drive) - C:\Users\1860\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-06]

CHR Extension: (YouTube) - C:\Users\1860\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-06]

CHR Extension: (Adblock Plus) - C:\Users\1860\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-08-29]

CHR Extension: (Google-Suche) - C:\Users\1860\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-06]

CHR Extension: (Google Wallet) - C:\Users\1860\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-06]

CHR Extension: (Google Mail) - C:\Users\1860\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-06]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 lxdn_device; C:\Windows\system32\lxdncoms.exe [1039872 2007-11-28] ( )

R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [270672 2011-08-25] ()
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-03-17] (Disc Soft Ltd)

R3 L1C; C:\Windows\System32\DRIVERS\L1C60x64.sys [76400 2011-01-25] (Atheros Communications, Inc.)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-16] (Malwarebytes Corporation)

S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-14 20:47 - 2014-09-14 20:47 - 00021645 _____ () C:\Users\1860\Desktop\eset.txt

2014-09-14 16:32 - 2014-09-14 16:32 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-09-14 15:50 - 2014-09-14 15:50 - 02347384 _____ (ESET) C:\Users\1860\Downloads\esetsmartinstaller_deu (1).exe

2014-09-14 11:08 - 2014-09-14 11:09 - 02347384 _____ (ESET) C:\Users\1860\Downloads\esetsmartinstaller_deu.exe

2014-09-14 10:49 - 2014-09-14 10:49 - 00001312 _____ () C:\Users\1860\Desktop\mbam.txt

2014-09-14 10:22 - 2014-09-16 05:15 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-14 10:22 - 2014-09-14 10:22 - 00001110 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-09-14 10:22 - 2014-09-14 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-14 10:22 - 2014-09-14 10:22 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-14 10:22 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-09-14 10:22 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-09-14 10:22 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-09-14 10:21 - 2014-09-14 10:21 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\1860\Downloads\mbam-setup-2.0.2.1012.exe

2014-09-13 18:34 - 2014-09-16 15:08 - 00027210 _____ () C:\Users\1860\Desktop\Addition.txt

2014-09-13 18:31 - 2014-09-16 15:14 - 00011905 _____ () C:\Users\1860\Desktop\FRST.txt

2014-09-13 18:26 - 2014-09-13 18:26 - 00000624 _____ () C:\Users\1860\Desktop\JRT.txt

2014-09-13 18:20 - 2014-09-13 18:20 - 00000000 ____D () C:\Windows\ERUNT

2014-09-13 18:19 - 2014-09-13 18:19 - 00003438 _____ () C:\Users\1860\Desktop\AdwCleaner[S1].txt

2014-09-13 18:13 - 2014-09-13 18:13 - 00076957 _____ () C:\Users\1860\Desktop\1&1 DSL - Ihre Bestell-Zusammenfassung.htm

2014-09-13 18:13 - 2014-09-13 18:13 - 00000000 ____D () C:\Users\1860\Desktop\1&1 DSL - Ihre Bestell-Zusammenfassung_files

2014-09-13 18:11 - 2014-09-13 18:08 - 01373475 _____ () C:\Users\1860\Desktop\AdwCleaner_3.310.exe

2014-09-13 18:11 - 2014-09-10 16:06 - 02105856 _____ (Farbar) C:\Users\1860\Desktop\FRST64.exe

2014-09-13 18:10 - 2014-09-13 18:09 - 01016261 _____ (Thisisu) C:\Users\1860\Desktop\JRT.exe

2014-09-13 18:09 - 2014-09-13 18:09 - 01016261 _____ (Thisisu) C:\Users\1860\Downloads\JRT.exe

2014-09-13 18:08 - 2014-09-13 18:08 - 01373475 _____ () C:\Users\1860\Downloads\AdwCleaner_3.310.exe

2014-09-12 18:05 - 2014-09-12 18:05 - 00146183 _____ () C:\Users\1860\Downloads\YouTube-Unblocker-056 (2).crx

2014-09-12 18:04 - 2014-09-12 18:04 - 00146183 _____ () C:\Users\1860\Downloads\YouTube-Unblocker-056 (1).crx

