| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Delta-Search hat mich leider auch erwischtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
08.04.2013, 13:21
| #1 |
| |  Delta-Search hat mich leider auch erwischt Hallo zusammen, Nachdem ich gestern ein Programm für Sport-Streaming (LSHunter TV) installiert habe, wurde Google Chrome ohne Vorwarnung geschlossen und Avira hat dann Alarm geschlagen. Nachdem ich Google Chrome neugestartet habe, habe ich dann festgestellt, dass die Einstellungen und die Startseite verändert wurden. Daraufhin habe ich folgendes gemacht: - LSHunter TV und Delta-Search über Systemsteuerung deinstalliert. - Mit Spyware Terminator habe ich einen Scann gemacht und es wurde laut Bericht 52 infizierte Stellen gefunden, die dann das Programm (nach Betätigung des Entfernen-Buttons) gelöscht hat. -Alle im Google Chrome installierte Suchmaschinen (außer google) entfernt. -Google-Chrome-Startseite geändert -adw22cleaner gestartet und den Löschen-Button geklickt (diesen Vorgang habe ich mehrmals wiederholt) Heute habe ich zum ersten Mal nach der Infizierung Internet Explorer und FireFox gestartet. Beim Start von Internet Explorer wurde automatisch das Fenster "Addons-Ons Verwalten" mitgestartet. Delta-Search war aber nicht vorhanden In Firefox unter Erweiterungen habe ich ein Programm (den Namen habe ich vergessen, es war irgendwas mit SportHD TV) gefunden, was ich dann entfernt habe. -mit Malwarebytes habe ich einen vollständigen Suchlauf gestartet, es wurde aber keine infizierte Objekte gefunden. Ich würde mich sehr freuen, wenn ihr mir weiterhelfen könnt, rauszufinden ob der PC noch infiziert ist. Vielen Dank im Voraus |
|
08.04.2013, 17:34
| #2 | |
| /// TB-Ausbilder   | Delta-Search hat mich leider auch erwischt Hi,
__________________Zitat:
__________________ |
|
08.04.2013, 18:53
| #3 |
| | Delta-Search hat mich leider auch erwischt Hallo und vielen Dank erstmal für Ihre Antwort.
__________________Hier die Ereignisse als Avira Alarm geschlagen hat Code:
ATTFilter In der Datei 'C:\Users\xxxxx\AppData\Local\Temp\4079F31D\up.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/Yontoo.Gen' [adware] gefunden.
Ausgeführte Aktion: Zugriff verweigern
Code:
ATTFilter In der Datei 'C:\Users\xxxxx\AppData\Local\Temp\4079F31D\YontooSetup.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/Yontoo.Gen' [adware] gefunden.
Ausgeführte Aktion: Übergeben an Scanner
Code:
ATTFilter In der Datei 'C:\Users\xxxxx\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\32J11YXU\yontoosetup[1].exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/Yontoo.Gen' [adware] gefunden.
Ausgeführte Aktion: Übergeben an Scanner
Code:
ATTFilter In der Datei 'C:\Users\xxxxx\AppData\Local\Temp\4079F31D\YontooSetup.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/Yontoo.Gen' [adware] gefunden.
Ausgeführte Aktion: Zugriff verweigern
Code:
ATTFilter Die Datei 'C:\Users\xxxxx\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\32J11YXU\yontoosetup[1].exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Yontoo.Gen' [adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '561908aa.qua' verschoben!
Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Sonntag, 7. April 2013 18:21
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Free Antivirus
Seriennummer : xxxxxxxxxxxxxxxxxx
Plattform : Windows 7 Home Premium
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : SYSTEM
Computername : ASUS-NB
Versionsinformationen:
BUILD.DAT : 13.0.0.3499 49286 Bytes 19.03.2013 16:29:00
AVSCAN.EXE : 13.6.0.986 639712 Bytes 27.03.2013 21:34:25
AVSCANRC.DLL : 13.4.0.360 64800 Bytes 02.02.2013 14:06:59
LUKE.DLL : 13.6.0.902 67808 Bytes 27.03.2013 21:34:41
AVSCPLR.DLL : 13.6.0.986 94944 Bytes 20.03.2013 09:02:04
AVREG.DLL : 13.6.0.940 250592 Bytes 20.03.2013 09:02:04
avlode.dll : 13.6.2.940 434912 Bytes 27.03.2013 21:34:22
avlode.rdf : 13.0.0.46 15591 Bytes 28.03.2013 15:10:37
VBASE000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 12:54:02
VBASE001.VDF : 7.11.70.1 2048 Bytes 04.04.2013 12:54:02
VBASE002.VDF : 7.11.70.2 2048 Bytes 04.04.2013 12:54:02
VBASE003.VDF : 7.11.70.3 2048 Bytes 04.04.2013 12:54:02
VBASE004.VDF : 7.11.70.4 2048 Bytes 04.04.2013 12:54:02
VBASE005.VDF : 7.11.70.5 2048 Bytes 04.04.2013 12:54:03
VBASE006.VDF : 7.11.70.6 2048 Bytes 04.04.2013 12:54:03
VBASE007.VDF : 7.11.70.7 2048 Bytes 04.04.2013 12:54:03
VBASE008.VDF : 7.11.70.8 2048 Bytes 04.04.2013 12:54:03
VBASE009.VDF : 7.11.70.9 2048 Bytes 04.04.2013 12:54:03
VBASE010.VDF : 7.11.70.10 2048 Bytes 04.04.2013 12:54:03
VBASE011.VDF : 7.11.70.11 2048 Bytes 04.04.2013 12:54:03
VBASE012.VDF : 7.11.70.12 2048 Bytes 04.04.2013 12:54:03
VBASE013.VDF : 7.11.70.13 2048 Bytes 04.04.2013 12:54:04
VBASE014.VDF : 7.11.70.103 136192 Bytes 05.04.2013 13:13:38
VBASE015.VDF : 7.11.70.183 183808 Bytes 06.04.2013 15:05:57
VBASE016.VDF : 7.11.70.184 2048 Bytes 06.04.2013 15:05:58
VBASE017.VDF : 7.11.70.185 2048 Bytes 06.04.2013 15:05:58
VBASE018.VDF : 7.11.70.186 2048 Bytes 06.04.2013 15:05:58
VBASE019.VDF : 7.11.70.187 2048 Bytes 06.04.2013 15:05:59
VBASE020.VDF : 7.11.70.188 2048 Bytes 06.04.2013 15:05:59
VBASE021.VDF : 7.11.70.189 2048 Bytes 06.04.2013 15:05:59
VBASE022.VDF : 7.11.70.190 2048 Bytes 06.04.2013 15:05:59
VBASE023.VDF : 7.11.70.191 2048 Bytes 06.04.2013 15:05:59
VBASE024.VDF : 7.11.70.192 2048 Bytes 06.04.2013 15:06:00
VBASE025.VDF : 7.11.70.193 2048 Bytes 06.04.2013 15:06:01
VBASE026.VDF : 7.11.70.194 2048 Bytes 06.04.2013 15:06:01
VBASE027.VDF : 7.11.70.195 2048 Bytes 06.04.2013 15:06:01
VBASE028.VDF : 7.11.70.196 2048 Bytes 06.04.2013 15:06:01
VBASE029.VDF : 7.11.70.197 2048 Bytes 06.04.2013 15:06:01
VBASE030.VDF : 7.11.70.198 2048 Bytes 06.04.2013 15:06:01
VBASE031.VDF : 7.11.70.250 101888 Bytes 07.04.2013 16:02:01
Engineversion : 8.2.12.24
AEVDF.DLL : 8.1.2.10 102772 Bytes 02.02.2013 14:06:31
AESCRIPT.DLL : 8.1.4.104 475517 Bytes 04.04.2013 19:05:12
AESCN.DLL : 8.1.10.4 131446 Bytes 26.03.2013 13:59:48
AESBX.DLL : 8.2.5.12 606578 Bytes 02.02.2013 14:06:31
AERDL.DLL : 8.2.0.88 643444 Bytes 02.02.2013 14:06:30
AEPACK.DLL : 8.3.2.6 827767 Bytes 28.03.2013 15:10:37
AEOFFICE.DLL : 8.1.2.56 205180 Bytes 09.03.2013 09:26:48
AEHEUR.DLL : 8.1.4.278 5828985 Bytes 04.04.2013 19:05:11
AEHELP.DLL : 8.1.25.2 258423 Bytes 02.02.2013 14:06:24
AEGEN.DLL : 8.1.7.2 442741 Bytes 26.03.2013 13:59:47
AEEXP.DLL : 8.4.0.16 192886 Bytes 04.04.2013 19:05:12
AEEMU.DLL : 8.1.3.2 393587 Bytes 02.02.2013 14:06:23
AECORE.DLL : 8.1.31.2 201080 Bytes 19.02.2013 18:55:43
AEBB.DLL : 8.1.1.4 53619 Bytes 02.02.2013 14:06:22
AVWINLL.DLL : 13.6.0.480 26480 Bytes 13.02.2013 10:17:19
AVPREF.DLL : 13.6.0.480 51056 Bytes 13.02.2013 10:17:27
AVREP.DLL : 13.6.0.480 178544 Bytes 08.02.2013 18:15:26
AVARKT.DLL : 13.6.0.902 260832 Bytes 27.03.2013 21:34:18
AVEVTLOG.DLL : 13.6.0.902 167648 Bytes 27.03.2013 21:34:21
SQLITE3.DLL : 3.7.0.1 397088 Bytes 02.02.2013 14:07:36
AVSMTP.DLL : 13.6.0.480 62832 Bytes 13.02.2013 10:17:30
NETNT.DLL : 13.6.0.480 16240 Bytes 13.02.2013 10:18:02
RCIMAGE.DLL : 13.4.0.360 4780832 Bytes 02.02.2013 14:04:16
RCTEXT.DLL : 13.6.0.976 69344 Bytes 27.03.2013 21:32:51
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: AVGuardAsyncScan
Konfigurationsdatei...................: C:\ProgramData\Avira\AntiVir Desktop\TEMP\AVGUARD_5161974b\guard_slideup.avp
Protokollierung.......................: standard
Primäre Aktion........................: reparieren
Sekundäre Aktion......................: quarantäne
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: aus
Durchsuche aktive Programme...........: ein
Durchsuche Registrierung..............: aus
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Datei Suchmodus.......................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: vollständig
Beginn des Suchlaufs: Sonntag, 7. April 2013 18:21
Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '99' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '122' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '83' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '163' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'FBAgent.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'ASLDRSrv.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'smartlogon.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'GFNEXSrv.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '85' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '195' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'ACMON.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'sensorsrv.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'ALU.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'ControlDeckStartUp.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'wcourier.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'BatteryLife.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'aspg.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'GoogleCrashHandler.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'ACEngSvr.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'GoogleCrashHandler64.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'HControl.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'IGDCTRL.EXE' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMS.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'reinstall_svc.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'sidebar.exe' - '81' Modul(e) wurden durchsucht
Durchsuche Prozess 'ETDCtrl.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'AmIcoSinglun64.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'netsession_win.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'freecall.exe' - '109' Modul(e) wurden durchsucht
Durchsuche Prozess 'nusb3mon.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'HControlUser.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'SRSPremiumPanel_64.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'ATKOSD2.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'DMedia.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '95' Modul(e) wurden durchsucht
Durchsuche Prozess 'Athan.exe' - '101' Modul(e) wurden durchsucht
Durchsuche Prozess 'AdobeARM.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'StCenter.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'CNMNSUT.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'pdf24.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'netsession_win.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'AsScrPro.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVCpl64.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'ATKOSD.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'WDC.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'TurboBoost.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'iPodService.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '71' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '119' Modul(e) wurden durchsucht
Durchsuche Prozess 'UNS.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'MOM.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCC.exe' - '222' Modul(e) wurden durchsucht
Durchsuche Prozess 'AAM Updates Notifier.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'IELowutil.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'BrowserProtect.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'schtasks.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '14' Modul(e) wurden durchsucht
Durchsuche Prozess 'BrowserProtect.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '111' Modul(e) wurden durchsucht
Durchsuche Prozess 'MpCmdRun.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '112' Modul(e) wurden durchsucht
Durchsuche Prozess 'DllHost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\Users\xxxxx\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\32J11YXU\yontoosetup[1].exe'
C:\Users\xxxxx\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\32J11YXU\yontoosetup[1].exe
[FUND] Enthält Erkennungsmuster der Adware ADWARE/Yontoo.Gen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '561908aa.qua' verschoben!
Ende des Suchlaufs: Sonntag, 7. April 2013 18:21
Benötigte Zeit: 00:12 Minute(n)
Der Suchlauf wurde vollständig durchgeführt.
