GVU Trojaner eingefangen-kann nicht mehr auf den Desktop zugreifen

poebelpete · 27.07.2013, 23:53

Hi.
Ich hab mir den GVU Trojaner eingefangen.
Habe schon versucht den Laptop im abgesicherten Modus hochzufahren, doch da fährt er wieder runter, startet neu und der GVU Desktop erscheint.
Daraufhin versuchte ich den Laptop im abgesicherten Modus mit Eingabeaufforderung hochzufahren...selbes Spiel.
Der Taskmanager lässt sich zwar öffnen(Strg+Alt+Entf), er wird mir aber nach anklicken nicht angezeigt.

So richtig Ahnung hab ick nich, immer wenn ein Problem auftratt hab ich gegoogelt und es irgendwie gelöst.
Jetzt weiß ich aber keinen Rat mehr. Ich muss irgendwie auf den Rechner kommen und meine Daten retten.

Gruß Pete

schrauber · 28.07.2013, 05:25

hi,

welches Betriebssystem?

poebelpete · 28.07.2013, 14:48

Hi Schrauber,

ich hab Windows7 Home Premium drauf.

Gruß

windows7 homepremium64

hab jetzt mal das FRST64 Tool durchlaufenlassen.
FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-07-2013
Ran by SYSTEM on 28-07-2013 15:40:40
Running from H:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-02-04] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [x]
HKLM\...\Run: [PSQLLauncher] - C:\Program Files\Protector Suite\launcher.exe [84816 2010-12-09] (UPEK Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2209896 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\RunOnce: [*Restore] - C:\Windows\system32\rstrui.exe /RUNONCE [296960 2010-11-20] (Microsoft Corporation)
Winlogon\Notify\klogon: %SystemRoot%\System32\klogon.dll (Kaspersky Lab ZAO)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-03] (CyberLink)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2011-04-14] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe [228448 2011-04-14] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [avp] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [365336 2010-11-02] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKU\Pete\...\Run: [Steam] - "C:\Games\steam.exe" -silent [x]
HKU\Pete\...\Run: [PlayNC Launcher] -  [x]
HKU\Pete\...\Run: [Spotify Web Helper] - C:\Users\Pete\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1199576 2013-01-09] (Spotify Ltd)
HKU\Pete\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Pete\AppData\Local\Temp\qrbmtpwkwvxdlcpji.exe [67584 2013-07-27] () <===== ATTENTION
HKU\Pete\...\Winlogon: [Shell] cmd.exe [345088 2010-11-20] (Microsoft Corporation) <==== ATTENTION 
HKU\Pete\...\Command Processor: "C:\Users\Pete\AppData\Local\Temp\qrbmtpwkwvxdlcpji.exe" <===== ATTENTION!
HKU\UpdatusUser\...\Run: [Power2GoExpress] - NA [x]
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll,C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll [17592 2010-10-05] (Kaspersky Lab ZAO)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll [17592 2010-10-05] ()
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\Users\Pete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File)

==================== Services (Whitelisted) =================

S2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()
S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [365336 2010-11-02] (Kaspersky Lab ZAO)
S2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-06] ()
S2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [109352 2013-07-27] (SurfRight B.V.)
S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2011-12-09] ()
S2 LanmanWorkstation; C:\Windows\System32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-04] ()
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [66872 2011-11-18] ()
S2 UserAccess7; C:\Windows\SysWow64\UAService7.exe [143360 2012-07-30] (Sony DADC Austria AG.)
S2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] ()
S2 Update-Service; %SystemRoot%\System32\UpdSvc.dll [x]

==================== Drivers (Whitelisted) ====================

S3 AF9035BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [514144 2009-10-02] (ITETech                  )
S0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2010-06-09] (Kaspersky Lab ZAO)
S1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2010-06-09] (Kaspersky Lab ZAO)
S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [556120 2011-11-18] (Kaspersky Lab)
S1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [27736 2010-04-22] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
S2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-28 05:41 - 2013-07-28 05:41 - 00000000 ____D C:\FRST
2013-07-28 04:00 - 2013-07-28 04:00 - 00003352 ____N C:\bootsqm.dat
2013-07-27 15:31 - 2013-07-27 15:31 - 00001837 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-07-27 15:31 - 2013-07-27 15:31 - 00000000 ____D C:\Program Files\HitmanPro
2013-07-27 15:30 - 2013-07-27 15:30 - 00000000 ____D C:\ProgramData\HitmanPro
2013-07-27 12:19 - 2013-07-27 12:19 - 00393500 _____ C:\Users\Pete\AppData\Local\2433f433
2013-07-27 12:19 - 2013-07-27 12:19 - 00393492 _____ C:\ProgramData\2433f433
2013-07-27 12:19 - 2013-07-27 12:19 - 00393459 _____ C:\Users\Pete\AppData\Roaming\2433f433
2013-07-17 00:51 - 2013-07-17 01:00 - 00000000 ____D C:\Windows\System32\MRT
2013-07-11 11:39 - 2013-06-11 15:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 11:39 - 2013-06-11 15:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 11:39 - 2013-06-11 15:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 11:39 - 2013-06-11 15:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 11:39 - 2013-06-11 15:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 11:39 - 2013-06-11 15:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 11:39 - 2013-06-11 15:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 11:39 - 2013-06-11 15:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 11:39 - 2013-06-11 15:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 11:39 - 2013-06-11 15:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 11:39 - 2013-06-11 15:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 11:39 - 2013-06-11 15:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 11:39 - 2013-06-11 15:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 11:39 - 2013-06-11 15:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-07-11 11:39 - 2013-06-11 15:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-07-11 11:39 - 2013-06-11 15:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-07-11 11:39 - 2013-06-11 15:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-07-11 11:39 - 2013-06-11 15:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-07-11 11:39 - 2013-06-11 14:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 11:39 - 2013-06-11 14:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-07-11 11:39 - 2013-06-06 19:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-07-11 11:39 - 2013-06-06 18:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-10 10:28 - 2013-07-10 10:28 - 00000000 ____D C:\Users\Pete\AppData\Local\{4BD0AE8E-EB25-4374-8A01-71C8697DA4BE}
2013-07-10 10:27 - 2013-07-10 10:27 - 00000000 ____D C:\Users\Pete\AppData\Local\SniperV2
2013-07-10 07:52 - 2013-07-10 07:52 - 00000201 _____ C:\Users\Pete\Desktop\Sniper Elite V2.url
2013-07-10 07:03 - 2013-06-03 22:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2013-07-10 07:03 - 2013-06-03 20:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 07:03 - 2013-05-05 22:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-07-10 07:03 - 2013-05-05 20:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 07:02 - 2013-06-04 19:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-07-10 07:02 - 2013-04-09 15:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 07:02 - 2013-04-02 14:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-07-10 07:00 - 2013-07-10 07:00 - 00000200 _____ C:\Users\Pete\Desktop\Sniper Elite.url
2013-07-03 22:44 - 2013-07-03 22:44 - 01509376 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-07-03 22:44 - 2013-07-03 22:44 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-03 22:44 - 2013-07-03 22:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-07-03 22:44 - 2013-07-03 22:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-07-03 22:44 - 2013-07-03 22:44 - 01054720 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00905728 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00762368 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00452096 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00441856 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2013-07-03 22:44 - 2013-07-03 22:44 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-07-03 22:44 - 2013-07-03 22:44 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00281600 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00270848 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00247296 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\System32\url.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00216064 _____ (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00173568 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00149504 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00144896 _____ (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00136192 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00102912 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00097280 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-07-03 22:44 - 2013-07-03 22:44 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-07-03 22:44 - 2013-07-03 22:44 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00027648 _____ (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-07-03 22:39 - 2013-07-03 22:59 - 00010557 _____ C:\Windows\IE10_main.log
2013-07-03 10:43 - 2013-07-03 10:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
129

