| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: GVU Trojaner WIN 7Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
26.01.2013, 14:40
| #1 |
| |  GVU Trojaner WIN 7 Hallo! Leider hat mich heute der GVU Trojaner erwischt. Für Eure Hilfe bin ich dankbar! Ich habe Antivir durchlaufen lassen. Hier das Ergebnis: Avira Free Antivirus Erstellungsdatum der Reportdatei: 26 Januar 2013 11:16 Das Programm läuft als uneingeschränkte Vollversion. Online-Dienste stehen zur Verfügung. Lizenznehmer : Avira Free Antivirus Seriennummer : 0000149996-ADJIE-0000001 Plattform : Windows 7 Home Premium Windowsversion : (Service Pack 1) [6.1.7601] Versionsinformationen: BUILD.DAT : 13.0.0.2890 48567 Bytes 05/12/2012 17:11:00 AVSCAN.EXE : 13.6.0.402 639264 Bytes 11/12/2012 14:43:26 AVSCANRC.DLL : 13.4.0.360 64800 Bytes 11/12/2012 14:43:26 LUKE.DLL : 13.6.0.400 67360 Bytes 11/12/2012 14:44:04 AVSCPLR.DLL : 13.6.0.402 93984 Bytes 10/12/2012 15:11:36 AVREG.DLL : 13.6.0.406 248096 Bytes 10/12/2012 15:11:36 avlode.dll : 13.6.1.402 428832 Bytes 10/12/2012 15:11:36 avlode.rdf : 13.0.0.26 7958 Bytes 10/12/2012 15:11:36 VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 14:50:29 VBASE001.VDF : 7.11.0.0 13342208 Bytes 14/12/2010 14:50:31 VBASE002.VDF : 7.11.19.170 14374912 Bytes 20/12/2011 14:50:34 VBASE003.VDF : 7.11.21.238 4472832 Bytes 01/02/2012 14:50:36 VBASE004.VDF : 7.11.26.44 4329472 Bytes 28/03/2012 14:50:37 VBASE005.VDF : 7.11.34.116 4034048 Bytes 29/06/2012 14:42:40 VBASE006.VDF : 7.11.41.250 4902400 Bytes 06/09/2012 14:42:40 VBASE007.VDF : 7.11.50.230 3904512 Bytes 22/11/2012 12:25:59 VBASE008.VDF : 7.11.55.142 2214912 Bytes 03/01/2013 13:14:29 VBASE009.VDF : 7.11.55.143 2048 Bytes 03/01/2013 13:14:29 VBASE010.VDF : 7.11.55.144 2048 Bytes 03/01/2013 13:14:29 VBASE011.VDF : 7.11.55.145 2048 Bytes 03/01/2013 13:14:29 VBASE012.VDF : 7.11.55.146 2048 Bytes 03/01/2013 13:14:30 VBASE013.VDF : 7.11.55.196 260096 Bytes 04/01/2013 15:04:05 VBASE014.VDF : 7.11.56.23 206848 Bytes 07/01/2013 21:08:40 VBASE015.VDF : 7.11.56.83 186880 Bytes 08/01/2013 22:58:37 VBASE016.VDF : 7.11.56.145 135168 Bytes 09/01/2013 22:03:08 VBASE017.VDF : 7.11.56.211 139776 Bytes 11/01/2013 19:39:44 VBASE018.VDF : 7.11.57.11 153088 Bytes 13/01/2013 20:37:18 VBASE019.VDF : 7.11.57.75 165888 Bytes 15/01/2013 13:38:34 VBASE020.VDF : 7.11.57.163 190976 Bytes 17/01/2013 16:23:23 VBASE021.VDF : 7.11.57.219 119808 Bytes 18/01/2013 04:21:37 VBASE022.VDF : 7.11.58.7 167936 Bytes 21/01/2013 15:47:11 VBASE023.VDF : 7.11.58.49 140288 Bytes 22/01/2013 20:22:19 VBASE024.VDF : 7.11.58.119 137728 Bytes 24/01/2013 09:42:47 VBASE025.VDF : 7.11.58.175 132608 Bytes 25/01/2013 22:25:22 VBASE026.VDF : 7.11.58.176 2048 Bytes 25/01/2013 22:25:22 VBASE027.VDF : 7.11.58.177 2048 Bytes 25/01/2013 22:25:22 VBASE028.VDF : 7.11.58.178 2048 Bytes 25/01/2013 22:25:22 VBASE029.VDF : 7.11.58.179 2048 Bytes 25/01/2013 22:25:22 VBASE030.VDF : 7.11.58.180 2048 Bytes 25/01/2013 22:25:22 VBASE031.VDF : 7.11.58.194 4608 Bytes 26/01/2013 09:23:01 Engineversion : 8.2.10.238 AEVDF.DLL : 8.1.2.10 102772 Bytes 19/09/2012 14:42:55 AESCRIPT.DLL : 8.1.4.84 467322 Bytes 24/01/2013 15:42:41 AESCN.DLL : 8.1.10.0 131445 Bytes 13/12/2012 17:50:26 AESBX.DLL : 8.2.5.12 606578 Bytes 28/08/2012 16:58:06 AERDL.DLL : 8.2.0.88 643444 Bytes 10/01/2013 13:23:36 AEPACK.DLL : 8.3.1.2 819574 Bytes 23/12/2012 12:41:56 AEOFFICE.DLL : 8.1.2.50 201084 Bytes 05/11/2012 22:14:33 AEHEUR.DLL : 8.1.4.182 5706104 Bytes 24/01/2013 15:42:41 AEHELP.DLL : 8.1.25.2 258423 Bytes 12/10/2012 15:52:32 AEGEN.DLL : 8.1.6.16 434549 Bytes 24/01/2013 15:42:39 AEEXP.DLL : 8.3.0.14 188788 Bytes 24/01/2013 15:42:41 AEEMU.DLL : 8.1.3.2 393587 Bytes 19/09/2012 14:42:55 AECORE.DLL : 8.1.30.0 201079 Bytes 13/12/2012 17:50:25 AEBB.DLL : 8.1.1.4 53619 Bytes 05/11/2012 22:14:30 AVWINLL.DLL : 13.4.0.163 25888 Bytes 19/09/2012 18:09:30 AVPREF.DLL : 13.4.0.360 50464 Bytes 11/12/2012 14:43:22 AVREP.DLL : 13.4.0.360 177952 Bytes 10/12/2012 15:11:36 AVARKT.DLL : 13.6.0.402 260384 Bytes 11/12/2012 14:43:16 AVEVTLOG.DLL : 13.6.0.400 167200 Bytes 11/12/2012 14:43:20 SQLITE3.DLL : 3.7.0.1 397088 Bytes 19/09/2012 18:17:40 AVSMTP.DLL : 13.4.0.163 62240 Bytes 19/09/2012 18:08:54 NETNT.DLL : 13.4.0.360 15648 Bytes 11/12/2012 14:44:04 RCIMAGE.DLL : 13.4.0.360 4780832 Bytes 11/12/2012 14:43:13 RCTEXT.DLL : 13.4.0.360 68384 Bytes 11/12/2012 14:43:13 Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen: Die Registry wurde durchsucht ( '3226' Dateien ). Der Suchlauf über die ausgewählten Dateien wird begonnen: Beginne mit der Suche in 'C:\' <Acer> [0] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\AllSigned\x86x64\amd64\WUDFUpdate_01007.dll [1] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\AllSigned\x86x64\i386\WUDFUpdate_01007.dll [2] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CCFFEA6-8825-42c7-A2A5-94678EFB925F}\amd64\WUDFUpdate_01007.dll [3] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CCFFEA6-8825-42c7-A2A5-94678EFB925F}\i386\WUDFUpdate_01007.dll [4] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CD1390C-A74E-434A-B652-73D3683B3BEF}\amd64\winusbcoinstaller2.dll [5] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CD1390C-A74E-434A-B652-73D3683B3BEF}\amd64\WUDFUpdate_01009.dll [6] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CD1390C-A74E-434A-B652-73D3683B3BEF}\i386\winusbcoinstaller2.dll [7] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CD1390C-A74E-434A-B652-73D3683B3BEF}\i386\WUDFUpdate_01009.dll [8] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2FC12C0B-6D73-4F66-8D2D-64E907627969}\amd64\winusbcoinstaller2.dll [9] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2FC12C0B-6D73-4F66-8D2D-64E907627969}\amd64\WUDFUpdate_01009.dll [10] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2FC12C0B-6D73-4F66-8D2D-64E907627969}\i386\winusbcoinstaller2.dll [11] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2FC12C0B-6D73-4F66-8D2D-64E907627969}\i386\WUDFUpdate_01009.dll [12] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4804CEA3-DDE0-46A0-8430-54DFDE2C5EC0}\amd64\winusbcoinstaller2.dll [13] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4804CEA3-DDE0-46A0-8430-54DFDE2C5EC0}\amd64\WUDFUpdate_01009.dll [14] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4804CEA3-DDE0-46A0-8430-54DFDE2C5EC0}\i386\winusbcoinstaller2.dll [15] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4804CEA3-DDE0-46A0-8430-54DFDE2C5EC0}\i386\WUDFUpdate_01009.dll [16] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4B11437A-A1BD-4786-A0A2-916CB6DE3153}\amd64\winusbcoinstaller2.dll [17] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4B11437A-A1BD-4786-A0A2-916CB6DE3153}\amd64\WUDFUpdate_01009.dll [18] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4B11437A-A1BD-4786-A0A2-916CB6DE3153}\i386\winusbcoinstaller2.dll [19] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4B11437A-A1BD-4786-A0A2-916CB6DE3153}\i386\WUDFUpdate_01009.dll [20] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{5A2F2D1B-F67A-4754-88D7-6E6F20C68D85}\amd64\winusbcoinstaller2.dll [21] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{5A2F2D1B-F67A-4754-88D7-6E6F20C68D85}\amd64\WUDFUpdate_01009.dll [22] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{5A2F2D1B-F67A-4754-88D7-6E6F20C68D85}\i386\winusbcoinstaller2.dll [23] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{5A2F2D1B-F67A-4754-88D7-6E6F20C68D85}\i386\WUDFUpdate_01009.dll [24] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{884EF9E6-97FC-41A1-9CD3-636DAAEA6035}\amd64\winusbcoinstaller2.dll [25] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{884EF9E6-97FC-41A1-9CD3-636DAAEA6035}\amd64\WUDFUpdate_01009.dll [26] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{884EF9E6-97FC-41A1-9CD3-636DAAEA6035}\i386\winusbcoinstaller2.dll [27] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{884EF9E6-97FC-41A1-9CD3-636DAAEA6035}\i386\WUDFUpdate_01009.dll [28] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EE975EE3-08EC-4949-9C38-3A637996A670}\amd64\winusbcoinstaller2.dll [29] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EE975EE3-08EC-4949-9C38-3A637996A670}\amd64\WUDFUpdate_01009.dll [30] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EE975EE3-08EC-4949-9C38-3A637996A670}\i386\winusbcoinstaller2.dll [31] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EE975EE3-08EC-4949-9C38-3A637996A670}\i386\WUDFUpdate_01009.dll [32] Archivtyp: RSRC --> C:\Users\Fränz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\01ZFUGOR\ed6.0_RioGrande_Signed_All_1.00.003[1].cab [33] Archivtyp: CAB (Microsoft) --> amd64\winusbcoinstaller2.dll [34] Archivtyp: RSRC --> amd64\WUDFUpdate_01009.dll [35] Archivtyp: RSRC --> i386\winusbcoinstaller2.dll [36] Archivtyp: RSRC --> C:\Users\Fränz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\01ZFUGOR\X10_GB_Signed_All_1.00.002[1].cab [37] Archivtyp: CAB (Microsoft) --> amd64\WUDFUpdate_01007.dll [38] Archivtyp: RSRC --> C:\Users\Fränz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\05U4M9KL\Blue1.0_Signed_All_1.00.001[1].cab [39] Archivtyp: CAB (Microsoft) --> amd64\winusbcoinstaller2.dll [40] Archivtyp: RSRC --> amd64\WUDFUpdate_01009.dll [41] Archivtyp: RSRC --> i386\winusbcoinstaller2.dll [42] Archivtyp: RSRC --> C:\Users\Fränz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\05U4M9KL\ed6.0_Signed_All_1.00.002[1].cab [43] Archivtyp: CAB (Microsoft) --> amd64\winusbcoinstaller2.dll [44] Archivtyp: RSRC --> amd64\WUDFUpdate_01009.dll [45] Archivtyp: RSRC --> i386\winusbcoinstaller2.dll [46] Archivtyp: RSRC --> C:\Users\Fränz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0CNUBLYW\ed4.0.1_Signed_All_1.00.002[1].cab [47] Archivtyp: CAB (Microsoft) --> amd64\winusbcoinstaller2.dll [48] Archivtyp: RSRC --> amd64\WUDFUpdate_01009.dll [49] Archivtyp: RSRC --> i386\winusbcoinstaller2.dll [50] Archivtyp: RSRC --> C:\Users\Fränz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0CNUBLYW\Lagan_Signed_All_1.00.001[1].cab [51] Archivtyp: CAB (Microsoft) --> amd64\winusbcoinstaller2.dll [52] Archivtyp: RSRC --> amd64\WUDFUpdate_01009.dll [53] Archivtyp: RSRC --> i386\winusbcoinstaller2.dll [54] Archivtyp: RSRC --> C:\Users\Fränz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HM40HWEB\Blue3.0_Signed_All_1.00.001[1].cab [55] Archivtyp: CAB (Microsoft) --> amd64\winusbcoinstaller2.dll [56] Archivtyp: RSRC --> amd64\WUDFUpdate_01009.dll [57] Archivtyp: RSRC --> i386\winusbcoinstaller2.dll [58] Archivtyp: RSRC --> C:\Users\Fränz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HM40HWEB\JDM_Signed_All_1.00.001[1].cab [59] Archivtyp: CAB (Microsoft) --> amd64\winusbcoinstaller2.dll [60] Archivtyp: RSRC --> amd64\WUDFUpdate_01009.dll [61] Archivtyp: RSRC --> i386\winusbcoinstaller2.dll [62] Archivtyp: RSRC --> C:\Users\Fränz\AppData\Roaming\Dropbox\bin\Dropbox.exe [63] Archivtyp: RSRC --> C:\Users\Fränz\Downloads\jxpiinstall.exe [64] Archivtyp: Runtime Packed --> C:\Users\Fränz\Dropbox\Flozip\ST4 64bit.zip [65] Archivtyp: ZIP --> ST4 64bit/SolidEdgeV104GERMAN_64Bit.exe [WARNUNG] Die Datei konnte nicht gelesen werden! C:\Users\Fränz\Dropbox\Flozip\ST4 64bit.zip [WARNUNG] Die Datei konnte nicht gelesen werden! --> C:\Users\Henner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\23c04fd9-5d6f3ad6 [65] Archivtyp: ZIP --> MYLzX.class [FUND] Enthält Erkennungsmuster des Exploits EXP/2012-1723.GG [WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden --> YeIUXV.class [FUND] Enthält Erkennungsmuster des Exploits EXP/2012-1723.HV [WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden C:\Users\Henner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\23c04fd9-5d6f3ad6 [FUND] Enthält Erkennungsmuster des Exploits EXP/2012-1723.HV Beginne mit der Suche in 'D:\' <DATA> Beginne mit der Desinfektion: C:\Users\Henner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\23c04fd9-5d6f3ad6 [FUND] Enthält Erkennungsmuster des Exploits EXP/2012-1723.HV [HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '40197a59.qua' verschoben! Typ: Datei Quelle: C:\Users\Henner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZHQZNRKV\Background.Football[1].htm Status: Infiziert Quarantäne-Objekt: 41ce1202.qua Wiederhergestellt: NEIN Zu Avira hochgeladen: NEIN Betriebssystem: Windows XP/VISTA Workstation/Windows 7 Suchengine: 8.02.10.238 Virendefinitionsdatei: 7.11.58.194 Meldung: EXP/CVE-2011-3402.C Datum/Uhrzeit: 26/01/2013, 10:30 Typ: Datei Quelle: C:\Users\Henner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\23c04fd9-5d6f3ad6 Status: Infiziert Quarantäne-Objekt: 40197a59.qua Wiederhergestellt: NEIN Zu Avira hochgeladen: JA Betriebssystem: Windows XP/VISTA Workstation/Windows 7 Suchengine: 8.02.10.238 Virendefinitionsdatei: 7.11.58.194 Meldung: EXP/2012-1723.HV Datum/Uhrzeit: 26/01/2013, 14:30 OTLOTL Logfile: Code:
ATTFilter OTL logfile created on: 26/01/2013 14:54:13 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Fränz\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd/MM/yyyy 3,86 Gb Total Physical Memory | 1,39 Gb Available Physical Memory | 36,10% Memory free 7,71 Gb Paging File | 4,27 Gb Available in Paging File | 55,38% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 339,23 Gb Total Space | 240,27 Gb Free Space | 70,83% Space Free | Partition Type: NTFS Drive D: | 339,77 Gb Total Space | 249,24 Gb Free Space | 73,36% Space Free | Partition Type: NTFS Drive E: | 6,38 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive G: | 1,88 Gb Total Space | 0,18 Gb Free Space | 9,73% Space Free | Partition Type: FAT Computer Name: FRÄNZ-LAPTOP | User Name: Fränz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2013/01/26 14:53:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Fränz\Desktop\OTL.exe PRC - [2013/01/19 05:30:35 | 000,917,400 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012/12/20 18:44:32 | 000,844,296 | ---- | M] (Samsung) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe PRC - [2012/12/20 18:44:28 | 000,310,280 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe PRC - [2012/12/20 18:44:26 | 001,476,104 | ---- | M] (Samsung) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe PRC - [2012/12/18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012/12/11 15:44:04 | 000,085,280 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2012/12/11 15:43:26 | 000,639,264 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe PRC - [2012/12/11 15:43:21 | 000,109,344 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2012/12/11 15:43:20 | 000,384,800 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2012/12/11 15:43:18 | 000,387,360 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe PRC - [2012/11/30 03:06:58 | 001,263,512 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe PRC - [2012/09/12 11:17:12 | 000,445,624 | ---- | M] (Sony) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe PRC - [2012/07/17 15:14:08 | 000,132,056 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe PRC - [2012/06/11 16:22:16 | 000,240,208 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe PRC - [2012/04/30 10:57:42 | 000,067,072 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe PRC - [2012/02/27 04:52:20 | 000,038,248 | ---- | M] (Mindjet) -- C:\Program Files (x86)\Mindjet\MindManager 10\MmReminderService.exe PRC - [2011/07/01 03:51:13 | 000,418,896 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe PRC - [2011/07/01 03:51:12 | 000,343,632 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe PRC - [2011/07/01 03:51:11 | 000,353,360 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe PRC - [2011/07/01 03:51:10 | 001,103,440 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe PRC - [2011/05/30 03:54:14 | 000,036,456 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe PRC - [2011/05/20 09:10:26 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2011/05/12 06:04:12 | 000,723,560 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe PRC - [2011/04/24 02:29:20 | 000,256,832 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe PRC - [2011/04/24 02:28:38 | 000,297,280 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe PRC - [2011/04/22 17:44:14 | 