2014-09-11 20:51 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-09-11 20:51 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-09-11 20:51 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-09-11 20:51 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-09-11 20:51 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-09-11 20:51 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-09-11 20:51 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-09-11 20:51 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-09-11 20:51 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-09-11 20:51 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-09-11 20:51 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-09-11 20:51 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-09-11 20:51 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-09-11 20:51 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-09-11 20:51 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-09-11 20:51 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-09-11 20:51 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-09-11 20:51 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-09-11 20:51 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-09-11 20:51 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-09-11 20:51 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-09-11 20:51 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-09-11 20:51 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-09-11 20:51 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-09-11 20:51 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-09-11 20:51 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-09-11 20:51 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-09-11 20:51 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-09-11 20:51 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-09-11 20:51 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-09-11 20:51 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-09-11 20:51 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-09-11 20:51 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-09-11 20:51 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-09-11 20:51 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-09-11 20:51 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-09-11 20:51 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-09-11 20:51 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-09-11 20:51 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-09-11 20:51 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-09-11 20:51 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-09-11 20:51 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-09-11 20:51 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-09-11 20:51 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-09-11 20:51 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-09-11 20:51 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-09-11 20:51 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-09-11 20:51 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-09-11 20:51 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-09-11 20:51 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-09-11 20:51 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-09-11 20:51 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-09-11 20:51 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-09-11 20:51 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-09-11 20:51 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-09-11 20:51 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-09-11 20:47 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-09-11 20:47 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-09-11 19:08 - 2014-09-11 19:08 - 00014839 _____ () C:\ComboFix.txt

2014-09-11 14:03 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-09-11 14:03 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-09-11 14:03 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-09-11 14:03 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-09-11 14:02 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-09-11 14:02 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-09-11 14:02 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-09-11 14:02 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-09-11 14:02 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-09-11 14:02 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-09-11 14:02 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-09-10 16:06 - 2014-09-10 16:06 - 00000000 ____D () C:\Users\1860\Downloads\FRST-OlderVersion

2014-09-10 14:57 - 2014-09-10 14:57 - 00000000 ____D () C:\Users\1860\AppData\Roaming\AppSplash

2014-09-09 20:52 - 2014-09-10 17:20 - 00024679 _____ () C:\Users\1860\Downloads\Addition.txt

2014-09-09 20:51 - 2014-09-16 15:14 - 00000000 ____D () C:\FRST

2014-09-09 20:51 - 2014-09-10 17:20 - 00049700 _____ () C:\Users\1860\Downloads\FRST.txt

2014-09-09 20:50 - 2014-09-10 16:06 - 02105856 _____ (Farbar) C:\Users\1860\Downloads\FRST64.exe

2014-09-09 20:34 - 2014-09-09 20:34 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-09-09 18:47 - 2014-09-09 18:47 - 00064150 _____ () C:\Users\1860\Downloads\Extras.Txt

2014-09-09 18:46 - 2014-09-09 18:46 - 00123594 _____ () C:\Users\1860\Downloads\OTL.Txt

2014-09-09 18:31 - 2014-09-09 18:31 - 00602112 _____ (OldTimer Tools) C:\Users\1860\Downloads\otl.exe

2014-09-08 19:06 - 2014-09-13 20:28 - 00011224 _____ () C:\Windows\PFRO.log

2014-09-07 07:26 - 2014-09-13 20:28 - 00000616 _____ () C:\Windows\setupact.log

2014-09-07 07:26 - 2014-09-07 07:26 - 00000000 _____ () C:\Windows\setuperr.log

2014-09-06 20:05 - 2014-09-06 20:05 - 00000655 _____ () C:\Users\1860\Downloads\gist2794364-68d8e90bee246710daec296bc9c68bccb0ea3c3f.tar.gz

2014-09-05 14:54 - 2014-09-05 14:54 - 00031370 _____ () C:\Users\1860\Documents\cc_20140905_145425.reg

2014-09-05 14:31 - 2014-09-05 14:31 - 04901352 _____ (Piriform Ltd) C:\Users\1860\Downloads\ccsetup417.exe

2014-09-05 14:30 - 2014-09-05 14:32 - 00000000 ____D () C:\Users\1860\Desktop\steuer, viren, bileder,bewerbung,30 euro

2014-08-31 18:34 - 2014-08-31 18:34 - 00345156 _____ () C:\Users\1860\Downloads\regsearch.zip

2014-08-31 17:57 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-08-31 17:57 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-08-31 17:57 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-08-31 17:57 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-08-31 17:57 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-08-31 17:57 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-08-31 17:57 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-08-31 17:57 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-08-31 17:54 - 2014-09-11 19:08 - 00000000 ____D () C:\Qoobox

2014-08-31 17:54 - 2014-08-31 18:12 - 00000000 ____D () C:\Windows\erdnt

2014-08-31 17:49 - 2014-09-11 18:52 - 05576769 ____R (Swearware) C:\Users\1860\Desktop\ComboFix.exe

2014-08-31 17:47 - 2014-08-31 17:47 - 00034169 _____ () C:\Windows\system32\hjtscanlist.txt