==================== One Month Modified Files and Folders =======

2013-07-28 05:42 - 2011-11-18 01:08 - 00000000 ____D C:\users\Pete
2013-07-28 05:41 - 2013-07-28 05:41 - 00000000 ____D C:\FRST
2013-07-28 05:05 - 2011-02-10 11:25 - 00707550 _____ C:\Windows\System32\perfh007.dat
2013-07-28 05:05 - 2011-02-10 11:25 - 00153110 _____ C:\Windows\System32\perfc007.dat
2013-07-28 05:05 - 2009-07-13 21:13 - 01642148 _____ C:\Windows\System32\PerfStringBackup.INI
2013-07-28 05:02 - 2011-11-18 01:06 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-28 05:01 - 2011-05-03 20:25 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-28 05:01 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-28 05:01 - 2009-07-13 20:51 - 00207777 _____ C:\Windows\setupact.log
2013-07-28 04:20 - 2011-11-18 09:57 - 01558549 _____ C:\Windows\WindowsUpdate.log
2013-07-28 04:13 - 2010-11-20 19:47 - 00308470 _____ C:\Windows\PFRO.log
2013-07-28 04:11 - 2009-07-13 20:45 - 00021072 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-28 04:11 - 2009-07-13 20:45 - 00021072 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-28 04:00 - 2013-07-28 04:00 - 00003352 ____N C:\bootsqm.dat
2013-07-27 15:31 - 2013-07-27 15:31 - 00001837 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-07-27 15:31 - 2013-07-27 15:31 - 00000000 ____D C:\Program Files\HitmanPro
2013-07-27 15:30 - 2013-07-27 15:30 - 00000000 ____D C:\ProgramData\HitmanPro
2013-07-27 14:48 - 2011-11-18 02:58 - 00000000 ____D C:\Games
2013-07-27 13:01 - 2012-05-20 15:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-27 12:19 - 2013-07-27 12:19 - 00393500 _____ C:\Users\Pete\AppData\Local\2433f433
2013-07-27 12:19 - 2013-07-27 12:19 - 00393492 _____ C:\ProgramData\2433f433
2013-07-27 12:19 - 2013-07-27 12:19 - 00393459 _____ C:\Users\Pete\AppData\Roaming\2433f433
2013-07-27 12:19 - 2011-12-19 12:31 - 00000000 ____D C:\Users\Pete\Documents\Youcam
2013-07-27 10:16 - 2011-11-19 06:29 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8321B496-B0F6-45C9-8765-637B901743D5}
2013-07-21 02:39 - 2011-12-09 02:30 - 00000000 ____D C:\Users\Pete\Desktop\Pete Arbeit
2013-07-17 01:00 - 2013-07-17 00:51 - 00000000 ____D C:\Windows\System32\MRT
2013-07-11 12:47 - 2009-07-13 20:45 - 00427072 _____ C:\Windows\System32\FNTCACHE.DAT
2013-07-11 12:45 - 2013-03-16 03:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 12:45 - 2013-03-16 03:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 11:55 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 11:55 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 11:54 - 2010-11-20 23:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 11:38 - 2011-12-09 02:51 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 10:28 - 2013-07-10 10:28 - 00000000 ____D C:\Users\Pete\AppData\Local\{4BD0AE8E-EB25-4374-8A01-71C8697DA4BE}
2013-07-10 10:27 - 2013-07-10 10:27 - 00000000 ____D C:\Users\Pete\AppData\Local\SniperV2
2013-07-10 10:24 - 2011-02-10 12:30 - 00379433 _____ C:\Windows\DirectX.log
2013-07-10 07:52 - 2013-07-10 07:52 - 00000201 _____ C:\Users\Pete\Desktop\Sniper Elite V2.url
2013-07-10 07:00 - 2013-07-10 07:00 - 00000200 _____ C:\Users\Pete\Desktop\Sniper Elite.url
2013-07-09 02:12 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2013-07-08 00:09 - 2012-05-14 07:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-05 21:45 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-07-05 21:45 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\sl-SI
2013-07-05 21:45 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-07-05 21:45 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\sl-SI
2013-07-05 21:45 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-07-03 22:59 - 2013-07-03 22:39 - 00010557 _____ C:\Windows\IE10_main.log
2013-07-03 22:44 - 2013-07-03 22:44 - 01509376 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-07-03 22:44 - 2013-07-03 22:44 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-03 22:44 - 2013-07-03 22:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-07-03 22:44 - 2013-07-03 22:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-07-03 22:44 - 2013-07-03 22:44 - 01054720 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00905728 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00762368 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00452096 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00441856 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2013-07-03 22:44 - 2013-07-03 22:44 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-07-03 22:44 - 2013-07-03 22:44 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00281600 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00270848 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00247296 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\System32\url.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00216064 _____ (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00173568 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00149504 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00144896 _____ (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00136192 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00102912 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00097280 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-07-03 22:44 - 2013-07-03 22:44 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-07-03 22:44 - 2013-07-03 22:44 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00027648 _____ (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-07-03 22:44 - 2013-07-03 22:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-07-03 22:44 - 2013-07-03 22:44 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-07-03 10:43 - 2013-07-03 10:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-03 03:40 - 2013-05-08 00:39 - 00000000 ____D C:\Users\Pete\AppData\Roaming\Dropbox
2013-07-03 00:49 - 2013-05-08 00:42 - 00000000 ___RD C:\Users\Pete\Dropbox

Files to move or delete:
====================
C:\Users\Pete\AppData\Local\Temp\qrbmtpwkwvxdlcpji.exe