000,244,624 | ---- | M] (Acer Incorporated) -- C:\Programme\Acer\Acer Updater\UpdaterService.exe PRC - [2011/02/01 22:41:24 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2011/02/01 22:41:20 | 000,326,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010/12/27 09:30:22 | 001,817,088 | ---- | M] (Realsil Microelectronics Inc.) -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe PRC - [2010/11/17 02:53:16 | 000,113,288 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2010/05/20 15:26:26 | 000,119,152 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe PRC - [2010/01/30 00:52:58 | 000,260,640 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe ========== Modules (No Company Name) ========== MOD - [2013/01/20 13:42:30 | 000,122,880 | ---- | M] () -- C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox\components\CitaviPickerCommunication.dll MOD - [2013/01/19 05:30:35 | 003,022,232 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2012/11/30 03:07:48 | 000,100,248 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll MOD - [2012/11/30 03:06:58 | 001,263,512 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe MOD - [2012/11/07 16:25:36 | 000,204,288 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll MOD - [2012/09/19 19:17:40 | 000,397,088 | ---- | M] () -- C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll MOD - [2012/04/30 10:57:42 | 000,067,072 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe MOD - [2012/04/30 10:57:42 | 000,039,936 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll MOD - [2012/02/27 04:51:34 | 000,151,376 | ---- | M] () -- C:\Program Files (x86)\Mindjet\MindManager 10\zlib.dll MOD - [2011/04/24 02:29:56 | 000,465,640 | ---- | M] () -- C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf ========== Services (SafeList) ========== SRV:64bit: - [2011/03/13 19:45:12 | 000,158,832 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp) SRV:64bit: - [2011/03/13 19:37:06 | 000,197,960 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield) SRV:64bit: - [2011/01/28 02:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McMPFSvc) SRV:64bit: - [2010/12/17 00:18:08 | 000,198,784 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg) SRV - [2013/01/19 05:30:35 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013/01/09 00:47:31 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/12/18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012/12/11 15:44:04 | 000,085,280 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2012/12/11 15:43:21 | 000,109,344 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2012/11/09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012/09/27 07:45:14 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2012/07/17 15:14:08 | 000,132,056 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe -- (Norton PC Checkup Application Launcher) SRV - [2012/06/11 16:22:16 | 000,240,208 | ---- | M] (Microsoft Corporation.) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe -- (BBUpdate) SRV - [2012/06/11 16:22:16 | 000,193,616 | ---- | M] (Microsoft Corporation.) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe -- (BBSvc) SRV - [2012/01/18 13:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011/07/01 03:51:11 | 000,353,360 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService) SRV - [2011/06/21 20:55:04 | 000,173,424 | ---- | M] (Egis Technology Inc. ) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe -- (EgisTec Ticket Service) SRV - [2011/05/30 03:54:14 | 000,036,456 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe -- (GREGService) SRV - [2011/05/20 09:10:26 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2011/05/02 13:27:50 | 001,517,328 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV - [2011/05/02 13:13:54 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Programme\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS) SRV - [2011/05/02 13:10:26 | 000,844,560 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV - [2011/04/24 02:29:20 | 000,256,832 | ---- | M] (NTI Corporation) [Auto | Running] -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc) SRV - [2011/04/22 17:44:14 | 000,244,624 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Programme\Acer\Acer Updater\UpdaterService.exe -- (Live Updater Service) SRV - [2011/03/29 05:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2011/03/28 08:41:00 | 000,799,848 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Programme\Acer\Acer PowerSmart Manager\ePowerSvc.exe -- (ePowerSvc) SRV - [2011/02/01 22:41:24 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2011/02/01 22:41:20 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2010/12/27 09:30:22 | 001,817,088 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R) SRV - [2010/11/29 14:00:56 | 000,149,504 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Programme\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV - [2010/10/22 13:08:18 | 001,039,360 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC) SRV - [2010/10/12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService) SRV - [2010/09/23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV - [2010/06/01 23:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU) SRV - [2010/05/20 15:26:28 | 000,199,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc) SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2010/01/30 00:52:58 | 000,260,640 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe -- (RS_Service) SRV - [2010/01/09 21:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc) SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2012/12/11 15:44:07 | 000,129,216 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb) DRV:64bit: - [2012/12/11 15:44:07 | 000,099,912 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:64bit: - [2012/11/29 20:55:33 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:64bit: - [2012/09/24 09:58:11 | 000,027,800 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr) DRV:64bit: - [2012/09/20 05:35:36 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm) DRV:64bit: - [2012/09/20 05:35:36 | 000,102,368 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus) DRV:64bit: - [2012/04/11 12:20:15 | 000,062,776 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk) DRV:64bit: - [2012/04/11 12:20:15 | 000,022,648 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDFilter.sys -- (mwlPSDFilter) DRV:64bit: - [2012/04/11 12:20:15 | 000,020,520 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDNserv.sys -- (mwlPSDNServ) DRV:64bit: - [2012/03/01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2011/09/20 11:02:55 | 000,018,432 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr) DRV:64bit: - [2011/09/20 11:02:55 | 000,017,408 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper) DRV:64bit: - [2011/07/14 06:35:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011/07/14 06:35:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011/06/24 04:22:04 | 001,591,936 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:64bit: - [2011/06/21 14:19:14 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus) DRV:64bit: - [2011/06/21 14:19:12 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible) DRV:64bit: - [2011/06/10 19:16:08 | 012,230,912 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2011/05/20 08:53:44 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:64bit: - [2011/05/01 07:33:06 | 008,593,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) DRV:64bit: - [2011/04/05 12:26:26 | 000,142,632 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD) DRV:64bit: - [2011/03/13 19:20:10 | 000,639,216 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk) DRV:64bit: - [2011/03/13 19:20:10 | 000,481,376 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfefirek.sys -- (mfefirek) DRV:64bit: - [2011/03/13 19:20:10 | 000,281,928 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk) DRV:64bit: - [2011/03/13 19:20:10 | 000,156,792 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk) DRV:64bit: - [2011/03/13 19:20:10 | 000,098,728 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet) DRV:64bit: - [2011/02/21 08:30:54 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt) DRV:64bit: - [2011/02/10 07:52:34 | 000,181,760 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:64bit: - [2011/02/10 07:52:34 | 000,082,432 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:64bit: - [2011/01/12 09:10:44 | 000,333,928 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR) DRV:64bit: - [2010/11/29 14:00:04 | 000,016,120 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:64bit: - [2010/11/21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010/11/21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010/11/21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:64bit: - [2010/11/08 05:44:40 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:64bit: - [2010/10/20 01:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:64bit: - [2010/10/15 09:28:17 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:64bit: - [2010/01/29 01:04:38 | 000,036,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nx6000.sys -- (MSHUSBVideo) DRV:64bit: - [2009/08/13 22:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21) DRV:64bit: - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009/07/14 01:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam) DRV:64bit: - [2009/07/09 03:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV:64bit: - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.startup.homepage: "www.Zeit.de" FF - prefs.js..extensions.enabledAddons: DivXWebPlayer%40divx.com:2.0.2.039 FF - prefs.js..extensions.enabledAddons: %7B23fcfd51-4958-4f00-80a3-ae97e717ed8b%7D:2.1.2.145 FF - prefs.js..extensions.enabledAddons: %7B01A8CA0A-4C96-465b-A49B-65C46FAD54F9%7D:6.0 FF - prefs.js..extensions.enabledAddons: ich%40maltegoetz.de:1.4.3 FF - prefs.js..extensions.enabledAddons: firefox%40unfriendfinder.com:41.997 FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.6 FF - prefs.js..extensions.enabledAddons: %7B8AA36F4F-6DC7-4c06-77AF-5035170634FE%7D:2012.09.13 FF - prefs.js..extensions.enabledAddons: %7Ba95d8332-e4b4-6e7f-98ac-20b733364387%7D:0.6.3 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.1 FF - prefs.js..extensions.enabledItems: {4ED1F68A-5463-4931-9384-8FFF5ED91D92}:3.5.0 FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\progra~2\mcafee\msc\npmcsn~1.dll () FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2012/11/05 22:35:19 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012/11/09 22:12:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/11/16 21:40:05 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}: C:\Program Files (x86)\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2012/11/29 21:38:24 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}: C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012/12/12 14:50:37 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/01/19 05:30:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/01/19 05:30:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/01/09 11:01:08 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/11/16 21:40:05 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/01/19 05:30:35 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/01/19 05:30:33 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/01/09 11:01:08 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2012/11/07 13:54:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Fränz\AppData\Roaming\mozilla\Extensions [2013/01/23 12:31:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Fränz\AppData\Roaming\mozilla\Firefox\Profiles\7qmn0jed.default\extensions [2012/12/30 19:49:38 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\Fränz\AppData\Roaming\mozilla\Firefox\Profiles\7qmn0jed.default\extensions\ich@maltegoetz.de [2012/11/09 22:09:21 | 000,550,833 | ---- | M] () (No name found) -- C:\Users\Fränz\AppData\Roaming\mozilla\firefox\profiles\7qmn0jed.default\extensions\DivXWebPlayer@divx.com.xpi [2012/12/31 13:59:06 | 000,351,151 | ---- | M] () (No name found) -- C:\Users\Fränz\AppData\Roaming\mozilla\firefox\profiles\7qmn0jed.default\extensions\firefox@unfriendfinder.com.xpi [2013/01/23 12:31:17 | 000,056,640 | ---- | M] () (No name found) -- C:\Users\Fränz\AppData\Roaming\mozilla\firefox\profiles\7qmn0jed.default\extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi [2012/11/23 15:14:25 | 000,804,627 | ---- | M] () (No name found) -- C:\Users\Fränz\AppData\Roaming\mozilla\firefox\profiles\7qmn0jed.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013/01/16 20:34:39 | 000,266,840 | ---- | M] () (No name found) -- C:\Users\Fränz\AppData\Roaming\mozilla\firefox\profiles\7qmn0jed.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013/01/19 05:30:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2012/11/29 21:38:24 | 000,000,000 | ---D | M] (Adobe Contribute Toolbar) -- C:\PROGRAM FILES (X86)\ADOBE CONTRIBUTE CS5\PLUGINS\FIREFOXPLUGIN\{01A8CA0A-4C96-465B-A49B-65C46FAD54F9} [2012/11/09 22:12:04 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 <video>) -- C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5 [2012/12/12 14:50:37 | 000,000,000 | ---D | M] (Citavi Picker) -- C:\PROGRAMDATA\SWISS ACADEMIC SOFTWARE\CITAVI PICKER\FIREFOX File not found (No name found) -- C:\USERS\FRäNZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7QMN0JED.DEFAULT\EXTENSIONS\{A95D8332-E4B4-6E7F-98AC-20B733364387}.XPI File not found (No name found) -- C:\USERS\FRäNZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7QMN0JED.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781}.XPI File not found (No name found) -- C:\USERS\FRäNZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7QMN0JED.DEFAULT\EXTENSIONS\DIVXWEBPLAYER@DIVX.COM.XPI File not found (No name found) -- C:\USERS\FRäNZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7QMN0JED.DEFAULT\EXTENSIONS\FIREFOX@UNFRIENDFINDER.COM.XPI File not found (No name found) -- C:\USERS\FRäNZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7QMN0JED.DEFAULT\EXTENSIONS\ICH@MALTEGOETZ.DE [2013/01/19 05:30:35 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012/10/24 23:03:12 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2012/10/24 23:03:11 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012/10/24 23:03:12 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2012/10/24 23:03:12 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2012/10/24 23:03:12 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2012/10/24 23:03:11 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2012/11/29 21:11:33 | 000,001,364 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 192.168.112.2O7.net O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 adobeereg.com O1 - Hosts: 127.0.0.1 Registration O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 192.150.18.108 O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2:64bit: - BHO: (no name) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No CLSID value found. O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2:64bit: - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found. O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.) O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) O2 - BHO: (CmjBrowserHelperObject Object) - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No CLSID value found. O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Programme\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation) O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.) O4:64bit: - HKLM..\Run: [OOTag] C:\Program Files (x86)\Acer\OOBEOffer\ootag.exe (Microsoft) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Power Management] C:\Programme\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe (Acer Incorporated) O4:64bit: - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation) O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe () O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [Dolby Home Theater v4] C:\Dolby PCEE4\pcee4.exe (Dolby Laboratories Inc.) O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.) O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation) O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) O4 - HKLM..