2014-08-31 17:40 - 2014-08-31 17:40 - 00002097 _____ () C:\Users\1860\Downloads\hjtscanlist.zip

2014-08-29 22:02 - 2014-08-29 22:02 - 04791736 _____ (Avira Operations GmbH & Co. KG) C:\Users\1860\Downloads\avira_de_av__r0ij9fgnxa1yb4agvitd_wsp.exe

2014-08-29 22:01 - 2014-08-29 22:01 - 04791736 _____ (Avira Operations GmbH & Co. KG) C:\Users\1860\Downloads\avira_de_av__7h9xxx1fgezq3qpfft0r_wsp.exe

2014-08-29 21:56 - 2014-08-29 21:56 - 04791736 _____ (Avira Operations GmbH & Co. KG) C:\Users\1860\Downloads\avira_de_av__ieufi9euwix87i2gugcy_wsp.exe

2014-08-29 18:36 - 2014-08-29 18:36 - 00000000 ____D () C:\Users\1860\AppData\Roaming\qBittorrent

2014-08-29 18:35 - 2014-08-29 18:35 - 00000000 ____D () C:\Users\1860\.idlerc

2014-08-29 18:28 - 2014-08-29 18:28 - 00000000 ____D () C:\Users\1860\AppData\Roaming\Easy BitTorrent Client

2014-08-29 18:28 - 2014-08-29 18:28 - 00000000 ____D () C:\Users\1860\AppData\Local\Easy BitTorrent Client

2014-08-29 18:27 - 2014-09-09 14:44 - 00001024 _____ () C:\.rnd

2014-08-29 18:25 - 2014-09-13 18:15 - 00001108 _____ () C:\Users\1860\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-08-29 18:24 - 2014-09-10 14:57 - 00000000 ____D () C:\Program Files (x86)\OneBrowse

2014-08-29 18:01 - 2014-08-29 18:01 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys

2014-08-29 12:29 - 2014-08-29 12:30 - 00388608 _____ (Trend Micro Inc.) C:\Users\1860\Downloads\HiJackThis204 (3).exe

2014-08-29 12:29 - 2014-08-29 12:29 - 00388608 _____ (Trend Micro Inc.) C:\Users\1860\Downloads\HiJackThis204 (2).exe

2014-08-29 06:37 - 2014-08-29 06:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-08-28 06:46 - 2014-08-28 06:46 - 00001785 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\arCV.lnk

2014-08-28 06:46 - 2014-08-28 06:46 - 00000000 ____D () C:\Program Files (x86)\arcv

2014-08-28 06:46 - 2014-08-28 06:46 - 00000000 ____D () C:\arcv

2014-08-28 06:45 - 2014-08-28 06:45 - 00000000 ____D () C:\Windows\Downloaded Installations

2014-08-28 06:44 - 2014-08-28 06:44 - 12601114 _____ () C:\Users\1860\Downloads\arcv.exe

2014-08-28 06:38 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-28 06:38 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-28 06:38 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-22 13:37 - 2014-08-22 13:37 - 00040218 _____ () C:\Users\1860\Downloads\dbox_astra_matze (1).zip

2014-08-22 13:26 - 2014-08-22 13:26 - 00000000 ____D () C:\Users\1860\AppData\Roaming\FlashFXP

2014-08-22 13:26 - 2014-08-22 13:26 - 00000000 ____D () C:\ProgramData\FlashFXP

2014-08-22 13:19 - 2014-08-22 13:19 - 00000055 _____ () C:\Users\1860\Downloads\CCcam.cfg

2014-08-21 13:25 - 2014-08-21 13:26 - 00000000 ____D () C:\Users\1860\AppData\Roaming\elsterformular

2014-08-21 13:25 - 2014-08-21 13:25 - 00000000 ____D () C:\ProgramData\elsterformular

2014-08-21 10:28 - 2014-08-25 10:46 - 00000003 _____ () C:\Users\1860\Documents\bmm.cfg

2014-08-21 10:24 - 2014-08-28 07:31 - 00000000 ____D () C:\Users\1860\Documents\BewerbungsMaster

2014-08-21 10:24 - 2014-08-25 10:46 - 00000000 ____D () C:\ProgramData\BewerbungsMaster

2014-08-21 10:24 - 2014-08-21 10:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2014-08-21 10:23 - 2014-08-21 10:27 - 00000000 ____D () C:\Program Files (x86)\BEWERBUNGSMASTER

