LyricsContainer und Spyhunter

Eligius1 · 20.07.2013, 19:05

Hallo,
vor ein paar Tagen habe ich auf meinem Computer ein Programm namens: LyricContainer in der Systemsteuerung gefunden. Dann wusste ich nicht was es für ein Programm ist denn ich wusste,dass ich sowas nicht installiert bzw. heruntergeladen habe. Also hab ich es gegoogelt und eine Seite gefunden in der stand dass es ein Virus sei und dass er nur zu löschen sei mit einem Programm namens: Spyhunter. Ich hatte schon auf runterladen geklickt,als ich merkte, dass die Seite wohl nicht so vertrauenswürdig ist. Kurz danach habe ich einen Scan mit MSE gemacht und es kamen zwei Meldungen dass etwas gefunden wurde,nämlich "Addware:Win32/Addlyrics" und "VirToolwin32/ObfuscartorXZ" dann hab ich sie angeblich gelöscht. Danach hab ich nochmal einen zweiten Scan gemacht,da hat er nichts mehr gefunden. Heute hab ich dann mal in meinem Programmordner was gesucht auf C: (meiner Hauptpartition) und entdeckt dass da neue Ordner sind die ich nicht kenne und nicht öffnen kann.Beim Anklicken erscheint eine Meldung:Auf den Ordner kann nicht zugegriffen werden. Jetzt Frage ich mich ob da was kaputt ist? Und ich habe im Netz gelesen selbst wenn Viren oder so gelöscht werden kann es doch der Fall sein dass der Computer nicht sauber ist. Meine Frage ist kann ich meinen Computer wieder ganz normal nutzen oder könnte da noch was drauf sein bzw. das Windows vielleicht beschädigt sein??

Bei den Scans die ich mit MSE gemacht habe weiß ich nicht wo man die Logfiles findet,aber ich habe welche mit euren tools gemacht und in den Anhang geschaufelt,ich hoffe ich hab das richtig gemacht.

schrauber · 20.07.2013, 19:38

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Eligius1 · 21.07.2013, 00:08

frst.txt

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-07-2013
Ran by Michaela (administrator) on 21-07-2013 00:39:43
Running from C:\Users\Michaela\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) D:\Office14\MSOSYNC.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1281512 2013-01-27] (Microsoft Corporation)
HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-20] (Microsoft Corporation)
HKCU\...\Run: [OfficeSyncProcess] - D:\Office14\MSOSYNC.EXE [719672 2012-01-20] (Microsoft Corporation)
HKCU\...\Run: [ISUSPM Startup] - C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [221184 2004-08-09] (InstallShield Software Corporation)
HKCU\...\Run: [Google Update] - C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-07-19] (Google Inc.)
MountPoints2: {17d79c1a-dcea-11e2-91f3-1c6f65af05f1} - F:\Setup.exe
MountPoints2: {a4969cd4-68ce-11e0-ba67-1c6f65af05f1} - G:\Startme.exe
MountPoints2: {c01a50c0-6603-11e0-a803-806e6f6e6963} - F:\autorun.exe
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [336384 2011-03-09] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKCU - {3DD38C9F-FF74-4A34-B383-AAC33CF4DA8F} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/ig
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR DefaultSearchURL: (Google) - hxxp://www.google.de/search?q={searchTerms}
CHR DefaultSuggestURL: (Google) -       "suggest_url": "",
CHR Plugin: (Shockwave Flash) - C:\Users\Michaela\AppData\Local\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Michaela\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Michaela\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (VLC Multimedia Plug-in) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Google Update) - C:\Users\Michaela\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
CHR Plugin: (Microsoft Office 2010) - D:\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - D:\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Turn Off the Lights) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.2.0.12_0
CHR Extension: (YouTube) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (SmallringFX DarkMagenta Theme) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cchaoggejjglkolggnioggbfikicamgg\1.7_0
CHR Extension: (Google Search) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (White Noise) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejkjpdnomgodmagfmhojepjlajpoicip\1.7_0
CHR Extension: (PanicButton) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm\0.14.2.2_0
CHR Extension: (Digital Clock) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkjifoifglkpcdffkenpinlbjgephlo\1.11_0
CHR Extension: (Ghostery) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\4.1.2_0
CHR Extension: (Gmail) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-03-09] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
S3 Microsoft SharePoint Workspace Audit Service; D:\Office14\GROOVE.EXE [30785672 2012-09-20] (Microsoft Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [368832 2009-11-05] (AfaTech                  )
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-06-25] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-24] (DT Soft Ltd)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-06-25] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S3 RTL8187; C:\Windows\System32\DRIVERS\wg111v2.sys [243200 2007-02-12] (Realtek Semiconductor Corporation                           )
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-06-24] (Duplex Secure Ltd.)
S3 AODDriver4.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 EtronHub3; System32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI; System32\Drivers\EtronXHCI.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-21 00:38 - 2013-07-21 00:38 - 00000000 ____D C:\FRST
2013-07-21 00:29 - 2013-07-21 00:29 - 01779345 _____ (Farbar) C:\Users\Michaela\Downloads\FRST64.exe
2013-07-20 20:08 - 2013-07-20 20:08 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop.zip
2013-07-20 20:02 - 2013-07-20 20:02 - 00018732 _____ C:\Users\Michaela\Desktop\Desktop.zip
2013-07-20 19:12 - 2013-07-20 19:12 - 00010697 _____ C:\Users\Michaela\Desktop\gmer.txt
2013-07-20 15:36 - 2013-07-20 15:36 - 00377856 _____ C:\Users\Michaela\Desktop\gmer_2.1.19163.exe
2013-07-20 15:30 - 2013-07-20 15:30 - 00033718 _____ C:\Users\Michaela\Desktop\extra.txt
2013-07-20 15:29 - 2013-07-20 15:29 - 00038140 _____ C:\Users\Michaela\Desktop\otl.txt
2013-07-20 15:24 - 2013-07-20 15:24 - 00067438 _____ C:\Users\Michaela\Downloads\Extras.Txt
2013-07-20 15:22 - 2013-07-20 15:22 - 00076282 _____ C:\Users\Michaela\Downloads\OTL.Txt
2013-07-20 15:13 - 2013-07-20 15:13 - 00602112 _____ (OldTimer Tools) C:\Users\Michaela\Downloads\OTL.exe
2013-07-20 15:05 - 2013-07-20 15:05 - 00000658 _____ C:\Users\Michaela\Downloads\defogger_disable.log
2013-07-20 15:05 - 2013-07-20 15:05 - 00000188 _____ C:\Users\Michaela\defogger_reenable
2013-07-20 15:01 - 2013-07-20 15:01 - 00050477 _____ C:\Users\Michaela\Desktop\Defogger.exe
2013-07-20 14:42 - 2013-07-20 14:43 - 00000000 ____D C:\Users\Michaela\Downloads\welt306
2013-07-20 14:35 - 2013-07-20 14:35 - 00000659 _____ C:\Users\Public\Desktop\LauschAngriff.lnk
2013-07-20 14:35 - 2013-07-20 14:35 - 00000020 _____ C:\Windows\LauschAngriff.ini
2013-07-20 14:25 - 2013-07-20 14:25 - 00911720 _____ (Chaos Software Group, Inc.) C:\Users\Michaela\Downloads\atomic35.exe
2013-07-20 14:20 - 2013-07-20 14:20 - 00421517 _____ C:\Users\Michaela\Downloads\welt306.zip
2013-07-20 14:16 - 2013-07-20 14:16 - 00281088 _____ (SoftwareOK.de) C:\Users\Michaela\Downloads\LauschAngriff_Installer_1.31.exe
2013-07-19 13:29 - 2013-07-21 00:39 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA.job
2013-07-19 13:29 - 2013-07-20 13:39 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core.job
2013-07-19 13:29 - 2013-07-19 13:47 - 00002382 _____ C:\Users\Michaela\Desktop\Google Chrome.lnk
2013-07-19 13:29 - 2013-07-19 13:34 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA
2013-07-19 13:29 - 2013-07-19 13:34 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core
2013-07-19 13:29 - 2013-07-19 13:29 - 34887288 _____ (Google Inc.) C:\Users\Michaela\Downloads\Chrome28StandaloneSetup.exe
2013-07-19 13:29 - 2013-07-19 13:29 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-07-19 13:05 - 2013-07-19 13:05 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 13:05 - 2013-07-19 13:05 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-19 13:05 - 2013-07-19 13:05 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 13:00 - 2013-07-19 13:00 - 03357912 _____ (Piriform Ltd) C:\Users\Michaela\Downloads\ccsetup403_slim.exe
2013-07-17 15:43 - 2013-07-17 15:43 - 04179293 _____ (Lavalys, Inc.                                               ) C:\Users\Michaela\Downloads\everesthome220.exe
2013-07-17 15:43 - 2013-07-17 15:43 - 00000556 _____ C:\Users\Michaela\Desktop\EVEREST Home Edition.lnk
2013-07-17 14:53 - 2013-07-18 13:56 - 00000000 ____D C:\Users\Michaela\Heaven
2013-07-17 14:52 - 2013-07-17 14:57 - 01065984 _____ C:\Users\Michaela\AppData\Local\file__0.localstorage
2013-07-11 01:24 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 01:24 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 01:24 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 01:24 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 01:24 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 01:24 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 01:24 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 01:24 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 01:24 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 00:38 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 00:38 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 00:38 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 00:38 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 00:38 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 00:38 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 00:38 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 14:01 - 2013-07-09 14:01 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-09 14:00 - 2013-07-09 14:01 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-09 14:00 - 2013-07-09 14:01 - 00000000 ____D C:\Program Files\iTunes
2013-07-09 14:00 - 2013-07-09 14:00 - 00000000 ____D C:\Program Files\iPod
2013-07-06 16:50 - 2013-07-06 16:50 - 00808224 _____ C:\Users\Michaela\Downloads\PandaCloudAntivirus22.exe
2013-06-30 17:56 - 2013-06-30 17:56 - 00000667 _____ C:\Users\Michaela\Desktop\Machinarium.lnk
2013-06-30 17:56 - 2013-06-30 17:56 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Machinarium
2013-06-27 18:05 - 2013-06-27 18:05 - 00000000 ____D C:\Users\Michaela\Documents\Games
2013-06-27 17:42 - 2013-06-27 17:42 - 00000000 ____D C:\Windows\7032E73F68A048F98100E70E79169BAE.TMP
2013-06-27 17:40 - 2013-06-27 17:40 - 00002358 _____ C:\Users\Public\Desktop\Sherlock Holmes jagt Arsene Lupin  spielen.lnk
2013-06-27 17:36 - 2013-06-27 17:36 - 00000000 ____D C:\Program Files (x86)\Focus
2013-06-25 19:53 - 2013-06-25 19:53 - 00314016 _____ C:\Windows\system32\Drivers\atksgt.sys
2013-06-25 19:53 - 2013-06-25 19:53 - 00043680 _____ C:\Windows\system32\Drivers\lirsgt.sys
2013-06-25 00:44 - 2013-06-25 00:44 - 00000316 _____ C:\Users\Michaela\Downloads\BK_HYRE_000029DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:44 - 2013-06-25 00:44 - 00000315 _____ C:\Users\Michaela\Downloads\BK_ADKO_070969DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:40 - 2013-06-25 00:40 - 00000327 _____ C:\Users\Michaela\Downloads\BK_ADKO_001803DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:39 - 2013-06-25 00:39 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000867DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:38 - 2013-06-25 00:38 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000866DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:37 - 2013-06-25 00:37 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000865DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000858DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000864DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:40 - 2013-06-24 21:40 - 00000325 _____ C:\Users\Michaela\Downloads\BK_ADKO_000855DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:38 - 2013-06-24 21:38 - 00000304 _____ C:\Users\Michaela\Downloads\BK_ADKO_000850DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:37 - 2013-06-24 21:37 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010dDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:36 - 2013-06-24 21:36 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010cDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:35 - 2013-06-24 21:35 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010bDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:34 - 2013-06-24 21:34 - 00000320 _____ C:\Users\Michaela\Downloads\BK_RHEI_000042DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:33 - 2013-06-24 21:33 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010aDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:23 - 2013-06-24 21:23 - 00000318 _____ C:\Users\Michaela\Downloads\BK_SCHL_000005DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\Documents\Remedy
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\AppData\Local\SKIDROW
2013-06-24 19:04 - 2013-06-24 19:04 - 00000606 _____ C:\Users\Public\Desktop\Alan Wake.lnk
2013-06-24 18:45 - 2013-06-28 18:35 - 00000000 ____D C:\Program Files (x86)\CoolLyrics
2013-06-24 18:45 - 2013-06-24 18:45 - 00727096 _____ (Duplex Secure Ltd.) C:\Users\Michaela\Downloads\SPTDinst-v179-x64.exe
2013-06-24 18:44 - 2013-06-24 18:44 - 00211560 _____ C:\Users\Michaela\Downloads\SPTD.exe
2013-06-24 18:36 - 2013-06-24 18:36 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-06-24 18:36 - 2013-06-24 18:36 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-06-24 18:02 - 2013-07-19 13:09 - 00000000 ____D C:\Windows\pss
2013-06-24 17:50 - 2013-06-24 17:52 - 13901152 _____ (Disc Soft Ltd) C:\Users\Michaela\Downloads\DTLite4471-0333.exe
2013-06-24 17:49 - 2013-06-24 17:49 - 00000330 _____ C:\Users\Michaela\Downloads\BK_EINS_000316DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 17:46 - 2013-06-24 17:46 - 00000321 _____ C:\Users\Michaela\Downloads\BK_EINS_000282DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 17:04 - 2013-06-22 17:04 - 00000314 _____ C:\Users\Michaela\Downloads\BK_ADKO_000946DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 16:58 - 2013-06-22 16:58 - 00000318 _____ C:\Users\Michaela\Downloads\BK_ADKO_000927DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:46 - 2013-06-22 01:46 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000834DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:31 - 2013-06-22 01:31 - 00000310 _____ C:\Users\Michaela\Downloads\BK_ADKO_000224DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:06 - 2013-06-22 01:06 - 00000309 _____ C:\Users\Michaela\Downloads\BK_JUMB_000361DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-21 16:53 - 2013-06-21 16:53 - 00000333 _____ C:\Users\Michaela\Downloads\admhelper.adh