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-06-20 23:28:46
Restore point made on: 2013-06-24 11:35:50
Restore point made on: 2013-06-28 04:24:32
Restore point made on: 2013-07-02 00:31:57
Restore point made on: 2013-07-03 22:38:12
Restore point made on: 2013-07-08 00:21:35
Restore point made on: 2013-07-10 08:25:40
Restore point made on: 2013-07-10 08:35:11
Restore point made on: 2013-07-11 11:20:26
Restore point made on: 2013-07-15 23:40:38
Restore point made on: 2013-07-17 00:50:59
Restore point made on: 2013-07-20 12:40:55
Restore point made on: 2013-07-25 23:02:08

==================== Memory info =========================== 

Percentage of memory in use: 10%
Total physical RAM: 8103.05 MB
Available physical RAM: 7242.49 MB
Total Pagefile: 8101.25 MB
Available Pagefile: 7233.28 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:657.54 GB) (Free:447.93 GB) NTFS (Disk=0 Partition=2)
Drive e: (Recover) (Fixed) (Total:40 GB) (Free:20.37 GB) NTFS (Disk=0 Partition=3)
Drive h: (STICKI) (Removable) (Total:7.52 GB) (Free:7.52 GB) FAT32 (Disk=2 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: () (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=1) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 699 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=658 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

========================================================
Disk: 2 (Size: 8 GB) (Disk ID: A82FCD93)
Partition 1: (Active) - (Size=8 GB) - (Type=0B)


LastRegBack: 2013-07-26 04:36

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 28.07.2013, 16:50

Drücke bitte die

+ R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

2013-01-09] (Spotify Ltd)
HKU\Pete\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Pete\AppData\Local\Temp\qrbmtpwkwvxdlcpji.exe [67584 2013-07-27] () <===== ATTENTION
HKU\Pete\...\Winlogon: [Shell] cmd.exe [345088 2010-11-20] (Microsoft Corporation) <==== ATTENTION 
HKU\Pete\...\Command Processor: "C:\Users\Pete\AppData\Local\Temp\qrbmtpwkwvxdlcpji.exe" <===== ATTENTION!
C:\Users\Pete\AppData\Local\Temp\qrbmtpwkwvxdlcpji.exe
2013-07-27 12:19 - 2013-07-27 12:19 - 00393500 _____ C:\Users\Pete\AppData\Local\2433f433
2013-07-27 12:19 - 2013-07-27 12:19 - 00393492 _____ C:\ProgramData\2433f433
2013-07-27 12:19 - 2013-07-27 12:19 - 00393459 _____ C:\Users\Pete\AppData\Roaming\2433f433

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

Starte deinen Rechner erneut in die Reparaturoptionen
Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

neu booten, freuen

poebelpete · 28.07.2013, 17:19

Hi, hier das Ergebnis der Fixlog.txt Datei

Zitat:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-07-2013
Ran by SYSTEM at 2013-07-28 18:16:35 Run:1
Running from H:\
Boot Mode: Recovery
==============================================

"2013-01-09] (Spotify Ltd)" => File/Directory not found.
HKU\Pete\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx => Value deleted successfully.
HKU\Pete\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
HKU\Pete\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully.
C:\Users\Pete\AppData\Local\Temp\qrbmtpwkwvxdlcpji.exe => Moved successfully.
C:\Users\Pete\AppData\Local\2433f433 => Moved successfully.
C:\ProgramData\2433f433 => Moved successfully.
C:\Users\Pete\AppData\Roaming\2433f433 => Moved successfully.

==== End of Fixlog ====

schrauber · 28.07.2013, 21:38

Rechner neu starten und freuen

poebelpete · 28.07.2013, 22:00

EY Schrauber,

Super geil, bin drin und kann auf'n Desktop zugreifen.
Gibt es jetzt noch Sachen welche ich machen sollte, außer meine Internet securitysoftware auf den neusten Stand zu bringen ?!

Danke Danke und nochmal Danke. Mein Arsch is ganz schön uff Grundeis gegangen.

schrauber · 29.07.2013, 08:27

Kontrollscans im normalen Modus

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

poebelpete · 29.07.2013, 13:43

AdwareCleaner
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v2.306 - Datei am 29/07/2013 um 12:44:33 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Pete - DADDELKISTE
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Pete\Desktop\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\foxydeal.sqlite
Datei Gelöscht : C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\searchplugins\11-suche.xml
Ordner Gelöscht : C:\Program Files (x86)\Common Files\spigot
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Users\Pete\AppData\Roaming\pdfforge

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16635

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\prefs.js

[OK] Die Datei ist sauber.

-\\ Google Chrome v [Version kann nicht ermittelt werden]

Datei : C:\Users\Pete\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [1558 octets] - [29/07/2013 12:33:16]
AdwCleaner[S1].txt - [1493 octets] - [29/07/2013 12:44:33]

########## EOF - C:\AdwCleaner[S1].txt - [1553 octets] ##########

--- --- ---

Junkware:

Zitat:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.2.7 (07.29.2013:1)
OS: Windows 7 Home Premium x64
Ran by Pete on 29.07.2013 at 12:57:11,50
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{0C47A118-49A2-48C9-99E7-20223329B791}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{14E8B4E7-D24D-4A0F-B8D0-F77F4C2A86DD}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{299D725A-A215-4916-9032-41FB1ACB8772}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{4BD0AE8E-EB25-4374-8A01-71C8697DA4BE}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{4F818AE0-371B-4DC1-BC34-FA9F6116DADB}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{5B4C91FF-AB05-478F-AECE-253A24DB1302}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{60727683-707F-49C2-AED5-D6D6008B77FB}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{781B1F40-49DC-4857-8CFB-E8EA4B6E4BD5}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{8BFDA2E3-0AC8-4198-9130-DB4E9AC3936D}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{9D097631-0748-47D6-A92F-656EA7F47952}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{A136C60C-0A85-4B3E-9F25-4D7B402DB998}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{ADC03307-2FCB-450C-8A5F-83227681D468}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{C037434D-0E16-4797-9B57-4E2D001934DA}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{D4356989-71BD-4A3A-B0CF-2C7B3A9539D8}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{DC9A2EEC-B8F8-4654-B836-86EDBA576860}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{F72A2EE0-41EF-4070-80DD-3471F528DBAA}
Successfully deleted: [Empty Folder] C:\Users\Pete\appdata\local\{FA3E1C59-EB03-4E2B-A0F7-CE62F8342707}

~~~ FireFox

Emptied folder: C:\Users\Pete\AppData\Roaming\mozilla\firefox\profiles\3wf6n726.default\minidumps [42 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.07.2013 at 13:20:46,71
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST64:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-07-2013
Ran by Pete (administrator) on 29-07-2013 13:34:42
Running from C:\Users\Pete\Desktop\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Windows\SysWOW64\srvany.exe
() C:\Windows\KMService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Sony DADC Austria AG.) C:\Windows\SysWOW64\UAService7.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe
(Spotify Ltd) C:\Users\Pete\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-02-05] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [x]
HKLM\...\Run: [PSQLLauncher] - C:\Program Files\Protector Suite\launcher.exe [84816 2010-12-10] (UPEK Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2209896 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKCU\...\Run: [Steam] - "C:\Games\steam.exe" -silent [x]
HKCU\...\Run: [PlayNC Launcher] -  [x]
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Pete\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1199576 2013-01-09] (Spotify Ltd)
MountPoints2: {6cd07afe-63ff-11e2-a7da-3860771289e1} - G:\LaunchU3.exe -a
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2011-04-15] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe [228448 2011-04-15] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [218880 2012-08-17] (Kaspersky Lab ZAO)
HKU\UpdatusUser\...\Run: [Power2GoExpress] - NA [x]
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [247144 2012-10-03] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-03] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{AA4D1C5E-116A-4FF4-AA91-28F526868203}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Pete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0A9DCB97-47B8-47CF-BF1A-39917EDF946C} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
SearchScopes: HKCU - {F23B79E9-5F0A-4051-8CCA-AD66F371A4FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\PROGRA~2\TerraTec\TERRAT~1\THCDES~1.DLL (TerraTec Electronic GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default
FF SelectedSearchEngine: Google
FF Homepage: Google
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=827316&p=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\searchplugins\webde-suche.xml
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\Extensions\ich@maltegoetz.de
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions:  C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
CHR DefaultSearchURL: (Google) - {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [218880 2012-08-17] (Kaspersky Lab ZAO)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-07] ()
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [109352 2013-07-28] (SurfRight B.V.)
R2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2011-12-09] ()
S2 LanmanWorkstation; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-05] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [66872 2011-11-18] ()
R2 UserAccess7; C:\Windows\SysWow64\UAService7.exe [143360 2012-07-30] (Sony DADC Austria AG.)
S2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] ()
R2 Update-Service; %SystemRoot%\System32\UpdSvc.dll [x]

==================== Drivers (Whitelisted) ====================

S3 AF9035BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [514144 2009-10-02] (ITETech                  )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [611160 2012-08-13] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-05-25] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29016 2012-07-25] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54104 2012-06-08] (Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178008 2012-08-13] (Kaspersky Lab)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-29 12:57 - 2013-07-29 12:57 - 00001620 _____ C:\Users\Pete\Desktop\AdwCleaner[S1].txt
2013-07-29 12:57 - 2013-07-29 12:57 - 00000000 ____D C:\Windows\ERUNT
2013-07-29 12:44 - 2013-07-29 12:45 - 00001620 _____ C:\AdwCleaner[S1].txt
2013-07-29 12:33 - 2013-07-29 12:34 - 00001558 _____ C:\AdwCleaner[R1].txt
2013-07-29 11:39 - 2013-07-29 11:39 - 00002344 _____ C:\Users\Pete\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 11:36 - 2013-07-29 11:36 - 00001150 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 11:36 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-07-29 11:35 - 2013-07-29 12:49 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-29 11:35 - 2013-07-29 11:35 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 11:35 - 2013-07-29 11:35 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-29 11:34 - 2012-08-13 18:24 - 00611160 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2013-07-29 11:34 - 2012-08-13 18:24 - 00089432 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2013-07-28 18:48 - 2013-07-28 18:48 - 00000364 _____ C:\Windows\system32\.crusader
2013-07-28 15:41 - 2013-07-28 15:41 - 00000000 ____D C:\FRST
2013-07-28 14:00 - 2013-07-28 14:00 - 00003352 ____N C:\bootsqm.dat
2013-07-28 01:31 - 2013-07-28 01:31 - 00001837 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-07-28 01:31 - 2013-07-28 01:31 - 00000000 ____D C:\Program Files\HitmanPro
2013-07-28 01:30 - 2013-07-28 18:49 - 00000000 ____D C:\ProgramData\HitmanPro
2013-07-17 10:51 - 2013-07-17 11:00 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 21:39 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 21:39 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 21:39 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 21:39 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 21:39 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 21:39 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 21:39 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 21:39 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 21:39 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-10 20:27 - 2013-07-10 20:27 - 00000000 ____D C:\Users\Pete\AppData\Local\SniperV2
2013-07-10 17:52 - 2013-07-10 17:52 - 00000201 _____ C:\Users\Pete\Desktop\Sniper Elite V2.url