0 Verzeichnisse wurden überprüft
1150 Dateien wurden geprüft
1 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
1 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
1149 Dateien ohne Befall
8 Archive wurden durchsucht
0 Warnungen
1 Hinweise
Code:
ATTFilter ------
Logfile von Spyware Terminator (db:)
------
Scann Zeit: 07.04.2013 19:06:22 länge: 0:42:51
Plattform: W7 (6.1.0.7601)
Benutzer: Admin
Scann typ: Umfangreicher Scann
Gescannte Objekte: 229907 (Kritisch: 52)
------
laufende Prozesse
------
smss.exe [Microsoft Corporation] : %SYSDIR%\smss.exe
csrss.exe [Microsoft Corporation] : %SYSDIR%\csrss.exe
wininit.exe [Microsoft Corporation] : %SYSDIR%\wininit.exe
csrss.exe [Microsoft Corporation] : %SYSDIR%\csrss.exe
services.exe [Microsoft Corporation] : %SYSDIR%\services.exe
lsass.exe [Microsoft Corporation] : %SYSDIR%\lsass.exe
lsm.exe [Microsoft Corporation] : %SYSDIR%\lsm.exe
winlogon.exe [Microsoft Corporation] : %SYSDIR%\winlogon.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
atiesrxx.exe [AMD] : %SYSDIR%\atiesrxx.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
audiodg.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
atieclxx.exe [AMD] : %SYSDIR%\atieclxx.exe
FBAgent.exe [ASUSTeK Computer Inc.] : %SYSDIR%\FBAgent.exe
AsLdrSrv.exe [ASUS] : %PROGRAMFILES32%\ASUS\ATK Hotkey\AsLdrSrv.exe
smartlogon.exe [ASUS] : %PROGRAMFILES32%\ASUS\SmartLogon\smartlogon.exe
GFNEXSrv.exe : %PROGRAMFILES%\ATKGFNEX\GFNEXSrv.exe
spoolsv.exe [Microsoft Corporation] : %SYSDIR%\spoolsv.exe
taskhost.exe [Microsoft Corporation] : %SYSDIR%\taskhost.exe
dwm.exe [Microsoft Corporation] : %SYSDIR%\dwm.exe
sched.exe [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\sched.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
explorer.exe [Microsoft Corporation] : %WINDIR%\explorer.exe
avguard.exe [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\avguard.exe
taskeng.exe [Microsoft Corporation] : %SYSDIR%\taskeng.exe
AppleMobileDeviceService.exe [Apple Inc.] : %COMMONFILES32%\Apple\Mobile Device Support\AppleMobileDeviceService.exe
ALU.exe : %PROGRAMFILES32%\ASUS\ASUS Live Update\ALU.exe
ACMON.exe [ATK] : %PROGRAMFILES%\ASUS\Splendid\ACMON.exe
wcourier.exe : %PROGRAMFILES32%\ASUS\Wireless Console 3\wcourier.exe
sensorsrv.exe [ASUS] : %PROGRAMFILES32%\ASUS\SmartLogon\sensorsrv.exe
BatteryLife.exe [ATK] : %SystemDiskRoot%\Program Files\P4G\BatteryLife.exe
ASPG.exe [ASUS] : %PROGRAMFILES%\ASUS\ASUS CopyProtect\ASPG.exe
ControlDeckStartUp.exe : %PROGRAMFILES32%\ASUS\ControlDeck\ControlDeckStartUp.exe
ACEngSvr.exe [ASUSTeK] : %SYSDIR32%\ACEngSvr.exe
GoogleCrashHandler.exe [Google Inc.] : %PROGRAMFILES32%\Google\Update\1.3.21.135\GoogleCrashHandler.exe
GoogleCrashHandler64.exe [Google Inc.] : %PROGRAMFILES%\Google\Update\1.3.21.135\GoogleCrashHandler64.exe
HControl.exe [ASUS] : %PROGRAMFILES32%\ASUS\ATK Hotkey\HControl.exe
mDNSResponder.exe [Apple Inc.] : %SystemDiskRoot%\Program Files\Bonjour\mDNSResponder.exe
schtasks.exe [Microsoft Corporation] : %SYSDIR32%\schtasks.exe
conhost.exe [Microsoft Corporation] : %SYSDIR%\conhost.exe
IGDCTRL.EXE [AVM Berlin] : %SystemDiskRoot%\Program Files\FRITZ!DSL\IGDCTRL.EXE
taskeng.exe [Microsoft Corporation] : %SYSDIR%\taskeng.exe
LMS.exe [Intel Corporation] : %PROGRAMFILES32%\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
reinstall_svc.exe : %PROGRAMFILES32%\Acronis\DiskDirector\OSS\reinstall_svc.exe
sidebar.exe [Microsoft Corporation] : %SystemDiskRoot%\Program Files\Windows Sidebar\sidebar.exe
ETDCtrl.exe [ELAN Microelectronic Corp.] : %SystemDiskRoot%\Program Files\Elantech\ETDCtrl.exe
AmIcoSinglun64.exe [AlcorMicro Co., Ltd.] : %PROGRAMFILES%\AmIcoSingLun\AmIcoSinglun64.exe
netsession_win.exe [Akamai Technologies, Inc.] : %USERPROFILE%\AppData\Local\Akamai\netsession_win.exe
freecall.exe [FreeCall] : %PROGRAMFILES32%\FreeCall.com\FreeCall\freecall.exe
SRSPremiumPanel_64.exe [SRS Labs, Inc.] : %SystemDiskRoot%\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
nusb3mon.exe [NEC Electronics Corporation] : %PROGRAMFILES32%\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
HControlUser.exe [ASUS] : %PROGRAMFILES32%\ASUS\ATK Hotkey\HControlUser.exe
ATKOSD2.exe [ASUS] : %PROGRAMFILES32%\ASUS\ATKOSD2\ATKOSD2.exe
DMedia.exe [ASUS] : %PROGRAMFILES32%\ASUS\ATK Media\DMedia.exe
avgnt.exe [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\avgnt.exe
Athan.exe [www.IslamicFinder.org] : %PROGRAMFILES32%\Athan\Athan.exe
AdobeARM.exe [Adobe Systems Incorporated] : %COMMONFILES32%\Adobe\ARM\1.0\AdobeARM.exe
netsession_win.exe [Akamai Technologies, Inc.] : %USERPROFILE%\AppData\Local\Akamai\netsession_win.exe
CNMNSUT.exe [CANON INC.] : %PROGRAMFILES32%\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
pdf24.exe [Geek Software GmbH] : %PROGRAMFILES32%\PDF24\pdf24.exe
iTunesHelper.exe [Apple Inc.] : %PROGRAMFILES%\iTunes\iTunesHelper.exe
StCenter.exe [AVM Berlin] : %SystemDiskRoot%\Program Files\FRITZ!DSL\StCenter.exe
jusched.exe [Sun Microsystems, Inc.] : %COMMONFILES32%\Java\Java Update\jusched.exe
WmiPrvSE.exe [Microsoft Corporation] : %SYSDIR%\wbem\WmiPrvSE.exe
ATKOSD.exe [ASUS] : %PROGRAMFILES32%\ASUS\ATK Hotkey\ATKOSD.exe
WDC.exe [ASUS] : %PROGRAMFILES32%\ASUS\ATK Hotkey\WDC.exe
avshadow.exe [Avira Operations GmbH & Co. KG] : %PROGRAMFILES%\Avira\AntiVir Desktop\avshadow.exe
iPodService.exe [Apple Inc.] : %SystemDiskRoot%\Program Files\iPod\bin\iPodService.exe
AsScrPro.exe [ASUS] : %WINDIR%\AsScrPro.exe
SearchIndexer.exe [Microsoft Corporation] : %SYSDIR%\SearchIndexer.exe
RAVCpl64.exe [Realtek Semiconductor] : %SystemDiskRoot%\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
TurboBoost.exe [Intel(R) Corporation] : %SystemDiskRoot%\Program Files\Intel\TurboBoost\TurboBoost.exe
wmpnetwk.exe [Microsoft Corporation] : %SystemDiskRoot%\Program Files\Windows Media Player\wmpnetwk.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
WUDFHost.exe [Microsoft Corporation] : %SYSDIR%\WUDFHost.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
UNS.exe [Intel Corporation] : %PROGRAMFILES32%\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
svchost.exe [Microsoft Corporation] : %SYSDIR%\svchost.exe
MOM.exe [Advanced Micro Devices Inc.] : %PROGRAMFILES%\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
CCC.exe [ATI Technologies Inc.] : %PROGRAMFILES%\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
SearchProtocolHost.exe [Microsoft Corporation] : %SYSDIR%\SearchProtocolHost.exe
chrome.exe [Google Inc.] : %PROGRAMFILES32%\Google\Chrome\Application\chrome.exe
st_rsser64.exe [Crawler.com] : %PROGRAMFILES%\Spyware Terminator\st_rsser64.exe
SpywareTerminatorUpdate.exe [Crawler.com] : %PROGRAMFILES32%\Spyware Terminator\SpywareTerminatorUpdate.exe
SpywareTerminatorShield.exe [Crawler.com] : %PROGRAMFILES32%\Spyware Terminator\SpywareTerminatorShield.exe
SpywareTerminator.exe [Crawler.com] : %PROGRAMFILES32%\Spyware Terminator\SpywareTerminator.exe
SearchProtocolHost.exe [Microsoft Corporation] : %SYSDIR%\SearchProtocolHost.exe
SearchFilterHost.exe [Microsoft Corporation] : %SYSDIR%\SearchFilterHost.exe
------
Laufende Services und Treiber
------
ACPI [Microsoft Corporation] : %SYSDIR%\drivers\acpi.sys
AeLookupSvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
AFBAgent [ASUSTeK Computer Inc.] : %SYSDIR%\FBAgent.exe
AFD [Microsoft Corporation] : %SYSDIR%\drivers\afd.sys
AMD External Events Utility [AMD] : %SYSDIR%\atiesrxx.exe
amdkmdag [Advanced Micro Devices, Inc.] : %SYSDIR%\drivers\atikmdag.sys
amdkmdap [Advanced Micro Devices, Inc.] : %SYSDIR%\drivers\atikmpag.sys
amdxata [Advanced Micro Devices] : %SYSDIR%\drivers\amdxata.sys
AmUStor [Alcor Micro, Corp.] : %SYSDIR%\drivers\AmUStor.sys
AntiVirSchedulerService [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\sched.exe
AntiVirService [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\avguard.exe
Appinfo [Microsoft Corporation] : %SYSDIR%\svchost.exe
Apple Mobile Device [Apple Inc.] : %COMMONFILES32%\Apple\Mobile Device Support\AppleMobileDeviceService.exe
ASLDRService [ASUS] : %PROGRAMFILES32%\ASUS\ATK Hotkey\AsLdrSrv.exe
ASMMAP64 : %SystemDiskRoot%\Program Files\ATKGFNEX\ASMMAP64.sys
AsyncMac [Microsoft Corporation] : %SYSDIR%\drivers\asyncmac.sys
atapi [Microsoft Corporation] : %SYSDIR%\drivers\atapi.sys
athr [Atheros Communications, Inc.] : %SYSDIR%\drivers\athrx.sys
AtiHDAudioService [Advanced Micro Devices] : %SYSDIR%\drivers\AtihdW76.sys
ATKGFNEXSrv : %PROGRAMFILES%\ATKGFNEX\GFNEXSrv.exe
AudioEndpointBuilder [Microsoft Corporation] : %SYSDIR%\svchost.exe
AudioSrv [Microsoft Corporation] : %SYSDIR%\svchost.exe
avgntflt [Avira Operations GmbH & Co. KG] : %SYSDIR%\drivers\avgntflt.sys
avipbb [Avira Operations GmbH & Co. KG] : %SYSDIR%\drivers\avipbb.sys
avkmgr [Avira Operations GmbH & Co. KG] : %SYSDIR%\drivers\avkmgr.sys
BFE [Microsoft Corporation] : %SYSDIR%\svchost.exe
BITS [Microsoft Corporation] : %SYSDIR%\svchost.exe
blbdrive [Microsoft Corporation] : %SYSDIR%\drivers\blbdrive.sys
Bonjour Service [Apple Inc.] : %SystemDiskRoot%\Program Files\Bonjour\mDNSResponder.exe
bowser [Microsoft Corporation] : %SYSDIR%\drivers\bowser.sys
Browser [Microsoft Corporation] : %SYSDIR%\svchost.exe
cdrom [Microsoft Corporation] : %SYSDIR%\drivers\cdrom.sys
CLFS [Microsoft Corporation] : %SYSDIR%\clfs.sys
CmBatt [Microsoft Corporation] : %SYSDIR%\drivers\CmBatt.sys
CNG [Microsoft Corporation] : %SYSDIR%\drivers\cng.sys
Compbatt [Microsoft Corporation] : %SYSDIR%\drivers\compbatt.sys
CompositeBus [Microsoft Corporation] : %SYSDIR%\drivers\CompositeBus.sys
CryptSvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
DcomLaunch [Microsoft Corporation] : %SYSDIR%\svchost.exe
DfsC [Microsoft Corporation] : %SYSDIR%\drivers\dfsc.sys
Dhcp [Microsoft Corporation] : %SYSDIR%\svchost.exe
discache [Microsoft Corporation] : %SYSDIR%\drivers\discache.sys
Disk [Microsoft Corporation] : %SYSDIR%\drivers\disk.sys
Dnscache [Microsoft Corporation] : %SYSDIR%\svchost.exe
DPS [Microsoft Corporation] : %SYSDIR%\svchost.exe
dtsoftbus01 [DT Soft Ltd] : %SYSDIR%\drivers\dtsoftbus01.sys
DXGKrnl [Microsoft Corporation] : %SYSDIR%\drivers\dxgkrnl.sys
EapHost [Microsoft Corporation] : %SYSDIR%\svchost.exe
ETD [ELAN Microelectronic Corp.] : %SYSDIR%\drivers\ETD.sys
eventlog [Microsoft Corporation] : %SYSDIR%\svchost.exe
EventSystem [Microsoft Corporation] : %SYSDIR%\svchost.exe
fdPHost [Microsoft Corporation] : %SYSDIR%\svchost.exe
FDResPub [Microsoft Corporation] : %SYSDIR%\svchost.exe
FileInfo [Microsoft Corporation] : %SYSDIR%\drivers\fileinfo.sys
FltMgr [Microsoft Corporation] : %SYSDIR%\drivers\fltMgr.sys
FontCache [Microsoft Corporation] : %SYSDIR%\svchost.exe
fvevol [Microsoft Corporation] : %SYSDIR%\drivers\fvevol.sys
GEARAspiWDM [GEAR Software Inc.] : %SYSDIR%\drivers\GEARAspiWDM.sys
gpsvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
HDAudBus [Microsoft Corporation] : %SYSDIR%\drivers\hdaudbus.sys
HECIx64 [Intel Corporation] : %SYSDIR%\drivers\HECIx64.sys
HomeGroupListener [Microsoft Corporation] : %SYSDIR%\svchost.exe
HomeGroupProvider [Microsoft Corporation] : %SYSDIR%\svchost.exe
HTTP [Microsoft Corporation] : %SYSDIR%\drivers\http.sys
hwpolicy [Microsoft Corporation] : %SYSDIR%\drivers\hwpolicy.sys
i8042prt [Microsoft Corporation] : %SYSDIR%\drivers\i8042prt.sys
iaStor [Intel Corporation] : %SYSDIR%\drivers\iaStor.sys
IGDCTRL [AVM Berlin] : %SystemDiskRoot%\Program Files\FRITZ!DSL\IGDCTRL.EXE
IKEEXT [Microsoft Corporation] : %SYSDIR%\svchost.exe
Impcd [Intel Corporation] : %SYSDIR%\drivers\Impcd.sys
IntcAzAudAddService [Realtek Semiconductor Corp.] : %SYSDIR%\drivers\RTKVHD64.sys
intelppm [Microsoft Corporation] : %SYSDIR%\drivers\intelppm.sys
iphlpsvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
iPod Service [Apple Inc.] : %SystemDiskRoot%\Program Files\iPod\bin\iPodService.exe
kbdclass [Microsoft Corporation] : %SYSDIR%\drivers\kbdclass.sys
kbfiltr [ ] : %SYSDIR%\drivers\kbfiltr.sys
KeyIso [Microsoft Corporation] : %SYSDIR%\lsass.exe
KSecDD [Microsoft Corporation] : %SYSDIR%\drivers\ksecdd.sys
KSecPkg [Microsoft Corporation] : %SYSDIR%\drivers\ksecpkg.sys
ksthunk [Microsoft Corporation] : %SYSDIR%\drivers\ksthunk.sys
L1C [Atheros Communications, Inc.] : %SYSDIR%\drivers\L1C62x64.sys
LanmanServer [Microsoft Corporation] : %SYSDIR%\svchost.exe
LanmanWorkstation [Microsoft Corporation] : %SYSDIR%\svchost.exe
lltdio [Microsoft Corporation] : %SYSDIR%\drivers\lltdio.sys
lmhosts [Microsoft Corporation] : %SYSDIR%\svchost.exe
LMS [Intel Corporation] : %PROGRAMFILES32%\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
luafv [Microsoft Corporation] : %SYSDIR%\drivers\luafv.sys
lullaby [Windows (R) Win 7 DDK provider] : %SYSDIR%\drivers\lullaby.sys
MMCSS [Microsoft Corporation] : %SYSDIR%\svchost.exe
monitor [Microsoft Corporation] : %SYSDIR%\drivers\monitor.sys
mouclass [Microsoft Corporation] : %SYSDIR%\drivers\mouclass.sys
mountmgr [Microsoft Corporation] : %SYSDIR%\drivers\mountmgr.sys
mpsdrv [Microsoft Corporation] : %SYSDIR%\drivers\mpsdrv.sys
MpsSvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
mrxsmb [Microsoft Corporation] : %SYSDIR%\drivers\mrxsmb.sys
mrxsmb10 [Microsoft Corporation] : %SYSDIR%\drivers\mrxsmb10.sys
mrxsmb20 [Microsoft Corporation] : %SYSDIR%\drivers\mrxsmb20.sys
msahci [Microsoft Corporation] : %SYSDIR%\drivers\msahci.sys
msisadrv [Microsoft Corporation] : %SYSDIR%\drivers\msisadrv.sys
mssmbios [Microsoft Corporation] : %SYSDIR%\drivers\mssmbios.sys
MTsensor [ASUS] : %SYSDIR%\drivers\ATK64AMD.sys
Mup [Microsoft Corporation] : %SYSDIR%\drivers\mup.sys
NativeWifiP [Microsoft Corporation] : %SYSDIR%\drivers\nwifi.sys
NDIS [Microsoft Corporation] : %SYSDIR%\drivers\ndis.sys
NdisTapi [Microsoft Corporation] : %SYSDIR%\drivers\ndistapi.sys
Ndisuio [Microsoft Corporation] : %SYSDIR%\drivers\ndisuio.sys
NdisWan [Microsoft Corporation] : %SYSDIR%\drivers\ndiswan.sys
NetBIOS [Microsoft Corporation] : %SYSDIR%\drivers\netbios.sys
NetBT [Microsoft Corporation] : %SYSDIR%\drivers\netbt.sys
Netman [Microsoft Corporation] : %SYSDIR%\svchost.exe
netprofm [Microsoft Corporation] : %SYSDIR%\svchost.exe
NlaSvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
nsi [Microsoft Corporation] : %SYSDIR%\svchost.exe
nsiproxy [Microsoft Corporation] : %SYSDIR%\drivers\nsiproxy.sys
nusb3hub [NEC Electronics Corporation] : %SYSDIR%\drivers\nusb3hub.sys
nusb3xhc [NEC Electronics Corporation] : %SYSDIR%\drivers\nusb3xhc.sys
OS Selector : %PROGRAMFILES32%\Acronis\DiskDirector\OSS\reinstall_svc.exe
p2pimsvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
p2psvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
partmgr [Microsoft Corporation] : %SYSDIR%\drivers\partmgr.sys
PcaSvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
pci [Microsoft Corporation] : %SYSDIR%\drivers\pci.sys
pciide [Microsoft Corporation] : %SYSDIR%\drivers\pciide.sys
pcw [Microsoft Corporation] : %SYSDIR%\drivers\pcw.sys
PEAUTH [Microsoft Corporation] : %SYSDIR%\drivers\PEAuth.sys
PlugPlay [Microsoft Corporation] : %SYSDIR%\svchost.exe
PNRPsvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
Power [Microsoft Corporation] : %SYSDIR%\svchost.exe
PptpMiniport [Microsoft Corporation] : %SYSDIR%\drivers\raspptp.sys
ProfSvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
ProtectedStorage [Microsoft Corporation] : %SYSDIR%\lsass.exe
Psched [Microsoft Corporation] : %SYSDIR%\drivers\pacer.sys
RasAgileVpn [Microsoft Corporation] : %SYSDIR%\drivers\agilevpn.sys
Rasl2tp [Microsoft Corporation] : %SYSDIR%\drivers\rasl2tp.sys
RasPppoe [Microsoft Corporation] : %SYSDIR%\drivers\raspppoe.sys
RasSstp [Microsoft Corporation] : %SYSDIR%\drivers\rassstp.sys