==================== One Month Modified Files and Folders =======

2013-07-21 00:39 - 2013-07-19 13:29 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA.job
2013-07-21 00:38 - 2013-07-21 00:38 - 00000000 ____D C:\FRST
2013-07-21 00:38 - 2009-07-14 06:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-21 00:38 - 2009-07-14 06:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-21 00:29 - 2013-07-21 00:29 - 01779345 _____ (Farbar) C:\Users\Michaela\Downloads\FRST64.exe
2013-07-21 00:27 - 2009-07-14 19:58 - 00682502 _____ C:\Windows\system32\perfh007.dat
2013-07-21 00:27 - 2009-07-14 19:58 - 00140146 _____ C:\Windows\system32\perfc007.dat
2013-07-21 00:27 - 2009-07-14 07:13 - 01563522 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-21 00:23 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-21 00:23 - 2009-07-14 06:51 - 00193233 _____ C:\Windows\setupact.log
2013-07-20 20:47 - 2011-04-13 16:54 - 01931367 _____ C:\Windows\WindowsUpdate.log
2013-07-20 20:08 - 2013-07-20 20:08 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop.zip
2013-07-20 20:02 - 2013-07-20 20:02 - 00018732 _____ C:\Users\Michaela\Desktop\Desktop.zip
2013-07-20 19:12 - 2013-07-20 19:12 - 00010697 _____ C:\Users\Michaela\Desktop\gmer.txt
2013-07-20 17:01 - 2011-04-15 22:52 - 00000000 ____D C:\Users\Michaela\Documents\Outlook-Dateien
2013-07-20 16:32 - 2011-06-09 13:51 - 00000000 ____D C:\Users\Michaela\Documents\PDF's
2013-07-20 16:21 - 2011-09-14 17:49 - 00000000 ____D C:\Users\Michaela\Desktop\Pics
2013-07-20 15:36 - 2013-07-20 15:36 - 00377856 _____ C:\Users\Michaela\Desktop\gmer_2.1.19163.exe
2013-07-20 15:30 - 2013-07-20 15:30 - 00033718 _____ C:\Users\Michaela\Desktop\extra.txt
2013-07-20 15:29 - 2013-07-20 15:29 - 00038140 _____ C:\Users\Michaela\Desktop\otl.txt
2013-07-20 15:24 - 2013-07-20 15:24 - 00067438 _____ C:\Users\Michaela\Downloads\Extras.Txt
2013-07-20 15:22 - 2013-07-20 15:22 - 00076282 _____ C:\Users\Michaela\Downloads\OTL.Txt
2013-07-20 15:13 - 2013-07-20 15:13 - 00602112 _____ (OldTimer Tools) C:\Users\Michaela\Downloads\OTL.exe
2013-07-20 15:05 - 2013-07-20 15:05 - 00000658 _____ C:\Users\Michaela\Downloads\defogger_disable.log
2013-07-20 15:05 - 2013-07-20 15:05 - 00000188 _____ C:\Users\Michaela\defogger_reenable
2013-07-20 15:05 - 2011-04-13 16:55 - 00000000 ____D C:\Users\Michaela
2013-07-20 15:01 - 2013-07-20 15:01 - 00050477 _____ C:\Users\Michaela\Desktop\Defogger.exe
2013-07-20 14:43 - 2013-07-20 14:42 - 00000000 ____D C:\Users\Michaela\Downloads\welt306
2013-07-20 14:35 - 2013-07-20 14:35 - 00000659 _____ C:\Users\Public\Desktop\LauschAngriff.lnk
2013-07-20 14:35 - 2013-07-20 14:35 - 00000020 _____ C:\Windows\LauschAngriff.ini
2013-07-20 14:25 - 2013-07-20 14:25 - 00911720 _____ (Chaos Software Group, Inc.) C:\Users\Michaela\Downloads\atomic35.exe
2013-07-20 14:20 - 2013-07-20 14:20 - 00421517 _____ C:\Users\Michaela\Downloads\welt306.zip
2013-07-20 14:16 - 2013-07-20 14:16 - 00281088 _____ (SoftwareOK.de) C:\Users\Michaela\Downloads\LauschAngriff_Installer_1.31.exe
2013-07-20 13:39 - 2013-07-19 13:29 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core.job
2013-07-20 01:15 - 2013-03-12 15:07 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-20 01:15 - 2011-08-01 15:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-20 01:14 - 2011-04-14 19:33 - 00099436 _____ C:\Windows\PFRO.log
2013-07-19 13:47 - 2013-07-19 13:29 - 00002382 _____ C:\Users\Michaela\Desktop\Google Chrome.lnk
2013-07-19 13:34 - 2013-07-19 13:29 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA
2013-07-19 13:34 - 2013-07-19 13:29 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core
2013-07-19 13:29 - 2013-07-19 13:29 - 34887288 _____ (Google Inc.) C:\Users\Michaela\Downloads\Chrome28StandaloneSetup.exe
2013-07-19 13:29 - 2013-07-19 13:29 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-07-19 13:29 - 2012-01-30 23:38 - 00000000 ____D C:\Users\Michaela\AppData\Local\Google
2013-07-19 13:09 - 2013-06-24 18:02 - 00000000 ____D C:\Windows\pss
2013-07-19 13:05 - 2013-07-19 13:05 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 13:05 - 2013-07-19 13:05 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-19 13:05 - 2013-07-19 13:05 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 13:00 - 2013-07-19 13:00 - 03357912 _____ (Piriform Ltd) C:\Users\Michaela\Downloads\ccsetup403_slim.exe
2013-07-19 12:31 - 2013-06-16 22:53 - 00000000 ____D C:\Users\Michaela\AppData\Local\Audible
2013-07-18 22:59 - 2012-01-26 20:46 - 00000000 ____D C:\Users\Michaela\AppData\Local\Unity
2013-07-18 13:56 - 2013-07-17 14:53 - 00000000 ____D C:\Users\Michaela\Heaven
2013-07-17 15:43 - 2013-07-17 15:43 - 04179293 _____ (Lavalys, Inc.                                               ) C:\Users\Michaela\Downloads\everesthome220.exe
2013-07-17 15:43 - 2013-07-17 15:43 - 00000556 _____ C:\Users\Michaela\Desktop\EVEREST Home Edition.lnk
2013-07-17 14:57 - 2013-07-17 14:52 - 01065984 _____ C:\Users\Michaela\AppData\Local\file__0.localstorage
2013-07-11 01:33 - 2009-07-14 06:45 - 00442008 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 01:32 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 01:32 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 01:32 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 01:31 - 2011-04-14 17:57 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-11 01:25 - 2011-10-05 19:10 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-09 14:01 - 2013-07-09 14:01 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-09 14:01 - 2013-07-09 14:00 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-09 14:01 - 2013-07-09 14:00 - 00000000 ____D C:\Program Files\iTunes
2013-07-09 14:00 - 2013-07-09 14:00 - 00000000 ____D C:\Program Files\iPod
2013-07-09 14:00 - 2011-05-01 13:16 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-06 16:50 - 2013-07-06 16:50 - 00808224 _____ C:\Users\Michaela\Downloads\PandaCloudAntivirus22.exe
2013-06-30 17:56 - 2013-06-30 17:56 - 00000667 _____ C:\Users\Michaela\Desktop\Machinarium.lnk
2013-06-30 17:56 - 2013-06-30 17:56 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Machinarium
2013-06-30 17:42 - 2011-05-13 17:19 - 00007652 _____ C:\Users\Michaela\AppData\Local\Resmon.ResmonCfg
2013-06-30 16:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-06-28 18:35 - 2013-06-24 18:45 - 00000000 ____D C:\Program Files (x86)\CoolLyrics
2013-06-27 18:05 - 2013-06-27 18:05 - 00000000 ____D C:\Users\Michaela\Documents\Games
2013-06-27 17:42 - 2013-06-27 17:42 - 00000000 ____D C:\Windows\7032E73F68A048F98100E70E79169BAE.TMP
2013-06-27 17:40 - 2013-06-27 17:40 - 00002358 _____ C:\Users\Public\Desktop\Sherlock Holmes jagt Arsene Lupin  spielen.lnk
2013-06-27 17:36 - 2013-06-27 17:36 - 00000000 ____D C:\Program Files (x86)\Focus
2013-06-27 17:36 - 2011-04-13 20:11 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-27 17:33 - 2011-04-15 17:03 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-06-25 19:55 - 2011-04-15 12:37 - 00234467 _____ C:\Windows\DirectX.log
2013-06-25 19:53 - 2013-06-25 19:53 - 00314016 _____ C:\Windows\system32\Drivers\atksgt.sys
2013-06-25 19:53 - 2013-06-25 19:53 - 00043680 _____ C:\Windows\system32\Drivers\lirsgt.sys
2013-06-25 19:53 - 2011-09-05 15:24 - 00005320 _____ C:\Windows\DIFx.log
2013-06-25 19:53 - 2011-09-05 15:24 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-06-25 00:44 - 2013-06-25 00:44 - 00000316 _____ C:\Users\Michaela\Downloads\BK_HYRE_000029DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:44 - 2013-06-25 00:44 - 00000315 _____ C:\Users\Michaela\Downloads\BK_ADKO_070969DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:40 - 2013-06-25 00:40 - 00000327 _____ C:\Users\Michaela\Downloads\BK_ADKO_001803DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:39 - 2013-06-25 00:39 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000867DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:38 - 2013-06-25 00:38 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000866DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:37 - 2013-06-25 00:37 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000865DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000858DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000864DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:40 - 2013-06-24 21:40 - 00000325 _____ C:\Users\Michaela\Downloads\BK_ADKO_000855DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:38 - 2013-06-24 21:38 - 00000304 _____ C:\Users\Michaela\Downloads\BK_ADKO_000850DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:37 - 2013-06-24 21:37 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010dDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:36 - 2013-06-24 21:36 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010cDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:35 - 2013-06-24 21:35 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010bDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:34 - 2013-06-24 21:34 - 00000320 _____ C:\Users\Michaela\Downloads\BK_RHEI_000042DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:33 - 2013-06-24 21:33 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010aDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:23 - 2013-06-24 21:23 - 00000318 _____ C:\Users\Michaela\Downloads\BK_SCHL_000005DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\Documents\Remedy
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\AppData\Local\SKIDROW
2013-06-24 19:04 - 2013-06-24 19:04 - 00000606 _____ C:\Users\Public\Desktop\Alan Wake.lnk
2013-06-24 18:45 - 2013-06-24 18:45 - 00727096 _____ (Duplex Secure Ltd.) C:\Users\Michaela\Downloads\SPTDinst-v179-x64.exe
2013-06-24 18:44 - 2013-06-24 18:44 - 00211560 _____ C:\Users\Michaela\Downloads\SPTD.exe
2013-06-24 18:36 - 2013-06-24 18:36 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-06-24 18:36 - 2013-06-24 18:36 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-06-24 18:09 - 2011-04-13 21:05 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\DAEMON Tools Lite
2013-06-24 18:03 - 2011-04-13 21:05 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-06-24 18:02 - 2011-04-13 16:55 - 00000000 ___RD C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-06-24 17:54 - 2011-04-13 21:07 - 00564824 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2013-06-24 17:52 - 2013-06-24 17:50 - 13901152 _____ (Disc Soft Ltd) C:\Users\Michaela\Downloads\DTLite4471-0333.exe
2013-06-24 17:49 - 2013-06-24 17:49 - 00000330 _____ C:\Users\Michaela\Downloads\BK_EINS_000316DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 17:46 - 2013-06-24 17:46 - 00000321 _____ C:\Users\Michaela\Downloads\BK_EINS_000282DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 22:55 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-22 17:04 - 2013-06-22 17:04 - 00000314 _____ C:\Users\Michaela\Downloads\BK_ADKO_000946DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 16:58 - 2013-06-22 16:58 - 00000318 _____ C:\Users\Michaela\Downloads\BK_ADKO_000927DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 02:14 - 2013-06-16 22:52 - 00000000 ____D C:\Program Files (x86)\Audible
2013-06-22 01:46 - 2013-06-22 01:46 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000834DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:31 - 2013-06-22 01:31 - 00000310 _____ C:\Users\Michaela\Downloads\BK_ADKO_000224DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:06 - 2013-06-22 01:06 - 00000309 _____ C:\Users\Michaela\Downloads\BK_JUMB_000361DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-21 16:53 - 2013-06-21 16:53 - 00000333 _____ C:\Users\Michaela\Downloads\admhelper.adh
2013-06-21 16:53 - 2013-06-16 22:58 - 00000333 _____ C:\Users\Michaela\Downloads\BK_ADKO_001817DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-13 01:08

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-07-2013
Ran by Michaela at 2013-07-21 00:40:47
Running from C:\Users\Michaela\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
7-Zip 9.15 (x64 edition) (Version: 9.15.00.0)
Adobe AIR (x32 Version: 2.6.0.19140)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.171)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)
Alan Wake (x32)
AMD APP SDK Runtime (Version: 2.4.595.9)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2011.0308.2325.42017)
AMD USB Filter Driver (x32 Version: 1.0.15.94)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Application Profiles (x32 Version: 2.0.4441.36343)
ATI AVIVO64 Codecs (Version: 11.6.0.10308)
ATI Catalyst Install Manager (Version: 3.0.816.0)
AudibleManager (x32 Version: 2004892910.48.56.35589354)
Avanquest update (x32 Version: 1.28)
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.0308.2325.42017)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0308.2325.42017)
CCC Help English (x32 Version: 2011.0308.2324.42017)
ccc-utility64 (Version: 2011.0308.2325.42017)
Cinergy T USB XE (MKII) V6.09.28.05b (x32 Version: 6.09.28.05b)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eaner (Version: 4.03)
EVEREST Home Edition v2.20 (x32 Version: 2.20)
Free YouTube to MP3 Converter version 3.12.1.320 (x32 Version: 3.12.1.320)
Google Chrome (HKCU Version: 28.0.1500.72)
iTunes (Version: 11.0.4.4)
Java 7 Update 21 (x32 Version: 7.0.210)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 22 (x32 Version: 6.0.220)
K-Lite Codec Pack 9.9.0 (Full) (x32 Version: 9.9.0)
LauschAngriff (x32)
LIMBO (HKCU)
Machinarium (x32 Version: 23.10.09)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.0.19.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
NETGEAR WG111v2 wireless USB 2.0 adapter (x32 Version: 1.0.0.133)
NVIDIA GAME System Software 2.8.1 (x32 Version: 2.8.1)
NVIDIA PhysX (x32 Version: 9.09.0203)
OpenAL (x32)
PC Wizard 2010.1.94 (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Realtek Ethernet Controller Driver (x32 Version: 7.38.113.2011)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6121)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6235)
Sherlock Holmes jagt Arsene Lupin (x32 Version: 1.00.0777)
TIPP10 Version 2.1.0 (x32)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.73)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2494150) (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553092) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
VLC media player 1.1.2 (x32 Version: 1.1.2)
WMV9/VC-1 Video Playback (Version: 1.00.0000)