2014-08-21 10:23 - 2014-08-21 10:23 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2014-08-21 10:23 - 2014-08-21 10:23 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2014-08-21 10:23 - 2014-08-21 10:23 - 00000000 ____D () C:\Users\1860\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2014-08-20 12:18 - 2014-08-20 12:19 - 25000000 _____ () C:\Users\1860\Downloads\Grande Punto eLEARN.part01 (1).rar

2014-08-19 06:26 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-08-19 06:26 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-08-19 06:26 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-08-19 06:26 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-08-19 06:26 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-08-19 06:26 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-08-19 06:26 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-08-19 06:26 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-08-19 06:26 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-08-19 06:26 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-08-19 06:24 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-08-19 06:24 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-08-19 06:24 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-08-19 06:24 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-08-18 20:44 - 2014-08-18 20:44 - 00000000 ____D () C:\Users\1860\AppData\Roaming\FX Flat

2014-08-18 19:14 - 2014-08-18 19:14 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk

2014-08-18 19:14 - 2014-08-18 19:14 - 00000000 ____D () C:\Users\1860\AppData\Roaming\TeamViewer

2014-08-18 19:14 - 2014-08-18 19:14 - 00000000 ____D () C:\Program Files (x86)\TeamViewer

2014-08-18 19:13 - 2014-08-18 19:13 - 06304880 _____ (TeamViewer GmbH) C:\Users\1860\Downloads\TeamViewer_Setup_de.exe

2014-08-18 18:53 - 2014-08-18 18:53 - 00000000 ____D () C:\Users\1860\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FX Flat

2014-08-18 18:53 - 2014-08-18 18:53 - 00000000 ____D () C:\Users\1860\AppData\Roaming\InstallShield Installation Information

2014-08-18 18:52 - 2014-08-18 18:53 - 00000000 ____D () C:\Program Files (x86)\Flat Trader

2014-08-18 18:50 - 2014-08-18 18:50 - 00000000 ____D () C:\Users\1860\Documents\{95EA60FC-B631-470C-98A7-B6EC973B6AA8}

2014-08-18 18:48 - 2014-08-18 18:49 - 26915558 _____ (FX Flat ) C:\Users\1860\Downloads\Flat Trader Setup.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-16 15:14 - 2014-09-13 18:31 - 00011905 _____ () C:\Users\1860\Desktop\FRST.txt

2014-09-16 15:14 - 2014-09-09 20:51 - 00000000 ____D () C:\FRST

2014-09-16 15:08 - 2014-09-13 18:34 - 00027210 _____ () C:\Users\1860\Desktop\Addition.txt

2014-09-16 14:25 - 2014-05-25 21:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-16 14:16 - 2014-03-06 14:04 - 01052819 _____ () C:\Windows\WindowsUpdate.log

2014-09-16 14:01 - 2014-03-10 14:55 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1495459556-2568946141-1351117670-1000UA.job

2014-09-16 14:01 - 2014-03-10 14:55 - 00000902 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1495459556-2568946141-1351117670-1000Core.job

2014-09-16 12:12 - 2014-03-15 06:33 - 00000000 ____D () C:\Users\1860\Documents\UseNeXT

2014-09-16 12:11 - 2014-03-15 06:33 - 00000000 ____D () C:\Users\1860\AppData\Roaming\UseNeXT

2014-09-16 12:05 - 2009-07-14 19:58 - 00699342 _____ () C:\Windows\system32\perfh007.dat

2014-09-16 12:05 - 2009-07-14 19:58 - 00149450 _____ () C:\Windows\system32\perfc007.dat

2014-09-16 12:05 - 2009-07-14 07:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-16 05:22 - 2014-05-25 21:14 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-16 05:15 - 2014-09-14 10:22 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-14 20:47 - 2014-09-14 20:47 - 00021645 _____ () C:\Users\1860\Desktop\eset.txt

2014-09-14 16:32 - 2014-09-14 16:32 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-09-14 15:50 - 2014-09-14 15:50 - 02347384 _____ (ESET) C:\Users\1860\Downloads\esetsmartinstaller_deu (1).exe

2014-09-14 11:09 - 2014-09-14 11:08 - 02347384 _____ (ESET) C:\Users\1860\Downloads\esetsmartinstaller_deu.exe

2014-09-14 10:49 - 2014-09-14 10:49 - 00001312 _____ () C:\Users\1860\Desktop\mbam.txt

2014-09-14 10:22 - 2014-09-14 10:22 - 00001110 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-09-14 10:22 - 2014-09-14 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-14 10:22 - 2014-09-14 10:22 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-14 10:21 - 2014-09-14 10:21 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\1860\Downloads\mbam-setup-2.0.2.1012.exe