rdbss [Microsoft Corporation] : %SYSDIR%\drivers\rdbss.sys
RDPCDD [Microsoft Corporation] : %SYSDIR%\drivers\RDPCDD.sys
RDPENCDD [Microsoft Corporation] : %SYSDIR%\drivers\RDPENCDD.sys
RDPREFMP [Microsoft Corporation] : %SYSDIR%\drivers\RDPREFMP.sys
rdyboost [Microsoft Corporation] : %SYSDIR%\drivers\rdyboost.sys
RpcEptMapper [Microsoft Corporation] : %SYSDIR%\svchost.exe
RpcSs [Microsoft Corporation] : %SYSDIR%\svchost.exe
rspndr [Microsoft Corporation] : %SYSDIR%\drivers\rspndr.sys
SamSs [Microsoft Corporation] : %SYSDIR%\lsass.exe
Schedule [Microsoft Corporation] : %SYSDIR%\svchost.exe
SENS [Microsoft Corporation] : %SYSDIR%\svchost.exe
ShellHWDetection [Microsoft Corporation] : %SYSDIR%\svchost.exe
snapman [Acronis] : %SYSDIR%\drivers\snapman.sys
SNP2UVC : %SYSDIR%\drivers\snp2uvc.sys
Spooler [Microsoft Corporation] : %SYSDIR%\spoolsv.exe
srv [Microsoft Corporation] : %SYSDIR%\drivers\srv.sys
srv2 [Microsoft Corporation] : %SYSDIR%\drivers\srv2.sys
srvnet [Microsoft Corporation] : %SYSDIR%\drivers\srvnet.sys
SSDPSRV [Microsoft Corporation] : %SYSDIR%\svchost.exe
stisvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
swenum [Microsoft Corporation] : %SYSDIR%\drivers\swenum.sys
SysMain [Microsoft Corporation] : %SYSDIR%\svchost.exe
Tcpip [Microsoft Corporation] : %SYSDIR%\drivers\tcpip.sys
tcpipreg [Microsoft Corporation] : %SYSDIR%\drivers\tcpipreg.sys
tdx [Microsoft Corporation] : %SYSDIR%\drivers\tdx.sys
TermDD [Microsoft Corporation] : %SYSDIR%\drivers\termdd.sys
Themes [Microsoft Corporation] : %SYSDIR%\svchost.exe
TrkWks [Microsoft Corporation] : %SYSDIR%\svchost.exe
truecrypt [TrueCrypt Foundation] : %SYSDIR%\drivers\truecrypt.sys
tunnel [Microsoft Corporation] : %SYSDIR%\drivers\tunnel.sys
TurboB : %SYSDIR%\drivers\TurboB.sys
TurboBoost [Intel(R) Corporation] : %SystemDiskRoot%\Program Files\Intel\TurboBoost\TurboBoost.exe
umbus [Microsoft Corporation] : %SYSDIR%\drivers\umbus.sys
UNS [Intel Corporation] : %PROGRAMFILES32%\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
upnphost [Microsoft Corporation] : %SYSDIR%\svchost.exe
usbccgp [Microsoft Corporation] : %SYSDIR%\drivers\usbccgp.sys
usbehci [Microsoft Corporation] : %SYSDIR%\drivers\usbehci.sys
usbhub [Microsoft Corporation] : %SYSDIR%\drivers\usbhub.sys
UxSms [Microsoft Corporation] : %SYSDIR%\svchost.exe
vdrvroot [Microsoft Corporation] : %SYSDIR%\drivers\vdrvroot.sys
VgaSave [Microsoft Corporation] : %SYSDIR%\drivers\vga.sys
volmgr [Microsoft Corporation] : %SYSDIR%\drivers\volmgr.sys
volmgrx [Microsoft Corporation] : %SYSDIR%\drivers\volmgrx.sys
volsnap [Microsoft Corporation] : %SYSDIR%\drivers\volsnap.sys
vwifibus [Microsoft Corporation] : %SYSDIR%\drivers\vwifibus.sys
vwififlt [Microsoft Corporation] : %SYSDIR%\drivers\vwififlt.sys
Wanarpv6 [Microsoft Corporation] : %SYSDIR%\drivers\wanarp.sys
wcncsvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
Wdf01000 [Microsoft Corporation] : %SYSDIR%\drivers\Wdf01000.sys
WdiServiceHost [Microsoft Corporation] : %SYSDIR%\svchost.exe
WfpLwf [Microsoft Corporation] : %SYSDIR%\drivers\wfplwf.sys
WinDefend [Microsoft Corporation] : %SYSDIR%\svchost.exe
WinHttpAutoProxySvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
Winmgmt [Microsoft Corporation] : %SYSDIR%\svchost.exe
Wlansvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
WMPNetworkSvc [Microsoft Corporation] : %SystemDiskRoot%\Program Files\Windows Media Player\wmpnetwk.exe
WPDBusEnum [Microsoft Corporation] : %SYSDIR%\svchost.exe
wscsvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
WSearch [Microsoft Corporation] : %SYSDIR%\SearchIndexer.exe
wuauserv [Microsoft Corporation] : %SYSDIR%\svchost.exe
WudfPf [Microsoft Corporation] : %SYSDIR%\drivers\WUDFPf.sys
WUDFRd [Microsoft Corporation] : %SYSDIR%\drivers\WUDFRd.sys
wudfsvc [Microsoft Corporation] : %SYSDIR%\svchost.exe
ST2012_Svc [Crawler.com] : %PROGRAMFILES%\Spyware Terminator\st_rsser64.exe
sp_rsdrv2 [Windows (R) Win 7 DDK provider] : %SYSDIR%\drivers\stflt.sys
------
geladene Bibliotheken
------
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\ntdll.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\kernel32.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\KERNELBASE.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\wtsapi32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\msvcrt.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\userenv.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\rpcrt4.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\sspicli.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\CRYPTBASE.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\sechost.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\profapi.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\user32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\gdi32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\lpk.dll
Microsoft(R) Uniscribe Unicode script processor [Microsoft Corporation] : %SYSDIR32%\usp10.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\advapi32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\imm32.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\msctf.dll
Application Manager [PerformerSoft LLC] : %ALLUSERS_APPDATA%\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\shell32.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\shlwapi.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\ole32.dll
[Microsoft Corporation]%SYSDIR32%\oleaut32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\version.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\imagehlp.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\psapi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\winsta.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\apphelp.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\msimg32.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\comdlg32.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %WINDIR%\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\winspool.drv
Microsoft® Windows® Operating System [Microsoft Corporation] : %WINDIR%\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\GdiPlus.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\netapi32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\netutils.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\srvcli.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\wkscli.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\samcli.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\crypt32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\msasn1.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\uxtheme.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\clbcatq.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\quartz.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\winmm.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\dwmapi.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\qcap.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\msvfw32.dll
Microsoft® Visual Studio® 2010 [Microsoft Corporation] : %SYSDIR32%\msvcp100.dll
Microsoft® Visual Studio® 2010 [Microsoft Corporation] : %SYSDIR32%\msvcr100.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\grdcore.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\cfglib.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\gpipc.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\mpr.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\gpgen.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\gpschd.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\IPHLPAPI.DLL
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\nsi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\winnsi.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\rasapi32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\rasman.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\ws2_32.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\avevtlog.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\schedr.dll
SQLite Database : %PROGRAMFILES32%\Avira\AntiVir Desktop\sqlite3.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\cfgmgr32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\rtutils.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\avipc.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\gpgrd.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\gpavgio.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\logoncli.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\browcli.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\activeds.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\adsldpc.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\Wldap32.dll
Microsoft (R) Visual C++ [Microsoft Corporation] : %SYSDIR32%\atl.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\gpgui.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\gplegacy.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\gpgenrep.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\onlcfg.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\guardmsg.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\avgio.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\fltLib.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\avpref.dll
AVCORE [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aecore.dll
AVVDF [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aevdf.dll
AVSCRIPT [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aescript.dll
AVSCN [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aescn.dll
AVSBX [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aesbx.dll
AVRDL [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aerdl.dll
AVPACK [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aepack.dll
AVOFFICE [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aeoffice.dll
AVHEUR [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aeheur.dll
AVHELP [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aehelp.dll
AVGEN [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aegen.dll
AVEXP [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aeexp.dll
AVEMU [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aeemu.dll
AVBB [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\aebb.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\avesvc.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\avesvcr.dll
[Avira Operations GmbH & Co. KG]%PROGRAMFILES32%\Avira\antivir desktop\avreg.dll
Microsoft® Visual Studio® 2005 [Microsoft Corporation] : %WINDIR%\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll
Microsoft® Visual Studio® 2005 [Microsoft Corporation] : %WINDIR%\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll
Apple Software Support Version Check [Apple Inc.] : %COMMONFILES32%\Apple\Apple Application Support\AppleVersions.dll
[Apple Inc.]%COMMONFILES32%\Apple\Apple Application Support\YSCrashDump.DLL
CoreFoundation [Apple Inc.] : %COMMONFILES32%\Apple\Apple Application Support\CoreFoundation.dll
[Open Source Software community project]%COMMONFILES32%\Apple\Apple Application Support\pthreadVC2.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\wsock32.dll
objc4 [Apple Inc.] : %COMMONFILES32%\Apple\Apple Application Support\objc.dll
libdispatch [Apple Inc.] : %COMMONFILES32%\Apple\Apple Application Support\libdispatch.dll
International Components for Unicode [The ICU Project] : %COMMONFILES32%\Apple\Apple Application Support\libicuin.dll
International Components for Unicode [The ICU Project] : %COMMONFILES32%\Apple\Apple Application Support\libicuuc.dll
International Components for Unicode [The ICU Project] : %COMMONFILES32%\Apple\Apple Application Support\icudt46.dll
[Apple Inc.]%COMMONFILES32%\Apple\Apple Application Support\ASL.dll
Apple Mobile Device Service [Apple Inc.] : %COMMONFILES32%\Apple\Mobile Device Support\AppleMobileDeviceService_main.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\setupapi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\devobj.dll
Bonjour [Apple Inc.] : %SYSDIR32%\dnssd.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\ntmarta.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\mswsock.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\WSHTCPIP.DLL
iTunesMobileDevice [Apple Inc.] : %COMMONFILES32%\Apple\Mobile Device Support\MobileDevice.dll
Windows® Internet Explorer [Microsoft Corporation] : %SYSDIR32%\wininet.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\api-ms-win-downlevel-user32-l1-1-0.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\api-ms-win-downlevel-advapi32-l1-1-0.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\api-ms-win-downlevel-shlwapi-l1-1-0.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\api-ms-win-downlevel-version-l1-1-0.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\api-ms-win-downlevel-normaliz-l1-1-0.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\normaliz.dll
Windows® Internet Explorer [Microsoft Corporation] : %SYSDIR32%\iertutil.dll
zlib : %COMMONFILES32%\Apple\Apple Application Support\zlib1.dll
CFNetwork [Apple, Inc.] : %COMMONFILES32%\Apple\Apple Application Support\CFNetwork.dll
SQLite3 [Apple Inc.] : %COMMONFILES32%\Apple\Apple Application Support\SQLite3.dll
libxml2.dll : %COMMONFILES32%\Apple\Apple Application Support\libxml2.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\wintrust.dll
The OpenSSL Toolkit [The OpenSSL Project, hxxp://www.openssl.org/] : %COMMONFILES32%\Apple\Mobile Device Support\ssleay32.dll
The OpenSSL Toolkit [The OpenSSL Project, hxxp://www.openssl.org/] : %COMMONFILES32%\Apple\Mobile Device Support\libeay32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\cryptsp.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\rsaenh.dll
Microsoft (R) Visual C++ [Microsoft Corporation] : %SYSDIR32%\mfc42u.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\odbc32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\odbcint.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\dhcpcsvc.dll
Windows® Search [Microsoft Corporation] : %SYSDIR32%\propsys.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\api-ms-win-downlevel-ole32-l1-1-0.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\api-ms-win-downlevel-advapi32-l2-1-0.dll
Windows® Internet Explorer [Microsoft Corporation] : %SYSDIR32%\urlmon.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\secur32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\devrtl.dll
ATK0100 [ATK] : %PROGRAMFILES32%\ASUS\Wireless Console 3\inter_f2.dll
PRISM Wireless LAN [ACTIONTEC Electronics,Inc] : %PROGRAMFILES32%\ASUS\Wireless Console 3\ATKWLIOC.DLL
SiS160 Series Wireless LAN Adapter [Silicon Integrated Systems Corp.] : %PROGRAMFILES32%\ASUS\Wireless Console 3\SiSPkt.dll
Microsoft (R) Visual C++ [Microsoft Corporation] : %SYSDIR32%\mfc42.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\wlanapi.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\wlanutil.dll
Microsoft XML Core Services [Microsoft Corporation] : %SYSDIR32%\xmllite.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\cscapi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\dbghelp.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\MMDevAPI.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\AudioSes.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\wbem\wbemprox.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\wbemcomn.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\RpcRtRemote.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\wbem\wbemsvc.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\wbem\fastprox.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\ntdsapi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\ktmw32.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\taskschd.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\dnsapi.dll