\Run: [MMReminderService] C:\Program Files (x86)\Mindjet\MindManager 10\MMReminderService.exe (Mindjet) O4 - HKLM..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [OOTag] C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe (Microsoft) O4 - HKLM..\Run: [SuiteTray] C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (Egis Technology Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKCU..\Run: [DAEMON Tools Lite] "J:\Festplatte\Programme\DAEMON Tools Lite\DTLite.exe" -autorun File not found O4 - HKCU..\Run: [Sony PC Companion] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Sony) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found O8:64bit: - Extra context menu item: Send Image To MindManager - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O8:64bit: - Extra context menu item: Send Link To MindManager - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O8:64bit: - Extra context menu item: Send Page To MindManager - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O8:64bit: - Extra context menu item: Send Text To MindManager - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Send Image To MindManager - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O8 - Extra context menu item: Send Link To MindManager - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O8 - Extra context menu item: Send Page To MindManager - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O8 - Extra context menu item: Send Text To MindManager - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Send to Mindjet MindManager - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E9326996-06D4-4DB3-A26D-9C1A403B10D1}: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008/03/06 19:00:54 | 000,131,720 | R--- | M] (InstallShield Software Corporation) - E:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2008/02/22 16:08:27 | 000,058,601 | R--- | M] () - E:\autorun.ico -- [ UDF ] O32 - AutoRun File - [2008/02/22 16:08:27 | 000,000,047 | R--- | M] () - E:\autorun.inf -- [ UDF ] O32 - AutoRun File - [2008/02/22 16:08:44 | 000,000,382 | R--- | M] () - E:\autorun.ini -- [ UDF ] O32 - Unable to obtain root file information for disk G:\ O33 - MountPoints2\{4f7e4448-086e-11e2-a508-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{4f7e4448-086e-11e2-a508-806e6f6e6963}\Shell\AutoRun\command - "" = E:\autorun.exe -- [2008/03/06 19:00:54 | 000,131,720 | R--- | M] (InstallShield Software Corporation) O33 - MountPoints2\{95cba820-3a54-11e2-a4d9-dc0ea12e6964}\Shell - "" = AutoRun O33 - MountPoints2\{95cba820-3a54-11e2-a4d9-dc0ea12e6964}\Shell\AutoRun\command - "" = F:\SETUP.EXE O33 - MountPoints2\{95cba820-3a54-11e2-a4d9-dc0ea12e6964}\Shell\configure\command - "" = F:\SETUP.EXE O33 - MountPoints2\{95cba820-3a54-11e2-a4d9-dc0ea12e6964}\Shell\install\command - "" = F:\SETUP.EXE O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013/01/26 14:53:28 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Fränz\Desktop\OTL.exe [2013/01/26 00:38:40 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\Wirtschaftsprivatrecht [2013/01/25 02:03:41 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\CByeByeMaxiUnofficaltrYmewarez [2013/01/24 15:33:52 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\CrashDump [2013/01/20 15:59:37 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\NativeFus_Log [2013/01/20 15:58:57 | 000,203,104 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudmdm.sys [2013/01/20 15:58:57 | 000,102,368 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudbus.sys [2013/01/20 15:58:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung [2013/01/20 15:57:57 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll [2013/01/20 15:57:44 | 000,821,824 | ---- | C] (Devguru Co., Ltd.) -- C:\Windows\SysWow64\dgderapi.dll [2013/01/20 15:57:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Samsung [2013/01/20 15:57:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung [2013/01/20 15:50:13 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2013/01/20 13:29:31 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\Konstruktion I [2013/01/20 13:13:58 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\Hausaufgabe 2 [2013/01/20 11:31:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton PC Checkup 3.0 [2013/01/20 11:30:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton PC Checkup 3.0 [2013/01/20 11:30:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton [2013/01/19 20:31:37 | 000,000,000 | ---D | C] -- C:\Users\Fränz\AppData\Local\{A87D4020-576E-44AB-8D0B-8D61C9A7DD2F} [2013/01/19 20:31:37 | 000,000,000 | ---D | C] -- C:\Users\Fränz\AppData\Local\{532F5448-BD2D-4F05-A88B-C4F7FAAD96DC} [2013/01/19 05:30:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2013/01/16 12:32:47 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\Keine Panik vor Thermodynamik [2013/01/16 11:16:33 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\Fotos New York [2013/01/14 17:02:06 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\Fotostrecke Flip-Charts [2013/01/11 22:17:51 | 000,000,000 | ---D | C] -- C:\Users\Fränz\AppData\Roaming\dvdcss [2013/01/09 14:25:18 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\Grundlagenseminare [2013/01/09 11:01:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird [2013/01/09 09:54:51 | 000,750,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2013/01/09 09:54:51 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll [2013/01/09 09:54:41 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll [2013/01/09 09:54:41 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll [2013/01/09 09:54:38 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\fpb.rs [2013/01/09 09:54:38 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\SysNative\fpb.rs [2013/01/09 09:54:38 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\oflc-nz.rs [2013/01/09 09:54:38 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\SysNative\oflc-nz.rs [2013/01/09 09:54:38 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegibbfc.rs [2013/01/09 09:54:38 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegibbfc.rs [2013/01/09 09:54:38 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\csrr.rs [2013/01/09 09:54:38 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\SysNative\csrr.rs [2013/01/09 09:54:38 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\cob-au.rs [2013/01/09 09:54:38 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\SysNative\cob-au.rs [2013/01/09 09:54:38 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\usk.rs [2013/01/09 09:54:38 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\SysNative\usk.rs [2013/01/09 09:54:38 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\djctq.rs [2013/01/09 09:54:38 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\SysNative\djctq.rs [2013/01/09 09:54:37 | 002,746,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll [2013/01/09 09:54:37 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll [2013/01/09 09:54:37 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wpc.dll [2013/01/09 09:54:37 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Wpc.dll [2013/01/09 09:54:37 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\cero.rs [2013/01/09 09:54:37 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\SysNative\cero.rs [2013/01/09 09:54:37 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\esrb.rs [2013/01/09 09:54:37 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\SysNative\esrb.rs [2013/01/09 09:54:37 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\oflc.rs [2013/01/09 09:54:37 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\SysNative\oflc.rs [2013/01/09 09:54:37 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\grb.rs [2013/01/09 09:54:37 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\SysNative\grb.rs [2013/01/09 09:54:37 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi-pt.rs [2013/01/09 09:54:37 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi-pt.rs [2013/01/09 09:54:37 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi-fi.rs [2013/01/09 09:54:37 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi-fi.rs [2013/01/09 09:54:37 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi.rs [2013/01/09 09:54:37 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi.rs [2013/01/09 09:54:14 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2013/01/09 09:54:14 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2013/01/09 09:54:14 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2013/01/09 09:54:14 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2013/01/09 09:54:14 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2013/01/09 09:54:14 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2013/01/09 09:54:14 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2013/01/09 09:54:14 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2013/01/09 09:54:14 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2013/01/09 09:54:14 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll [2013/01/09 09:54:14 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2013/01/09 09:54:14 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll [2013/01/09 09:54:14 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2013/01/09 09:54:14 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll [2013/01/09 09:54:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2013/01/09 09:54:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll [2013/01/09 09:54:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2013/01/09 09:54:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll [2013/01/09 09:54:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll [2013/01/09 09:54:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll [2013/01/09 09:54:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2013/01/09 09:54:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2013/01/09 09:54:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll [2013/01/09 09:54:13 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2013/01/09 09:54:13 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2013/01/09 09:54:13 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2013/01/09 09:54:13 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2013/01/09 09:54:13 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2013/01/09 09:54:13 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll [2013/01/09 09:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll [2013/01/09 09:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2013/01/09 09:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2013/01/09 09:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll [2013/01/09 09:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2013/01/09 09:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2013/01/09 09:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll [2013/01/09 09:54:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2013/01/09 09:53:56 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe [2013/01/07 23:06:17 | 000,000,000 | ---D | C] -- C:\Users\Fränz\AppData\Roaming\InstallShield [2013/01/07 15:22:29 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\VL Projektmanagement WS 2012-13 [2013/01/07 14:58:37 | 000,000,000 | ---D | C] -- C:\Users\Fränz\AppData\Roaming\Ubisoft [2013/01/07 14:56:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Ubisoft [2013/01/07 14:54:19 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll [2013/01/07 14:54:19 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll [2013/01/07 14:54:18 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll [2013/01/07 14:54:18 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll [2013/01/07 14:54:18 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll [2013/01/07 14:54:18 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll [2013/01/07 14:54:18 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll [2013/01/07 14:54:18 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll [2013/01/07 14:54:17 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll [2013/01/07 14:54:17 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll [2013/01/07 14:54:16 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll [2013/01/07 14:54:16 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll [2013/01/07 14:54:16 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll [2013/01/07 14:54:16 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll [2013/01/07 14:54:16 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll [2013/01/07 14:54:16 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll [2013/01/07 14:54:16 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll [2013/01/07 14:54:16 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll [2013/01/07 14:54:16 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll [2013/01/07 14:54:16 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll [2013/01/07 14:54:15 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll [2013/01/07 14:54:15 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll [2013/01/07 14:54:15 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll [2013/01/07 14:54:15 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll [2013/01/07 14:54:15 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll [2013/01/07 14:54:15 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll [2013/01/06 18:49:02 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\material für walter [2013/01/06 18:49:02 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\material für die tn vom gls i [2013/01/06 18:43:50 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\Weiteres [2013/01/06 18:38:21 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\Selbstwert und Selbstwirksamkeit [2013/01/06 09:25:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony [2013/01/06 09:25:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony [2013/01/06 09:25:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony [2013/01/05 16:18:59 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Desktop\WPR [2013/01/03 20:27:45 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Documents\ToDos [2013/01/03 16:57:16 | 000,000,000 | ---D | C] -- C:\Users\Fränz\Application Data [2013/01/03 15:09:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab [2012/12/29 12:29:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avanquest update [2012/12/29 12:29:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest ========== Files - Modified Within 30 Days ========== [2013/01/26 14:58:47 | 095,023,320 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.pad [2013/01/26 14:53:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Fränz\Desktop\OTL.exe [2013/01/26 14:47:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013/01/26 10:29:42 | 000,002,915 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.js [2013/01/26 10:29:42 | 000,000,159 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.reg [2013/01/26 10:29:42 | 000,000,067 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.bat [2013/01/26 10:29:17 | 000,016,752 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013/01/26 10:29:17 | 000,016,752 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013/01/26 10:27:04 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013/01/26 10:27:04 | 000,696,870 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2013/01/26 10:27:04 | 000,652,148 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013/01/26 10:27:04 | 000,148,134 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2013/01/26 10:27:04 | 000,121,080 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013/01/26 10:21:55 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl [2013/01/26 10:21:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013/01/26 10:21:10 | 3104,722,944 | -HS- | M] () -- C:\hiberfil.sys [2013/01/26 02:03:56 | 001,405,658 | ---- | M] () -- C:\Users\Fränz\Desktop\tafeln-sbf-see.pdf [2013/01/26 02:03:49 | 000,212,374 | ---- | M] () -- C:\Users\Fränz\Desktop\praktische-pruefung-sportbootfuehrerschein-see-ab-mai-2012.pdf [2013/01/26 02:00:01 | 000,917,201 | ---- | M] () -- C:\Users\Fränz\Desktop\Fragenkatalog-See-Mai-2012.pdf [2013/01/26 01:13:10 | 000,156,160 | ---- | M] () -- C:\Users\Fränz\Desktop\Schallsignale_Schulung.pps [2013/01/26 01:13:07 | 000,316,416 | ---- | M] () -- C:\Users\Fränz\Desktop\Verkehrszeichen_Schulung.pps [2013/01/26 01:13:03 | 001,041,920 | ---- | M] () -- C:\Users\Fränz\Desktop\Praxis_des_Segelns_Schulung.pps [2013/01/26 01:12:44 | 001,432,064 | ---- | M] () -- C:\Users\Fränz\Desktop\Wegerecht_Schulung.pps [2013/01/26 00:14:50 | 006,819,143 | ---- | M] () -- C:\Users\Fränz\Desktop\VID-20130125-00012.3GP [2013/01/26 00:04:35 | 008,267,054 | ---- | M] () -- C:\Users\Fränz\Desktop\VID-20130125-00009.3GP [2013/01/25 20:32:12 | 000,044,635 | ---- | M] () -- C:\Users\Fränz\Desktop\BVG.de - Fahrplanauskunft.pdf [2013/01/25 04:58:55 | 000,000,173 | ---- | M] () -- C:\Users\Fränz\AppData\Local\msmathematics.qat.Fränz [2013/01/25 01:58:34 | 031,165,163 | ---- | M] () -- C:\Users\Fränz\Desktop\CByeByeMaxiUnofficaltrYmewarez.zip [2013/01/24 22:58:59 | 002,959,867 | ---- | M] () -- C:\Users\Fränz\Desktop\Vorlesung_LO_WS12_13_16102012_Kompatibilitaetsmodus_.pdf [2013/01/21 23:08:30 | 000,039,496 | ---- | M] () -- C:\Users\Fränz\Desktop\550052_522660267766295_205696153_n.jpg [2013/01/21 22:56:50 | 000,011,789 | ---- | M] () -- C:\Users\Fränz\Desktop\399405_10151093813300676_1861637810_n.jpg [2013/01/20 23:50:26 | 000,030,278 | ---- | M] () -- C:\Users\Fränz\Desktop\1Termine-Nielsen.pdf [2013/01/20 15:54:46 | 001,590,378 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2013/01/20 15:40:52 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2013/01/20 13:42:31 | 000,002,120 | ---- | M] () -- C:\Users\Public\Desktop\Citavi 3.lnk [2013/01/20 11:31:06 | 000,001,189 | ---- | M] () -- C:\Users\Public\Desktop\Norton PC Checkup 3.0.lnk [2013/01/18 19:53:49 | 273,720,374 | R--- | M] () -- C:\Users\Fränz\Desktop\tk_hv_2013_01_18.mp4 [2013/01/18 11:09:28 | 002,481,271 | ---- | M] () -- C:\Users\Fränz\Desktop\Get-Together WS 2012-2013.pdf [2013/01/17 21:12:13 | 000,365,847 | ---- | M] () -- C:\Users\Fränz\Desktop\Toolbox.pdf [2013/01/17 21:02:19 | 001,777,815 | ---- | M] () -- C:\Users\Fränz\Desktop\Master_Leitfaden_121010.pdf [2013/01/17 20:13:17 | 000,151,977 | ---- | M] () -- C:\Users\Fränz\Desktop\244047_10151351294554486_1227174146_o.jpg [2013/01/17 09:03:56 | 000,300,409 | ---- | M] () -- C:\Users\Fränz\Desktop\2013-01-17.pdf [2013/01/16 11:38:45 | 000,009,280 | ---- | M] () -- C:\Users\Fränz\Desktop\632_240x240_Front_Color-White.jpg [2013/01/16 11:38:35 | 000,408,389 | ---- | M] () -- C:\Users\Fränz\Desktop\MG_6081.jpg [2013/01/16 11:38:26 | 000,018,308 | ---- | M] () -- C:\Users\Fränz\Desktop\wanderlust-definition-dico.png [2013/01/16 11:20:35 | 000,178,579 | ---- | M] () -- C:\Users\Fränz\Desktop\Fernweh-a18283518.jpg [2013/01/15 19:59:21 | 000,060,443 | ---- | M] () -- C:\Users\Fränz\Desktop\Organization TK old.pdf [2013/01/15 19:57:33 | 000,871,395 | ---- | M] () -- C:\Users\Fränz\Desktop\Organization TK new.pdf [2013/01/15 19:55:25 | 000,882,851 | ---- | M] () -- C:\Users\Fränz\Desktop\Bild1.jpg [2013/01/15 17:37:04 | 000,032,336 | ---- | M] () -- C:\Users\Fränz\Desktop\321041_467821476614565_1565470527_n.jpg [2013/01/14 22:33:28 | 000,096,749 | ---- | M] () -- C:\Users\Fränz\Desktop\426786_542925929051829_1542651037_n.jpg [2013/01/14 17:10:36 | 001,355,015 | ---- | M] () -- C:\Users\Fränz\Desktop\Fotostrecke Flip-Chart.pdf [2013/01/14 11:09:37 | 000,114,487 | ---- | M] () -- C:\Users\Fränz\Desktop\Infoblätter für Coaches.pdf [2013/01/14 10:59:07 | 023,759,309 | ---- | M] () -- C:\Users\Fränz\Desktop\Fotostrecke Flip-Charts.rar [2013/01/13 12:06:16 | 106,203,887 | ---- | M] () -- C:\Users\Fränz\Desktop\Mic Do - Plenty Of L (Ama Edi) (2012).rar [2013/01/13 10:14:24 | 350,315,347 | ---- | M] () -- C:\Users\Fränz\Desktop\5141414108.Rmmstn-GrtstHts.zip [2013/01/11 22:04:25 | 046,114,786 | ---- | M] () -- C:\Users\Fränz\Desktop\Make It Count.avi [2013/01/10 19:03:59 | 000,043,938 | ---- | M] () -- C:\Users\Fränz\Desktop\734986_477331422304164_1239645383_n.jpg [2013/01/10 12:46:02 | 000,021,111 | ---- | M] () -- C:\Users\Fränz\Desktop\768_10200367504657345_1269863194_n.jpg [2013/01/09 23:08:40 | 000,006,104 | ---- | M] () -- C:\Users\Fränz\Desktop\218088_10200296573763848_1901334179_n.jpg [2013/01/09 23:07:49 | 000,023,882 | ---- | M] () -- C:\Users\Fränz\Desktop\148919_10151331107452332_40365430_n.jpg [2013/01/09 23:03:49 | 000,042,541 | ---- | M] () -- C:\Users\Fränz\Desktop\400075_411994568878146_957912623_n.jpg [2013/01/09 22:57:43 | 005,015,664 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013/01/09 00:47:28 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013/01/09 00:47:28 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013/01/08 15:06:37 | 000,052,623 | ---- | M] () -- C:\Users\Fränz\Desktop\Bestaetigung.pdf [2013/01/08 14:35:08 | 000,816,817 | ---- | M] () -- C:\Users\Fränz\Desktop\Protokoll_Vorstandsstrategie.pdf [2013/01/06 18:34:14 | 000,000,492 | ---- | M] () -- C:\Windows\wininit.ini [2013/01/06 09:25:16 | 000,002,102 | ---- | M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [2013/01/03 22:40:56 | 003,139,304 | ---- | M] () -- C:\Users\Fränz\Desktop\MS_Project_Tutorial.pdf [2013/01/03 21:56:01 | 000,044,006 | ---- | M] () -- C:\Users\Fränz\Desktop\Finanzreport_Nr.12_vom_31.12.2012740148.pdf [2013/01/03 21:19:22 | 000,025,306 | ---- | M] () -- C:\Users\Fränz\Desktop\ToDo for you.dotm [2013/01/03 17:04:18 | 000,025,285 | ---- | M] () -- C:\Users\Fränz\Documents\ToDo for you.dotm [2013/01/03 16:48:22 | 000,025,348 | ---- | M] () -- C:\Users\Fränz\Documents\ToDo for you.dotx [2013/01/02 23:22:39 | 000,025,525 | ---- | M] () -- C:\Users\Fränz\Desktop\418606_485733534811724_1437033175_n.jpg [2013/01/02 11:50:28 | 000,110,298 | ---- | M] () -- C:\Users\Fränz\Desktop\736011_504370986264197_1610935081_o.jpg [2012/12/31 17:43:55 | 000,029,964 | ---- | M] () -- C:\Users\Fränz\Desktop\b2-l_p_457378_2_frittenbudebildermitkatzevideoaudiolithbratze.jpg [2012/12/31 15:33:02 | 000,144,059 | ---- | M] () -- C:\Users\Fränz\Desktop\399286_510607585646210_1644454261_n.jpg [2012/12/30 23:15:58 | 000,038,450 | ---- | M] () -- C:\Users\Fränz\Desktop\534685_478544048856585_1245799438_n.jpg [2012/12/30 21:25:46 | 000,157,436 | ---- | M] () -- C:\Users\Fränz\Desktop\736363_526210054064014_461172559_o.jpg [2012/12/30 13:20:29 | 014,585,520 | ---- | M] () -- C:\Users\Fränz\Desktop\Jung von MattLimmat Pro Infirmis Kommen Sie näher.avi [2012/12/30 13:16:40 | 031,314,882 | ---- | M] () -- C:\Users\Fränz\Desktop\What if money was no object.avi [2012/12/29 20:48:21 | 000,029,156 | ---- | M] () -- C:\Users\Fränz\Desktop\531232_574480222569243_2097776549_n.jpg ========== Files Created - No Company Name ========== [2013/01/26 10:29:42 | 000,002,915 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.js [2013/01/26 10:29:42 | 000,000,159 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.reg [2013/01/26 10:29:42 | 000,000,067 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.bat [2013/01/26 10:29:41 | 095,023,320 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.pad [2013/01/26 02:03:56 | 001,405,658 | ---- | C] () -- C:\Users\Fränz\Desktop\tafeln-sbf-see.pdf [2013/01/26 02:03:49 | 000,212,374 | ---- | C] () -- C:\Users\Fränz\Desktop\praktische-pruefung-sportbootfuehrerschein-see-ab-mai-2012.pdf [2013/01/26 02:00:00 | 000,917,201 | ---- | C] () -- C:\Users\Fränz\Desktop\Fragenkatalog-See-Mai-2012.pdf [2013/01/26 01:13:10 | 000,156,160 | ---- | C] () -- C:\Users\Fränz\Desktop\Schallsignale_Schulung.pps [2013/01/26 01:13:07 | 000,316,416 | ---- | C] () -- C:\Users\Fränz\Desktop\Verkehrszeichen_Schulung.pps [2013/01/26 01:13:03 | 001,041,920 | ---- | C] () -- C:\Users\Fränz\Desktop\Praxis_des_Segelns_Schulung.pps [2013/01/26 01:12:44 | 001,432,064 | ---- | C] () -- C:\Users\Fränz\Desktop\Wegerecht_Schulung.pps [2013/01/26 00:14:49 | 006,819,143 | ---- | C] () -- C:\Users\Fränz\Desktop\VID-20130125-00012.3GP [2013/01/26 00:04:33 | 008,267,054 | ---- | C] () -- C:\Users\Fränz\Desktop\VID-20130125-00009.3GP [2013/01/25 20:32:09 | 000,044,635 | ---- | C] () -- C:\Users\Fränz\Desktop\BVG.de - Fahrplanauskunft.pdf [2013/01/25 01:51:25 | 031,165,163 | ---- | C] () -- C:\Users\Fränz\Desktop\CByeByeMaxiUnofficaltrYmewarez.zip [2013/01/24 22:58:56 | 002,959,867 | ---- | C] () -- C:\Users\Fränz\Desktop\Vorlesung_LO_WS12_13_16102012_Kompatibilitaetsmodus_.pdf [2013/01/21 23:08:29 | 000,039,496 | ---- | C] () -- C:\Users\Fränz\Desktop\550052_522660267766295_205696153_n.jpg [2013/01/21 22:56:48 | 000,011,789 | ---- | C] () -- C:\Users\Fränz\Desktop\399405_10151093813300676_1861637810_n.jpg [2013/01/20 23:50:25 | 000,030,278 | ---- | C] () -- C:\Users\Fränz\Desktop\1Termine-Nielsen.pdf [2013/01/20 15:40:52 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2013/01/20 13:42:31 | 000,002,120 | ---- | C] () -- C:\Users\Public\Desktop\Citavi 3.lnk [2013/01/20 11:31:06 | 000,001,189 | ---- | C] () -- C:\Users\Public\Desktop\Norton PC Checkup 3.0.lnk [2013/01/18 19:56:52 | 273,720,374 | R--- | C] () -- C:\Users\Fränz\Desktop\tk_hv_2013_01_18.mp4 [2013/01/18 11:08:44 | 002,481,271 | ---- | C] () -- C:\Users\Fränz\Desktop\Get-Together WS 2012-2013.pdf [2013/01/17 21:12:13 | 000,365,847 | ---- | C] () -- C:\Users\Fränz\Desktop\Toolbox.pdf [2013/01/17 21:02:18 | 001,777,815 | ---- | C] () -- C:\Users\Fränz\Desktop\Master_Leitfaden_121010.pdf [2013/01/17 20:13:16 | 000,151,977 | ---- | C] () -- C:\Users\Fränz\Desktop\244047_10151351294554486_1227174146_o.jpg [2013/01/17 09:03:52 | 000,300,409 | ---- | C] () -- C:\Users\Fränz\Desktop\2013-01-17.pdf [2013/01/16 11:38:45 | 000,009,280 | ---- | C] () -- C:\Users\Fränz\Desktop\632_240x240_Front_Color-White.jpg [2013/01/16 11:38:34 | 000,408,389 | ---- | C] () -- C:\Users\Fränz\Desktop\MG_6081.jpg [2013/01/16 11:38:25 | 000,018,308 | ---- | C] () -- C:\Users\Fränz\Desktop\wanderlust-definition-dico.png [2013/01/16 11:20:35 | 000,178,579 | ---- | C] () -- C:\Users\Fränz\Desktop\Fernweh-a18283518.jpg [2013/01/15 19:59:18 | 000,060,443 | ---- | C] () -- C:\Users\Fränz\Desktop\Organization TK old.pdf [2013/01/15 19:57:31 | 000,871,395 | ---- | C] () -- C:\Users\Fränz\Desktop\Organization TK new.pdf [2013/01/15 19:54:50 | 000,882,851 | ---- | C] () -- C:\Users\Fränz\Desktop\Bild1.jpg [2013/01/15 17:37:03 | 000,032,336 | ---- | C] () -- C:\Users\Fränz\Desktop\321041_467821476614565_1565470527_n.jpg [2013/01/14 22:33:28 | 000,096,749 | ---- | C] () -- C:\Users\Fränz\Desktop\426786_542925929051829_1542651037_n.jpg [2013/01/14 17:10:32 | 001,355,015 | ---- | C] () -- C:\Users\Fränz\Desktop\Fotostrecke Flip-Chart.pdf [2013/01/14 11:10:44 | 023,759,309 | ---- | C] () -- C:\Users\Fränz\Desktop\Fotostrecke Flip-Charts.rar [2013/01/14 11:09:36 | 000,114,487 | ---- | C] () -- C:\Users\Fränz\Desktop\Infoblätter für Coaches.pdf [2013/01/13 11:39:30 | 106,203,887 | ---- | C] () -- C:\Users\Fränz\Desktop\Mic Do - Plenty Of L (Ama Edi) (2012).rar [2013/01/13 10:09:46 | 350,315,347 | ---- | C] () -- C:\Users\Fränz\Desktop\5141414108.Rmmstn-GrtstHts.zip [2013/01/11 22:03:50 | 046,114,786 | ---- | C] () -- C:\Users\Fränz\Desktop\Make It Count.avi [2013/01/10 19:03:57 | 000,043,938 | ---- | C] () -- C:\Users\Fränz\Desktop\734986_477331422304164_1239645383_n.jpg [2013/01/10 12:46:01 | 000,021,111 | ---- | C] () -- C:\Users\Fränz\Desktop\768_10200367504657345_1269863194_n.jpg [2013/01/09 23:08:39 | 000,006,104 | ---- | C] () -- C:\Users\Fränz\Desktop\218088_10200296573763848_1901334179_n.jpg [2013/01/09 23:07:49 | 000,023,882 | ---- | C] () -- C:\Users\Fränz\Desktop\148919_10151331107452332_40365430_n.jpg [2013/01/09 23:03:45 | 000,042,541 | ---- | C] () -- C:\Users\Fränz\Desktop\400075_411994568878146_957912623_n.jpg [2013/01/09 12:11:35 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl [2013/01/08 15:06:33 | 000,052,623 | ---- | C] () -- C:\Users\Fränz\Desktop\Bestaetigung.pdf [2013/01/08 14:35:01 | 000,816,817 | ---- | C] () -- C:\Users\Fränz\Desktop\Protokoll_Vorstandsstrategie.pdf [2013/01/06 09:25:16 | 000,002,102 | ---- | C] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [2013/01/03 22:40:55 | 003,139,304 | ---- | C] () -- C:\Users\Fränz\Desktop\MS_Project_Tutorial.pdf [2013/01/03 21:56:00 | 000,044,006 | ---- | C] () -- C:\Users\Fränz\Desktop\Finanzreport_Nr.12_vom_31.12.2012740148.pdf [2013/01/03 18:53:14 | 000,025,306 | ---- | C] () -- C:\Users\Fränz\Desktop\ToDo for you.dotm [2013/01/03 16:51:04 | 000,025,285 | ---- | C] () -- C:\Users\Fränz\Documents\ToDo for you.dotm [2013/01/03 16:48:22 | 000,025,348 | ---- | C] () -- C:\Users\Fränz\Documents\ToDo for you.dotx [2013/01/02 23:22:38 | 000,025,525 | ---- | C] () -- C:\Users\Fränz\Desktop\418606_485733534811724_1437033175_n.jpg [2013/01/02 11:50:27 | 000,110,298 | ---- | C] () -- C:\Users\Fränz\Desktop\736011_504370986264197_1610935081_o.jpg [2012/12/31 17:57:26 | 001,494,054 | ---- | C] () -- C:\Users\Fränz\Desktop\Desktop-Hintergrund.bmp [2012/12/31 17:43:54 | 000,029,964 | ---- | C] () -- C:\Users\Fränz\Desktop\b2-l_p_457378_2_frittenbudebildermitkatzevideoaudiolithbratze.jpg [2012/12/31 15:33:01 | 000,144,059 | ---- | C] () -- C:\Users\Fränz\Desktop\399286_510607585646210_1644454261_n.jpg [2012/12/30 23:15:57 | 000,038,450 | ---- | C] () -- C:\Users\Fränz\Desktop\534685_478544048856585_1245799438_n.jpg [2012/12/30 21:25:45 | 000,157,436 | ---- | C] () -- C:\Users\Fränz\Desktop\736363_526210054064014_461172559_o.jpg [2012/12/30 13:20:18 | 014,585,520 | ---- | C] () -- C:\Users\Fränz\Desktop\Jung von MattLimmat Pro Infirmis Kommen Sie näher.avi [2012/12/30 13:16:12 | 031,314,882 | ---- | C] () -- C:\Users\Fränz\Desktop\What if money was no object.avi [2012/12/29 20:48:20 | 000,029,156 | ---- | C] () -- C:\Users\Fränz\Desktop\531232_574480222569243_2097776549_n.jpg [2012/12/18 10:06:10 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2012/12/18 10:06:06 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll [2012/12/18 10:06:06 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll [2012/12/18 10:06:06 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll [2012/12/18 10:06:06 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll [2012/12/08 22:15:00 | 000,000,173 | ---- | C] () -- C:\Users\Fränz\AppData\Local\msmathematics.qat.Fränz [2012/11/29 21:23:09 | 000,007,605 | ---- | C] () -- C:\Users\Fränz\AppData\Local\Resmon.ResmonCfg [2012/11/25 15:46:48 | 000,000,076 | ---- | C] () -- C:\Users\Fränz\AppData\Roaming\AVSDVDPlayer.m3u [2012/11/25 13:27:02 | 000,524,288 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2012/11/25 13:27:02 | 000,139,264 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2012/11/16 21:33:41 | 000,233,464 | ---- | C] () -- C:\Windows\hpoins47.dat [2012/11/10 13:41:38 | 000,000,492 | ---- | C] () -- C:\Windows\wininit.ini [2012/11/06 23:29:02 | 001,590,378 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012/04/11 12:16:39 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin [2012/04/11 12:16:38 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin [2012/04/11 12:16:38 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll [2012/04/11 12:16:37 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin [2012/04/11 12:16:36 | 013,906,944 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll ========== ZeroAccess Check ========== [2009/07/14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012/06/09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] < End of report > Geändert von Honkyy (26.01.2013 um 14:52 Uhr) |
| Themen zu GVU Trojaner WIN 7 |
| acer, amd, antivir, appdata, bingbar, blue, bytes, datei, dateien, ergebnis, free, home, infizierte, internet, java, microsoft, msn deutschland, namen, nvpciflt.sys, plug-in, programm, registry, roaming, suche, trojaner, warnung, wildtangent games, win, windows, wscript.exe |
Baum-Darstellung