2014-09-13 20:35 - 2009-07-14 06:45 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-13 20:35 - 2009-07-14 06:45 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-13 20:28 - 2014-09-08 19:06 - 00011224 _____ () C:\Windows\PFRO.log

2014-09-13 20:28 - 2014-09-07 07:26 - 00000616 _____ () C:\Windows\setupact.log

2014-09-13 20:28 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-13 18:26 - 2014-09-13 18:26 - 00000624 _____ () C:\Users\1860\Desktop\JRT.txt

2014-09-13 18:20 - 2014-09-13 18:20 - 00000000 ____D () C:\Windows\ERUNT

2014-09-13 18:19 - 2014-09-13 18:19 - 00003438 _____ () C:\Users\1860\Desktop\AdwCleaner[S1].txt

2014-09-13 18:15 - 2014-08-29 18:25 - 00001108 _____ () C:\Users\1860\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-09-13 18:15 - 2013-12-21 16:51 - 00000000 ____D () C:\AdwCleaner

2014-09-13 18:14 - 2014-03-06 14:43 - 00000000 ____D () C:\Users\1860\AppData\Roaming\Spotify

2014-09-13 18:13 - 2014-09-13 18:13 - 00076957 _____ () C:\Users\1860\Desktop\1&1 DSL - Ihre Bestell-Zusammenfassung.htm

2014-09-13 18:13 - 2014-09-13 18:13 - 00000000 ____D () C:\Users\1860\Desktop\1&1 DSL - Ihre Bestell-Zusammenfassung_files

2014-09-13 18:09 - 2014-09-13 18:10 - 01016261 _____ (Thisisu) C:\Users\1860\Desktop\JRT.exe

2014-09-13 18:09 - 2014-09-13 18:09 - 01016261 _____ (Thisisu) C:\Users\1860\Downloads\JRT.exe

2014-09-13 18:08 - 2014-09-13 18:11 - 01373475 _____ () C:\Users\1860\Desktop\AdwCleaner_3.310.exe

2014-09-13 18:08 - 2014-09-13 18:08 - 01373475 _____ () C:\Users\1860\Downloads\AdwCleaner_3.310.exe

2014-09-13 12:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-09-13 10:44 - 2014-03-06 14:49 - 00000000 ____D () C:\Users\1860\AppData\Roaming\Skype

2014-09-12 18:05 - 2014-09-12 18:05 - 00146183 _____ () C:\Users\1860\Downloads\YouTube-Unblocker-056 (2).crx

2014-09-12 18:04 - 2014-09-12 18:04 - 00146183 _____ () C:\Users\1860\Downloads\YouTube-Unblocker-056 (1).crx

2014-09-12 16:03 - 2014-03-06 14:44 - 00000000 ____D () C:\Users\1860\AppData\Local\Spotify

2014-09-11 20:50 - 2014-03-12 20:13 - 01593564 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-09-11 20:47 - 2014-05-12 08:10 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-09-11 19:08 - 2014-09-11 19:08 - 00014839 _____ () C:\ComboFix.txt

2014-09-11 19:08 - 2014-08-31 17:54 - 00000000 ____D () C:\Qoobox

2014-09-11 19:03 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-09-11 18:52 - 2014-08-31 17:49 - 05576769 ____R (Swearware) C:\Users\1860\Desktop\ComboFix.exe

2014-09-10 17:20 - 2014-09-09 20:52 - 00024679 _____ () C:\Users\1860\Downloads\Addition.txt

2014-09-10 17:20 - 2014-09-09 20:51 - 00049700 _____ () C:\Users\1860\Downloads\FRST.txt

2014-09-10 16:06 - 2014-09-13 18:11 - 02105856 _____ (Farbar) C:\Users\1860\Desktop\FRST64.exe

2014-09-10 16:06 - 2014-09-10 16:06 - 00000000 ____D () C:\Users\1860\Downloads\FRST-OlderVersion

2014-09-10 16:06 - 2014-09-09 20:50 - 02105856 _____ (Farbar) C:\Users\1860\Downloads\FRST64.exe

2014-09-10 15:16 - 2014-05-11 13:23 - 00000000 ____D () C:\ProgramData\Nokia

2014-09-10 15:16 - 2014-05-11 13:19 - 00000000 ____D () C:\Program Files (x86)\Nokia

2014-09-10 15:00 - 2014-03-06 14:23 - 00109896 _____ () C:\Users\1860\AppData\Local\GDIPFONTCACHEV1.DAT

2014-09-10 14:59 - 2009-07-14 06:45 - 00431024 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-09-10 14:57 - 2014-09-10 14:57 - 00000000 ____D () C:\Users\1860\AppData\Roaming\AppSplash