Microsoft® Visual Studio .NET [Microsoft Corporation] : %SYSDIR32%\msvcr71.dll
Microsoft® Visual Studio .NET [Microsoft Corporation] : %SYSDIR32%\msvcp71.dll
Acronis Snapshot API [Acronis] : %COMMONFILES32%\Acronis\SnapAPI\snapapi.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\pdh.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\winhttp.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\webio.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\oledlg.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\oleacc.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\dhcpcsvc6.DLL
Microsoft(R) MSXML 3.0 SP11 [Microsoft Corporation] : %SYSDIR32%\msxml3.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\WindowsCodecs.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\wdmaud.drv
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\ksuser.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\avrt.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\msacm32.drv
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\msacm32.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\midimap.dll
Windows® Internet Explorer [Microsoft Corporation] : %SYSDIR32%\ieframe.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\api-ms-win-downlevel-shlwapi-l2-1-0.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\api-ms-win-downlevel-shell32-l1-1-0.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\sxs.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\wship6.dll
Windows® Internet Explorer [Microsoft Corporation] : %SYSDIR32%\mshtml.dll
Bonjour [Apple Inc.] : %PROGRAMFILES32%\Bonjour\mdnsNSP.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\rasadhlp.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\FWPUCLNT.DLL
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\nlaapi.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\NapiNSP.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\pnrpnsp.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\winrnr.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\schannel.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\mlang.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\msimtf.dll
Microsoft® Line Services [Microsoft Corporation] : %SYSDIR32%\msls31.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\d2d1.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\DWrite.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\dxgi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\d3d11.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\D3D10Warp.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\perfos.dll
Windows® Internet Explorer [Microsoft Corporation] : %SYSDIR32%\jscript9.dll
USB 3.0 Monitor [NEC Electronics Corporation] : %PROGRAMFILES32%\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll
ATKMETHOD [ASUS] : %PROGRAMFILES32%\ASUS\ATK Media\ATKMETHOD.dll
Microsoft® Visual Studio® 10 [Microsoft Corporation] : %SYSDIR32%\mfc100u.dll
Microsoft® Visual Studio® 10 [Microsoft Corporation] : %SYSDIR32%\MFC100DEU.DLL
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\ccwkrlib.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccguard.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccgrdrc.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccgrdw.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccwgrd.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccgen.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccgenrc.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccupdate.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccupdrc.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\cclic.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\cclicrc.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccmsg.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccmsgrc.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\rcimage.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\antivir desktop\ccmainrc.dll
Avira Free Antivirus [Avira Operations GmbH & Co. KG] : %PROGRAMFILES32%\Avira\AntiVir Desktop\ccupdw.dll
Visual Basic [Microsoft Corporation] : %SYSDIR32%\msvbvm60.dll
[Microsoft Corporation]%SYSDIR32%\asycfilt.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\wmp.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\wmploc.DLL
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\mfplat.dll
Microsoft (R) JScript [Microsoft Corporation] : %SYSDIR32%\jscript.dll
%PROGRAMFILES32%\Athan\vbh.dll
%PROGRAMFILES32%\Athan\vbp.dll
%PROGRAMFILES32%\Athan\vbq.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\mf.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\wmpeffects.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\msdmo.dll
CMDIALOG [Microsoft Corporation] : %SYSDIR32%\athan\comdlg32.ocx
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %WINDIR%\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\evr.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\powrprof.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\devenum.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\WMADMOD.DLL
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\resampledmo.dll
Microsoft Internet Transfer Control [Microsoft Corporation] : %SYSDIR32%\athan\msinet.ocx
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\mfps.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\slc.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\pcwum.dll
Windows Installer - Unicode [Microsoft Corporation] : %SYSDIR32%\msi.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\ncrypt.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\bcrypt.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\bcryptprimitives.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\gpapi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\cryptnet.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\SensApi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\security.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\credssp.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\msv1_0.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\cryptdll.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\FirewallAPI.dll
Canon IJ Network Scan Utility for Microsoft Windows [CANON INC.] : %PROGRAMFILES32%\Canon\Canon IJ Network Scan Utility\CNSU_DEU.dll
Canon IJ Network 32bit comm Module for Microsoft Windows [CANON INC.] : %SYSDIR32%\CNMNPPM.DLL
PDF24 Creator [Geek Software GmbH] : %PROGRAMFILES32%\PDF24\Settings.dll
Microsoft® Visual Studio® 2010 [Microsoft Corporation] : %PROGRAMFILES32%\PDF24\msvcp100.dll
Microsoft® Visual Studio® 2010 [Microsoft Corporation] : %PROGRAMFILES32%\PDF24\msvcr100.dll
PDF24 Creator [Geek Software GmbH] : %PROGRAMFILES32%\PDF24\NotifyIcon.dll
PDF24 Creator [Geek Software GmbH] : %PROGRAMFILES32%\PDF24\Language.dll
PDF24 Creator [Geek Software GmbH] : %PROGRAMFILES32%\PDF24\About.dll
iTunes [Apple Inc.] : %PROGRAMFILES%\iTunes\iTunesHelper.dll
iTunes [Apple Inc.] : %PROGRAMFILES%\iTunes\iTunesHelper.Resources\de.lproj\iTunesHelperLocalized.DLL
iTunes [Apple Inc.] : %PROGRAMFILES%\iTunes\iTunesHelper.Resources\iTunesHelper.DLL
iTunesMobileDevice [Apple Inc.] : %COMMONFILES32%\Apple\Mobile Device Support\iTunesMobileDevice.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\hid.dll
StatusStrings Link Library [Intel Corporation] : %PROGRAMFILES32%\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll
Xerces-C Version 2.7.0 [Apache Software Foundation] : %PROGRAMFILES32%\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll
DTMessageLib.dll. [Intel Corporation] : %PROGRAMFILES32%\Intel\Intel(R) Management Engine Components\UNS\DTMessageLib.dll
Google Chrome [Google Inc.] : %PROGRAMFILES32%\Google\Chrome\Application\26.0.1410.43\chrome.dll
International Components for Unicode [The ICU Project] : %PROGRAMFILES32%\Google\Chrome\Application\26.0.1410.43\icudt.dll
AMD Inc. Radeon DirectX 11 Driver [Advanced Micro Devices, Inc. ] : %SYSDIR32%\aticfx32.dll
Windows [Microsoft Corporation] : %SYSDIR32%\Wpc.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\wevtapi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\samlib.dll
Windows® Search [Microsoft Corporation] : %SYSDIR32%\mssprxy.dll
fzshellext Dynamic Link Library : %PROGRAMFILES32%\FileZilla FTP Client\fzshellext.dll
Microsoft RichEdit Control, version 4.1 [Microsoft Corporation] : %SYSDIR32%\msftedit.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\ntshrui.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\mscms.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\explorerframe.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\duser.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\dui70.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\PortableDeviceApi.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\d3d9.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\d3d8thk.dll
Advanced Micro Devices, Inc PowerXpress Vista User Mode Driver [Advanced Micro Devices, Inc. ] : %SYSDIR32%\atiu9pag.dll
Advanced Micro Devices, Inc. Radeon DirectX Universal Driver [Advanced Micro Devices, Inc. ] : %SYSDIR32%\atiumdag.dll
Advanced Micro Devices, Inc. Radeon Video Acceleration Universal Driver [Advanced Micro Devices, Inc. ] : %SYSDIR32%\atiumdva.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\linkinfo.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\mfreadwrite.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\actxprxy.dll
Microsoft Office 2013 [Microsoft Corporation] : %PROGRAMFILES32%\Microsoft Office\Office15\GROOVEEX.DLL
Microsoft® Visual Studio® 10 [Microsoft Corporation] : %SYSDIR32%\atl100.dll
Microsoft Office 2013 [Microsoft Corporation] : %PROGRAMFILES32%\Microsoft Office\Office15\1031\GrooveIntlResource.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\EhStorShell.dll
Betriebssystem Microsoft® Windows® [Microsoft Corporation] : %SYSDIR32%\shdocvw.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %PROGRAMFILES32%\Windows Defender\MpOAV.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\shfolder.dll
[Microsoft Corporation]%SYSDIR32%\olepro32.dll
Spyware Terminator 2011 [Crawler.com] : %PROGRAMFILES32%\Spyware Terminator\TorrentDll.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\cabinet.dll
Microsoft® Windows® Operating System [Microsoft Corporation] : %SYSDIR32%\windowscodecsext.dll
Microsoft(R) MSXML 6.0 SP3 [Microsoft Corporation] : %SYSDIR32%\msxml6.dll
------
Report Ende
------
Code:
ATTFilter # AdwCleaner v2.200 - Datei am 07/04/2013 um 20:39:48 erstellt
# Aktualisiert am 02/04/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : xxxxx - ASUS-NB
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\xxxxx\Downloads\adw22cleaner.exe
# Option [Suche]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Datei Gefunden : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Datei Gefunden : C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gefunden : C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i94benv6.default\searchplugins\delta.xml
Ordner Gefunden : C:\ProgramData\Babylon
Ordner Gefunden : C:\ProgramData\BrowserProtect
Ordner Gefunden : C:\ProgramData\Partner
Ordner Gefunden : C:\Users\xxxxx\AppData\Roaming\Babylon
Ordner Gefunden : C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i94benv6.default\extensions\ffxtlbr@babylon.com
***** [Registrierungsdatenbank] *****
Schlüssel Gefunden : HKCU\Software\1ClickDownload
Schlüssel Gefunden : HKCU\Software\APN PIP
Schlüssel Gefunden : HKCU\Software\BabylonToolbar
Schlüssel Gefunden : HKCU\Software\DataMngr
Schlüssel Gefunden : HKCU\Software\DataMngr_Toolbar
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKCU\Software\5255d6d8e138e815
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKLM\Software\Babylon
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\Software\DataMngr
Schlüssel Gefunden : HKLM\Software\PIP
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\5255d6d8e138e815
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gefunden : HKU\S-1-5-21-3834454562-399088190-3642704615-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16521
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=9C81485B393D4F61
-\\ Mozilla Firefox v19.0.2 (de)
Datei : C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i94benv6.default\prefs.js
Gefunden : user_pref("browser.search.selectedEngine", "Delta Search");
Gefunden : user_pref("browser.startup.homepage", "hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId[...]
-\\ Google Chrome v26.0.1410.43
Datei : C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Preferences
Gefunden [l.34] : icon_url = "hxxp://www.delta-search.com/favicon.ico",
Gefunden [l.37] : keyword = "delta-search.com",
Gefunden [l.41] : search_url = "hxxp://www.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=9C81485B393D4F61",
Gefunden [l.2143] : homepage = "hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=9C81485B393D4F61",
*************************
AdwCleaner[R1].txt - [3375 octets] - [07/04/2013 20:39:48]
########## EOF - C:\AdwCleaner[R1].txt - [3435 octets] ##########
Code:
ATTFilter # AdwCleaner v2.200 - Datei am 07/04/2013 um 20:41:34 erstellt
# Aktualisiert am 02/04/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : xxxxx - ASUS-NB
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\xxxxx\Downloads\adw22cleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Datei Gelöscht : C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gelöscht : C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i94benv6.default\searchplugins\delta.xml
Gelöscht mit Neustart : C:\ProgramData\BrowserProtect
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Users\xxxxx\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i94benv6.default\extensions\ffxtlbr@babylon.com
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\5255d6d8e138e815
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\5255d6d8e138e815
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16521
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=9C81485B393D4F61 --> hxxp://www.google.com
-\\ Mozilla Firefox v19.0.2 (de)
Datei : C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i94benv6.default\prefs.js
C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i94benv6.default\user.js ... Gelöscht !
Gelöscht : user_pref("browser.search.selectedEngine", "Delta Search");
Gelöscht : user_pref("browser.startup.homepage", "hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId[...]
-\\ Google Chrome v26.0.1410.43
Datei : C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Preferences
Gelöscht [l.34] : icon_url = "hxxp://www.delta-search.com/favicon.ico",
Gelöscht [l.37] : keyword = "delta-search.com",
Gelöscht [l.41] : search_url = "hxxp://www.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=9[...]
Gelöscht [l.2143] : homepage = "hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=9C81485B393D4F61",
*************************
AdwCleaner[R1].txt - [3498 octets] - [07/04/2013 20:39:48]
AdwCleaner[S1].txt - [3404 octets] - [07/04/2013 20:41:34]
########## EOF - C:\AdwCleaner[S1].txt - [3464 octets] ##########
Geändert von LeLion (08.04.2013 um 19:12 Uhr) |
|
08.04.2013, 20:13
| #4 |
| /// TB-Ausbilder | Delta-Search hat mich leider auch erwischt Ok, dann weiter: Lade dir bitte OTL (von Oldtimer) herunter und speichere es auf deinen Desktop.