==================== Restore Points  =========================

20-07-2013 13:44:12 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {01D6F48F-1BCC-4343-B968-9C3E5E0C7F32} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {06D4F891-7BE6-44E7-93EC-3425F4B2D23F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA => C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-19] (Google Inc.)
Task: {082F8291-F5F0-4547-92F0-0C3F09F15ED6} - System32\Tasks\{4B6FE139-05DB-4562-AE95-82B3C98FA269} => E:\SETUP.EXE No File
Task: {1352F946-6018-48A6-843E-D29AB7611216} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {13B84836-3B23-43B9-BB64-E9246A3B4F4D} - System32\Tasks\{4BE45648-CF71-44B7-94B2-87174FAC8167} => E:\SETUP.EXE No File
Task: {2CEE28D2-781C-4071-89E7-D46E2767DE3F} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {2EA753CE-C1E3-4076-BEAE-5D4567E99847} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core => C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-19] (Google Inc.)
Task: {4129BE66-EB68-4326-B257-82BF10AD2789} - System32\Tasks\{4D8B7E3B-3578-458D-9EE3-8147FE5AEA6E} => E:\SETUPS\soko2.exe No File
Task: {4556FDE5-0F94-4D17-AC2C-6CC74BBA1DA6} - System32\Tasks\{25C16D2C-1CCF-4087-BE7C-52EDA1387403} => E:\SETUPS\soko2.exe No File
Task: {456D032D-A5DC-422D-9407-884709953EBC} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {5C640989-A609-4EA2-AA61-6677FD88EC29} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {626FAF2F-F4A8-436B-BB1B-AA235090D380} - System32\Tasks\{E7594D24-8A36-47C9-A645-3035B3B3277A} => E:\SETUP.EXE No File
Task: {7C6BFBFE-7A54-4CD9-84A0-924AC53F097B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {927931A1-6B30-4708-A75C-E549F12D048B} - System32\Tasks\{EE5552EC-2B9D-4176-9EF4-DB961E1ECD56} => E:\SETUPS\soko2.exe No File
Task: {946B7B67-F8C7-4A40-BDE8-C2B7BC8AD3B1} - System32\Tasks\InstallShield Software-Online-Aktualisierungsprogramm => C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-08-09] (InstallShield Software Corporation)
Task: {97F72510-4227-44C0-81C8-39EBAEF5A41B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd)
Task: {A6C9ED8C-C688-468D-93BA-3234185B3A2E} - System32\Tasks\{E6CDC459-A5C6-4C6E-B11A-8FAF3F0022CA} => E:\SETUPS\soko2.exe No File
Task: {B861AAB7-0BB2-4EFC-A523-EC5CB26CC2E0} - System32\Tasks\InstallShield Software-Aktualisierungsdienst => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2004-08-09] (InstallShield Software Corporation)
Task: {BFE6D2B5-52BC-46EA-B9D0-435C59C3BCD8} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {C7A7325B-B881-4761-B175-4F51FA01021E} - System32\Tasks\Google Updater and Installer => C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-19] (Google Inc.)
Task: {DECB904D-AC7D-4E14-A1C2-8EDB51F1B0E3} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: {ECA0451A-A205-41AD-B46C-74622E638763} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1407433523-4288807574-3556846344-1001
Task: {FAD84B91-9361-4D83-A55E-97EC2407D799} - System32\Tasks\{078DC74D-E46A-4EA2-81EE-A1A034136F7E} => E:\SETUP.EXE No File
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core.job => C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA.job => C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/20/2013 05:54:35 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15569

Error: (07/20/2013 05:54:35 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15569

Error: (07/20/2013 05:54:35 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/20/2013 01:52:02 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: b40

Startzeit: 01ce84d5b8b34931

Endzeit: 15

Anwendungspfad: C:\Windows\Explorer.EXE

Berichts-ID: c5f1ca2f-f132-11e2-90f2-1c6f65af05f1

Error: (07/19/2013 04:23:09 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9968

Error: (07/19/2013 04:23:09 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9968

Error: (07/19/2013 04:23:09 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/18/2013 10:42:58 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {34e4c524-7135-49b4-bb04-7de778c8758c}

Error: (07/18/2013 04:55:05 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9984

Error: (07/18/2013 04:55:05 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9984


System errors:
=============
Error: (07/21/2013 00:23:35 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (07/20/2013 03:33:18 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (07/20/2013 03:06:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (07/20/2013 01:54:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (07/20/2013 01:14:28 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (07/18/2013 00:19:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (07/18/2013 00:15:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (07/18/2013 08:21:31 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (07/18/2013 08:21:27 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (07/18/2013 08:21:20 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.


Microsoft Office Sessions:
=========================
Error: (07/20/2013 05:54:35 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15569

Error: (07/20/2013 05:54:35 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15569

Error: (07/20/2013 05:54:35 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/20/2013 01:52:02 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7601.17567b4001ce84d5b8b3493115C:\Windows\Explorer.EXEc5f1ca2f-f132-11e2-90f2-1c6f65af05f1

Error: (07/19/2013 04:23:09 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9968

Error: (07/19/2013 04:23:09 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9968

Error: (07/19/2013 04:23:09 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/18/2013 10:42:58 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {34e4c524-7135-49b4-bb04-7de778c8758c}

Error: (07/18/2013 04:55:05 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9984

Error: (07/18/2013 04:55:05 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9984


==================== Memory info =========================== 

Percentage of memory in use: 30%
Total physical RAM: 4092.54 MB
Available physical RAM: 2853.13 MB
Total Pagefile: 8183.26 MB
Available Pagefile: 6720.4 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:58.5 GB) (Free:3.3 GB) NTFS (Disk=0 Partition=2)
Drive d: (Daten) (Fixed) (Total:863.15 GB) (Free:369.91 GB) NTFS (Disk=0 Partition=3)
Drive g: (SLAVE VIII) (Removable) (Total:1.92 GB) (Free:0.03 GB) FAT32 (Disk=2 Partition=1)
Drive j: (TOSHIBA EXT) (Fixed) (Total:232.89 GB) (Free:59.18 GB) NTFS (Disk=1 Partition=1)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 76BD1212)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=58 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=863 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=10 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 233 GB) (Disk ID: 05B1CE53)
Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 2 GB) (Disk ID: 6B148926)
Partition 1: (Active) - (Size=2 GB) - (Type=0B)

==================== End Of Log ============================

schrauber · 21.07.2013, 14:52

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Eligius1 · 21.07.2013, 20:13

Ist warscheinlich ne dumme Frage aber wie deaktivere ich MSE und wie instaliere ich das Programm richtig denn wenn ich drauf klicke oeffnet es sich gleich und macht denn scan
Und wo finde ich die Logfiles. Weil einen Suchvorgang hab ich schon gemacht.

schrauber · 21.07.2013, 21:25

Das Log öffnet sich automatisch, wenn nicht findest Du es unter C:\Combofix.txt, das Programm wird nicht installiert, das läuft direkt los, korrekt

Eligius1 · 21.07.2013, 21:30

Und wie deaktiviere ich Microsoft Security Essentials

schrauber · 21.07.2013, 21:35

Rechtsklick auf das TrayIcon.

Oder MSE öffnen > Einstellungen > Echtzeitschutz deaktivieren.

Eligius1 · 21.07.2013, 22:02

Code:

ATTFilter

ComboFix 13-07-20.03 - Michaela 21.07.2013  22:52:33.1.4 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.4093.2869 [GMT 2:00]
ausgeführt von:: c:\users\Michaela\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Setup.exe
c:\windows\security\Database\tmp.edb
c:\windows\SysWow64\AF15BDAEX.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-06-21 bis 2013-07-21  ))))))))))))))))))))))))))))))
.
.
2013-07-21 20:57 . 2013-07-21 20:57	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-07-21 00:21 . 2013-07-02 08:34	9460976	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{03EBB38B-A10A-45B6-BCA3-1DEFAFF58D68}\mpengine.dll
2013-07-20 22:38 . 2013-07-20 22:38	--------	d-----w-	C:\FRST
2013-07-20 13:44 . 2013-07-02 08:34	9460976	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-07-19 11:05 . 2013-07-19 11:05	--------	d-----w-	c:\program files\CCleaner
2013-07-17 12:53 . 2013-07-18 11:56	--------	d-----w-	c:\users\Michaela\Heaven
2013-07-17 00:14 . 2013-07-17 00:13	941720	------w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3B52D45A-7EAC-431C-AB36-B3F7145C7537}\gapaengine.dll
2013-07-10 22:38 . 2013-05-27 05:50	1011712	----a-w-	c:\program files\Windows Defender\MpSvc.dll
2013-07-09 12:00 . 2013-07-09 12:00	--------	d-----w-	c:\program files\iPod
2013-07-09 12:00 . 2013-07-09 12:01	--------	d-----w-	c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-09 12:00 . 2013-07-09 12:01	--------	d-----w-	c:\program files\iTunes
2013-06-27 15:42 . 2013-06-27 15:42	--------	d-----w-	c:\windows\7032E73F68A048F98100E70E79169BAE.TMP
2013-06-27 15:36 . 2013-06-27 15:36	--------	d-----w-	c:\program files (x86)\Focus
2013-06-27 15:36 . 2004-10-22 00:17	69715	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2013-06-27 15:36 . 2004-10-22 00:17	274432	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2013-06-27 15:36 . 2004-10-22 00:16	180224	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2013-06-27 15:36 . 2004-10-22 00:16	5632	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2013-06-27 15:36 . 2013-06-27 15:36	323716	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2013-06-27 15:36 . 2013-06-27 15:36	192644	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2013-06-27 15:36 . 2004-10-22 00:18	749568	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2013-06-25 17:53 . 2013-06-25 17:53	314016	----a-w-	c:\windows\system32\drivers\atksgt.sys
2013-06-25 17:53 . 2013-06-25 17:53	43680	----a-w-	c:\windows\system32\drivers\lirsgt.sys
2013-06-24 17:06 . 2013-06-24 17:06	--------	d-----w-	c:\users\Michaela\AppData\Local\SKIDROW
2013-06-24 16:45 . 2013-07-11 09:45	--------	d-----w-	c:\programdata\Tarma Installer
2013-06-24 16:45 . 2013-06-28 16:35	--------	d-----w-	c:\program files (x86)\CoolLyrics
2013-06-24 16:36 . 2013-06-24 16:36	283200	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2013-06-24 16:36 . 2013-06-24 16:36	--------	d-----w-	c:\program files (x86)\DAEMON Tools Lite
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-19 23:15 . 2013-03-12 13:07	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-07-19 23:15 . 2011-08-01 13:59	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-10 23:25 . 2011-10-05 17:10	78185248	----a-w-	c:\windows\system32\MRT.exe
2013-06-24 15:54 . 2011-04-13 19:07	564824	----a-w-	c:\windows\system32\drivers\sptd.sys
2013-06-21 12:01 . 2011-05-20 14:56	964552	------w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-06-16 20:53 . 2013-06-16 20:53	255352	----a-w-	c:\windows\SysWow64\awrdscdc.ax
2013-06-08 12:14 . 2013-06-08 12:14	1054720	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-06-08 12:14 . 2013-06-08 12:14	719360	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-06-08 12:14 . 2013-06-08 12:14	523264	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-06-08 12:14 . 2013-06-08 12:14	226304	----a-w-	c:\windows\system32\elshyph.dll
2013-06-08 12:14 . 2013-06-08 12:14	185344	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-06-08 12:14 . 2013-06-08 12:14	158720	----a-w-	c:\windows\SysWow64\msls31.dll
2013-06-08 12:14 . 2013-06-08 12:14	150528	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-06-08 12:14 . 2013-06-08 12:14	138752	----a-w-	c:\windows\SysWow64\wextract.exe
2013-06-08 12:14 . 2013-06-08 12:14	137216	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-06-08 12:14 . 2013-06-08 12:14	73728	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-06-08 12:14 . 2013-06-08 12:14	61952	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-06-08 12:14 . 2013-06-08 12:14	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-06-08 12:14 . 2013-06-08 12:14	38400	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-06-08 12:14 . 2013-06-08 12:14	361984	----a-w-	c:\windows\SysWow64\html.iec
2013-06-08 12:14 . 2013-06-08 12:14	23040	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-06-08 12:14 . 2013-06-08 12:14	1441280	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2013-06-08 12:14 . 2013-06-08 12:14	12800	----a-w-	c:\windows\SysWow64\mshta.exe
2013-06-08 12:14 . 2013-06-08 12:14	110592	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-06-08 12:14 . 2013-06-08 12:14	97280	----a-w-	c:\windows\system32\mshtmled.dll
2013-06-08 12:14 . 2013-06-08 12:14	905728	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-06-08 12:14 . 2013-06-08 12:14	81408	----a-w-	c:\windows\system32\icardie.dll
2013-06-08 12:14 . 2013-06-08 12:14	762368	----a-w-	c:\windows\system32\ieapfltr.dll
2013-06-08 12:14 . 2013-06-08 12:14	599552	----a-w-	c:\windows\system32\vbscript.dll
2013-06-08 12:14 . 2013-06-08 12:14	452096	----a-w-	c:\windows\system32\dxtmsft.dll
2013-06-08 12:14 . 2013-06-08 12:14	441856	----a-w-	c:\windows\system32\html.iec
2013-06-08 12:14 . 2013-06-08 12:14	281600	----a-w-	c:\windows\system32\dxtrans.dll
2013-06-08 12:14 . 2013-06-08 12:14	27648	----a-w-	c:\windows\system32\licmgr10.dll
2013-06-08 12:14 . 2013-06-08 12:14	270848	----a-w-	c:\windows\system32\iedkcs32.dll
2013-06-08 12:14 . 2013-06-08 12:14	247296	----a-w-	c:\windows\system32\webcheck.dll
2013-06-08 12:14 . 2013-06-08 12:14	235008	----a-w-	c:\windows\system32\url.dll
2013-06-08 12:14 . 2013-06-08 12:14	216064	----a-w-	c:\windows\system32\msls31.dll
2013-06-08 12:14 . 2013-06-08 12:14	197120	----a-w-	c:\windows\system32\msrating.dll
2013-06-08 12:14 . 2013-06-08 12:14	173568	----a-w-	c:\windows\system32\ieUnatt.exe
2013-06-08 12:14 . 2013-06-08 12:14	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-06-08 12:14 . 2013-06-08 12:14	1509376	----a-w-	c:\windows\system32\inetcpl.cpl
2013-06-08 12:14 . 2013-06-08 12:14	144896	----a-w-	c:\windows\system32\wextract.exe
2013-06-08 12:14 . 2013-06-08 12:14	1400416	----a-w-	c:\windows\system32\ieapfltr.dat
2013-06-08 12:14 . 2013-06-08 12:14	102912	----a-w-	c:\windows\system32\inseng.dll
2013-06-08 12:14 . 2013-06-08 12:14	92160	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-06-08 12:14 . 2013-06-08 12:14	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-06-08 12:14 . 2013-06-08 12:14	62976	----a-w-	c:\windows\system32\pngfilt.dll
2013-06-08 12:14 . 2013-06-08 12:14	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-06-08 12:14 . 2013-06-08 12:14	51200	----a-w-	c:\windows\system32\imgutil.dll
2013-06-08 12:14 . 2013-06-08 12:14	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-06-08 12:14 . 2013-06-08 12:14	149504	----a-w-	c:\windows\system32\occache.dll
2013-06-08 12:14 . 2013-06-08 12:14	13824	----a-w-	c:\windows\system32\mshta.exe
2013-06-08 12:14 . 2013-06-08 12:14	136192	----a-w-	c:\windows\system32\iepeers.dll
2013-06-08 12:14 . 2013-06-08 12:14	135680	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-06-08 12:14 . 2013-06-08 12:14	12800	----a-w-	c:\windows\system32\msfeedssync.exe
2013-06-07 13:35 . 2013-06-07 13:35	9728	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	9728	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	5632	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	5632	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	522752	----a-w-	c:\windows\system32\XpsGdiConverter.dll
2013-06-07 13:35 . 2013-06-07 13:35	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2013-06-07 13:35 . 2013-06-07 13:35	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	4096	---ha-w-	c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	364544	----a-w-	c:\windows\SysWow64\XpsGdiConverter.dll
2013-06-07 13:35 . 2013-06-07 13:35	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	3584	---ha-w-	c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	2560	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	2560	---ha-w-	c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	1682432	----a-w-	c:\windows\system32\XpsPrint.dll
2013-06-07 13:35 . 2013-06-07 13:35	1158144	----a-w-	c:\windows\SysWow64\XpsPrint.dll
2013-06-07 13:35 . 2013-06-07 13:35	10752	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	10752	---ha-w-	c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-07 13:35 . 2013-06-07 13:35	2284544	----a-w-	c:\windows\SysWow64\msmpeg2vdec.dll
2013-06-07 13:35 . 2013-06-07 13:35	648192	----a-w-	c:\windows\system32\d3d10level9.dll
2013-06-07 13:35 . 2013-06-07 13:35	604160	----a-w-	c:\windows\SysWow64\d3d10level9.dll
2013-06-07 13:35 . 2013-06-07 13:35	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-06-07 13:35 . 2013-06-07 13:35	3928064	----a-w-	c:\windows\system32\d2d1.dll
2013-06-07 13:35 . 2013-06-07 13:35	363008	----a-w-	c:\windows\system32\dxgi.dll
2013-06-07 13:35 . 2013-06-07 13:35	3419136	----a-w-	c:\windows\SysWow64\d2d1.dll
2013-06-07 13:35 . 2013-06-07 13:35	333312	----a-w-	c:\windows\system32\d3d10_1core.dll
2013-06-07 13:35 . 2013-06-07 13:35	296960	----a-w-	c:\windows\system32\d3d10core.dll
2013-06-07 13:35 . 2013-06-07 13:35	293376	----a-w-	c:\windows\SysWow64\dxgi.dll
2013-06-07 13:35 . 2013-06-07 13:35	2776576	----a-w-	c:\windows\system32\msmpeg2vdec.dll
2013-06-07 13:35 . 2013-06-07 13:35	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2013-06-07 13:35 . 2013-06-07 13:35	249856	----a-w-	c:\windows\SysWow64\d3d10_1core.dll
2013-06-07 13:35 . 2013-06-07 13:35	245248	----a-w-	c:\windows\system32\WindowsCodecsExt.dll
2013-06-07 13:35 . 2013-06-07 13:35	221184	----a-w-	c:\windows\system32\UIAnimation.dll
2013-06-07 13:35 . 2013-06-07 13:35	220160	----a-w-	c:\windows\SysWow64\d3d10core.dll
2013-06-07 13:35 . 2013-06-07 13:35	207872	----a-w-	c:\windows\SysWow64\WindowsCodecsExt.dll
2013-06-07 13:35 . 2013-06-07 13:35	1988096	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2013-06-07 13:35 . 2013-06-07 13:35	194560	----a-w-	c:\windows\system32\d3d10_1.dll
2013-06-07 13:35 . 2013-06-07 13:35	187392	----a-w-	c:\windows\SysWow64\UIAnimation.dll
2013-06-07 13:35 . 2013-06-07 13:35	161792	----a-w-	c:\windows\SysWow64\d3d10_1.dll
2013-06-07 13:35 . 2013-06-07 13:35	1238528	----a-w-	c:\windows\system32\d3d10.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"OfficeSyncProcess"="d:\office14\MSOSYNC.EXE" [2012-01-20 719672]
"ISUSPM Startup"="c:\progra~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-08-09 221184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-08 336384]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x64.sys;c:\windows\TEMP\cpuz135\cpuz135_x64.sys [x]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 netr7364;USB-Drahtlos-LAN-Kartentreiber für Vista von ASUS;c:\windows\system32\DRIVERS\netr7364.sys;c:\windows\SYSNATIVE\DRIVERS\netr7364.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RTL8187;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\system32\DRIVERS\wg111v2.sys;c:\windows\SYSNATIVE\DRIVERS\wg111v2.sys [x]
R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\DRIVERS\s1039bus.sys;c:\windows\SYSNATIVE\DRIVERS\s1039bus.sys [x]
R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1039mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdfl.sys [x]
R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1039mdm.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdm.sys [x]
R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1039mgmt.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mgmt.sys [x]
R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1039nd5.sys;c:\windows\SYSNATIVE\DRIVERS\s1039nd5.sys [x]
R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1039obex.sys;c:\windows\SYSNATIVE\DRIVERS\s1039obex.sys [x]
R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1039unic.sys;c:\windows\SYSNATIVE\DRIVERS\s1039unic.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S0 SCMNdisP;General NDIS Protocol Driver;c:\windows\system32\DRIVERS\scmndisp.sys;c:\windows\SYSNATIVE\DRIVERS\scmndisp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core.job
- c:\users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-19 11:29]
.
2013-07-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA.job
- c:\users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-19 11:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-02 11545192]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - d:\office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - d:\office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-07-21  22:59:06
ComboFix-quarantined-files.txt  2013-07-21 20:59
.
Vor Suchlauf: 3.265.830.912 Bytes frei
Nach Suchlauf: 4.319.961.088 Bytes frei
.
- - End Of File - - 8408F67A010232F1A29317F606B25EBA
D41D8CD98F00B204E9800998ECF8427E

schrauber · 22.07.2013, 09:00

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Eligius1 · 22.07.2013, 12:09

Code:

ATTFilter

# AdwCleaner v2.306 - Datei am 22/07/2013 um 12:22:21 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzer : Michaela - ELIGIUS
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Michaela\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Ordner Gelöscht : C:\Program Files (x86)\CoolLyrics
Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Users\Michaela\AppData\Roaming\OpenCandy

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsContainer
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16635

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com

-\\ Google Chrome v28.0.1500.72

Datei : C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [1823 octets] - [22/07/2013 12:22:21]

########## EOF - C:\AdwCleaner[S1].txt - [1883 octets] ##########

JunkwareRemovalTool konnte ich nicht öffne-explorer.exe reagiert nicht diese Meldung hatte ich letzter Zeit öfter!