2014-09-10 14:57 - 2014-08-29 18:24 - 00000000 ____D () C:\Program Files (x86)\OneBrowse

2014-09-10 14:57 - 2014-03-31 09:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-09-10 14:48 - 2014-03-17 19:19 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-10 14:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-09-10 14:45 - 2014-03-17 19:19 - 00000000 ____D () C:\Program Files\Microsoft Office

2014-09-10 14:45 - 2009-07-14 20:18 - 00000000 ____D () C:\Windows\ShellNew

2014-09-10 14:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System

2014-09-10 14:41 - 2009-07-14 04:34 - 00000387 _____ () C:\Windows\win.ini

2014-09-09 20:34 - 2014-09-09 20:34 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-09-09 20:34 - 2014-03-06 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-09-09 20:34 - 2014-03-06 16:27 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-09-09 20:34 - 2014-03-06 15:55 - 00000000 ____D () C:\ProgramData\Package Cache

2014-09-09 18:47 - 2014-09-09 18:47 - 00064150 _____ () C:\Users\1860\Downloads\Extras.Txt

2014-09-09 18:46 - 2014-09-09 18:46 - 00123594 _____ () C:\Users\1860\Downloads\OTL.Txt

2014-09-09 18:31 - 2014-09-09 18:31 - 00602112 _____ (OldTimer Tools) C:\Users\1860\Downloads\otl.exe

2014-09-09 14:44 - 2014-08-29 18:27 - 00001024 _____ () C:\.rnd

2014-09-07 07:26 - 2014-09-07 07:26 - 00000000 _____ () C:\Windows\setuperr.log

2014-09-06 20:05 - 2014-09-06 20:05 - 00000655 _____ () C:\Users\1860\Downloads\gist2794364-68d8e90bee246710daec296bc9c68bccb0ea3c3f.tar.gz

2014-09-05 14:54 - 2014-09-05 14:54 - 00031370 _____ () C:\Users\1860\Documents\cc_20140905_145425.reg

2014-09-05 14:32 - 2014-09-05 14:30 - 00000000 ____D () C:\Users\1860\Desktop\steuer, viren, bileder,bewerbung,30 euro

2014-09-05 14:31 - 2014-09-05 14:31 - 04901352 _____ (Piriform Ltd) C:\Users\1860\Downloads\ccsetup417.exe

2014-09-05 14:31 - 2014-08-03 15:42 - 00000826 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-09-05 14:31 - 2014-08-03 15:42 - 00000000 ____D () C:\Program Files\CCleaner

2014-09-05 04:10 - 2014-09-11 14:02 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-09-05 04:05 - 2014-09-11 14:02 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-08-31 20:40 - 2014-03-18 16:08 - 00000000 ____D () C:\ProgramData\lx_Cats

2014-08-31 18:34 - 2014-08-31 18:34 - 00345156 _____ () C:\Users\1860\Downloads\regsearch.zip

2014-08-31 18:14 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-08-31 18:12 - 2014-08-31 17:54 - 00000000 ____D () C:\Windows\erdnt

2014-08-31 17:47 - 2014-08-31 17:47 - 00034169 _____ () C:\Windows\system32\hjtscanlist.txt

2014-08-31 17:40 - 2014-08-31 17:40 - 00002097 _____ () C:\Users\1860\Downloads\hjtscanlist.zip

2014-08-29 22:02 - 2014-08-29 22:02 - 04791736 _____ (Avira Operations GmbH & Co. KG) C:\Users\1860\Downloads\avira_de_av__r0ij9fgnxa1yb4agvitd_wsp.exe

2014-08-29 22:01 - 2014-08-29 22:01 - 04791736 _____ (Avira Operations GmbH & Co. KG) C:\Users\1860\Downloads\avira_de_av__7h9xxx1fgezq3qpfft0r_wsp.exe

2014-08-29 21:56 - 2014-08-29 21:56 - 04791736 _____ (Avira Operations GmbH & Co. KG) C:\Users\1860\Downloads\avira_de_av__ieufi9euwix87i2gugcy_wsp.exe

2014-08-29 18:36 - 2014-08-29 18:36 - 00000000 ____D () C:\Users\1860\AppData\Roaming\qBittorrent

2014-08-29 18:35 - 2014-08-29 18:35 - 00000000 ____D () C:\Users\1860\.idlerc

2014-08-29 18:35 - 2014-03-06 14:15 - 00000000 ____D () C:\Users\1860

2014-08-29 18:28 - 2014-08-29 18:28 - 00000000 ____D () C:\Users\1860\AppData\Roaming\Easy BitTorrent Client