__________________ cheers, Leo |
|
08.04.2013, 20:48
| #5 |
| | Delta-Search hat mich leider auch erwischt Hallo Leo, Hier die 2 LogFiles von OTL OTL Logfile: Code:
ATTFilter OTL logfile created on: 08.04.2013 21:34:33 - Run 4 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\xxxxx\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,86 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 57,57% Memory free 7,71 Gb Paging File | 5,81 Gb Available in Paging File | 75,37% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 200,00 Gb Total Space | 128,78 Gb Free Space | 64,39% Space Free | Partition Type: NTFS Drive D: | 1,86 Gb Total Space | 1,83 Gb Free Space | 98,52% Space Free | Partition Type: FAT Drive G: | 200,00 Gb Total Space | 161,67 Gb Free Space | 80,83% Space Free | Partition Type: NTFS Drive H: | 196,17 Gb Total Space | 144,64 Gb Free Space | 73,74% Space Free | Partition Type: NTFS Computer Name: ASUS-NB | User Name: xxxxx | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\xxxxx\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com) PRC - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\FreeCall.com\FreeCall\freecall.exe (FreeCall) PRC - C:\Program Files (x86)\PDF24\pdf24.exe (Geek Software GmbH) PRC - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Program Files (x86)\Athan\Athan.exe (www.IslamicFinder.org) PRC - C:\Users\xxxxx\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) PRC - C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.) PRC - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe () PRC - C:\Windows\AsScrPro.exe (ASUS) PRC - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation) PRC - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe () PRC - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS) PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe (ASUS) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe () PRC - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS) PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS) PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe (ASUS) PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe (ASUS) PRC - C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe (ASUS) PRC - C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (ASUS) PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe (ASUS) PRC - C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe () PRC - C:\Program Files\ATKGFNEX\GFNEXSrv.exe () ========== Modules (No Company Name) ========== MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll () MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll () MOD - C:\Program Files (x86)\Athan\vbp.dll () MOD - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe () MOD - C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe () MOD - C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe () MOD - C:\Program Files (x86)\Athan\vbh.dll () MOD - C:\Program Files (x86)\Athan\vbq.dll () ========== Services (SafeList) ========== SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (AFBAgent) -- C:\Windows\SysNative\FBAgent.exe (ASUSTeK Computer Inc.) SRV:64bit: - (TurboBoost) -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel(R) Corporation) SRV:64bit: - (IGDCTRL) -- C:\Program Files\FRITZ!DSL\IGDCTRL.EXE (AVM Berlin) SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SRV:64bit: - (ATKGFNEXSrv) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe () SRV - (ST2012_Svc) -- C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe (Crawler.com) SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies) SRV - (becldr3Service) -- C:\Program Files (x86)\BCL Technologies\easyConverter SDK 3\Common\becldr.exe () SRV - (rpcapd) -- C:\Program Files (x86)\WinPcap\rpcapd.exe (CACE Technologies, Inc.) SRV - (OS Selector) -- C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe () SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (ASLDRService) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe (ASUS) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (sp_rsdrv2) -- C:\Windows\SysNative\drivers\stflt.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (truecrypt) -- C:\Windows\SysNative\drivers\truecrypt.sys (TrueCrypt Foundation) DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd) DRV:64bit: - (snapman) -- C:\Windows\SysNative\drivers\snapman.sys (Acronis) DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.) DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices) DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.) DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (NPF) -- C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.) DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (NEC Electronics Corporation) DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (NEC Electronics Corporation) DRV:64bit: - (Impcd) -- C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation) DRV:64bit: - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronic Corp.) DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.) DRV:64bit: - (HECIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (L1C) -- C:\Windows\SysNative\drivers\L1C62x64.sys (Atheros Communications, Inc.) DRV:64bit: - (AmUStor) -- C:\Windows\SysNative\drivers\AmUStor.sys (Alcor Micro, Corp.) DRV:64bit: - (SNP2UVC) -- C:\Windows\SysNative\drivers\snp2uvc.sys () DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation) DRV:64bit: - (TurboB) -- C:\Windows\SysNative\drivers\TurboB.sys () DRV:64bit: - (kbfiltr) -- C:\Windows\SysNative\drivers\kbfiltr.sys ( ) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (lullaby) -- C:\Windows\SysNative\drivers\lullaby.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (SiSGbeLH) -- C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (RTHDMIAzAudService) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys (Realtek Semiconductor Corp.) DRV:64bit: - (MTsensor) -- C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS) DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation) DRV:64bit: - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation) DRV:64bit: - (ASMMAP64) -- C:\Program Files\ATKGFNEX\ASMMAP64.sys () DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3834454562-399088190-3642704615-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com IE - HKU\S-1-5-21-3834454562-399088190-3642704615-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ IE - HKU\S-1-5-21-3834454562-399088190-3642704615-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKU\S-1-5-21-3834454562-399088190-3642704615-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3834454562-399088190-3642704615-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local ========== FireFox ========== FF - prefs.js..browser.search.useDBForOrder: "false" FF - prefs.js..extensions.enabledAddons: foxyproxy%40eric.h.jung:4.1.3 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2 FF - prefs.js..network.proxy.ftp: "178.33.173.34" FF - prefs.js..network.proxy.ftp_port: 3128 FF - prefs.js..network.proxy.http: "178.33.173.34" FF - prefs.js..network.proxy.http_port: 3128 FF - prefs.js..network.proxy.socks_remote_dns: true FF - prefs.js..network.proxy.ssl: "178.33.173.34" FF - prefs.js..network.proxy.ssl_port: 3128 FF - prefs.js..network.proxy.type: 1 FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_168.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\xxxxx\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\xxxxx\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\xxxxx\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\xxxxx\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\xxxxx\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.03.22 11:24:44 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.03.22 11:24:44 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.03.22 11:24:44 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.03.22 11:24:44 | 000,000,000 | ---D | M] [2013.02.02 16:14:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xxxxx\AppData\Roaming\mozilla\Extensions [2013.04.08 12:06:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xxxxx\AppData\Roaming\mozilla\Firefox\Profiles\i94benv6.default\extensions [2013.02.02 20:15:13 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\xxxxx\AppData\Roaming\mozilla\Firefox\Profiles\i94benv6.default\extensions\foxyproxy@eric.h.jung [2013.03.13 20:29:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2013.03.13 20:29:20 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2013.01.11 04:06:08 | 000,033,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2013.01.17 02:11:04 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.01.17 02:11:04 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2013.01.17 02:11:04 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2013.01.17 02:11:04 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2013.01.17 02:11:04 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2013.01.17 02:11:04 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.2.183.13\npGoogleOneClick8.dll CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\2.0.31005.0\npctrl.dll CHR - Extension: Google Docs = C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Google Drive = C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: Session Manager = C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbcnbpafconjjigibnhbfmmgdbbkcjfi\0.4_0\ CHR - Extension: YouTube = C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Windows Media Player Extension for HTML5 = C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0\ CHR - Extension: Google Mail = C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.03.28 20:55:56 | 000,000,877 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 gs.apple.com O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.) O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL (Microsoft Corporation) O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-3834454562-399088190-3642704615-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:64bit: - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.) O4:64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe MySyncFolder File not found O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.) O4:64bit: - HKLM..\Run: [SpywareTerminatorShield] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com) O4:64bit: - HKLM..\Run: [SpywareTerminatorUpdater] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com) O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [Athan] C:\Program Files (x86)\Athan\Athan.exe (www.IslamicFinder.org) O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS) O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS) O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation) O4 - HKLM..\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe (Geek Software GmbH) O4 - HKLM..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd File not found O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3834454562-399088190-3642704615-1000..\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-3834454562-399088190-3642704615-1000..\Run: [Akamai NetSession Interface] C:\Users\xxxxx\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) O4 - HKU\S-1-5-21-3834454562-399088190-3642704615-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-3834454562-399088190-3642704615-1000..\Run: [FreeCall] C:\Program Files (x86)\FreeCall.com\FreeCall\freecall.exe (FreeCall) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Startcenter.lnk = C:\Users\xxxxx\AppData\Roaming\Microsoft\Installer\{2D5D9603-22CF-4B99-83F6-0CD20330F62E}\Icon8CF9C550.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105 File not found O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000 File not found O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{210225E4-2198-414B-9398-9037C35A6A48}: NameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A6A926FD-156B-4620-87A8-63605D22E066}: NameServer = 192.168.0.254 O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help - No CLSID value found O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.04.08 20:29:36 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\IObit [2013.04.07 22:04:06 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\xxxxx\Desktop\OTL.exe [2013.04.07 20:10:21 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Malwarebytes [2013.04.07 19:38:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2013.04.07 19:38:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2013.04.07 19:38:22 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2013.04.07 19:38:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2013.04.07 19:03:12 | 000,051,496 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\Windows\SysNative\drivers\stflt.sys [2013.04.07 19:03:12 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Spyware Terminator [2013.04.07 19:03:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Spyware Terminator [2013.04.07 19:03:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012 [2013.04.07 19:01:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spyware Terminator [2013.04.07 18:22:27 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\searchplugins [2013.04.07 18:22:27 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Extensions [2013.04.07 18:18:41 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LSHunter.TV [2013.04.01 21:00:56 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\FRITZ! [2013.04.01 21:00:56 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Local\FRITZ! [2013.04.01 20:57:46 | 000,000,000 | ---D | C] -- C:\Program Files\FRITZ!DSL [2013.04.01 20:57:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FRITZ!DSL [2013.04.01 20:57:46 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Box [2013.04.01 20:57:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVM [2013.03.30 11:07:38 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Skype [2013.03.30 11:07:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013.03.30 11:07:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2013.03.30 11:07:15 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2013.03.30 11:06:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2013.03.28 19:13:06 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\Documents\host-dateien [2013.03.28 18:43:59 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\.shsh [2013.03.28 18:43:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2013.03.28 18:43:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2013.03.28 18:43:28 | 000,782,240 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll [2013.03.28 18:43:27 | 000,861,088 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll [2013.03.28 18:43:27 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2013.03.28 18:42:53 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2013.03.28 18:42:53 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2013.03.28 18:42:53 | 000,095,648 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2013.03.28 18:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2013.03.27 23:35:06 | 000,130,016 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys [2013.03.27 23:35:06 | 000,100,712 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys [2013.03.27 23:35:06 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys [2013.03.24 17:24:42 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\ElevatedShortcut [2013.03.24 17:24:23 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elevated Shortcut [2013.03.24 17:24:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elevated Shortcut [2013.03.24 17:24:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Elevated Shortcut [2013.03.22 14:53:05 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Audacity [2013.03.22 14:52:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Audacity [2013.03.22 12:01:32 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller [2013.03.22 12:01:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group [2013.03.22 11:24:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2013.03.22 11:24:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2013.03.22 11:21:51 | 000,000,000 | ---D | C] -- C:\Program Files\fennec [2013.03.18 19:33:25 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Local\libimobiledevice [2013.03.18 16:55:04 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Apple Computer [2013.03.18 16:55:04 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Local\Apple Computer [2013.03.18 16:54:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2013.03.18 16:54:42 | 000,033,240 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys [2013.03.18 16:54:18 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2013.03.18 16:54:17 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2013.03.18 16:54:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2013.03.18 16:54:17 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 [2013.03.18 16:53:08 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Local\Apple [2013.03.18 16:52:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2013.03.18 16:52:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2013.03.18 16:51:27 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2013.03.18 16:51:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2013.03.18 16:51:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2013.03.18 16:51:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2013.03.16 19:55:00 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe [2013.03.16 19:55:00 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2013.03.16 19:55:00 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll [2013.03.16 19:55:00 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll [2013.03.16 19:55:00 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2013.03.16 19:55:00 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe [2013.03.16 19:55:00 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe [2013.03.16 19:55:00 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2013.03.16 19:55:00 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll [2013.03.16 19:55:00 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2013.03.16 19:55:00 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe [2013.03.16 19:55:00 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll [2013.03.16 19:54:59 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2013.03.16 19:54:59 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2013.03.16 19:54:59 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat [2013.03.16 19:54:59 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat [2013.03.16 19:54:59 | 000,905,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll [2013.03.16 19:54:59 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013.03.16 19:54:59 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2013.03.16 19:54:59 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013.03.16 19:54:59 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2013.03.16 19:54:59 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013.03.16 19:54:59 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2013.03.16 19:54:59 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2013.03.16 19:54:59 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2013.03.16 19:54:59 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2013.03.16 19:54:59 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2013.03.16 19:54:59 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2013.03.16 19:54:59 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2013.03.16 19:54:59 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2013.03.16 19:54:59 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll [2013.03.16 19:54:59 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2013.03.16 19:54:59 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2013.03.16 19:54:59 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe [2013.03.16 19:54:59 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll [2013.03.16 19:54:59 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe [2013.03.16 19:54:59 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2013.03.16 19:54:59 