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-07-2013
Ran by Michaela (administrator) on 22-07-2013 13:00:27
Running from C:\Users\Michaela\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) D:\Office14\MSOSYNC.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1281512 2013-01-27] (Microsoft Corporation)
HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-20] (Microsoft Corporation)
HKCU\...\Run: [OfficeSyncProcess] - D:\Office14\MSOSYNC.EXE [719672 2012-01-20] (Microsoft Corporation)
HKCU\...\Run: [ISUSPM Startup] - C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [221184 2004-08-09] (InstallShield Software Corporation)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [336384 2011-03-09] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKCU - {3DD38C9F-FF74-4A34-B383-AAC33CF4DA8F} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/ig
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR DefaultSearchURL: (Google) - hxxp://www.google.de/search?q={searchTerms}
CHR DefaultSuggestURL: (Google) -       "suggest_url": "",
CHR Plugin: (Shockwave Flash) - C:\Users\Michaela\AppData\Local\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Michaela\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Michaela\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (VLC Multimedia Plug-in) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Google Update) - C:\Users\Michaela\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
CHR Plugin: (Microsoft Office 2010) - D:\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - D:\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Turn Off the Lights) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.2.0.12_0
CHR Extension: (YouTube) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (SmallringFX DarkMagenta Theme) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cchaoggejjglkolggnioggbfikicamgg\1.7_0
CHR Extension: (Google Search) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (White Noise) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejkjpdnomgodmagfmhojepjlajpoicip\1.7_0
CHR Extension: (PanicButton) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm\0.14.2.2_0
CHR Extension: (Digital Clock) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkjifoifglkpcdffkenpinlbjgephlo\1.11_0
CHR Extension: (Ghostery) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\4.1.2_0
CHR Extension: (Gmail) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-03-09] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
S3 Microsoft SharePoint Workspace Audit Service; D:\Office14\GROOVE.EXE [30785672 2012-09-20] (Microsoft Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [368832 2009-11-05] (AfaTech                  )
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-06-25] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-24] (DT Soft Ltd)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-06-25] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S3 RTL8187; C:\Windows\System32\DRIVERS\wg111v2.sys [243200 2007-02-12] (Realtek Semiconductor Corporation                           )
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-06-24] (Duplex Secure Ltd.)
S3 AODDriver4.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 EtronHub3; System32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI; System32\Drivers\EtronXHCI.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-22 12:59 - 2013-07-22 12:59 - 00001192 _____ C:\Users\Michaela\Desktop\adwcleaner.exe - Verknüpfung.lnk
2013-07-22 12:59 - 2013-07-22 12:59 - 00001174 _____ C:\Users\Michaela\Desktop\ComboFix.exe - Verknüpfung.lnk
2013-07-22 12:59 - 2013-07-22 12:59 - 00001119 _____ C:\Users\Michaela\Desktop\OTL.exe - Verknüpfung.lnk
2013-07-22 12:22 - 2013-07-22 12:22 - 00001950 _____ C:\AdwCleaner[S1].txt
2013-07-22 12:16 - 2013-07-22 12:16 - 00666633 _____ C:\Users\Michaela\Downloads\adwcleaner.exe
2013-07-22 12:16 - 2013-07-22 12:16 - 00560639 _____ (Oleg N. Scherbakov) C:\Users\Michaela\Desktop\JRT.exe
2013-07-21 22:59 - 2013-07-21 22:59 - 00026466 _____ C:\ComboFix.txt
2013-07-21 20:55 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-21 20:55 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-21 20:55 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-21 20:54 - 2013-07-21 22:59 - 00000000 ____D C:\Qoobox
2013-07-21 20:42 - 2013-07-21 22:57 - 00000000 ____D C:\Windows\erdnt
2013-07-21 20:35 - 2013-07-21 20:35 - 05093416 ____R (Swearware) C:\Users\Michaela\Downloads\ComboFix.exe
2013-07-21 13:13 - 2013-07-21 13:13 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop (1).zip
2013-07-21 00:41 - 2013-07-21 00:54 - 00038005 _____ C:\Users\Michaela\Downloads\FRST.txt
2013-07-21 00:40 - 2013-07-21 00:41 - 00020046 _____ C:\Users\Michaela\Downloads\Addition.txt
2013-07-21 00:38 - 2013-07-21 00:38 - 00000000 ____D C:\FRST
2013-07-21 00:29 - 2013-07-21 00:29 - 01779345 _____ (Farbar) C:\Users\Michaela\Desktop\FRST64.exe
2013-07-20 20:08 - 2013-07-20 20:08 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop.zip
2013-07-20 20:02 - 2013-07-20 20:02 - 00018732 _____ C:\Users\Michaela\Desktop\Desktop.zip
2013-07-20 19:12 - 2013-07-20 19:12 - 00010697 _____ C:\Users\Michaela\Desktop\gmer.txt
2013-07-20 15:36 - 2013-07-20 15:36 - 00377856 _____ C:\Users\Michaela\Desktop\gmer_2.1.19163.exe
2013-07-20 15:30 - 2013-07-20 15:30 - 00033718 _____ C:\Users\Michaela\Desktop\extra.txt
2013-07-20 15:29 - 2013-07-20 15:29 - 00038140 _____ C:\Users\Michaela\Desktop\otl.txt
2013-07-20 15:24 - 2013-07-20 15:24 - 00067438 _____ C:\Users\Michaela\Downloads\Extras.Txt
2013-07-20 15:22 - 2013-07-20 15:22 - 00076282 _____ C:\Users\Michaela\Downloads\OTL.Txt
2013-07-20 15:13 - 2013-07-20 15:13 - 00602112 _____ (OldTimer Tools) C:\Users\Michaela\Downloads\OTL.exe
2013-07-20 15:05 - 2013-07-20 15:05 - 00000658 _____ C:\Users\Michaela\Downloads\defogger_disable.log
2013-07-20 15:05 - 2013-07-20 15:05 - 00000188 _____ C:\Users\Michaela\defogger_reenable
2013-07-20 15:01 - 2013-07-20 15:01 - 00050477 _____ C:\Users\Michaela\Desktop\Defogger.exe
2013-07-20 14:42 - 2013-07-20 14:43 - 00000000 ____D C:\Users\Michaela\Downloads\welt306
2013-07-20 14:35 - 2013-07-20 14:35 - 00000659 _____ C:\Users\Public\Desktop\LauschAngriff.lnk
2013-07-20 14:35 - 2013-07-20 14:35 - 00000020 _____ C:\Windows\LauschAngriff.ini
2013-07-20 14:25 - 2013-07-20 14:25 - 00911720 _____ (Chaos Software Group, Inc.) C:\Users\Michaela\Downloads\atomic35.exe
2013-07-20 14:20 - 2013-07-20 14:20 - 00421517 _____ C:\Users\Michaela\Downloads\welt306.zip
2013-07-20 14:16 - 2013-07-20 14:16 - 00281088 _____ (SoftwareOK.de) C:\Users\Michaela\Downloads\LauschAngriff_Installer_1.31.exe
2013-07-19 13:29 - 2013-07-22 12:39 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA.job
2013-07-19 13:29 - 2013-07-21 13:39 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core.job
2013-07-19 13:29 - 2013-07-19 13:47 - 00002382 _____ C:\Users\Michaela\Desktop\Google Chrome.lnk
2013-07-19 13:29 - 2013-07-19 13:34 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA
2013-07-19 13:29 - 2013-07-19 13:34 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core
2013-07-19 13:29 - 2013-07-19 13:29 - 34887288 _____ (Google Inc.) C:\Users\Michaela\Downloads\Chrome28StandaloneSetup.exe
2013-07-19 13:29 - 2013-07-19 13:29 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-07-19 13:05 - 2013-07-19 13:05 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 13:05 - 2013-07-19 13:05 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-19 13:05 - 2013-07-19 13:05 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 13:00 - 2013-07-19 13:00 - 03357912 _____ (Piriform Ltd) C:\Users\Michaela\Downloads\ccsetup403_slim.exe
2013-07-17 15:43 - 2013-07-17 15:43 - 04179293 _____ (Lavalys, Inc.                                               ) C:\Users\Michaela\Downloads\everesthome220.exe
2013-07-17 15:43 - 2013-07-17 15:43 - 00000556 _____ C:\Users\Michaela\Desktop\EVEREST Home Edition.lnk
2013-07-17 14:53 - 2013-07-18 13:56 - 00000000 ____D C:\Users\Michaela\Heaven
2013-07-17 14:52 - 2013-07-17 14:57 - 01065984 _____ C:\Users\Michaela\AppData\Local\file__0.localstorage
2013-07-11 01:24 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 01:24 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 01:24 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 01:24 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 01:24 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 01:24 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 01:24 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 01:24 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 01:24 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 00:38 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 00:38 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 00:38 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 00:38 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 00:38 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 00:38 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 00:38 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 14:01 - 2013-07-09 14:01 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-09 14:00 - 2013-07-09 14:01 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-09 14:00 - 2013-07-09 14:01 - 00000000 ____D C:\Program Files\iTunes
2013-07-09 14:00 - 2013-07-09 14:00 - 00000000 ____D C:\Program Files\iPod
2013-07-06 16:50 - 2013-07-06 16:50 - 00808224 _____ C:\Users\Michaela\Downloads\PandaCloudAntivirus22.exe
2013-06-30 17:56 - 2013-06-30 17:56 - 00000667 _____ C:\Users\Michaela\Desktop\Machinarium.lnk
2013-06-30 17:56 - 2013-06-30 17:56 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Machinarium
2013-06-27 18:05 - 2013-06-27 18:05 - 00000000 ____D C:\Users\Michaela\Documents\Games
2013-06-27 17:42 - 2013-06-27 17:42 - 00000000 ____D C:\Windows\7032E73F68A048F98100E70E79169BAE.TMP
2013-06-27 17:40 - 2013-06-27 17:40 - 00002358 _____ C:\Users\Public\Desktop\Sherlock Holmes jagt Arsene Lupin  spielen.lnk
2013-06-27 17:36 - 2013-06-27 17:36 - 00000000 ____D C:\Program Files (x86)\Focus
2013-06-25 19:53 - 2013-06-25 19:53 - 00314016 _____ C:\Windows\system32\Drivers\atksgt.sys
2013-06-25 19:53 - 2013-06-25 19:53 - 00043680 _____ C:\Windows\system32\Drivers\lirsgt.sys
2013-06-25 00:44 - 2013-06-25 00:44 - 00000316 _____ C:\Users\Michaela\Downloads\BK_HYRE_000029DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:44 - 2013-06-25 00:44 - 00000315 _____ C:\Users\Michaela\Downloads\BK_ADKO_070969DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:40 - 2013-06-25 00:40 - 00000327 _____ C:\Users\Michaela\Downloads\BK_ADKO_001803DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:39 - 2013-06-25 00:39 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000867DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:38 - 2013-06-25 00:38 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000866DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:37 - 2013-06-25 00:37 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000865DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000858DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000864DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:40 - 2013-06-24 21:40 - 00000325 _____ C:\Users\Michaela\Downloads\BK_ADKO_000855DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:38 - 2013-06-24 21:38 - 00000304 _____ C:\Users\Michaela\Downloads\BK_ADKO_000850DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:37 - 2013-06-24 21:37 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010dDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:36 - 2013-06-24 21:36 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010cDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:35 - 2013-06-24 21:35 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010bDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:34 - 2013-06-24 21:34 - 00000320 _____ C:\Users\Michaela\Downloads\BK_RHEI_000042DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:33 - 2013-06-24 21:33 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010aDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:23 - 2013-06-24 21:23 - 00000318 _____ C:\Users\Michaela\Downloads\BK_SCHL_000005DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\Documents\Remedy
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\AppData\Local\SKIDROW
2013-06-24 19:04 - 2013-06-24 19:04 - 00000606 _____ C:\Users\Public\Desktop\Alan Wake.lnk
2013-06-24 18:45 - 2013-06-24 18:45 - 00727096 _____ (Duplex Secure Ltd.) C:\Users\Michaela\Downloads\SPTDinst-v179-x64.exe
2013-06-24 18:44 - 2013-06-24 18:44 - 00211560 _____ C:\Users\Michaela\Downloads\SPTD.exe
2013-06-24 18:36 - 2013-06-24 18:36 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-06-24 18:36 - 2013-06-24 18:36 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-06-24 18:02 - 2013-07-19 13:09 - 00000000 ____D C:\Windows\pss
2013-06-24 17:50 - 2013-06-24 17:52 - 13901152 _____ (Disc Soft Ltd) C:\Users\Michaela\Downloads\DTLite4471-0333.exe
2013-06-24 17:49 - 2013-06-24 17:49 - 00000330 _____ C:\Users\Michaela\Downloads\BK_EINS_000316DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 17:46 - 2013-06-24 17:46 - 00000321 _____ C:\Users\Michaela\Downloads\BK_EINS_000282DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 17:04 - 2013-06-22 17:04 - 00000314 _____ C:\Users\Michaela\Downloads\BK_ADKO_000946DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 16:58 - 2013-06-22 16:58 - 00000318 _____ C:\Users\Michaela\Downloads\BK_ADKO_000927DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:46 - 2013-06-22 01:46 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000834DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:31 - 2013-06-22 01:31 - 00000310 _____ C:\Users\Michaela\Downloads\BK_ADKO_000224DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:06 - 2013-06-22 01:06 - 00000309 _____ C:\Users\Michaela\Downloads\BK_JUMB_000361DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh

==================== One Month Modified Files and Folders =======

2013-07-22 13:00 - 2009-07-14 19:58 - 00682502 _____ C:\Windows\system32\perfh007.dat
2013-07-22 13:00 - 2009-07-14 19:58 - 00140146 _____ C:\Windows\system32\perfc007.dat
2013-07-22 13:00 - 2009-07-14 07:13 - 01563522 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-22 12:59 - 2013-07-22 12:59 - 00001192 _____ C:\Users\Michaela\Desktop\adwcleaner.exe - Verknüpfung.lnk
2013-07-22 12:59 - 2013-07-22 12:59 - 00001174 _____ C:\Users\Michaela\Desktop\ComboFix.exe - Verknüpfung.lnk
2013-07-22 12:59 - 2013-07-22 12:59 - 00001119 _____ C:\Users\Michaela\Desktop\OTL.exe - Verknüpfung.lnk
2013-07-22 12:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-22 12:56 - 2009-07-14 06:51 - 00195081 _____ C:\Windows\setupact.log
2013-07-22 12:53 - 2009-07-14 06:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-22 12:53 - 2009-07-14 06:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-22 12:49 - 2011-04-13 16:54 - 01098735 _____ C:\Windows\WindowsUpdate.log
2013-07-22 12:39 - 2013-07-19 13:29 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA.job
2013-07-22 12:25 - 2011-04-14 19:33 - 00100450 _____ C:\Windows\PFRO.log
2013-07-22 12:22 - 2013-07-22 12:22 - 00001950 _____ C:\AdwCleaner[S1].txt
2013-07-22 12:16 - 2013-07-22 12:16 - 00666633 _____ C:\Users\Michaela\Downloads\adwcleaner.exe
2013-07-22 12:16 - 2013-07-22 12:16 - 00560639 _____ (Oleg N. Scherbakov) C:\Users\Michaela\Desktop\JRT.exe
2013-07-22 01:45 - 2013-06-16 22:53 - 00000000 ____D C:\Users\Michaela\AppData\Local\Audible
2013-07-21 22:59 - 2013-07-21 22:59 - 00026466 _____ C:\ComboFix.txt
2013-07-21 22:59 - 2013-07-21 20:54 - 00000000 ____D C:\Qoobox
2013-07-21 22:57 - 2013-07-21 20:42 - 00000000 ____D C:\Windows\erdnt
2013-07-21 22:57 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-21 20:35 - 2013-07-21 20:35 - 05093416 ____R (Swearware) C:\Users\Michaela\Downloads\ComboFix.exe
2013-07-21 13:39 - 2013-07-19 13:29 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core.job
2013-07-21 13:13 - 2013-07-21 13:13 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop (1).zip
2013-07-21 00:54 - 2013-07-21 00:41 - 00038005 _____ C:\Users\Michaela\Downloads\FRST.txt
2013-07-21 00:41 - 2013-07-21 00:40 - 00020046 _____ C:\Users\Michaela\Downloads\Addition.txt
2013-07-21 00:38 - 2013-07-21 00:38 - 00000000 ____D C:\FRST
2013-07-21 00:29 - 2013-07-21 00:29 - 01779345 _____ (Farbar) C:\Users\Michaela\Desktop\FRST64.exe
2013-07-20 20:08 - 2013-07-20 20:08 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop.zip
2013-07-20 20:02 - 2013-07-20 20:02 - 00018732 _____ C:\Users\Michaela\Desktop\Desktop.zip
2013-07-20 19:12 - 2013-07-20 19:12 - 00010697 _____ C:\Users\Michaela\Desktop\gmer.txt
2013-07-20 17:01 - 2011-04-15 22:52 - 00000000 ____D C:\Users\Michaela\Documents\Outlook-Dateien
2013-07-20 16:32 - 2011-06-09 13:51 - 00000000 ____D C:\Users\Michaela\Documents\PDF's
2013-07-20 16:21 - 2011-09-14 17:49 - 00000000 ____D C:\Users\Michaela\Desktop\Pics
2013-07-20 15:36 - 2013-07-20 15:36 - 00377856 _____ C:\Users\Michaela\Desktop\gmer_2.1.19163.exe
2013-07-20 15:30 - 2013-07-20 15:30 - 00033718 _____ C:\Users\Michaela\Desktop\extra.txt
2013-07-20 15:29 - 2013-07-20 15:29 - 00038140 _____ C:\Users\Michaela\Desktop\otl.txt
2013-07-20 15:24 - 2013-07-20 15:24 - 00067438 _____ C:\Users\Michaela\Downloads\Extras.Txt
2013-07-20 15:22 - 2013-07-20 15:22 - 00076282 _____ C:\Users\Michaela\Downloads\OTL.Txt
2013-07-20 15:13 - 2013-07-20 15:13 - 00602112 _____ (OldTimer Tools) C:\Users\Michaela\Downloads\OTL.exe
2013-07-20 15:05 - 2013-07-20 15:05 - 00000658 _____ C:\Users\Michaela\Downloads\defogger_disable.log
2013-07-20 15:05 - 2013-07-20 15:05 - 00000188 _____ C:\Users\Michaela\defogger_reenable
2013-07-20 15:05 - 2011-04-13 16:55 - 00000000 ____D C:\Users\Michaela
2013-07-20 15:01 - 2013-07-20 15:01 - 00050477 _____ C:\Users\Michaela\Desktop\Defogger.exe
2013-07-20 14:43 - 2013-07-20 14:42 - 00000000 ____D C:\Users\Michaela\Downloads\welt306
2013-07-20 14:35 - 2013-07-20 14:35 - 00000659 _____ C:\Users\Public\Desktop\LauschAngriff.lnk
2013-07-20 14:35 - 2013-07-20 14:35 - 00000020 _____ C:\Windows\LauschAngriff.ini
2013-07-20 14:25 - 2013-07-20 14:25 - 00911720 _____ (Chaos Software Group, Inc.) C:\Users\Michaela\Downloads\atomic35.exe
2013-07-20 14:20 - 2013-07-20 14:20 - 00421517 _____ C:\Users\Michaela\Downloads\welt306.zip
2013-07-20 14:16 - 2013-07-20 14:16 - 00281088 _____ (SoftwareOK.de) C:\Users\Michaela\Downloads\LauschAngriff_Installer_1.31.exe
2013-07-20 01:15 - 2013-03-12 15:07 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-20 01:15 - 2011-08-01 15:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-19 13:47 - 2013-07-19 13:29 - 00002382 _____ C:\Users\Michaela\Desktop\Google Chrome.lnk
2013-07-19 13:34 - 2013-07-19 13:29 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA
2013-07-19 13:34 - 2013-07-19 13:29 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core
2013-07-19 13:29 - 2013-07-19 13:29 - 34887288 _____ (Google Inc.) C:\Users\Michaela\Downloads\Chrome28StandaloneSetup.exe
2013-07-19 13:29 - 2013-07-19 13:29 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-07-19 13:29 - 2012-01-30 23:38 - 00000000 ____D C:\Users\Michaela\AppData\Local\Google
2013-07-19 13:09 - 2013-06-24 18:02 - 00000000 ____D C:\Windows\pss
2013-07-19 13:05 - 2013-07-19 13:05 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 13:05 - 2013-07-19 13:05 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-19 13:05 - 2013-07-19 13:05 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 13:00 - 2013-07-19 13:00 - 03357912 _____ (Piriform Ltd) C:\Users\Michaela\Downloads\ccsetup403_slim.exe
2013-07-18 22:59 - 2012-01-26 20:46 - 00000000 ____D C:\Users\Michaela\AppData\Local\Unity
2013-07-18 13:56 - 2013-07-17 14:53 - 00000000 ____D C:\Users\Michaela\Heaven
2013-07-17 15:43 - 2013-07-17 15:43 - 04179293 _____ (Lavalys, Inc.                                               ) C:\Users\Michaela\Downloads\everesthome220.exe
2013-07-17 15:43 - 2013-07-17 15:43 - 00000556 _____ C:\Users\Michaela\Desktop\EVEREST Home Edition.lnk
2013-07-17 14:57 - 2013-07-17 14:52 - 01065984 _____ C:\Users\Michaela\AppData\Local\file__0.localstorage
2013-07-11 01:33 - 2009-07-14 06:45 - 00442008 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 01:32 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 01:32 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 01:32 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 01:31 - 2011-04-14 17:57 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-11 01:25 - 2011-10-05 19:10 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-09 14:01 - 2013-07-09 14:01 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-09 14:01 - 2013-07-09 14:00 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-09 14:01 - 2013-07-09 14:00 - 00000000 ____D C:\Program Files\iTunes
2013-07-09 14:00 - 2013-07-09 14:00 - 00000000 ____D C:\Program Files\iPod
2013-07-09 14:00 - 2011-05-01 13:16 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-06 16:50 - 2013-07-06 16:50 - 00808224 _____ C:\Users\Michaela\Downloads\PandaCloudAntivirus22.exe
2013-06-30 17:56 - 2013-06-30 17:56 - 00000667 _____ C:\Users\Michaela\Desktop\Machinarium.lnk
2013-06-30 17:56 - 2013-06-30 17:56 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Machinarium
2013-06-30 17:42 - 2011-05-13 17:19 - 00007652 _____ C:\Users\Michaela\AppData\Local\Resmon.ResmonCfg
2013-06-30 16:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-06-27 18:05 - 2013-06-27 18:05 - 00000000 ____D C:\Users\Michaela\Documents\Games
2013-06-27 17:42 - 2013-06-27 17:42 - 00000000 ____D C:\Windows\7032E73F68A048F98100E70E79169BAE.TMP
2013-06-27 17:40 - 2013-06-27 17:40 - 00002358 _____ C:\Users\Public\Desktop\Sherlock Holmes jagt Arsene Lupin  spielen.lnk
2013-06-27 17:36 - 2013-06-27 17:36 - 00000000 ____D C:\Program Files (x86)\Focus
2013-06-27 17:36 - 2011-04-13 20:11 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-27 17:33 - 2011-04-15 17:03 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-06-25 19:55 - 2011-04-15 12:37 - 00234467 _____ C:\Windows\DirectX.log
2013-06-25 19:53 - 2013-06-25 19:53 - 00314016 _____ C:\Windows\system32\Drivers\atksgt.sys
2013-06-25 19:53 - 2013-06-25 19:53 - 00043680 _____ C:\Windows\system32\Drivers\lirsgt.sys
2013-06-25 19:53 - 2011-09-05 15:24 - 00005320 _____ C:\Windows\DIFx.log
2013-06-25 19:53 - 2011-09-05 15:24 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-06-25 00:44 - 2013-06-25 00:44 - 00000316 _____ C:\Users\Michaela\Downloads\BK_HYRE_000029DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:44 - 2013-06-25 00:44 - 00000315 _____ C:\Users\Michaela\Downloads\BK_ADKO_070969DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:40 - 2013-06-25 00:40 - 00000327 _____ C:\Users\Michaela\Downloads\BK_ADKO_001803DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:39 - 2013-06-25 00:39 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000867DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:38 - 2013-06-25 00:38 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000866DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:37 - 2013-06-25 00:37 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000865DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000858DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000864DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:40 - 2013-06-24 21:40 - 00000325 _____ C:\Users\Michaela\Downloads\BK_ADKO_000855DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:38 - 2013-06-24 21:38 - 00000304 _____ C:\Users\Michaela\Downloads\BK_ADKO_000850DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:37 - 2013-06-24 21:37 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010dDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:36 - 2013-06-24 21:36 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010cDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:35 - 2013-06-24 21:35 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010bDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:34 - 2013-06-24 21:34 - 00000320 _____ C:\Users\Michaela\Downloads\BK_RHEI_000042DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:33 - 2013-06-24 21:33 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010aDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:23 - 2013-06-24 21:23 - 00000318 _____ C:\Users\Michaela\Downloads\BK_SCHL_000005DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\Documents\Remedy
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\AppData\Local\SKIDROW
2013-06-24 19:04 - 2013-06-24 19:04 - 00000606 _____ C:\Users\Public\Desktop\Alan Wake.lnk
2013-06-24 18:45 - 2013-06-24 18:45 - 00727096 _____ (Duplex Secure Ltd.) C:\Users\Michaela\Downloads\SPTDinst-v179-x64.exe
2013-06-24 18:44 - 2013-06-24 18:44 - 00211560 _____ C:\Users\Michaela\Downloads\SPTD.exe
2013-06-24 18:36 - 2013-06-24 18:36 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-06-24 18:36 - 2013-06-24 18:36 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-06-24 18:09 - 2011-04-13 21:05 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\DAEMON Tools Lite
2013-06-24 18:03 - 2011-04-13 21:05 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-06-24 18:02 - 2011-04-13 16:55 - 00000000 ___RD C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-06-24 17:54 - 2011-04-13 21:07 - 00564824 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2013-06-24 17:52 - 2013-06-24 17:50 - 13901152 _____ (Disc Soft Ltd) C:\Users\Michaela\Downloads\DTLite4471-0333.exe
2013-06-24 17:49 - 2013-06-24 17:49 - 00000330 _____ C:\Users\Michaela\Downloads\BK_EINS_000316DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 17:46 - 2013-06-24 17:46 - 00000321 _____ C:\Users\Michaela\Downloads\BK_EINS_000282DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 22:55 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-22 17:04 - 2013-06-22 17:04 - 00000314 _____ C:\Users\Michaela\Downloads\BK_ADKO_000946DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 16:58 - 2013-06-22 16:58 - 00000318 _____ C:\Users\Michaela\Downloads\BK_ADKO_000927DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 02:14 - 2013-06-16 22:52 - 00000000 ____D C:\Program Files (x86)\Audible
2013-06-22 01:46 - 2013-06-22 01:46 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000834DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:31 - 2013-06-22 01:31 - 00000310 _____ C:\Users\Michaela\Downloads\BK_ADKO_000224DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:06 - 2013-06-22 01:06 - 00000309 _____ C:\Users\Michaela\Downloads\BK_JUMB_000361DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-13 01:08

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 22.07.2013, 13:54

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Eligius1 · 22.07.2013, 18:16

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=235f29fbf727724fa2c9d30301d57ce8
# engine=14491
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-22 03:59:01
# local_time=2013-07-22 05:59:01 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 1009612 126138591 0 0
# scanned=143793
# found=2
# cleaned=0
# scan_time=7857
sh=ACADF2B82AECDEDB4D590808EEB01D436999E91E ft=1 fh=f1e915411acfaf75 vn="a variant of Win32/Packed.VMProtect.AAA trojan" ac=I fn="C:\Program Files (x86)\Ubisoft\Assassin's Creed II\ubiorbitapi_r2.dll"
sh=ACADF2B82AECDEDB4D590808EEB01D436999E91E ft=1 fh=f1e915411acfaf75 vn="a variant of Win32/Packed.VMProtect.AAA trojan" ac=I fn="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2.dll"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=235f29fbf727724fa2c9d30301d57ce8
# engine=14494
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-22 04:51:19
# local_time=2013-07-22 06:51:19 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 1012750 126141729 0 0
# scanned=87597
# found=0
# cleaned=0
# scan_time=2697

Code:

ATTFilter

 UNSUPPORTED OPERATING SYSTEM! ABORTED!