2013-07-10 17:03 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 17:03 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 17:03 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 17:03 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 17:02 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 17:02 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 17:02 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 17:00 - 2013-07-10 17:00 - 00000200 _____ C:\Users\Pete\Desktop\Sniper Elite.url
2013-07-04 08:44 - 2013-07-04 08:44 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-04 08:44 - 2013-07-04 08:44 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-04 08:44 - 2013-07-04 08:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-07-04 08:44 - 2013-07-04 08:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-07-04 08:44 - 2013-07-04 08:44 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-04 08:44 - 2013-07-04 08:44 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-07-04 08:44 - 2013-07-04 08:44 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-07-04 08:44 - 2013-07-04 08:44 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-07-04 08:44 - 2013-07-04 08:44 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-07-04 08:39 - 2013-07-04 08:59 - 00010557 _____ C:\Windows\IE10_main.log
2013-07-03 20:43 - 2013-07-03 20:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
154

==================== One Month Modified Files and Folders =======

2013-07-29 13:20 - 2013-07-29 13:20 - 00002542 _____ C:\Users\Pete\Desktop\JRT.txt
2013-07-29 13:01 - 2012-05-21 01:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-29 12:57 - 2013-07-29 12:57 - 00001620 _____ C:\Users\Pete\Desktop\AdwCleaner[S1].txt
2013-07-29 12:57 - 2013-07-29 12:57 - 00000000 ____D C:\Windows\ERUNT
2013-07-29 12:55 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-29 12:55 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-29 12:49 - 2013-07-29 11:35 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-29 12:46 - 2011-05-04 06:25 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-29 12:46 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-29 12:46 - 2009-07-14 06:51 - 00208225 _____ C:\Windows\setupact.log
2013-07-29 12:45 - 2013-07-29 12:44 - 00001620 _____ C:\AdwCleaner[S1].txt
2013-07-29 12:45 - 2011-11-18 19:57 - 01716721 _____ C:\Windows\WindowsUpdate.log
2013-07-29 12:34 - 2013-07-29 12:33 - 00001558 _____ C:\AdwCleaner[R1].txt
2013-07-29 12:00 - 2011-02-10 21:25 - 00707550 _____ C:\Windows\system32\perfh007.dat
2013-07-29 12:00 - 2011-02-10 21:25 - 00153110 _____ C:\Windows\system32\perfc007.dat
2013-07-29 12:00 - 2009-07-14 07:13 - 01642148 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-29 11:51 - 2012-06-22 12:00 - 00339968 ___SH C:\Users\Pete\Desktop\Thumbs.db
2013-07-29 11:39 - 2013-07-29 11:39 - 00002344 _____ C:\Users\Pete\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 11:36 - 2013-07-29 11:36 - 00001150 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 11:35 - 2013-07-29 11:35 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 11:35 - 2013-07-29 11:35 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-28 23:12 - 2011-11-19 16:29 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8321B496-B0F6-45C9-8765-637B901743D5}
2013-07-28 19:42 - 2010-11-21 05:47 - 00310486 _____ C:\Windows\PFRO.log
2013-07-28 18:49 - 2013-07-28 01:30 - 00000000 ____D C:\ProgramData\HitmanPro
2013-07-28 18:48 - 2013-07-28 18:48 - 00000364 _____ C:\Windows\system32\.crusader
2013-07-28 18:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-07-28 15:42 - 2011-11-18 11:08 - 00000000 ____D C:\Users\Pete
2013-07-28 15:41 - 2013-07-28 15:41 - 00000000 ____D C:\FRST
2013-07-28 14:00 - 2013-07-28 14:00 - 00003352 ____N C:\bootsqm.dat
2013-07-28 01:31 - 2013-07-28 01:31 - 00001837 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-07-28 01:31 - 2013-07-28 01:31 - 00000000 ____D C:\Program Files\HitmanPro
2013-07-28 00:48 - 2011-11-18 12:58 - 00000000 ____D C:\Games
2013-07-27 22:19 - 2011-12-19 22:31 - 00000000 ____D C:\Users\Pete\Documents\Youcam
2013-07-21 12:39 - 2011-12-09 12:30 - 00000000 ____D C:\Users\Pete\Desktop\Pete Arbeit
2013-07-17 11:00 - 2013-07-17 10:51 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 22:47 - 2009-07-14 06:45 - 00427072 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 22:45 - 2013-03-16 13:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 22:45 - 2013-03-16 13:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 21:55 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 21:55 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 21:54 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 21:38 - 2011-12-09 12:51 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 20:27 - 2013-07-10 20:27 - 00000000 ____D C:\Users\Pete\AppData\Local\SniperV2
2013-07-10 20:24 - 2011-02-10 22:30 - 00379433 _____ C:\Windows\DirectX.log
2013-07-10 17:52 - 2013-07-10 17:52 - 00000201 _____ C:\Users\Pete\Desktop\Sniper Elite V2.url
2013-07-10 17:00 - 2013-07-10 17:00 - 00000200 _____ C:\Users\Pete\Desktop\Sniper Elite.url
2013-07-09 12:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-08 10:15 - 2011-11-18 11:09 - 00001413 _____ C:\Users\Pete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-08 10:09 - 2012-05-14 17:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sl-SI
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sl-SI
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-07-04 08:59 - 2013-07-04 08:39 - 00010557 _____ C:\Windows\IE10_main.log
2013-07-04 08:44 - 2013-07-04 08:44 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-04 08:44 - 2013-07-04 08:44 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-04 08:44 - 2013-07-04 08:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-07-04 08:44 - 2013-07-04 08:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-07-04 08:44 - 2013-07-04 08:44 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-04 08:44 - 2013-07-04 08:44 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-07-04 08:44 - 2013-07-04 08:44 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-07-04 08:44 - 2013-07-04 08:44 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-07-04 08:44 - 2013-07-04 08:44 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-07-03 20:43 - 2013-07-03 20:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-03 13:40 - 2013-05-08 10:39 - 00000000 ____D C:\Users\Pete\AppData\Roaming\Dropbox
2013-07-03 10:49 - 2013-05-08 10:42 - 00000000 ___RD C:\Users\Pete\Dropbox

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-26 14:36

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition:

Zitat:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-07-2013
Ran by Pete at 2013-07-29 13:36:24
Running from C:\Users\Pete\Desktop\Downloads
Boot Mode: Normal
==========================================================

==================== Installed Programs =======================

Adobe AIR (x32 Version: 2.6.0.19140)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Aion (x32 Version: 1.5.0.0)
Apple Application Support (x32 Version: 2.3.2)
Apple Mobile Device Support (Version: 6.0.1.3)
Apple Software Update (x32 Version: 2.1.3.127)
Assassin's Creed Brotherhood (x32 Version: 1.03)
Bonjour (Version: 3.0.0.10)
Borderlands GOTY Edition (x32 Version: 1.4.1)
Call of Duty: Black Ops - Multiplayer (x32)
Call of Duty: Black Ops (x32)
Call of Duty: Modern Warfare 3 - Dedicated Server (x32)
Call of Duty: Modern Warfare 3 - Multiplayer (x32)
Call of Duty: Modern Warfare 3 (x32)
Cinergy T Stick MKII V9.06.3.01 (x32 Version: 9.06.3.01)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
Crysis(R) (x32 Version: 1.00.0000)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink PowerProducer (x32 Version: 5.0.2.3503)