2014-08-29 18:28 - 2014-08-29 18:28 - 00000000 ____D () C:\Users\1860\AppData\Local\Easy BitTorrent Client

2014-08-29 18:01 - 2014-08-29 18:01 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys

2014-08-29 12:30 - 2014-08-29 12:29 - 00388608 _____ (Trend Micro Inc.) C:\Users\1860\Downloads\HiJackThis204 (3).exe

2014-08-29 12:30 - 2014-07-06 13:02 - 00011928 _____ () C:\Users\1860\Downloads\hijackthis.log

2014-08-29 12:29 - 2014-08-29 12:29 - 00388608 _____ (Trend Micro Inc.) C:\Users\1860\Downloads\HiJackThis204 (2).exe

2014-08-29 06:38 - 2014-08-29 06:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-08-29 06:38 - 2014-07-30 18:17 - 00000000 ____D () C:\ProgramData\Skype

2014-08-29 06:37 - 2014-07-30 18:17 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-08-28 07:31 - 2014-08-21 10:24 - 00000000 ____D () C:\Users\1860\Documents\BewerbungsMaster

2014-08-28 06:49 - 2014-03-06 14:15 - 00000000 ____D () C:\Users\1860\AppData\Local\VirtualStore

2014-08-28 06:47 - 2014-05-08 12:09 - 00000000 ____D () C:\Users\1860\Desktop\bilder auto

2014-08-28 06:46 - 2014-08-28 06:46 - 00001785 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\arCV.lnk

2014-08-28 06:46 - 2014-08-28 06:46 - 00000000 ____D () C:\Program Files (x86)\arcv

2014-08-28 06:46 - 2014-08-28 06:46 - 00000000 ____D () C:\arcv

2014-08-28 06:45 - 2014-08-28 06:45 - 00000000 ____D () C:\Windows\Downloaded Installations

2014-08-28 06:44 - 2014-08-28 06:44 - 12601114 _____ () C:\Users\1860\Downloads\arcv.exe

2014-08-25 10:46 - 2014-08-21 10:28 - 00000003 _____ () C:\Users\1860\Documents\bmm.cfg

2014-08-25 10:46 - 2014-08-21 10:24 - 00000000 ____D () C:\ProgramData\BewerbungsMaster

2014-08-23 04:07 - 2014-08-28 06:38 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-23 03:45 - 2014-08-28 06:38 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-23 02:59 - 2014-08-28 06:38 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-22 13:37 - 2014-08-22 13:37 - 00040218 _____ () C:\Users\1860\Downloads\dbox_astra_matze (1).zip

2014-08-22 13:26 - 2014-08-22 13:26 - 00000000 ____D () C:\Users\1860\AppData\Roaming\FlashFXP

2014-08-22 13:26 - 2014-08-22 13:26 - 00000000 ____D () C:\ProgramData\FlashFXP

2014-08-22 13:19 - 2014-08-22 13:19 - 00000055 _____ () C:\Users\1860\Downloads\CCcam.cfg

2014-08-21 13:26 - 2014-08-21 13:25 - 00000000 ____D () C:\Users\1860\AppData\Roaming\elsterformular

2014-08-21 13:25 - 2014-08-21 13:25 - 00000000 ____D () C:\ProgramData\elsterformular

2014-08-21 10:27 - 2014-08-21 10:23 - 00000000 ____D () C:\Program Files (x86)\BEWERBUNGSMASTER

2014-08-21 10:24 - 2014-08-21 10:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2014-08-21 10:23 - 2014-08-21 10:23 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2014-08-21 10:23 - 2014-08-21 10:23 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2014-08-21 10:23 - 2014-08-21 10:23 - 00000000 ____D () C:\Users\1860\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2014-08-21 05:06 - 2014-03-17 18:11 - 00000000 ____D () C:\Users\1860\AppData\Roaming\DAEMON Tools Lite

2014-08-20 12:21 - 2014-05-01 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eLearn

2014-08-20 12:21 - 2014-05-01 18:52 - 00000000 ____D () C:\eLearn

2014-08-20 12:19 - 2014-08-20 12:18 - 25000000 _____ () C:\Users\1860\Downloads\Grande Punto eLEARN.part01 (1).rar