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll [2013.03.16 19:54:59 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll [2013.03.16 19:54:59 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2013.03.16 19:54:59 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll [2013.03.16 19:54:59 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2013.03.16 19:54:59 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll [2013.03.16 19:54:59 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2013.03.16 19:54:59 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe [2013.03.16 19:54:59 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [2013.03.16 19:54:59 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll [2013.03.16 19:54:59 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe [2013.03.16 19:54:59 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll [2013.03.16 19:54:59 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2013.03.16 19:54:59 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll [2013.03.16 19:54:59 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx [2013.03.16 19:54:59 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2013.03.16 19:54:59 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013.03.16 19:54:59 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll [2013.03.16 19:54:59 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll [2013.03.16 19:54:59 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2013.03.16 19:54:59 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2013.03.16 19:54:59 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2013.03.16 19:54:59 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2013.03.16 19:54:59 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe [2013.03.16 19:54:59 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2013.03.16 19:54:59 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2013.03.16 19:54:58 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013.03.16 19:54:58 | 000,526,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2013.03.16 19:54:58 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2013.03.16 19:54:58 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx [2013.03.16 19:54:58 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll [2013.03.16 19:53:55 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll [2013.03.16 19:53:55 | 002,776,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll [2013.03.16 19:53:55 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [2013.03.16 19:53:55 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll [2013.03.16 19:53:55 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll [2013.03.16 19:53:55 | 001,682,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll [2013.03.16 19:53:55 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2013.03.16 19:53:55 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll [2013.03.16 19:53:55 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll [2013.03.16 19:53:55 | 001,238,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll [2013.03.16 19:53:55 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll [2013.03.16 19:53:55 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll [2013.03.16 19:53:55 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll [2013.03.16 19:53:55 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll [2013.03.16 19:53:55 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll [2013.03.16 19:53:55 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll [2013.03.16 19:53:55 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll [2013.03.16 19:53:55 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll [2013.03.16 19:53:55 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll [2013.03.16 19:53:55 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll [2013.03.16 19:53:55 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll [2013.03.16 19:53:55 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll [2013.03.16 19:53:55 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll [2013.03.16 19:53:55 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.03.16 19:53:55 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.03.16 19:53:55 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.03.16 19:53:55 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.03.16 19:53:55 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.03.16 19:53:55 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.03.16 19:53:55 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.03.16 19:53:55 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.03.16 19:53:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll [2013.03.16 19:53:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll [2013.03.16 19:53:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.03.16 19:53:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.03.16 19:53:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll [2013.03.16 19:53:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll [2013.03.16 19:53:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.03.16 19:53:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.03.16 19:53:55 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.03.16 19:53:55 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.03.16 08:30:42 | 004,546,560 | ---- | C] (Google Inc.) -- C:\Windows\SysWow64\GPhotos.scr [2013.03.15 22:49:40 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SopCast [2013.03.15 22:49:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SopCast [2013.03.15 22:49:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SopCast [2013.03.15 22:19:12 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys [2013.03.13 21:36:26 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\Documents\Benutzerdefinierte Office-Vorlagen [2013.03.13 20:29:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2013.03.13 16:39:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight [2013.03.13 16:38:51 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight [2013.03.13 16:38:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight [2013.03.12 14:35:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities [2013.03.12 13:25:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Advanced PDF Editor [2013.03.12 13:25:50 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Foxit Advanced PDF Editor [2013.03.12 13:25:50 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Local\Foxit Advanced PDF Editor [2013.03.12 13:25:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Foxit Advanced PDF Editor [2013.03.12 13:25:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Aspell [2013.03.12 13:25:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Foxit Software [2013.03.12 13:25:46 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Local\Aspell [2013.03.12 13:24:46 | 024,458,720 | ---- | C] (Foxit Corporation ) -- C:\Users\xxxxx\Desktop\FoxitAdvancedPDFEditor305_enu_Setup.exe [2013.03.12 13:09:30 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\Documents\Pdf2Word [2013.03.12 13:08:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BCL Technologies [2013.03.12 13:08:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF2WordConverter [2013.03.12 13:08:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDF2WordConverter [2013.03.12 13:08:53 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Pdf2Word [2013.03.12 12:59:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter [2013.03.12 12:59:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free PDF to Word Doc Converter [2013.03.12 12:52:21 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Local\PDF24 [2013.03.12 12:25:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24 [2013.03.12 12:25:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDF24 [2013.03.12 12:22:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon IJ Network Utilities [2013.03.12 12:22:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon [2013.03.12 12:22:54 | 000,307,200 | ---- | C] (CANON INC.) -- C:\Windows\SysWow64\CNC870L.dll [2013.03.12 12:22:54 | 000,102,400 | ---- | C] (CANON INC.) -- C:\Windows\SysWow64\CNC870U.dll [2013.03.12 12:22:54 | 000,015,872 | ---- | C] (CANON INC.) -- C:\Windows\SysWow64\CNHMCA.dll [2013.03.12 12:22:30 | 000,354,816 | ---- | C] (CANON INC.) -- C:\Windows\SysWow64\CNMNPPM.DLL [2013.03.12 12:22:30 | 000,337,920 | ---- | C] (CANON INC.) -- C:\Windows\SysNative\CNMN6PPM.DLL [2013.03.12 12:22:30 | 000,144,384 | ---- | C] (CANON INC.) -- C:\Windows\SysNative\CNMN6UI.DLL [2013.03.12 12:22:30 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\STRING [2013.03.12 12:22:30 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\CHM [2013.03.12 12:22:19 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ [2013.03.12 12:22:12 | 000,000,000 | -H-D | C] -- C:\Windows\SysNative\CanonIJ Uninstaller Information [2013.03.12 12:22:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX870 series [2013.03.12 12:21:47 | 000,344,064 | ---- | C] (CANON INC.) -- C:\Windows\SysNative\CNMLMA7.DLL [2013.03.12 12:21:40 | 000,343,552 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCF2Lm.DLL [2013.03.12 12:21:40 | 000,182,272 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFMSm.EXE [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmUS.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmSE.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmRU.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmPT.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmPL.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmNL.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmIT.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmID.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmGR.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmFR.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmFI.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmES.DLL [2013.03.12 12:21:40 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmDE.DLL [2013.03.12 12:21:40 | 000,002,560 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmTR.DLL [2013.03.12 12:21:40 | 000,002,560 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmTH.DLL [2013.03.12 12:21:40 | 000,002,560 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmNO.DLL [2013.03.12 12:21:40 | 000,002,560 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmKR.DLL [2013.03.12 12:21:40 | 000,002,560 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmJP.DLL [2013.03.12 12:21:40 | 000,002,560 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmHU.DLL [2013.03.12 12:21:40 | 000,002,560 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmDK.DLL [2013.03.12 12:21:40 | 000,002,560 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmCZ.DLL [2013.03.12 12:21:40 | 000,002,560 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmAR.DLL [2013.03.12 12:21:40 | 000,002,048 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmTW.DLL [2013.03.12 12:21:40 | 000,002,048 | ---- | C] (Canon Inc.) -- C:\Windows\SysNative\CNCFLmCN.DLL [2013.03.12 12:21:38 | 000,245,760 | ---- | C] (CANON INC.) -- C:\Windows\SysNative\CNMIUA7.DLL [2013.03.12 12:21:34 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ [2013.03.10 16:37:20 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\FileZilla [2013.03.10 16:37:14 | 000,000,000 | ---D | C] -- C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client [2013.03.10 16:37:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client [2008.08.12 06:45:20 | 000,155,648 | ---- | C] (ASUS) -- C:\Program Files (x86)\Common Files\MSIactionall.dll ========== Files - Modified Within 30 Days ========== [2013.04.08 21:22:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3834454562-399088190-3642704615-1000UA.job [2013.04.08 21:22:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3834454562-399088190-3642704615-1000Core.job [2013.04.08 21:21:32 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xxxxx\Desktop\OTL.exe [2013.04.08 20:48:00 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.04.08 20:31:20 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.04.08 20:31:20 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.04.08 20:23:36 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.04.08 20:23:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.04.08 20:23:21 | 3105,263,616 | -HS- | M] () -- C:\hiberfil.sys [2013.04.08 14:23:42 | 000,000,128 | ---- | M] () -- C:\Users\xxxxx\AppData\Local\Temp$$_temp.ldb [2013.04.08 13:12:21 | 000,110,592 | ---- | M] () -- C:\Users\xxxxx\AppData\Local\Temp$$_temp.mdb [2013.04.07 20:46:45 | 000,002,346 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini [2013.04.07 20:46:44 | 000,001,583 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini [2013.04.07 20:44:30 | 000,000,097 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat [2013.04.07 20:37:21 | 000,613,083 | ---- | M] () -- C:\Users\xxxxx\Desktop\adw22cleaner.exe [2013.04.07 19:03:12 | 000,051,496 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\Windows\SysNative\drivers\stflt.sys [2013.04.05 20:26:57 | 000,000,600 | ---- | M] () -- C:\Users\xxxxx\AppData\Roaming\winscp.rnd [2013.04.04 18:37:33 | 000,000,600 | ---- | M] () -- C:\Users\xxxxx\AppData\Local\PUTTY.RND [2013.04.01 20:57:47 | 000,002,945 | ---- | M] () -- C:\Users\xxxxx\Desktop\FRITZ!DSL Startcenter.lnk [2013.04.01 20:57:47 | 000,002,911 | ---- | M] () -- C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Startcenter.lnk [2013.04.01 20:54:14 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013.04.01 20:54:14 | 000,654,166 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2013.04.01 20:54:14 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013.04.01 20:54:14 | 000,130,006 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2013.04.01 20:54:14 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013.03.30 11:07:16 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2013.03.28 21:27:34 | 000,000,877 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.umbrella [2013.03.28 20:55:56 | 000,000,877 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2013.03.28 18:42:42 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2013.03.28 18:42:42 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2013.03.28 18:42:42 | 000,095,648 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2013.03.28 18:42:41 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll [2013.03.28 18:42:41 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll [2013.03.28 18:42:41 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2013.03.28 11:28:19 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013.03.28 11:28:19 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013.03.27 23:34:47 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys [2013.03.27 23:34:47 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys [2013.03.27 23:34:47 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys [2013.03.22 16:57:58 | 000,005,249 | ---- | M] () -- C:\Users\xxxxx\Documents\Sehr geehrter Herr xxx.odt [2013.03.22 12:01:32 | 000,001,299 | ---- | M] () -- C:\Users\xxxxx\Desktop\Revo Uninstaller.lnk [2013.03.22 11:24:32 | 000,001,880 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2013.03.22 11:21:13 | 006,201,488 | ---- | M] () -- C:\Users\xxxxx\Desktop\fennec_installation_1_2_beta_3.exe [2013.03.19 08:55:42 | 000,062,285 | ---- | M] () -- C:\Users\xxxxx\Documents\MD.xml [2013.03.19 08:53:31 | 000,062,285 | ---- | M] () -- C:\Users\xxxxx\Documents\MD.csv [2013.03.16 19:55:00 | 001,054,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe [2013.03.16 19:55:00 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2013.03.16 19:55:00 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll [2013.03.16 19:55:00 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll [2013.03.16 19:55:00 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2013.03.16 19:55:00 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe [2013.03.16 19:55:00 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe [2013.03.16 19:55:00 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2013.03.16 19:55:00 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll [2013.03.16 19:55:00 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2013.03.16 19:55:00 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe [2013.03.16 19:55:00 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll [2013.03.16 19:54:59 | 003,958,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013.03.16 19:54:59 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2013.03.16 19:54:59 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2013.03.16 19:54:59 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat [2013.03.16 19:54:59 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat [2013.03.16 19:54:59 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll [2013.03.16 19:54:59 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013.03.16 19:54:59 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2013.03.16 19:54:59 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013.03.16 19:54:59 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2013.03.16 19:54:59 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013.03.16 19:54:59 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2013.03.16 19:54:59 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2013.03.16 19:54:59 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2013.03.16 19:54:59 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2013.03.16 19:54:59 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2013.03.16 19:54:59 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2013.03.16 19:54:59 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2013.03.16 19:54:59 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2013.03.16 19:54:59 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll [2013.03.16 19:54:59 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2013.03.16 19:54:59 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2013.03.16 19:54:59 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe [2013.03.16 19:54:59 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll [2013.03.16 19:54:59 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe [2013.03.16 19:54:59 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2013.03.16 19:54:59 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll [2013.03.16 19:54:59 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll [2013.03.16 19:54:59 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2013.03.16 19:54:59 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll [2013.03.16 19:54:59 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2013.03.16 19:54:59 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll [2013.03.16 19:54:59 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2013.03.16 19:54:59 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe [2013.03.16 19:54:59 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [2013.03.16 19:54:59 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll [2013.03.16 19:54:59 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe [2013.03.16 19:54:59 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll [2013.03.16 19:54:59 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2013.03.16 19:54:59 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll [2013.03.16 19:54:59 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx [2013.03.16 19:54:59 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2013.03.16 19:54:59 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013.03.16 19:54:59 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll [2013.03.16 19:54:59 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll [2013.03.16 19:54:59 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2013.03.16 19:54:59 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2013.03.16 19:54:59 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2013.03.16 19:54:59 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf [2013.03.16 19:54:59 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf [2013.03.16 19:54:59 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2013.03.16 19:54:59 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe [2013.03.16 19:54:59 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2013.03.16 19:54:59 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2013.03.16 19:54:58 | 000,526,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2013.03.16 19:54:58 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2013.03.16 19:54:58 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx [2013.03.16 19:54:58 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll [2013.03.16 19:53:55 | 003,928,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll [2013.03.16 19:53:55 | 002,776,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll [2013.03.16 19:53:55 | 002,565,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [2013.03.16 19:53:55 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll [2013.03.16 19:53:55 | 001,887,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll [2013.03.16 19:53:55 | 001,682,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll [2013.03.16 19:53:55 | 001,643,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2013.03.16 19:53:55 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll [2013.03.16 19:53:55 | 001,424,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll [2013.03.16 19:53:55 | 001,238,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll [2013.03.16 19:53:55 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll [2013.03.16 19:53:55 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll [2013.03.16 19:53:55 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll [2013.03.16 19:53:55 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll [2013.03.16 19:53:55 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll [2013.03.16 19:53:55 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll [2013.03.16 19:53:55 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll [2013.03.16 19:53:55 | 000,333,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll [2013.03.16 19:53:55 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll [2013.03.16 19:53:55 | 000,245,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll [2013.03.16 19:53:55 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll [2013.03.16 19:53:55 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll [2013.03.16 19:53:55 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll [2013.03.16 19:53:55 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.03.16 19:53:55 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.03.16 19:53:55 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.03.16 19:53:55 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.03.16 19:53:55 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.03.16 19:53:55 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.03.16 19:53:55 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.03.16 19:53:55 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.03.16 19:53:55 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll [2013.03.16 19:53:55 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll [2013.03.16 19:53:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.03.16 19:53:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.03.16 19:53:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll [2013.03.16 19:53:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll [2013.03.16 19:53:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.03.16 19:53:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.03.16 19:53:55 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.03.16 19:53:55 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.03.16 08:30:42 | 004,546,560 | ---- | M] (Google Inc.) -- C:\Windows\SysWow64\GPhotos.scr [2013.03.15 22:49:40 | 000,001,026 | ---- | M] () -- C:\Users\xxxxx\Desktop\SopCast.lnk [2013.03.12 13:49:12 | 000,296,977 | ---- | M] () -- C:\Users\xxxxx\Documents\Dokument3.pdf [2013.03.12 13:25:27 | 024,458,720 | ---- | M] (Foxit Corporation ) -- C:\Users\xxxxx\Desktop\FoxitAdvancedPDFEditor305_enu_Setup.exe [2013.03.12 13:12:23 | 000,629,640 | ---- | M] () -- C:\Users\xxxxx\Documents\Ihr All-Inclusive Urlaub.rtf [2013.03.12 13:08:54 | 000,001,241 | ---- | M] () -- C:\Users\Public\Desktop\PDF2Word Konverter.lnk [2013.03.12 12:59:45 | 000,001,088 | ---- | M] () -- C:\Users\xxxxx\Desktop\Free PDF to Word Doc Converter.lnk [2013.03.12 12:55:20 | 000,307,859 | ---- | M] () -- C:\Users\xxxxx\Documents\Ihr All-Inclusive Urlaub.pdf [2013.03.12 12:51:29 | 001,113,971 | ---- | M] () -- C:\Users\xxxxx\Documents\GMX - Ihr All-Inclusive Urlaub.pdf [2013.03.12 12:25:16 | 000,001,903 | ---- | M] () -- C:\Users\Public\Desktop\PDF24 Editor.lnk [2013.03.12 12:25:16 | 000,001,888 | ---- | M] () -- C:\Users\Public\Desktop\PDF24 Fax.lnk [2013.03.12 12:22:56 | 000,002,044 | ---- | M] () -- C:\Users\Public\Desktop\Canon IJ Network Tool.lnk ========== Files Created - No Company Name ========== [2013.04.07 20:44:06 | 000,000,097 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat [2013.04.07 20:37:11 | 000,613,083 | ---- | C] () -- C:\Users\xxxxx\Desktop\adw22cleaner.exe [2013.04.01 20:57:47 | 000,002,945 | ---- | C] () -- C:\Users\xxxxx\Desktop\FRITZ!DSL Startcenter.lnk [2013.04.01 20:57:47 | 000,002,911 | ---- | C] () -- C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Startcenter.lnk [2013.04.01 11:23:41 | 000,110,592 | ---- | C] () -- C:\Users\xxxxx\AppData\Local\Temp$$_temp.mdb [2013.04.01 11:23:41 | 000,000,128 | ---- | C] () -- C:\Users\xxxxx\AppData\Local\Temp$$_temp.ldb [2013.03.30 11:07:16 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2013.03.22 22:17:14 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3834454562-399088190-3642704615-1000UA.job [2013.03.22 22:17:13 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3834454562-399088190-3642704615-1000Core.job [2013.03.22 14:52:47 | 000,001,054 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk [2013.03.22 12:01:32 | 000,001,299 | ---- | C] () -- C:\Users\xxxxx\Desktop\Revo Uninstaller.lnk [2013.03.22 11:24:32 | 000,001,880 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2013.03.22 11:21:03 | 006,201,488 | ---- | C] () -- C:\Users\xxxxx\Desktop\fennec_installation_1_2_beta_3.exe [2013.03.19 08:55:42 | 000,062,285 | ---- | C] () -- C:\Users\xxxxx\Documents\MD.xml [2013.03.19 08:53:31 | 000,062,285 | ---- | C] () -- C:\Users\xxxxx\Documents\MD.csv [2013.03.18 16:52:57 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2013.03.16 19:54:59 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf [2013.03.16 19:54:59 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf [2013.03.15 22:49:40 | 000,001,026 | ---- | C] () -- C:\Users\xxxxx\Desktop\SopCast.lnk [2013.03.13 21:36:38 | 000,005,249 | ---- | C] () -- C:\Users\xxxxx\Documents\Sehr geehrter Herr xxx.odt [2013.03.12 13:49:15 | 000,296,977 | ---- | C] () -- C:\Users\xxxxx\Documents\Dokument3.pdf [2013.03.12 13:25:53 | 000,001,431 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Advanced PDF Editor.lnk [2013.03.12 13:12:23 | 000,629,640 | ---- | C] () -- C:\Users\xxxxx\Documents\Ihr All-Inclusive Urlaub.rtf [2013.03.12 13:08:54 | 000,001,241 | ---- | C] () -- C:\Users\Public\Desktop\PDF2Word Konverter.lnk [2013.03.12 12:59:45 | 000,001,088 | ---- | C] () -- C:\Users\xxxxx\Desktop\Free PDF to Word Doc Converter.lnk [2013.03.12 12:54:27 | 000,307,859 | ---- | C] () -- C:\Users\xxxxx\Documents\Ihr All-Inclusive Urlaub.pdf [2013.03.12 12:51:38 | 001,113,971 | ---- | C] () -- C:\Users\xxxxx\Documents\GMX - Ihr All-Inclusive Urlaub.pdf [2013.03.12 12:25:16 | 000,001,903 | ---- | C] () -- C:\Users\Public\Desktop\PDF24 Editor.lnk [2013.03.12 12:25:16 | 000,001,888 | ---- | C] () -- C:\Users\Public\Desktop\PDF24 Fax.lnk [2013.03.12 12:22:56 | 000,002,044 | ---- | C] () -- C:\Users\Public\Desktop\Canon IJ Network Tool.lnk [2013.03.12 12:22:54 | 000,015,360 | ---- | C] () -- C:\Windows\SysWow64\CNC1743D.TBL [2013.02.09 15:40:37 | 000,000,600 | ---- | C] () -- C:\Users\xxxxx\AppData\Roaming\winscp.rnd [2013.02.08 22:39:46 | 000,000,600 | ---- | C] () -- C:\Users\xxxxx\AppData\Local\PUTTY.RND [2013.02.08 20:30:31 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini [2012.12.19 21:52:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2012.12.19 21:52:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2012.05.02 14:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll [2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2010.04.05 03:15:59 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe [2009.04.08 19:31:56 | 000,106,496 | ---- | C] () -- C:\Program Files (x86)\Common Files\CPInstallAction.dll [2008.05.22 17:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files (x86)\Common Files\banner.jpg ========== ZeroAccess Check ========== [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] ========== LOP Check ========== [2013.03.22 14:59:07 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\Audacity [2013.02.15 23:05:00 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant [2013.02.03 00:44:09 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\DAEMON Tools Lite [2013.03.07 13:09:16 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\DVDVideoSoft [2013.03.24 17:24:42 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\ElevatedShortcut [2013.03.10 22:45:44 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\FileZilla [2013.03.12 13:25:50 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\Foxit Advanced PDF Editor [2013.04.03 21:32:36 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\FreeCall [2013.02.09 19:32:32 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\FreeCommander [2013.04.01 22:19:27 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\FRITZ! [2013.02.10 12:36:57 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\IN-MEDIAKG [2013.04.08 20:29:36 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\IObit [2013.02.15 13:48:28 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\IrfanView [2013.02.10 12:37:10 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\mresreg [2013.02.03 01:46:24 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\Notepad++ [2013.02.16 11:33:02 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\PDAppFlex [2013.03.12 13:08:53 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\Pdf2Word [2013.04.07 19:03:12 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\Spyware Terminator [2013.02.18 13:57:20 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\TrueCrypt [2013.02.09 15:30:22 | 000,000,000 | ---D | M] -- C:\Users\xxxxx\AppData\Roaming\Wireshark ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:2F370DA6 @Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:A724744F < End of report > Geändert von LeLion (08.04.2013 um 20:55 Uhr) |
|
08.04.2013, 20:49
| #6 |
| | Delta-Search hat mich leider auch erwischt OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 08.04.2013 21:34:33 - Run 4
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\xxxxx\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,86 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 57,57% Memory free
7,71 Gb Paging File | 5,81 Gb Available in Paging File | 75,37% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 200,00 Gb Total Space | 128,78 Gb Free Space | 64,39% Space Free | Partition Type: NTFS
Drive D: | 1,86 Gb Total Space | 1,83 Gb Free Space | 98,52% Space Free | Partition Type: FAT
Drive G: | 200,00 Gb Total Space | 161,67 Gb Free Space | 80,83% Space Free | Partition Type: NTFS
Drive H: | 196,17 Gb Total Space | 144,64 Gb Free Space | 73,74% Space Free | Partition Type: NTFS
Computer Name: ASUS-NB | User Name: xxxxx | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-3834454562-399088190-3642704615-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AutoUpdateDisableNotify" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0AE00A0E-9A12-4E98-8815-196E02EF5615}" = rport=10243 | protocol=6 | dir=out | app=system |
"{15B15A86-F697-4448-8172-ADB4DEDE5EC0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{194E08F2-D0E0-4D4E-ADC6-F79C6BFA40A7}" = lport=138 | protocol=17 | dir=in | app=system |
"{2C5B782C-AE1D-40D4-A176-32ABFB9ED5B9}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe |
"{3D8F75F9-88D3-41AC-A58E-5DDCC46E36D4}" = lport=445 | protocol=6 | dir=in | app=system |
"{3EEDBB5C-39C8-46E0-A521-D6A32891F108}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{41D6F632-C86A-49BC-A3E8-07068174932C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{57DC8B7D-ABB9-42E0-9DA6-5F1330BE73E9}" = lport=2869 | protocol=6 | dir=in | app=system |
"{63C97AE4-CB16-4668-8E18-7E34D23CC26A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{66A6100D-F1C4-4E4E-8CAC-1A9B3809C896}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{725D795F-7E34-4413-9E35-A7A8D9B74773}" = rport=137 | protocol=17 | dir=out | app=system |
"{7999DAC1-4B3C-452C-AF04-04870B24E85D}" = rport=139 | protocol=6 | dir=out | app=system |
"{857C4DD3-88F1-4BD5-A60D-F127514F2220}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{85CBA9E7-5863-4815-8BFA-BF577787B80B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B0DC713C-5F6D-448B-9A03-307764A9CD0A}" = lport=139 | protocol=6 | dir=in | app=system |
"{BBCCAC11-59DF-4541-8419-1E8C40F5EE5C}" = lport=10243 | protocol=6 | dir=in | app=system |
"{CBC6BE3E-243A-4767-9A39-4C36778ED9B2}" = rport=445 | protocol=6 | dir=out | app=system |
"{CF71BEDC-6074-4A4A-BFFF-D3B55DAAD1BC}" = lport=2869 | protocol=6 | dir=in | app=system |
"{D039DD76-9B38-43A8-8836-081066527A99}" = rport=138 | protocol=17 | dir=out | app=system |
"{DDE64E8E-9E7B-4280-A863-677466AAFB11}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{E037FF2E-A46B-4A44-ABE1-8BF71DB93BF7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{E9128E41-7445-48F2-89CC-1E3D5F68EEC8}" = lport=137 | protocol=17 | dir=in | app=system |
"{EF1C2B54-DE7C-430F-9972-094F8DF2554F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F4A8F331-B738-4A80-856D-B8C0C9ACFA78}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1AA0E0A4-46B1-4C0B-A492-4F9414089165}" = protocol=17 | dir=in | app=c:\program files\fritz!dsl\webwaigd.exe |
"{1CB6C5B4-6016-4C08-916A-20F6346E48F5}" = protocol=6 | dir=in | app=c:\program files\fritz!dsl\igdctrl.exe |
"{1E7C8744-DF2B-4623-946D-9C43424FCFFA}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{219FB123-E905-4882-BD09-E63FE0AAEDC0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{225AEC98-3626-43E6-9291-FC2F62643D91}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{232CCC8C-5F74-42CC-97A4-26931E7E1B8F}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{2472E4E1-7982-4256-9940-83D09E8B85A5}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"{2E38A11C-11C0-4BB8-AEF2-9F79D9C27321}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{3170A071-A24E-40C5-8379-AAE941A8D76D}" = protocol=17 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminatorupdate.exe |
"{37CE4F62-262E-42C1-B055-B51D9681D19F}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{3B8CC548-E631-44FB-90EF-21830DE77224}" = protocol=6 | dir=in | app=c:\program files\fritz!dsl\fboxupd.exe |
"{3F9A93FE-A36F-43F2-B18A-A0C9AB515634}" = protocol=17 | dir=in | app=c:\program files\fritz!dsl\igdctrl.exe |
"{4957805B-0330-47B3-BEA0-3DFD254CC10F}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{4ADC681F-0720-4022-8F51-CF83530CF16E}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{533FAB99-517A-4B60-BF5B-715574675441}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"{55F8BB7F-724E-4111-A232-24BB870AD55E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{62CB5571-030D-4B89-9BBD-73A039A36B42}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{62E18455-1EAB-47B9-B158-979DC5A90E4F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6596DEDD-0A98-4C53-8AA1-B78B6090FDCB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{67E7ECEF-6E78-4D46-9E75-E7F636D685E0}" = protocol=17 | dir=in | app=c:\program files\fritz!dsl\fboxupd.exe |
"{7479DDFD-B16D-4354-8D06-CAEE4765C506}" = protocol=6 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminator.exe |
"{77822C6E-87B5-4BA8-99C1-7D599C5AD9CB}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{855E99AC-9638-4D96-9169-4FC139A323C2}" = protocol=17 | dir=in | app=c:\users\xxxxx\downloads\tinyumbrella-6.12.00.exe |
"{8B20D25A-73DB-44D5-AF82-04A068754704}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A560EE11-B8A3-4773-8FA1-00F3DC35B364}" = protocol=6 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminatorupdate.exe |
"{A8E8FB16-A9E1-4EB1-AC61-E4C1CC1256AE}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe |
"{A9610ADE-5900-468A-B8F8-F4104653C05E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A9AEAB73-A5D6-4832-B827-54B1C569EA84}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{AF6DF72F-5B71-44D2-9B91-1FCB714A73EF}" = protocol=17 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminator.exe |
"{B385E4C6-95A1-43BA-AB77-9ADA19B7B174}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B3F16DF1-6C4B-4B50-BCDC-481D6ED5CC9C}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B9D3027F-74C2-4BE7-962B-FD3FA23F9A7C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{C2B02663-F8F2-4AC8-B5CB-22E792CCE1F0}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C6162054-66CC-49FD-93FB-6D5D18416653}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{CC4E8D3F-41C7-4B0F-A717-9F9B040F1682}" = protocol=6 | dir=out | app=system |
"{DA23ED10-1239-4716-940C-11DB50588A83}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{DC111D8E-004E-4360-BE9D-96F817A11B25}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{E0E3641A-94F0-4591-A7BA-1A5C046B22AC}" = protocol=6 | dir=in | app=c:\users\xxxxx\downloads\tinyumbrella-6.12.00.exe |
"{E51C9FDC-FEA1-4D9E-A07D-F6CCBADB1FEF}" = protocol=6 | dir=in | app=c:\program files\fritz!dsl\webwaigd.exe |
"{E7C50990-7FE0-469F-8244-D16F071C3481}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{E7EF0AB1-1400-49CF-A6D3-F9958F56D5D7}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{EA7F9BB4-1879-465F-917C-98D3DCB716B3}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{EFADC119-E50C-4044-ABEE-C7588E51129E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{FC727D4E-3C96-4F46-AE7C-D6274C1974B1}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{FE12C407-5961-4BCE-A755-3D1188AFBE67}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"TCP Query User{046A6BE5-5CAB-4938-8D15-C9B2DE5A2F1A}C:\users\xxxxx\downloads\tinyumbrella-6.12.00.exe" = protocol=6 | dir=in | app=c:\users\xxxxx\downloads\tinyumbrella-6.12.00.exe |
"TCP Query User{34219466-45B5-45ED-B75F-CA0EDB5E397B}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"TCP Query User{3BE3B548-1E48-4915-ACAC-A0B616F57DD4}C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe" = protocol=6 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminatorupdate.exe |
"TCP Query User{45608998-CB5F-419F-9FC9-CCD17E9383D6}C:\users\xxxxx\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\xxxxx\appdata\local\akamai\netsession_win.exe |
"TCP Query User{AB487DD4-31CB-40E6-AF9C-334DF04B83D2}C:\program files (x86)\freecall.com\freecall\freecall.exe" = protocol=6 | dir=in | app=c:\program files (x86)\freecall.com\freecall\freecall.exe |
"TCP Query User{DFE360D4-266E-4E0F-BBCD-1FC5D2C747D7}C:\program files (x86)\freecall.com\freecall\freecall.exe" = protocol=6 | dir=in | app=c:\program files (x86)\freecall.com\freecall\freecall.exe |
"TCP Query User{F98016A0-E6DE-4BDB-BB8A-1604B93EDECE}C:\program files (x86)\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files (x86)\sopcast\sopcast.exe |
"TCP Query User{FF5938F2-759D-439A-9035-0ECDF491ADA3}C:\users\xxxxx\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\xxxxx\appdata\local\akamai\netsession_win.exe |
"UDP Query User{51903D32-B2B1-4FD8-8087-DE0A237D01F2}C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe" = protocol=17 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminatorupdate.exe |
"UDP Query User{6C66D67F-83BD-49F1-A67C-C2576ED8B617}C:\program files (x86)\freecall.com\freecall\freecall.exe" = protocol=17 | dir=in | app=c:\program files (x86)\freecall.com\freecall\freecall.exe |