CyberLink YouCam (x32 Version: 3.1.4013)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition
Diablo II (x32)
Diablo III (x32 Version: 1.0.8.16603)
Diablo III Beta (x32 Version: 0.9.0.8896)
Diablo III Public Test (x32 Version: 1.0.8.16107)
Divinity II - Ego Draconis (x32)
Dropbox (HKCU Version: 2.0.22)
Fable III (x32 Version: 1.0.0000.131)
Fable III (x32 Version: 1.0.0002.131)
FINAL FANTASY XIV (x32 Version: 1.0.0000)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
grandMA 3D 6 [2.7.0][6.7] v6.0.22.14199 (x32 Version: 6.0.22.14199)
grandMA onPC 6.701 (x32)
Guild Wars 2 (x32)
HP Deskjet 1050 J410 series - Grundlegende Software für das Gerät (Version: 22.50.231.0)
HP Deskjet 1050 J410 series Hilfe (x32 Version: 140.0.66.66)
HP Update (x32 Version: 5.002.006.003)
Intel PROSet Wireless
Intel(R) Processor Graphics (x32 Version: 8.15.10.2345)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (Version: 1.0.0.0135)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.0.2.0518)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.0.3000)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.0.1008)
Internet-TV für Windows Media Center (x32 Version: 4.2.2.0)
iTunes (Version: 11.0.1.12)
Java Auto Updater (x32 Version: 2.0.3.1)
Java(TM) 6 Update 24 (64-bit) (Version: 6.0.240)
Java(TM) 6 Update 24 (x32 Version: 6.0.240)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
manPro 3.7 (Version: 3.7.6.201)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
MediaMonkey 4.0 (x32 Version: 4.0)
Medion Home Cinema (x32 Version: 8.0.2608)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
NCsoft Launcher (x32 Version: 1.5.7.0)
NVIDIA 3D Vision Treiber 306.97 (Version: 306.97)
NVIDIA Grafiktreiber 306.97 (Version: 306.97)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA Optimus 1.10.8 (Version: 1.10.8)
NVIDIA PhysX (x32 Version: 9.12.0604)
NVIDIA PhysX-Systemsoftware 9.12.0604 (Version: 9.12.0604)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0697)
NVIDIA Systemsteuerung 306.97 (Version: 306.97)
NVIDIA Update 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
PDFCreator (x32 Version: 1.2.3)
PHotkey (x32 Version: 1.00.0032)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Protector Suite 2011 (Version: 5.9.4.6894)
PunkBuster Services (x32 Version: 0.986)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver (x32 Version: 7.41.216.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6353)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30127)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0)
Rossmann Fotowelt Software 4.9 (x32 Version: 4.9)
Skype™ 6.0 (x32 Version: 6.0.126)
Sniper Elite (x32)
Sniper Elite V2 (x32)
Spec Ops: The Line (x32)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Spotify (HKCU Version: 0.8.5.1333.g822e0de8)
Steam (x32 Version: 1.0.0.0)
Synaptics Pointing Device Driver (Version: 15.0.4.0)
TerraTec Home Cinema (x32 Version: 6.11.5)
The Elder Scrolls V: Skyrim (x32)
The Witcher Enhanced Edition (x32 Version: 1.4.5.1280)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 64-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 64-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 64-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 64-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 64-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2)
Venetica (x32)
VLC media player 1.1.11 (x32 Version: 1.1.11)
watchmi (x32 Version: 2.5.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.11 (32-Bit) (x32 Version: 4.11.0)
World of Warcraft (x32 Version: 4.2.2.14545)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)

==================== Restore Points =========================

21-06-2013 07:28:10 Windows Update
24-06-2013 19:34:22 Windows Update
28-06-2013 12:23:58 Windows Update
02-07-2013 08:31:20 Windows Update
04-07-2013 06:37:11 Windows Update
08-07-2013 08:21:03 Windows Update
10-07-2013 16:24:59 DirectX wurde installiert
10-07-2013 16:34:55 DirectX wurde installiert
11-07-2013 19:19:03 Windows Update
16-07-2013 07:40:07 Windows Update
17-07-2013 08:48:53 Windows Update
20-07-2013 20:40:23 Windows Update
26-07-2013 07:01:39 Windows Update
29-07-2013 10:01:29 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {26E49983-BEC5-44A0-B671-F7B40088B414} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {2B1F9975-783C-4EB1-B2F8-1BF3944B652F} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {3A113B38-FB44-4036-9005-6A20007C925D} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {897E4264-C3BA-454D-B1CA-95D9E25C2D28} - System32\Tasks\User_Feed_Synchronization-{8321B496-B0F6-45C9-8765-637B901743D5} => C:\Windows\system32\msfeedssync.exe [2013-07-04] (Microsoft Corporation)
Task: {9F0151BC-F822-4302-B6CE-DA7F4347F49C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation)
Task: {BACE73C0-7457-40C1-AC13-3037623047C4} - System32\Tasks\{67AF6D32-DC8F-434B-8F28-A9883A2B5E8A} => C:\Program Files (x86)\The Witcher Enhanced Edition\System\witcher.exe No File
Task: {BE6C01D1-6304-4618-AB3F-DF0D2AB727CB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {D7E963FE-26E9-4EF2-B581-4FFAD945A7E7} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 27%
Total physical RAM: 8103.05 MB
Available physical RAM: 5902.25 MB
Total Pagefile: 16204.29 MB
Available Pagefile: 13810.33 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:657.54 GB) (Free:447.87 GB) NTFS (Disk=0 Partition=2)
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:20.37 GB) NTFS (Disk=0 Partition=3)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 699 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=658 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================

So da sind alle Files.

Gruß Pete

Eine Frage hätte ich noch....Wollte heute mein Kaspersky internet Security 2013 verlängern und aktivieren.
Es kann aber keine SSL Verbindung aufgebaut werden, damit es geht muss ich den Arbeitsstationdienst starten.....der wird nur leider nicht gestartet. ist wohl nicht zu finden.
Kann ich zu diesem Thema hier auch jemanden befragen?

Danke und Gruß Pete

schrauber · 29.07.2013, 15:35

Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

poebelpete · 30.07.2013, 11:48

Hi Schrauber, hier die folgenden Files.

ESET

Zitat:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f18bde4d4c51654c8e227c7384c5a6ff
# engine=0
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-29 06:49:56
# local_time=2013-07-29 08:49:56 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1286 16777213 100 98 2643 29893718 0 0
# compatibility_mode=5893 16776573 100 94 281181 126753646 0 0
# scanned=0
# found=0
# cleaned=0
# scan_time=1822
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f18bde4d4c51654c8e227c7384c5a6ff
# engine=0
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-29 07:04:30
# local_time=2013-07-29 09:04:30 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1286 16777214 100 98 3517 29894592 0 0
# compatibility_mode=5893 16776573 100 94 282055 126754520 0 0
# scanned=0
# found=0
# cleaned=0
# scan_time=806
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f18bde4d4c51654c8e227c7384c5a6ff
# engine=14581
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-30 10:07:14
# local_time=2013-07-30 12:07:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1286 16777214 100 98 40779 29948756 0 0
# compatibility_mode=5893 16776573 100 94 336219 126808684 0 0
# scanned=239156
# found=6
# cleaned=0
# scan_time=40393
sh=3EE47E7804D016AF086AF2920035DC6B572CE19A ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Pete\AppData\Local\Temp\Java2SW_3330489649715037742.tmp"
sh=E11453B27816DA71DECABF377362333F481E3DA1 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Pete\AppData\Local\Temp\Java2SW_4547109495951883395.tmp"
sh=34C303D8469B01558D16DC514F0E9398BC114A04 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.Agent.PAH trojan" ac=I fn="C:\Users\Pete\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\3378eca-117336a4"