2014-08-19 20:05 - 2014-09-11 20:51 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-08-19 19:39 - 2014-09-11 20:51 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-08-19 01:01 - 2014-09-11 20:51 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-08-19 00:29 - 2014-09-11 20:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-08-19 00:29 - 2014-09-11 20:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-08-19 00:26 - 2014-09-11 20:51 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-08-19 00:20 - 2014-09-11 20:51 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-08-19 00:19 - 2014-09-11 20:51 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-08-19 00:15 - 2014-09-11 20:51 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-08-19 00:15 - 2014-09-11 20:51 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-08-19 00:14 - 2014-09-11 20:51 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-08-19 00:14 - 2014-09-11 20:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-08-19 00:08 - 2014-09-11 20:51 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-08-19 00:08 - 2014-09-11 20:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-08-19 00:08 - 2014-09-11 20:51 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-08-19 00:05 - 2014-09-11 20:51 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-08-19 00:03 - 2014-09-11 20:51 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-08-19 00:03 - 2014-09-11 20:51 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-08-19 00:03 - 2014-09-11 20:51 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-08-18 23:57 - 2014-09-11 20:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-08-18 23:56 - 2014-09-11 20:51 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-08-18 23:51 - 2014-09-11 20:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-08-18 23:46 - 2014-09-11 20:51 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-08-18 23:45 - 2014-09-11 20:51 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-08-18 23:45 - 2014-09-11 20:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-08-18 23:44 - 2014-09-11 20:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-08-18 23:44 - 2014-09-11 20:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-08-18 23:42 - 2014-09-11 20:51 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-08-18 23:40 - 2014-09-11 20:51 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-08-18 23:39 - 2014-09-11 20:51 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-08-18 23:39 - 2014-09-11 20:51 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-08-18 23:39 - 2014-09-11 20:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-08-18 23:38 - 2014-09-11 20:51 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-08-18 23:37 - 2014-09-11 20:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-08-18 23:36 - 2014-09-11 20:51 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-08-18 23:35 - 2014-09-11 20:51 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-08-18 23:27 - 2014-09-11 20:51 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-08-18 23:25 - 2014-09-11 20:51 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-08-18 23:25 - 2014-09-11 20:51 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-08-18 23:23 - 2014-09-11 20:51 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-08-18 23:23 - 2014-09-11 20:51 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-08-18 23:22 - 2014-09-11 20:51 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-08-18 23:19 - 2014-09-11 20:51 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-08-18 23:17 - 2014-09-11 20:51 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-08-18 23:17 - 2014-09-11 20:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-08-18 23:16 - 2014-09-11 20:51 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-08-18 23:15 - 2014-09-11 20:51 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-08-18 23:15 - 2014-09-11 20:51 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-08-18 23:09 - 2014-09-11 20:51 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-08-18 23:08 - 2014-09-11 20:51 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-08-18 23:07 - 2014-09-11 20:51 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-08-18 22:55 - 2014-09-11 20:51 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-08-18 22:46 - 2014-09-11 20:51 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-08-18 22:38 - 2014-09-11 20:51 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-08-18 22:38 - 2014-09-11 20:51 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-08-18 22:36 - 2014-09-11 20:51 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-08-18 20:44 - 2014-08-18 20:44 - 00000000 ____D () C:\Users\1860\AppData\Roaming\FX Flat

2014-08-18 19:14 - 2014-08-18 19:14 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk

2014-08-18 19:14 - 2014-08-18 19:14 - 00000000 ____D () C:\Users\1860\AppData\Roaming\TeamViewer

2014-08-18 19:14 - 2014-08-18 19:14 - 00000000 ____D () C:\Program Files (x86)\TeamViewer

2014-08-18 19:13 - 2014-08-18 19:13 - 06304880 _____ (TeamViewer GmbH) C:\Users\1860\Downloads\TeamViewer_Setup_de.exe

2014-08-18 18:53 - 2014-08-18 18:53 - 00000000 ____D () C:\Users\1860\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FX Flat

2014-08-18 18:53 - 2014-08-18 18:53 - 00000000 ____D () C:\Users\1860\AppData\Roaming\InstallShield Installation Information

2014-08-18 18:53 - 2014-08-18 18:52 - 00000000 ____D () C:\Program Files (x86)\Flat Trader

2014-08-18 18:50 - 2014-08-18 18:50 - 00000000 ____D () C:\Users\1860\Documents\{95EA60FC-B631-470C-98A7-B6EC973B6AA8}

2014-08-18 18:49 - 2014-08-18 18:48 - 26915558 _____ (FX Flat ) C:\Users\1860\Downloads\Flat Trader Setup.exe

2014-08-17 05:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
 

Some content of TEMP:

====================

C:\Users\1860\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-09-16 13:15
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

und was michhier beunruhigt, da steht irgendwo dabei hard disk fehler.auf einem der protokolle. so und als nächstes wie gehts ddann weiter?