"UDP Query User{6F3DDC6B-72FD-49DD-88D1-635473934B59}C:\program files (x86)\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files (x86)\sopcast\sopcast.exe |
"UDP Query User{7730DEFD-C9A8-48AC-B925-C305E51FB983}C:\users\xxxxx\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\xxxxx\appdata\local\akamai\netsession_win.exe |
"UDP Query User{7A2443F9-F436-408E-B595-B3966ECA398C}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"UDP Query User{98B3F258-0C92-47AB-8ECF-38A8257B6109}C:\program files (x86)\freecall.com\freecall\freecall.exe" = protocol=17 | dir=in | app=c:\program files (x86)\freecall.com\freecall\freecall.exe |
"UDP Query User{B2187394-43B3-4FCE-8CF4-280C761E3635}C:\users\xxxxx\downloads\tinyumbrella-6.12.00.exe" = protocol=17 | dir=in | app=c:\users\xxxxx\downloads\tinyumbrella-6.12.00.exe |
"UDP Query User{C6007505-CC0D-47FD-9914-19B5994334EC}C:\users\xxxxx\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\xxxxx\appdata\local\akamai\netsession_win.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0225AD21-F3E2-4916-BFF3-65D3F9052582}" = iTunes
"{0838B70E-B35E-AC61-EF41-3E9472AD6C41}" = AMD Drag and Drop Transcoding
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX870_series" = Canon MX870 series MP Drivers
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{2D5D9603-22CF-4B99-83F6-0CD20330F62E}" = FRITZ!DSL64
"{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
"{3768263E-8BE8-4CEF-9463-6D36F731824B}" = Windows Live Family Safety
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel(R) Turbo Boost Technology Monitor
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E7D00D0-255E-F084-28A3-400DCD5EF8A7}" = ccc-utility64
"{90150000-0015-0407-1000-0000000FF1CE}" = Microsoft Access MUI (German) 2013
"{90150000-0016-0407-1000-0000000FF1CE}" = Microsoft Excel MUI (German) 2013
"{90150000-0018-0407-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (German) 2013
"{90150000-0019-0407-1000-0000000FF1CE}" = Microsoft Publisher MUI (German) 2013
"{90150000-001A-0407-1000-0000000FF1CE}" = Microsoft Outlook MUI (German) 2013
"{90150000-001B-0407-1000-0000000FF1CE}" = Microsoft Word MUI (German) 2013
"{90150000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch
"{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office*- Français
"{90150000-001F-0410-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Italiano
"{90150000-002C-0407-1000-0000000FF1CE}" = Microsoft Office Proofing (German) 2013
"{90150000-0044-0407-1000-0000000FF1CE}" = Microsoft InfoPath MUI (German) 2013
"{90150000-006E-0407-1000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2013
"{90150000-0090-0407-1000-0000000FF1CE}" = Microsoft DCF MUI (German) 2013
"{90150000-00A1-0407-1000-0000000FF1CE}" = Microsoft OneNote MUI (German) 2013
"{90150000-00BA-0407-1000-0000000FF1CE}" = Microsoft Groove MUI (German) 2013
"{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013
"{90150000-00C1-0407-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (German) 2013
"{90150000-00E1-0407-1000-0000000FF1CE}" = Microsoft Office OSM MUI (German) 2013
"{90150000-00E2-0407-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (German) 2013
"{90150000-012B-0407-1000-0000000FF1CE}" = Microsoft Lync MUI (German) 2013
"{91150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013
"{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}" = ASUS Power4Gear Hybrid
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{D285FC5F-3021-32E9-9C59-24CA325BDC5C}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729
"{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}" = SRS Premium Sound Control Panel
"{F37A899E-1745-52F5-658F-9A4DA4D46BB7}" = AMD Catalyst Install Manager
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F800CF18-6470-D909-B460-73F2F41030B4}" = AMD Accelerated Video Transcoding
"{F9434B34-EDCA-DF34-FD55-8D66DF8DBECF}" = AMD Media Foundation Decoders
"ASUS WebStorage" = ASUS WebStorage
"Elantech" = ETDWare PS/2-x64 7.0.5.9_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Office15.PROPLUSR" = Microsoft Office Professional Plus 2013
"VLC media player" = VLC media player 2.0.5
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}" = ASUS AI Recovery
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{0C91919D-0386-C260-0822-7A01C5BCD58A}" = CCC Help Greek
"{111225F7-13A9-4AD6-A759-C7923C8981E6}" = BCL easyConverter 3.0 RTF SDK Module
"{143593DA-4632-50AE-A6D9-7676695B33C8}" = CCC Help Finnish
"{16584456-9AD2-3FA4-C8B5-B2EE2D856E6C}" = Catalyst Control Center Localization All
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = ASUS Video Magic
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{33365E1D-B501-AA04-F802-88BF0A4DB9F7}" = CCC Help French
"{3B05F2FB-745B-4012-ADF2-439F36B2E70B}" = ATKOSD2
"{43C5AF90-0558-590E-30A3-7A8FEEA4B45B}" = Catalyst Control Center Graphics Previews Common
"{441B922B-E0AC-F7BB-E577-095E3E3B8D03}" = CCC Help Turkish
"{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}" = Apple Application Support
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}" = Junk Mail filter update
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{5598FBEB-CEB5-41CE-BAA4-70128DF02FFB}" = BCL easyConverter 3.0 Licensing Module (BCL License)
"{56736259-613E-4A3B-B428-6235F2E76F44}_is1" = Spyware Terminator 2012
"{5A166C0B-9557-4364-A057-F946D674E6AC}" = Windows Live Mail
"{5AF4B3C4-C393-48D7-AC7E-8E7615579548}" = Adobe AIR
"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck
"{5C03C49F-662A-B4EF-E5EC-1C1FFFDD6578}" = CCC Help Norwegian
"{5E21B617-F52E-BB10-92F9-C8AB2C799A8A}" = Adobe Download Assistant
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{69ABD76E-52E6-E809-9E6B-B6E194DF6E30}" = CCC Help Portuguese
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B77A7F6-DD63-4F13-A6FF-83137A5AC354}" = ASUS CopyProtect
"{6B96DADA-1A27-4A04-8CB2-CC45168D05FA}" = Windows Live Fotogalerie
"{6C84C3D8-F2E1-EF85-34E2-EFD8C583A414}" = CCC Help Swedish
"{6FEBE183-A517-770B-9BEC-E0AF07B2C0ED}" = Catalyst Control Center InstallProxy
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7C05592D-424B-46CB-B505-E0013E8E75C9}" = ATK Hotkey
"{7DA5255C-EE35-848E-4482-407BB876BD15}" = CCC Help Russian
"{81821BF8-DA20-4F8C-AA87-F70A274828D4}" = Windows Live Writer
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 5.3.0
"{831C840A-8331-E269-24EE-52A3EDEC8830}" = CCC Help Chinese Traditional
"{835686C5-8650-49EB-8CA0-4528B4035495}" = Windows Live Call
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{83E61899-81B2-4F35-A3EB-42CF51B94BBD}" = BCL easyConverter 3.0 Loader SDK Module
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8C1E2925-14F8-45AA-B999-1E2A74BF5607}" = Windows Live Sync
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95120000-0120-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9AF92104-2955-867B-E374-63FA2AB55CC4}" = CCC Help Korean
"{9BC10B90-1592-3C5A-BBA7-BACDA0B52405}" = CCC Help Japanese
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CCC78EF-027E-40E0-9B61-39932C65E3FE}" = Acronis*Disk*Director*Home
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{A71AF1EF-6C46-DC9A-84C0-0DADE7F3BEEE}" = CCC Help Hungarian
"{A7527D8A-4C50-9D56-CB37-922E1EC96B82}" = CCC Help Thai
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9CE0266-6801-3B33-94AD-00520085CF4B}" = Google Talk Plugin
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.2 MUI
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{B5A5627C-0173-4DB2-ADA8-740479370F67}" = Express Gate
"{B7416D0F-8282-468A-5C3D-CA5713B6F4C0}" = Catalyst Control Center
"{BD21728C-22C5-2D69-2F52-C4437E8FF02E}" = Catalyst Control Center InstallProxy
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{CA311B78-954E-44BC-913F-B5B8B74A786B}" = CCC Help German
"{D1E5870E-E3E5-4475-98A6-ADD614524ADF}" = ATK Media
"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service
"{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}" = Intel(R) Turbo Boost Technology Driver
"{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"{DF5F687F-8018-4542-9F98-7084E9022917}" = Windows Live Essentials
"{E0184F33-58CA-A249-0D1B-F23F9206410D}" = CCC Help English
"{E1BDAC32-B358-442C-A337-D91BA0386824}" = BCL easyConverter 3.0 SDK Module
"{E28884AE-E40E-2F71-9511-8CC8C071147F}" = CCC Help Chinese Standard
"{E3DB1759-C652-E0E3-5B88-76286BF9B6D0}" = CCC Help Dutch
"{E4F26D72-E0BA-33B5-E5A4-542C545EFAAA}" = CCC Help Polish
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{E72F1051-B87E-4EF4-AE9F-8FDD229CC438}" = Catalyst Control Center - Branding
"{E9820957-CB43-3BD1-3A00-25C7CB37EE1D}" = CCC Help Danish
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{ECC9BBF1-5735-F27B-E25A-5522D8B3F044}" = CCC Help Italian
"{EEC3A4C1-2B49-00CF-DA00-B27DC267236E}" = CCC Help Spanish
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}" = ASUS FancyStart
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F47662E5-C972-89F6-0416-5BAC56E835F9}" = CCC Help Czech
"{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform
"{F8D605A4-979D-43FF-9FD5-6BDDF1E3E288}" = BCL easyConverter 3.0 Module (Loader, BCL License)
"{FBE9E2A1-E7F0-42AA-875A-E230EB9AFA19}" = BCL easyConverter 3.0 Module (RTF, BCL License)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Anti-Twin 2013-02-10 22.13.51" = Anti-Twin (Installation 10.02.2013)
"ASUS_N_Series_Screensaver" = ASUS_N_Series_Screensaver
"Athan" = Athan Basic 4.4
"Audacity_is1" = Audacity 2.0.3
"Avira AntiVir Desktop" = Avira Free Antivirus
"B521582C-6BE3-491D-BCC8-FFB8301298E9_is1" = Foxit Advanced PDF Editor 3
"Canon_IJ_Network_Scan_UTILITY" = Canon IJ Network Scan Utility
"Canon_IJ_Network_UTILITY" = Canon IJ Network Tool
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"DAEMON Tools Lite" = DAEMON Tools Lite
"dreamboxEDIT" = dreamboxEDIT -- The one and only settings editor for your Dreambox
"Elevated Shortcut" = Elevated Shortcut
"FotoSortierer XL_is1" = FotoSortierer XL
"Free Audio Dub_is1" = Free Audio Dub version 1.7.9.908
"Free PDF to Word Doc Converter_is1" = Free PDF to Word Doc Converter v1.1
"FreeCall_is1" = FreeCall
"FreeCommander_is1" = FreeCommander 2009.02b
"Google Chrome" = Google Chrome
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = ASUS Video Magic
"InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"IrfanView" = IrfanView (remove only)
"KaloMa_is1" = KaloMa 4.94
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.70.0.1100
"Mozilla Firefox 19.0.2 (x86 de)" = Mozilla Firefox 19.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP Navigator EX 3.1" = Canon MP Navigator EX 3.1
"Notepad++" = Notepad++
"PDF2Word Converter_is1" = PDF2Word Converter Version 1.0.8 (Build 164)
"Picasa 3" = Picasa 3
"Revo Uninstaller" = Revo Uninstaller 1.94
"SopCast" = SopCast 3.8.2
"TrueCrypt" = TrueCrypt
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.2
"winscp3_is1" = WinSCP 5.1.3
"Wireshark" = Wireshark 1.8.5 (64-bit)
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-3834454562-399088190-3642704615-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"FileZilla Client" = FileZilla Client 3.6.0.2
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 03.04.2013 07:06:46 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6651118
Error - 03.04.2013 07:06:46 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6651118
Error - 03.04.2013 07:06:47 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 03.04.2013 07:06:47 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6652117
Error - 03.04.2013 07:06:47 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6652117
Error - 03.04.2013 07:06:48 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 03.04.2013 07:06:48 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6653115
Error - 03.04.2013 07:06:48 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6653115
Error - 03.04.2013 07:06:49 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 03.04.2013 07:06:49 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6654114
Error - 03.04.2013 07:06:49 | Computer Name = ASUS-NB | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6654114
[ System Events ]
Error - 27.03.2013 14:29:51 | Computer Name = ASUS-NB | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?27.?03.?2013 um 19:23:47 unerwartet heruntergefahren.
Error - 28.03.2013 13:13:32 | Computer Name = ASUS-NB | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
Error - 28.03.2013 14:06:11 | Computer Name = ASUS-NB | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
Error - 29.03.2013 14:13:21 | Computer Name = ASUS-NB | Source = DCOM | ID = 10005
Description =
Error - 29.03.2013 14:13:20 | Computer Name = ASUS-NB | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
iPod-Dienst erreicht.
Error - 29.03.2013 14:13:21 | Computer Name = ASUS-NB | Source = Service Control Manager | ID = 7000
Description = Der Dienst "iPod-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error - 30.03.2013 13:23:17 | Computer Name = ASUS-NB | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
Microsoft .NET Framework NGEN v4.0.30319_X64 erreicht.
Error - 31.03.2013 08:14:17 | Computer Name = ASUS-NB | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
Microsoft .NET Framework NGEN v4.0.30319_X64 erreicht.
Error - 01.04.2013 14:57:51 | Computer Name = ASUS-NB | Source = Service Control Manager | ID = 7030
Description = Der Dienst "AVM IGD CTRL Service" ist als interaktiver Dienst gekennzeichnet.
Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich
sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error - 07.04.2013 15:11:24 | Computer Name = ASUS-NB | Source = Service Control Manager | ID = 7034
Description = Dienst "ASLDR Service" wurde unerwartet beendet. Dies ist bereits
1 Mal passiert.
< End of report >
|
|
08.04.2013, 21:02
| #7 |
| /// TB-Ausbilder | Delta-Search hat mich leider auch erwischt Hallo, welche Probleme bestehen konkret aktuell noch?
__________________ cheers, Leo |
|
08.04.2013, 21:07
| #8 |
| | Delta-Search hat mich leider auch erwischt Hallo, ich merke gar keine Probleme, Nur bin ich mir leider unsicher, ob jetzt alle Viren und Malware gelöscht wurden! Was sagen die Logfiles aus? Ist der NB sauber oder eher nicht? Geändert von LeLion (08.04.2013 um 21:13 Uhr) |
|
08.04.2013, 21:15
| #9 | |
| /// TB-Ausbilder | Delta-Search hat mich leider auch erwischt Hallo, Zitat:
 Wir machen noch eine Kontrolle und schliessen vorhandene Sicherheitslücken: Schritt 1
Code:
ATTFilter :OTL
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:2F370DA6
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:A724744F
:commands
[emptytemp]
Schritt 2 Lade das Setup des ESET Online Scanners herunter und speichere es auf den Desktop.
Schritt 3 Downloade dir bitte SecurityCheck (Link 2).
Bitte poste in deiner nächsten Antwort:
__________________ cheers, Leo |
|
08.04.2013, 21:20
| #10 |
| | Delta-Search hat mich leider auch erwischt Ok, ich melde mich nochmal, wenn ich alle Schritte gemacht habe. |
|
08.04.2013, 21:21
| #11 |
| /// TB-Ausbilder | Delta-Search hat mich leider auch erwischt Ja, in Ordnung.
__________________ cheers, Leo |
|
09.04.2013, 10:38
| #12 |
| | Delta-Search hat mich leider auch erwischt Hallo Leo, ich bin wieder da. Ich konnte mich gestern nicht mehr zurückmelden, da der Scan von ESET sehr lang gedauert (2:30 std) hat... ich habe dann einfach den Rechner laufen lassen und bin ins Bett  Hier die geforderten Logs: FixLog von OTL Code:
ATTFilter All processes killed
========== OTL ==========
ADS C:\ProgramData\Temp:2F370DA6 deleted successfully.
ADS C:\ProgramData\Temp:A724744F deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: xxxxx
->Temp folder emptied: 2318503 bytes
->Temporary Internet Files folder emptied: 2108181 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 24336718 bytes
->Google Chrome cache emptied: 199700542 bytes
->Flash cache emptied: 850 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 44448 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 602112 bytes
Total Files Cleaned = 218,00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 04082013_222404
Files\Folders moved on Reboot...
C:\Users\xxxxx\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\xxxxx\AppData\Local\Temp\~DF0A2DEC405BC860C9.TMP moved successfully.
C:\Users\xxxxx\AppData\Local\Temp\~DF72AB9FCD757FB7AF.TMP moved successfully.
File move failed. C:\Users\xxxxx\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Code:
ATTFilter C:\Users\xxxxx\Downloads\SportHunterTVApp_setup(47c42).exe Win32/Adware.1ClickDownload.W application
Code:
ATTFilter Results of screen317's Security Check version 0.99.62 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 9 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Spyware Terminator 2012 Malwarebytes Anti-Malware Version 1.70.0.1100 Java 7 Update 17 Adobe Flash Player 11.6.602.168 Adobe Reader 9 Adobe Reader out of Date! Mozilla Firefox 19.0.2 Firefox out of Date! Google Chrome 25.0.1364.172 Google Chrome 26.0.1410.43 ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Soll ich die SportHunterTVApp_setup(47c42).exe-Datei ganz normal oder mit einem AntiSpyWare entfernen ? Geändert von LeLion (09.04.2013 um 10:45 Uhr) |
|
09.04.2013, 12:10
| #13 |
| /// TB-Ausbilder | Delta-Search hat mich leider auch erwischt Hallo, prima, den ESET-Fund kannst du einfach von Hand löschen. Dort ist nur ein bisschen unerwünschte Werbung drin. Wenn du die Updates bereits gemacht hast, dann müssen wir jetzt nur noch aufräumen. Cleanup Zum Schluss werden wir jetzt noch unsere Tools (inklusive der Quarantäne-Ordner) wegräumen, die verseuchten Systemwiederherstellungspunkte löschen und alle Einstellungen wieder herrichten. Auch diese Schritte sind noch wichtig und sollten in der angegebenen Reihenfolge ausgeführt werden.
>> OK << Wir sind durch, deine Logs sehen für mich im Moment sauber aus.  Ich habe dir nachfolgend ein paar Hinweise und Tipps zusammengestellt, die dazu beitragen sollen, dass du in Zukunft unsere Hilfe nicht mehr brauchen wirst. Bitte gib mir danach noch eine kurze Rückmeldung, wenn auch von deiner Seite keine Probleme oder Fragen mehr offen sind, damit ich dieses Thema als erledigt betrachten kann. Epilog: Tipps, Dos & Don'ts  Aktualität von System und SoftwareDas Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind:
Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für den Browser, Java, Flash-Player und PDF-Reader, denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-SoftwareEine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine verseuchte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons zur Empfehlung gibt:
(Un-)Sicheres Verhalten im InternetNebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine HinweiseAbschliessend noch ein paar grundsätzliche Bemerkungen:
Wenn du möchtest, kannst du das Forum mit einer kleinen Spende unterstützen. Es bleibt mir nur noch, dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen. 
__________________ cheers, Leo |
|
09.04.2013, 20:49
| #14 |
| | Delta-Search hat mich leider auch erwischt Herzlichen Dank nochmal für Deine Hilfe. ich hätte noch eine Frage, danach kann das Thread geschlossen werden. Unter C:\Users/xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs ist noch ein noch einen Ordner "LSHunter.TV" mit einer "Uninstall-Datei... Hat das System LSHunter.TV etwa nicht sauber deinstalliert? Kann ich jetzt den Ordner manuell löschen? |
|
09.04.2013, 21:01
| #15 | |
| /// TB-Ausbilder | Delta-Search hat mich leider auch erwischtZitat:
Freut mich, dass wir helfen konnten.  Falls du dem Forum noch Verbesserungsvorschläge, Kritik oder ein Lob mitgeben möchtest, kannst du das hier tun. Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten. Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter. Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________ cheers, Leo |
|
| Themen zu Delta-Search hat mich leider auch erwischt |
| automatisch, avira, bericht, delta search, einstellungen, erwischt, explorer, festgestellt, firefox, folge, gelöscht, google, hallo zusammen, infizierte, internet, internet explorer, malwarebytes, namen, programm, scan, seite, spyware, startseite, suchmaschine, systemsteuerung, wiederholt |
Textbox.
Linear-Darstellung