sh=E11453B27816DA71DECABF377362333F481E3DA1 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Pete\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\3127976b-63a0b13a"
sh=38F9B3EC6E253BFCDC4231332A957FAAD4A6346D ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Pete\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\4a45207b-2edb37ff"
sh=3EE47E7804D016AF086AF2920035DC6B572CE19A ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Pete\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\5bcb4bf-1e27614f"

SecurityCheck

Zitat:

Results of screen317's Security Check version 0.99.71
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Kaspersky Internet Security
Antivirus out of date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Java(TM) 6 Update 24
Java version out of Date!
Adobe Flash Player 11.7.700.224
Adobe Reader 10.1.7 Adobe Reader out of Date!
Mozilla Firefox (22.0)
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````

FRST

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-07-2013
Ran by Pete (administrator) on 30-07-2013 12:29:07
Running from C:\Users\Pete\Desktop\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Spotify Ltd) C:\Users\Pete\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Windows\SysWOW64\srvany.exe
() C:\Windows\KMService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Sony DADC Austria AG.) C:\Windows\SysWOW64\UAService7.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
() C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-02-05] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [x]
HKLM\...\Run: [PSQLLauncher] - C:\Program Files\Protector Suite\launcher.exe [84816 2010-12-10] (UPEK Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2209896 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKCU\...\Run: [Steam] - "C:\Games\steam.exe" -silent [x]
HKCU\...\Run: [PlayNC Launcher] -  [x]
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Pete\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1199576 2013-01-09] (Spotify Ltd)
MountPoints2: {6cd07afe-63ff-11e2-a7da-3860771289e1} - G:\LaunchU3.exe -a
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2011-04-15] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe [228448 2011-04-15] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [218880 2012-08-17] (Kaspersky Lab ZAO)
HKU\UpdatusUser\...\Run: [Power2GoExpress] - NA [x]
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [247144 2012-10-03] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-03] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{AA4D1C5E-116A-4FF4-AA91-28F526868203}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Pete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0A9DCB97-47B8-47CF-BF1A-39917EDF946C} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
SearchScopes: HKCU - {F23B79E9-5F0A-4051-8CCA-AD66F371A4FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\PROGRA~2\TerraTec\TERRAT~1\THCDES~1.DLL (TerraTec Electronic GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E5975F81-85CA-4EF3-ABC8-A08F3E50C380}: [NameServer]0.0.0.0

FireFox:
========
FF ProfilePath: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default
FF SelectedSearchEngine: Google
FF Homepage: Google
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=827316&p=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\searchplugins\webde-suche.xml
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Pete\AppData\Roaming\Mozilla\Firefox\Profiles\3wf6n726.default\Extensions\ich@maltegoetz.de
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions:  C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
CHR DefaultSearchURL: (Google) - {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [218880 2012-08-17] (Kaspersky Lab ZAO)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-07] ()
R2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2011-12-09] ()
S2 LanmanWorkstation; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-05] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [66872 2011-11-18] ()
R2 UserAccess7; C:\Windows\SysWow64\UAService7.exe [143360 2012-07-30] (Sony DADC Austria AG.)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] ()
R2 Update-Service; %SystemRoot%\System32\UpdSvc.dll [x]

==================== Drivers (Whitelisted) ====================

S3 AF9035BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [514144 2009-10-02] (ITETech                  )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [611160 2012-08-13] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-05-25] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29016 2012-07-25] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54104 2012-06-08] (Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178008 2012-08-13] (Kaspersky Lab)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-29 18:49 - 2013-07-29 18:49 - 00000207 _____ C:\Windows\tweaking.com-regbackup-DADDELKISTE-Microsoft-Windows-7-Home-Premium-(64-Bit).dat
2013-07-29 18:47 - 2013-07-29 18:47 - 00000000 ____D C:\RegBackup
2013-07-29 17:55 - 2013-07-29 20:01 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-07-29 13:20 - 2013-07-29 13:20 - 00002542 _____ C:\Users\Pete\Desktop\JRT.txt
2013-07-29 12:57 - 2013-07-29 12:57 - 00001620 _____ C:\Users\Pete\Desktop\AdwCleaner[S1].txt
2013-07-29 12:57 - 2013-07-29 12:57 - 00000000 ____D C:\Windows\ERUNT
2013-07-29 12:44 - 2013-07-29 12:45 - 00001620 _____ C:\AdwCleaner[S1].txt
2013-07-29 12:33 - 2013-07-29 12:34 - 00001558 _____ C:\AdwCleaner[R1].txt
2013-07-29 11:39 - 2013-07-29 11:39 - 00002344 _____ C:\Users\Pete\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 11:36 - 2013-07-29 11:36 - 00001150 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 11:36 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-07-29 11:35 - 2013-07-30 00:49 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-29 11:35 - 2013-07-29 11:35 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 11:35 - 2013-07-29 11:35 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-29 11:34 - 2012-08-13 18:24 - 00611160 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2013-07-29 11:34 - 2012-08-13 18:24 - 00089432 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2013-07-28 18:48 - 2013-07-28 18:48 - 00000364 _____ C:\Windows\system32\.crusader
2013-07-28 15:41 - 2013-07-28 15:41 - 00000000 ____D C:\FRST
2013-07-28 01:31 - 2013-07-29 17:40 - 00000000 ____D C:\Program Files\HitmanPro
2013-07-28 01:30 - 2013-07-28 18:49 - 00000000 ____D C:\ProgramData\HitmanPro
2013-07-17 10:51 - 2013-07-17 11:00 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 21:39 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 21:39 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 21:39 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 21:39 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 21:39 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 21:39 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 21:39 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 21:39 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 21:39 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 21:39 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 21:39 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 21:39 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-10 20:27 - 2013-07-10 20:27 - 00000000 ____D C:\Users\Pete\AppData\Local\SniperV2
2013-07-10 17:52 - 2013-07-10 17:52 - 00000201 _____ C:\Users\Pete\Desktop\Sniper Elite V2.url
2013-07-10 17:03 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 17:03 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 17:03 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 17:03 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 17:02 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 17:02 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 17:02 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 17:00 - 2013-07-10 17:00 - 00000200 _____ C:\Users\Pete\Desktop\Sniper Elite.url