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-07-2013
Ran by Michaela (administrator) on 22-07-2013 20:01:20
Running from C:\Users\Michaela\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) D:\Office14\MSOSYNC.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1281512 2013-01-27] (Microsoft Corporation)
HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-20] (Microsoft Corporation)
HKCU\...\Run: [OfficeSyncProcess] - D:\Office14\MSOSYNC.EXE [719672 2012-01-20] (Microsoft Corporation)
HKCU\...\Run: [ISUSPM Startup] - C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [221184 2004-08-09] (InstallShield Software Corporation)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [336384 2011-03-09] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKCU - {3DD38C9F-FF74-4A34-B383-AAC33CF4DA8F} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/ig
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR DefaultSearchURL: (Google) - hxxp://www.google.de/search?q={searchTerms}
CHR DefaultSuggestURL: (Google) -       "suggest_url": "",
CHR Plugin: (Shockwave Flash) - C:\Users\Michaela\AppData\Local\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Michaela\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Michaela\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (VLC Multimedia Plug-in) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Google Update) - C:\Users\Michaela\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
CHR Plugin: (Microsoft Office 2010) - D:\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - D:\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Turn Off the Lights) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.2.0.12_0
CHR Extension: (YouTube) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (SmallringFX DarkMagenta Theme) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cchaoggejjglkolggnioggbfikicamgg\1.7_0
CHR Extension: (Google Search) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (White Noise) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejkjpdnomgodmagfmhojepjlajpoicip\1.7_0
CHR Extension: (PanicButton) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm\0.14.2.2_0
CHR Extension: (Digital Clock) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkjifoifglkpcdffkenpinlbjgephlo\1.11_0
CHR Extension: (Ghostery) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\4.1.2_0
CHR Extension: (Gmail) - C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-03-09] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
S3 Microsoft SharePoint Workspace Audit Service; D:\Office14\GROOVE.EXE [30785672 2012-09-20] (Microsoft Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [368832 2009-11-05] (AfaTech                  )
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-06-25] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-24] (DT Soft Ltd)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-06-25] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S3 RTL8187; C:\Windows\System32\DRIVERS\wg111v2.sys [243200 2007-02-12] (Realtek Semiconductor Corporation                           )
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-06-24] (Duplex Secure Ltd.)
S3 AODDriver4.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 EtronHub3; System32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI; System32\Drivers\EtronXHCI.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-22 19:07 - 2013-07-22 19:07 - 00891062 _____ C:\Users\Michaela\Desktop\SecurityCheck (1).exe
2013-07-22 19:01 - 2013-07-22 19:01 - 00891062 _____ C:\Users\Michaela\Downloads\SecurityCheck.exe
2013-07-22 15:45 - 2013-07-22 15:45 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-22 15:42 - 2013-07-22 15:42 - 02347384 _____ (ESET) C:\Users\Michaela\Downloads\esetsmartinstaller_enu (1).exe
2013-07-22 15:20 - 2013-07-22 15:20 - 02347384 _____ (ESET) C:\Users\Michaela\Downloads\esetsmartinstaller_enu.exe
2013-07-22 15:10 - 2013-07-22 15:10 - 00001034 _____ C:\Users\Michaela\Desktop\JRT.txt
2013-07-22 15:07 - 2013-07-22 15:07 - 00000000 ____D C:\Windows\ERUNT
2013-07-22 12:59 - 2013-07-22 12:59 - 00001192 _____ C:\Users\Michaela\Desktop\adwcleaner.exe - Verknüpfung.lnk
2013-07-22 12:59 - 2013-07-22 12:59 - 00001174 _____ C:\Users\Michaela\Desktop\ComboFix.exe - Verknüpfung.lnk
2013-07-22 12:59 - 2013-07-22 12:59 - 00001119 _____ C:\Users\Michaela\Desktop\OTL.exe - Verknüpfung.lnk
2013-07-22 12:22 - 2013-07-22 12:22 - 00001950 _____ C:\AdwCleaner[S1].txt
2013-07-22 12:16 - 2013-07-22 12:16 - 00666633 _____ C:\Users\Michaela\Downloads\adwcleaner.exe
2013-07-22 12:16 - 2013-07-22 12:16 - 00560639 _____ (Oleg N. Scherbakov) C:\Users\Michaela\Desktop\JRT.exe
2013-07-21 22:59 - 2013-07-21 22:59 - 00026466 _____ C:\ComboFix.txt
2013-07-21 20:55 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-21 20:55 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-21 20:55 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-21 20:55 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-21 20:54 - 2013-07-21 22:59 - 00000000 ____D C:\Qoobox
2013-07-21 20:42 - 2013-07-21 22:57 - 00000000 ____D C:\Windows\erdnt
2013-07-21 20:35 - 2013-07-21 20:35 - 05093416 ____R (Swearware) C:\Users\Michaela\Downloads\ComboFix.exe
2013-07-21 13:13 - 2013-07-21 13:13 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop (1).zip
2013-07-21 00:41 - 2013-07-21 00:54 - 00038005 _____ C:\Users\Michaela\Downloads\FRST.txt
2013-07-21 00:40 - 2013-07-21 00:41 - 00020046 _____ C:\Users\Michaela\Downloads\Addition.txt
2013-07-21 00:38 - 2013-07-21 00:38 - 00000000 ____D C:\FRST
2013-07-21 00:29 - 2013-07-21 00:29 - 01779345 _____ (Farbar) C:\Users\Michaela\Desktop\FRST64.exe
2013-07-20 20:08 - 2013-07-20 20:08 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop.zip
2013-07-20 20:02 - 2013-07-20 20:02 - 00018732 _____ C:\Users\Michaela\Desktop\Desktop.zip
2013-07-20 19:12 - 2013-07-20 19:12 - 00010697 _____ C:\Users\Michaela\Desktop\gmer.txt
2013-07-20 15:36 - 2013-07-20 15:36 - 00377856 _____ C:\Users\Michaela\Desktop\gmer_2.1.19163.exe
2013-07-20 15:30 - 2013-07-20 15:30 - 00033718 _____ C:\Users\Michaela\Desktop\extra.txt
2013-07-20 15:29 - 2013-07-20 15:29 - 00038140 _____ C:\Users\Michaela\Desktop\otl.txt
2013-07-20 15:24 - 2013-07-20 15:24 - 00067438 _____ C:\Users\Michaela\Downloads\Extras.Txt
2013-07-20 15:22 - 2013-07-20 15:22 - 00076282 _____ C:\Users\Michaela\Downloads\OTL.Txt
2013-07-20 15:13 - 2013-07-20 15:13 - 00602112 _____ (OldTimer Tools) C:\Users\Michaela\Downloads\OTL.exe
2013-07-20 15:05 - 2013-07-20 15:05 - 00000658 _____ C:\Users\Michaela\Downloads\defogger_disable.log
2013-07-20 15:05 - 2013-07-20 15:05 - 00000188 _____ C:\Users\Michaela\defogger_reenable
2013-07-20 15:01 - 2013-07-20 15:01 - 00050477 _____ C:\Users\Michaela\Desktop\Defogger.exe
2013-07-20 14:42 - 2013-07-20 14:43 - 00000000 ____D C:\Users\Michaela\Downloads\welt306
2013-07-20 14:35 - 2013-07-20 14:35 - 00000659 _____ C:\Users\Public\Desktop\LauschAngriff.lnk
2013-07-20 14:35 - 2013-07-20 14:35 - 00000020 _____ C:\Windows\LauschAngriff.ini
2013-07-20 14:25 - 2013-07-20 14:25 - 00911720 _____ (Chaos Software Group, Inc.) C:\Users\Michaela\Downloads\atomic35.exe
2013-07-20 14:20 - 2013-07-20 14:20 - 00421517 _____ C:\Users\Michaela\Downloads\welt306.zip
2013-07-20 14:16 - 2013-07-20 14:16 - 00281088 _____ (SoftwareOK.de) C:\Users\Michaela\Downloads\LauschAngriff_Installer_1.31.exe
2013-07-19 13:29 - 2013-07-22 19:39 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA.job
2013-07-19 13:29 - 2013-07-22 13:39 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core.job
2013-07-19 13:29 - 2013-07-19 13:47 - 00002382 _____ C:\Users\Michaela\Desktop\Google Chrome.lnk
2013-07-19 13:29 - 2013-07-19 13:34 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA
2013-07-19 13:29 - 2013-07-19 13:34 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core
2013-07-19 13:29 - 2013-07-19 13:29 - 34887288 _____ (Google Inc.) C:\Users\Michaela\Downloads\Chrome28StandaloneSetup.exe
2013-07-19 13:29 - 2013-07-19 13:29 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-07-19 13:05 - 2013-07-19 13:05 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 13:05 - 2013-07-19 13:05 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-19 13:05 - 2013-07-19 13:05 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 13:00 - 2013-07-19 13:00 - 03357912 _____ (Piriform Ltd) C:\Users\Michaela\Downloads\ccsetup403_slim.exe
2013-07-17 15:43 - 2013-07-17 15:43 - 04179293 _____ (Lavalys, Inc.                                               ) C:\Users\Michaela\Downloads\everesthome220.exe
2013-07-17 15:43 - 2013-07-17 15:43 - 00000556 _____ C:\Users\Michaela\Desktop\EVEREST Home Edition.lnk
2013-07-17 14:53 - 2013-07-18 13:56 - 00000000 ____D C:\Users\Michaela\Heaven
2013-07-17 14:52 - 2013-07-17 14:57 - 01065984 _____ C:\Users\Michaela\AppData\Local\file__0.localstorage
2013-07-11 01:24 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 01:24 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 01:24 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 01:24 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 01:24 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 01:24 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 01:24 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 01:24 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 01:24 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 01:24 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 01:24 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 01:24 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 00:38 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 00:38 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 00:38 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 00:38 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 00:38 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 00:38 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 00:38 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 14:01 - 2013-07-09 14:01 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-09 14:00 - 2013-07-09 14:01 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-09 14:00 - 2013-07-09 14:01 - 00000000 ____D C:\Program Files\iTunes
2013-07-09 14:00 - 2013-07-09 14:00 - 00000000 ____D C:\Program Files\iPod
2013-07-06 16:50 - 2013-07-06 16:50 - 00808224 _____ C:\Users\Michaela\Downloads\PandaCloudAntivirus22.exe
2013-06-30 17:56 - 2013-06-30 17:56 - 00000667 _____ C:\Users\Michaela\Desktop\Machinarium.lnk
2013-06-30 17:56 - 2013-06-30 17:56 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Machinarium
2013-06-27 18:05 - 2013-06-27 18:05 - 00000000 ____D C:\Users\Michaela\Documents\Games
2013-06-27 17:42 - 2013-06-27 17:42 - 00000000 ____D C:\Windows\7032E73F68A048F98100E70E79169BAE.TMP
2013-06-27 17:40 - 2013-06-27 17:40 - 00002358 _____ C:\Users\Public\Desktop\Sherlock Holmes jagt Arsene Lupin  spielen.lnk
2013-06-27 17:36 - 2013-06-27 17:36 - 00000000 ____D C:\Program Files (x86)\Focus
2013-06-25 19:53 - 2013-06-25 19:53 - 00314016 _____ C:\Windows\system32\Drivers\atksgt.sys
2013-06-25 19:53 - 2013-06-25 19:53 - 00043680 _____ C:\Windows\system32\Drivers\lirsgt.sys
2013-06-25 00:44 - 2013-06-25 00:44 - 00000316 _____ C:\Users\Michaela\Downloads\BK_HYRE_000029DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:44 - 2013-06-25 00:44 - 00000315 _____ C:\Users\Michaela\Downloads\BK_ADKO_070969DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:40 - 2013-06-25 00:40 - 00000327 _____ C:\Users\Michaela\Downloads\BK_ADKO_001803DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:39 - 2013-06-25 00:39 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000867DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:38 - 2013-06-25 00:38 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000866DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:37 - 2013-06-25 00:37 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000865DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000858DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000864DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:40 - 2013-06-24 21:40 - 00000325 _____ C:\Users\Michaela\Downloads\BK_ADKO_000855DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:38 - 2013-06-24 21:38 - 00000304 _____ C:\Users\Michaela\Downloads\BK_ADKO_000850DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:37 - 2013-06-24 21:37 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010dDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:36 - 2013-06-24 21:36 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010cDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:35 - 2013-06-24 21:35 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010bDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:34 - 2013-06-24 21:34 - 00000320 _____ C:\Users\Michaela\Downloads\BK_RHEI_000042DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:33 - 2013-06-24 21:33 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010aDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:23 - 2013-06-24 21:23 - 00000318 _____ C:\Users\Michaela\Downloads\BK_SCHL_000005DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\Documents\Remedy
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\AppData\Local\SKIDROW
2013-06-24 19:04 - 2013-06-24 19:04 - 00000606 _____ C:\Users\Public\Desktop\Alan Wake.lnk
2013-06-24 18:45 - 2013-06-24 18:45 - 00727096 _____ (Duplex Secure Ltd.) C:\Users\Michaela\Downloads\SPTDinst-v179-x64.exe
2013-06-24 18:44 - 2013-06-24 18:44 - 00211560 _____ C:\Users\Michaela\Downloads\SPTD.exe
2013-06-24 18:36 - 2013-06-24 18:36 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-06-24 18:36 - 2013-06-24 18:36 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-06-24 18:02 - 2013-07-19 13:09 - 00000000 ____D C:\Windows\pss
2013-06-24 17:50 - 2013-06-24 17:52 - 13901152 _____ (Disc Soft Ltd) C:\Users\Michaela\Downloads\DTLite4471-0333.exe
2013-06-24 17:49 - 2013-06-24 17:49 - 00000330 _____ C:\Users\Michaela\Downloads\BK_EINS_000316DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 17:46 - 2013-06-24 17:46 - 00000321 _____ C:\Users\Michaela\Downloads\BK_EINS_000282DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 17:04 - 2013-06-22 17:04 - 00000314 _____ C:\Users\Michaela\Downloads\BK_ADKO_000946DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 16:58 - 2013-06-22 16:58 - 00000318 _____ C:\Users\Michaela\Downloads\BK_ADKO_000927DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:46 - 2013-06-22 01:46 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000834DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:31 - 2013-06-22 01:31 - 00000310 _____ C:\Users\Michaela\Downloads\BK_ADKO_000224DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:06 - 2013-06-22 01:06 - 00000309 _____ C:\Users\Michaela\Downloads\BK_JUMB_000361DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh

==================== One Month Modified Files and Folders =======

2013-07-22 19:39 - 2013-07-19 13:29 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA.job
2013-07-22 19:07 - 2013-07-22 19:07 - 00891062 _____ C:\Users\Michaela\Desktop\SecurityCheck (1).exe
2013-07-22 19:01 - 2013-07-22 19:01 - 00891062 _____ C:\Users\Michaela\Downloads\SecurityCheck.exe
2013-07-22 18:18 - 2011-04-13 16:54 - 01127006 _____ C:\Windows\WindowsUpdate.log
2013-07-22 15:45 - 2013-07-22 15:45 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-22 15:42 - 2013-07-22 15:42 - 02347384 _____ (ESET) C:\Users\Michaela\Downloads\esetsmartinstaller_enu (1).exe
2013-07-22 15:20 - 2013-07-22 15:20 - 02347384 _____ (ESET) C:\Users\Michaela\Downloads\esetsmartinstaller_enu.exe
2013-07-22 15:10 - 2013-07-22 15:10 - 00001034 _____ C:\Users\Michaela\Desktop\JRT.txt
2013-07-22 15:07 - 2013-07-22 15:07 - 00000000 ____D C:\Windows\ERUNT
2013-07-22 13:39 - 2013-07-19 13:29 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core.job
2013-07-22 13:03 - 2009-07-14 06:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-22 13:03 - 2009-07-14 06:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-22 13:00 - 2009-07-14 19:58 - 00682502 _____ C:\Windows\system32\perfh007.dat
2013-07-22 13:00 - 2009-07-14 19:58 - 00140146 _____ C:\Windows\system32\perfc007.dat
2013-07-22 13:00 - 2009-07-14 07:13 - 01563522 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-22 12:59 - 2013-07-22 12:59 - 00001192 _____ C:\Users\Michaela\Desktop\adwcleaner.exe - Verknüpfung.lnk
2013-07-22 12:59 - 2013-07-22 12:59 - 00001174 _____ C:\Users\Michaela\Desktop\ComboFix.exe - Verknüpfung.lnk
2013-07-22 12:59 - 2013-07-22 12:59 - 00001119 _____ C:\Users\Michaela\Desktop\OTL.exe - Verknüpfung.lnk
2013-07-22 12:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-22 12:56 - 2009-07-14 06:51 - 00195081 _____ C:\Windows\setupact.log
2013-07-22 12:25 - 2011-04-14 19:33 - 00100450 _____ C:\Windows\PFRO.log
2013-07-22 12:22 - 2013-07-22 12:22 - 00001950 _____ C:\AdwCleaner[S1].txt
2013-07-22 12:22 - 2011-04-14 20:30 - 00000000 ____D C:\ProgramData\ICQ
2013-07-22 12:16 - 2013-07-22 12:16 - 00666633 _____ C:\Users\Michaela\Downloads\adwcleaner.exe
2013-07-22 12:16 - 2013-07-22 12:16 - 00560639 _____ (Oleg N. Scherbakov) C:\Users\Michaela\Desktop\JRT.exe
2013-07-22 01:45 - 2013-06-16 22:53 - 00000000 ____D C:\Users\Michaela\AppData\Local\Audible
2013-07-21 22:59 - 2013-07-21 22:59 - 00026466 _____ C:\ComboFix.txt
2013-07-21 22:59 - 2013-07-21 20:54 - 00000000 ____D C:\Qoobox
2013-07-21 22:57 - 2013-07-21 20:42 - 00000000 ____D C:\Windows\erdnt
2013-07-21 22:57 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-21 20:35 - 2013-07-21 20:35 - 05093416 ____R (Swearware) C:\Users\Michaela\Downloads\ComboFix.exe
2013-07-21 13:13 - 2013-07-21 13:13 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop (1).zip
2013-07-21 00:54 - 2013-07-21 00:41 - 00038005 _____ C:\Users\Michaela\Downloads\FRST.txt
2013-07-21 00:41 - 2013-07-21 00:40 - 00020046 _____ C:\Users\Michaela\Downloads\Addition.txt
2013-07-21 00:38 - 2013-07-21 00:38 - 00000000 ____D C:\FRST
2013-07-21 00:29 - 2013-07-21 00:29 - 01779345 _____ (Farbar) C:\Users\Michaela\Desktop\FRST64.exe
2013-07-20 20:08 - 2013-07-20 20:08 - 00018732 _____ C:\Users\Michaela\Downloads\Desktop.zip
2013-07-20 20:02 - 2013-07-20 20:02 - 00018732 _____ C:\Users\Michaela\Desktop\Desktop.zip
2013-07-20 19:12 - 2013-07-20 19:12 - 00010697 _____ C:\Users\Michaela\Desktop\gmer.txt
2013-07-20 17:01 - 2011-04-15 22:52 - 00000000 ____D C:\Users\Michaela\Documents\Outlook-Dateien
2013-07-20 16:32 - 2011-06-09 13:51 - 00000000 ____D C:\Users\Michaela\Documents\PDF's
2013-07-20 16:21 - 2011-09-14 17:49 - 00000000 ____D C:\Users\Michaela\Desktop\Pics
2013-07-20 15:36 - 2013-07-20 15:36 - 00377856 _____ C:\Users\Michaela\Desktop\gmer_2.1.19163.exe
2013-07-20 15:30 - 2013-07-20 15:30 - 00033718 _____ C:\Users\Michaela\Desktop\extra.txt
2013-07-20 15:29 - 2013-07-20 15:29 - 00038140 _____ C:\Users\Michaela\Desktop\otl.txt
2013-07-20 15:24 - 2013-07-20 15:24 - 00067438 _____ C:\Users\Michaela\Downloads\Extras.Txt
2013-07-20 15:22 - 2013-07-20 15:22 - 00076282 _____ C:\Users\Michaela\Downloads\OTL.Txt
2013-07-20 15:13 - 2013-07-20 15:13 - 00602112 _____ (OldTimer Tools) C:\Users\Michaela\Downloads\OTL.exe
2013-07-20 15:05 - 2013-07-20 15:05 - 00000658 _____ C:\Users\Michaela\Downloads\defogger_disable.log
2013-07-20 15:05 - 2013-07-20 15:05 - 00000188 _____ C:\Users\Michaela\defogger_reenable
2013-07-20 15:05 - 2011-04-13 16:55 - 00000000 ____D C:\Users\Michaela
2013-07-20 15:01 - 2013-07-20 15:01 - 00050477 _____ C:\Users\Michaela\Desktop\Defogger.exe
2013-07-20 14:43 - 2013-07-20 14:42 - 00000000 ____D C:\Users\Michaela\Downloads\welt306
2013-07-20 14:35 - 2013-07-20 14:35 - 00000659 _____ C:\Users\Public\Desktop\LauschAngriff.lnk
2013-07-20 14:35 - 2013-07-20 14:35 - 00000020 _____ C:\Windows\LauschAngriff.ini
2013-07-20 14:25 - 2013-07-20 14:25 - 00911720 _____ (Chaos Software Group, Inc.) C:\Users\Michaela\Downloads\atomic35.exe
2013-07-20 14:20 - 2013-07-20 14:20 - 00421517 _____ C:\Users\Michaela\Downloads\welt306.zip
2013-07-20 14:16 - 2013-07-20 14:16 - 00281088 _____ (SoftwareOK.de) C:\Users\Michaela\Downloads\LauschAngriff_Installer_1.31.exe
2013-07-20 01:15 - 2013-03-12 15:07 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-20 01:15 - 2011-08-01 15:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-19 13:47 - 2013-07-19 13:29 - 00002382 _____ C:\Users\Michaela\Desktop\Google Chrome.lnk
2013-07-19 13:34 - 2013-07-19 13:29 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001UA
2013-07-19 13:34 - 2013-07-19 13:29 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1407433523-4288807574-3556846344-1001Core
2013-07-19 13:29 - 2013-07-19 13:29 - 34887288 _____ (Google Inc.) C:\Users\Michaela\Downloads\Chrome28StandaloneSetup.exe
2013-07-19 13:29 - 2013-07-19 13:29 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-07-19 13:29 - 2012-01-30 23:38 - 00000000 ____D C:\Users\Michaela\AppData\Local\Google
2013-07-19 13:09 - 2013-06-24 18:02 - 00000000 ____D C:\Windows\pss
2013-07-19 13:05 - 2013-07-19 13:05 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 13:05 - 2013-07-19 13:05 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-19 13:05 - 2013-07-19 13:05 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 13:00 - 2013-07-19 13:00 - 03357912 _____ (Piriform Ltd) C:\Users\Michaela\Downloads\ccsetup403_slim.exe
2013-07-18 22:59 - 2012-01-26 20:46 - 00000000 ____D C:\Users\Michaela\AppData\Local\Unity
2013-07-18 13:56 - 2013-07-17 14:53 - 00000000 ____D C:\Users\Michaela\Heaven
2013-07-17 15:43 - 2013-07-17 15:43 - 04179293 _____ (Lavalys, Inc.                                               ) C:\Users\Michaela\Downloads\everesthome220.exe
2013-07-17 15:43 - 2013-07-17 15:43 - 00000556 _____ C:\Users\Michaela\Desktop\EVEREST Home Edition.lnk
2013-07-17 14:57 - 2013-07-17 14:52 - 01065984 _____ C:\Users\Michaela\AppData\Local\file__0.localstorage
2013-07-11 01:33 - 2009-07-14 06:45 - 00442008 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 01:32 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 01:32 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 01:32 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 01:31 - 2011-04-14 17:57 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-11 01:25 - 2011-10-05 19:10 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-09 14:01 - 2013-07-09 14:01 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-09 14:01 - 2013-07-09 14:00 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-09 14:01 - 2013-07-09 14:00 - 00000000 ____D C:\Program Files\iTunes
2013-07-09 14:00 - 2013-07-09 14:00 - 00000000 ____D C:\Program Files\iPod
2013-07-09 14:00 - 2011-05-01 13:16 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-06 16:50 - 2013-07-06 16:50 - 00808224 _____ C:\Users\Michaela\Downloads\PandaCloudAntivirus22.exe
2013-06-30 17:56 - 2013-06-30 17:56 - 00000667 _____ C:\Users\Michaela\Desktop\Machinarium.lnk
2013-06-30 17:56 - 2013-06-30 17:56 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Machinarium
2013-06-30 17:42 - 2011-05-13 17:19 - 00007652 _____ C:\Users\Michaela\AppData\Local\Resmon.ResmonCfg
2013-06-30 16:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-06-27 18:05 - 2013-06-27 18:05 - 00000000 ____D C:\Users\Michaela\Documents\Games
2013-06-27 17:42 - 2013-06-27 17:42 - 00000000 ____D C:\Windows\7032E73F68A048F98100E70E79169BAE.TMP
2013-06-27 17:40 - 2013-06-27 17:40 - 00002358 _____ C:\Users\Public\Desktop\Sherlock Holmes jagt Arsene Lupin  spielen.lnk
2013-06-27 17:36 - 2013-06-27 17:36 - 00000000 ____D C:\Program Files (x86)\Focus
2013-06-27 17:36 - 2011-04-13 20:11 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-27 17:33 - 2011-04-15 17:03 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-06-25 19:55 - 2011-04-15 12:37 - 00234467 _____ C:\Windows\DirectX.log
2013-06-25 19:53 - 2013-06-25 19:53 - 00314016 _____ C:\Windows\system32\Drivers\atksgt.sys
2013-06-25 19:53 - 2013-06-25 19:53 - 00043680 _____ C:\Windows\system32\Drivers\lirsgt.sys
2013-06-25 19:53 - 2011-09-05 15:24 - 00005320 _____ C:\Windows\DIFx.log
2013-06-25 19:53 - 2011-09-05 15:24 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-06-25 00:44 - 2013-06-25 00:44 - 00000316 _____ C:\Users\Michaela\Downloads\BK_HYRE_000029DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:44 - 2013-06-25 00:44 - 00000315 _____ C:\Users\Michaela\Downloads\BK_ADKO_070969DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:40 - 2013-06-25 00:40 - 00000327 _____ C:\Users\Michaela\Downloads\BK_ADKO_001803DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:39 - 2013-06-25 00:39 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000867DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:38 - 2013-06-25 00:38 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000866DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:37 - 2013-06-25 00:37 - 00000341 _____ C:\Users\Michaela\Downloads\BK_ADKO_000865DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000858DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-25 00:35 - 2013-06-25 00:35 - 00000308 _____ C:\Users\Michaela\Downloads\BK_ADKO_000864DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:40 - 2013-06-24 21:40 - 00000325 _____ C:\Users\Michaela\Downloads\BK_ADKO_000855DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:38 - 2013-06-24 21:38 - 00000304 _____ C:\Users\Michaela\Downloads\BK_ADKO_000850DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:37 - 2013-06-24 21:37 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010dDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:36 - 2013-06-24 21:36 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010cDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:35 - 2013-06-24 21:35 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010bDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:34 - 2013-06-24 21:34 - 00000320 _____ C:\Users\Michaela\Downloads\BK_RHEI_000042DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:33 - 2013-06-24 21:33 - 00000324 _____ C:\Users\Michaela\Downloads\BK_HOFO_000010aDE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 21:23 - 2013-06-24 21:23 - 00000318 _____ C:\Users\Michaela\Downloads\BK_SCHL_000005DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\Documents\Remedy
2013-06-24 19:06 - 2013-06-24 19:06 - 00000000 ____D C:\Users\Michaela\AppData\Local\SKIDROW
2013-06-24 19:04 - 2013-06-24 19:04 - 00000606 _____ C:\Users\Public\Desktop\Alan Wake.lnk
2013-06-24 18:45 - 2013-06-24 18:45 - 00727096 _____ (Duplex Secure Ltd.) C:\Users\Michaela\Downloads\SPTDinst-v179-x64.exe
2013-06-24 18:44 - 2013-06-24 18:44 - 00211560 _____ C:\Users\Michaela\Downloads\SPTD.exe
2013-06-24 18:36 - 2013-06-24 18:36 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-06-24 18:36 - 2013-06-24 18:36 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-06-24 18:09 - 2011-04-13 21:05 - 00000000 ____D C:\Users\Michaela\AppData\Roaming\DAEMON Tools Lite
2013-06-24 18:03 - 2011-04-13 21:05 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-06-24 18:02 - 2011-04-13 16:55 - 00000000 ___RD C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-06-24 17:54 - 2011-04-13 21:07 - 00564824 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2013-06-24 17:52 - 2013-06-24 17:50 - 13901152 _____ (Disc Soft Ltd) C:\Users\Michaela\Downloads\DTLite4471-0333.exe
2013-06-24 17:49 - 2013-06-24 17:49 - 00000330 _____ C:\Users\Michaela\Downloads\BK_EINS_000316DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-24 17:46 - 2013-06-24 17:46 - 00000321 _____ C:\Users\Michaela\Downloads\BK_EINS_000282DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 22:55 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-22 17:04 - 2013-06-22 17:04 - 00000314 _____ C:\Users\Michaela\Downloads\BK_ADKO_000946DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 16:58 - 2013-06-22 16:58 - 00000318 _____ C:\Users\Michaela\Downloads\BK_ADKO_000927DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 02:14 - 2013-06-16 22:52 - 00000000 ____D C:\Program Files (x86)\Audible
2013-06-22 01:46 - 2013-06-22 01:46 - 00000326 _____ C:\Users\Michaela\Downloads\BK_ADKO_000834DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:31 - 2013-06-22 01:31 - 00000310 _____ C:\Users\Michaela\Downloads\BK_ADKO_000224DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh
2013-06-22 01:06 - 2013-06-22 01:06 - 00000309 _____ C:\Users\Michaela\Downloads\BK_JUMB_000361DE_LC_128_44100_ste_michaela.schlimbach@gmx.de.adh

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-13 01:08

==================== End Of Log ============================

--- --- ---

Ich habe auch immer noch komische Ordner auf der Festplatte bzw. Desktop die ich nicht öffnen kann und die vorher nicht da waren.

Der zweite Scan hat nicht geklappt hab es nochmal versucht selbe Fehlermeldung!

schrauber · 22.07.2013, 20:19

Zitat:

Ich habe auch immer noch komische Ordner auf der Festplatte bzw. Desktop die ich nicht öffnen kann und die vorher nicht da waren.

geht das en bissl genauer?

Eligius1 · 22.07.2013, 21:25

Auf C:/ Habe ich zum Beispiel mehrere Ordner doppel oder di ich nicht kenne "Dokumente und Einstellungen, Progamme gibts gleich dreimal, Config.Msi, Qoobox, $RECYCLE.BIN, System Volume Information, Recovery
Auf D:/ Sind drei neue Ordner: Sytem Volume Information, $RECYCLE.BIN und MSO Chache
diese Ordner haben alle auf dem Ordner Icon noch ein "Schloss" und lassen sich meist nicht öffnen.
Dann sind da noch in einigen Ordnern einzelne Dateien und auch auf dem Desktop. Meist mit dem Namen "Thumbs.db" und "desktop.ini.
und grad hab ich noch unter C:/Benutzer/Name/ einige Dateien gefunden mit dem Namen "NTUSER.DAT"
da kann ich auch einige Ordner nicht öffnen (z.B.: Eigene Dateien nicht zugreifen) es kommt eine Fehler Meldung: Der Pfad ist nicht verfügbar-Auf C:/User/Name/Eigene Dateinen kann nicht zugegriffen werden. Zugriff verweigert. Diese Ordner Icons sind dann immer "heller" und ein verlinkungssymob ist zu sehen (wenn du weißt was ich meine.)

21.07.2013, 21:25	#6
schrauber /// the machine /// TB-Ausbilder	LyricsContainer und Spyhunter Das Log öffnet sich automatisch, wenn nicht findest Du es unter C:\Combofix.txt, das Programm wird nicht installiert, das läuft direkt los, korrekt __________________ --> LyricsContainer und Spyhunter

21.07.2013, 21:35	#8
schrauber /// the machine /// TB-Ausbilder	LyricsContainer und Spyhunter Rechtsklick auf das TrayIcon. Oder MSE öffnen > Einstellungen > Echtzeitschutz deaktivieren. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

LyricsContainer und Spyhunter

Log-Analyse und Auswertung: LyricsContainer und Spyhunter