2013-07-04 08:44 - 2013-07-04 08:44 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-04 08:44 - 2013-07-04 08:44 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-04 08:44 - 2013-07-04 08:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-07-04 08:44 - 2013-07-04 08:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-07-04 08:44 - 2013-07-04 08:44 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-04 08:44 - 2013-07-04 08:44 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-07-04 08:44 - 2013-07-04 08:44 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-07-04 08:44 - 2013-07-04 08:44 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-07-04 08:44 - 2013-07-04 08:44 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-07-04 08:39 - 2013-07-04 08:59 - 00010557 _____ C:\Windows\IE10_main.log
2013-07-03 20:43 - 2013-07-03 20:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
159

==================== One Month Modified Files and Folders =======

2013-07-30 12:26 - 2013-07-30 12:26 - 00000859 _____ C:\Users\Pete\Desktop\checkup.txt
2013-07-30 12:01 - 2012-05-21 01:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-30 09:58 - 2011-11-18 19:57 - 01794122 _____ C:\Windows\WindowsUpdate.log
2013-07-30 09:52 - 2011-02-10 21:25 - 00707550 _____ C:\Windows\system32\perfh007.dat
2013-07-30 09:52 - 2011-02-10 21:25 - 00153110 _____ C:\Windows\system32\perfc007.dat
2013-07-30 09:52 - 2009-07-14 07:13 - 01642148 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-30 00:52 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-30 00:52 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-30 00:49 - 2013-07-29 11:35 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-30 00:47 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-30 00:46 - 2011-05-04 06:25 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-30 00:46 - 2009-07-14 06:51 - 00208505 _____ C:\Windows\setupact.log
2013-07-29 23:53 - 2011-11-19 16:29 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8321B496-B0F6-45C9-8765-637B901743D5}
2013-07-29 20:05 - 2011-11-18 11:09 - 00114368 _____ C:\Users\Pete\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-29 20:05 - 2009-07-14 06:45 - 00427072 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-29 20:04 - 2010-11-21 05:47 - 00310834 _____ C:\Windows\PFRO.log
2013-07-29 20:01 - 2013-07-29 17:55 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-07-29 19:58 - 2009-07-14 04:34 - 00000514 _____ C:\Windows\win.ini
2013-07-29 18:49 - 2013-07-29 18:49 - 00000207 _____ C:\Windows\tweaking.com-regbackup-DADDELKISTE-Microsoft-Windows-7-Home-Premium-(64-Bit).dat
2013-07-29 18:47 - 2013-07-29 18:47 - 00000000 ____D C:\RegBackup
2013-07-29 17:40 - 2013-07-28 01:31 - 00000000 ____D C:\Program Files\HitmanPro
2013-07-29 13:20 - 2013-07-29 13:20 - 00002542 _____ C:\Users\Pete\Desktop\JRT.txt
2013-07-29 12:57 - 2013-07-29 12:57 - 00001620 _____ C:\Users\Pete\Desktop\AdwCleaner[S1].txt
2013-07-29 12:57 - 2013-07-29 12:57 - 00000000 ____D C:\Windows\ERUNT
2013-07-29 12:45 - 2013-07-29 12:44 - 00001620 _____ C:\AdwCleaner[S1].txt
2013-07-29 12:34 - 2013-07-29 12:33 - 00001558 _____ C:\AdwCleaner[R1].txt
2013-07-29 11:51 - 2012-06-22 12:00 - 00339968 ___SH C:\Users\Pete\Desktop\Thumbs.db
2013-07-29 11:39 - 2013-07-29 11:39 - 00002344 _____ C:\Users\Pete\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 11:36 - 2013-07-29 11:36 - 00001150 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 11:35 - 2013-07-29 11:35 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 11:35 - 2013-07-29 11:35 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-28 18:49 - 2013-07-28 01:30 - 00000000 ____D C:\ProgramData\HitmanPro
2013-07-28 18:48 - 2013-07-28 18:48 - 00000364 _____ C:\Windows\system32\.crusader
2013-07-28 18:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-07-28 15:42 - 2011-11-18 11:08 - 00000000 ____D C:\Users\Pete
2013-07-28 15:41 - 2013-07-28 15:41 - 00000000 ____D C:\FRST
2013-07-28 00:48 - 2011-11-18 12:58 - 00000000 ____D C:\Games
2013-07-27 22:19 - 2011-12-19 22:31 - 00000000 ____D C:\Users\Pete\Documents\Youcam
2013-07-21 12:39 - 2011-12-09 12:30 - 00000000 ____D C:\Users\Pete\Desktop\Pete Arbeit
2013-07-17 11:00 - 2013-07-17 10:51 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 22:45 - 2013-03-16 13:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 22:45 - 2013-03-16 13:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 21:55 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 21:55 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 21:54 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 21:38 - 2011-12-09 12:51 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 20:27 - 2013-07-10 20:27 - 00000000 ____D C:\Users\Pete\AppData\Local\SniperV2
2013-07-10 20:24 - 2011-02-10 22:30 - 00379433 _____ C:\Windows\DirectX.log
2013-07-10 17:52 - 2013-07-10 17:52 - 00000201 _____ C:\Users\Pete\Desktop\Sniper Elite V2.url
2013-07-10 17:00 - 2013-07-10 17:00 - 00000200 _____ C:\Users\Pete\Desktop\Sniper Elite.url
2013-07-09 12:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-08 10:15 - 2011-11-18 11:09 - 00001413 _____ C:\Users\Pete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-08 10:09 - 2012-05-14 17:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sl-SI
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sl-SI
2013-07-06 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-07-04 08:59 - 2013-07-04 08:39 - 00010557 _____ C:\Windows\IE10_main.log
2013-07-04 08:44 - 2013-07-04 08:44 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-04 08:44 - 2013-07-04 08:44 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-04 08:44 - 2013-07-04 08:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-07-04 08:44 - 2013-07-04 08:44 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-07-04 08:44 - 2013-07-04 08:44 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-04 08:44 - 2013-07-04 08:44 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-07-04 08:44 - 2013-07-04 08:44 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-07-04 08:44 - 2013-07-04 08:44 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-07-04 08:44 - 2013-07-04 08:44 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-07-04 08:44 - 2013-07-04 08:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-04 08:44 - 2013-07-04 08:44 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-07-03 20:43 - 2013-07-03 20:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-03 13:40 - 2013-05-08 10:39 - 00000000 ____D C:\Users\Pete\AppData\Roaming\Dropbox
2013-07-03 10:49 - 2013-05-08 10:42 - 00000000 ___RD C:\Users\Pete\Dropbox

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-26 14:36

==================== End Of Log ============================

--- --- ---

--- --- ---

Mhmmmm....das Problem mit dem Arbeitsstationsdienst besteht weiterhin.

Meinste nich das es vielleicht besser wär, dass System neu aufzusetzen?

Gruß Pete

schrauber · 30.07.2013, 13:54

Java und Adobe updaten. Ich denk das bekommen wir hin

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

28.07.2013, 05:25	#2
schrauber /// the machine /// TB-Ausbilder	GVU Trojaner eingefangen-kann nicht mehr auf den Desktop zugreifen hi, welches Betriebssystem? __________________ __________________

28.07.2013, 21:38	#6
schrauber /// the machine /// TB-Ausbilder	GVU Trojaner eingefangen-kann nicht mehr auf den Desktop zugreifen Rechner neu starten und freuen __________________ --> GVU Trojaner eingefangen-kann nicht mehr auf den Desktop zugreifen

GVU Trojaner eingefangen-kann nicht mehr auf den Desktop zugreifen

Plagegeister aller Art und deren Bekämpfung: GVU Trojaner eingefangen-kann nicht mehr auf den Desktop zugreifen