| |
| |||||||
Log-Analyse und Auswertung: Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
05.08.2013, 07:26
| #1 |
 |  Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe Guten Morgen liebe Trojaner-Board-Crew, ich bin neu hier und hoffe Hilfe zu finden. Die oben genannte Datei ist leider für mich nicht einfach zu finden. Ich wollte diese mit einem Dateischredder vernichten. Ich bin da ziemlich schmerzfrei, was solche Dinge angeht. Leider kann ich diese Datei unter der von Bitdefender angegebenen Adresse nicht finden.  Nach jedem Windows-Start kommt von Bitdefender die Meldung, dass der Prozess blockiert wurde C:\Users\S***\AppData\Roaming\Prapproxy32.exe. Auf Bitdefender bin ich vor 2 Tagen umgestiegen, weil ich feststellte, dass die kostenlosen Programme (Avira, Spybot) leider nicht in dem Umfang erkennen, wie man es sich wünscht. Ich habe mich schon ein bisschen eingelesen in diese Materie und auch das Programm OTL geladen. Ich versuche direkt diese Scanberichte einzufügen. Meinen User-Name habe ich mit S*** unkenntlich gemacht. Ich bin Neuling mit der OTL-Software. Der Scan ist nach der allgemeinen Anleitung aus dem Forum durchgeführt. OTL.txt: Code:
ATTFilter OTL logfile created on: 05.08.2013 08:01:46 - Run 5 OTL by OldTimer - Version 3.2.69.0 Folder = D:\Documents\09_Programme\02_Sicherheit\OTL 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16635) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,90 Gb Total Physical Memory | 5,23 Gb Available Physical Memory | 66,18% Memory free 15,80 Gb Paging File | 13,05 Gb Available in Paging File | 82,58% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 250,00 Gb Total Space | 117,79 Gb Free Space | 47,12% Space Free | Partition Type: NTFS Drive D: | 656,43 Gb Total Space | 196,78 Gb Free Space | 29,98% Space Free | Partition Type: NTFS Drive E: | 7,03 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive F: | 1863,01 Gb Total Space | 1122,59 Gb Free Space | 60,26% Space Free | Partition Type: NTFS Drive G: | 44,90 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Drive H: | 29,83 Gb Total Space | 15,15 Gb Free Space | 50,80% Space Free | Partition Type: FAT32 Drive I: | 59,61 Gb Total Space | 13,55 Gb Free Space | 22,73% Space Free | Partition Type: FAT32 Computer Name: S***-PC | User Name: S*** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - D:\Documents\09_Programme\02_Sicherheit\OTL\OTL.exe (OldTimer Tools) PRC - C:\Programme\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe (Bitdefender) PRC - C:\Users\S***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) PRC - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe (Samsung Electronics CO., LTD.) PRC - C:\Program Files (x86)\PureSync\PureSyncTray.exe (Jumping Bytes) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe () PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation) PRC - C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe () PRC - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe (Intel Corporation) ========== Modules (No Company Name) ========== MOD - C:\Programme\Bitdefender\Bitdefender\antispam32\txmlutil.dll () MOD - C:\Users\S***\AppData\Roaming\Dropbox\bin\libcef.dll () MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll () MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll () MOD - C:\Users\S***\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll () MOD - C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll () MOD - C:\Users\S***\AppData\Roaming\prapproxy32.dll () ========== Services (SafeList) ========== SRV:64bit: - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender\vsserv.exe (Bitdefender) SRV:64bit: - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe (Bitdefender) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies) SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender\bdparentalservice.exe (Bitdefender) SRV - (SWUpdateService) -- C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe (Samsung Electronics CO., LTD.) SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (ServiceLayer) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia) SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe () SRV - (jhi_service) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) SRV - (ZeroConfigService) -- C:\Programme\Intel\WiFi\bin\ZeroConfigService.exe (Intel® Corporation) SRV - (MyWiFiDHCPDNS) -- C:\Programme\Intel\WiFi\bin\PanDhcpDns.exe () SRV - (EvtEng) -- C:\Programme\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) SRV - (RegSrvc) -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation) SRV - (BTHSSecurityMgr) -- C:\Programme\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel(R) Corporation) SRV - (AMPPALR3) -- C:\Programme\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel Corporation) SRV - (WiseBootAssistant) -- C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe (WiseCleaner.com) SRV - (wlidsvc) -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation) SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation) SRV - (SamsungDeviceConfigurationWinService) -- C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe () SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (Bluetooth OBEX Service) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) SRV - (Bluetooth Media Service) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) SRV - (Bluetooth Device Monitor) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (avckf) -- C:\Windows\SysNative\drivers\avckf.sys (BitDefender) DRV:64bit: - (avc3) -- C:\Windows\SysNative\drivers\avc3.sys (BitDefender) DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd) DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated) DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:64bit: - (iusb3xhc) -- C:\Windows\SysNative\drivers\iusb3xhc.sys (Intel Corporation) DRV:64bit: - (iusb3hub) -- C:\Windows\SysNative\drivers\iusb3hub.sys (Intel Corporation) DRV:64bit: - (iusb3hcs) -- C:\Windows\SysNative\drivers\iusb3hcs.sys (Intel Corporation) DRV:64bit: - (IntcDAud) -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation) DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation) DRV:64bit: - (trufos) -- C:\Windows\SysNative\drivers\trufos.sys (BitDefender S.R.L.) DRV:64bit: - (nmwcdnsux64) -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys (Nokia) DRV:64bit: - (nmwcdc) -- C:\Windows\SysNative\drivers\ccdcmbox64.sys (Nokia) DRV:64bit: - (nmwcd) -- C:\Windows\SysNative\drivers\ccdcmbx64.sys (Nokia) DRV:64bit: - (UsbserFilt) -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys (Nokia) DRV:64bit: - (upperdev) -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys (Nokia) DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.) DRV:64bit: - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation) DRV:64bit: - (BDSandBox) -- C:\Windows\SysNative\drivers\bdsandbox.sys (BitDefender SRL) DRV:64bit: - (avchv) -- C:\Windows\SysNative\drivers\avchv.sys (BitDefender) DRV:64bit: - (VBoxNetAdp) -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys (Oracle Corporation) DRV:64bit: - (pccsmcfd) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys (Nokia) DRV:64bit: - (intaud_WaveExtensible) -- C:\Windows\SysNative\drivers\intelaud.sys (Intel Corporation) DRV:64bit: - (iwdbus) -- C:\Windows\SysNative\drivers\iwdbus.sys (Intel Corporation) DRV:64bit: - (XHCIPort) -- C:\Windows\SysNative\drivers\xHCIPort.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (usb3Hub) -- C:\Windows\SysNative\drivers\usb3Hub.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (gzflt) -- C:\Windows\SysNative\drivers\gzflt.sys (BitDefender LLC) DRV:64bit: - (NETwNs64) -- C:\Windows\SysNative\drivers\Netwsw00.sys (Intel Corporation) DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.) DRV:64bit: - (AMPPALP) -- C:\Windows\SysNative\drivers\AmpPal.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (AMPPAL) -- C:\Windows\SysNative\drivers\AmpPal.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (nvpciflt) -- C:\Windows\SysNative\drivers\nvpciflt.sys (NVIDIA Corporation) DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation) DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (ibtfltcoex) -- C:\Windows\SysNative\drivers\iBtFltCoex.sys (Intel Corporation) DRV:64bit: - (btmhsf) -- C:\Windows\SysNative\drivers\btmhsf.sys (Intel Corporation) DRV:64bit: - (btmaux) -- C:\Windows\SysNative\drivers\btmaux.sys (Intel Corporation) DRV:64bit: - (btmaudio) -- C:\Windows\SysNative\drivers\btmaud.sys (Intel Corporation) DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation) DRV:64bit: - (Uim_IM) -- C:\Windows\SysNative\drivers\Uim_IMx64.sys (Paragon) DRV:64bit: - (UimBus) -- C:\Windows\SysNative\drivers\uimx64.sys (Windows (R) 2000 DDK provider) DRV:64bit: - (Uim_VIM) -- C:\Windows\SysNative\drivers\uim_vimx64.sys (Paragon) DRV:64bit: - (hotcore3) -- C:\Windows\SysNative\drivers\hotcore3.sys (Paragon Software Group) DRV:64bit: - (SABI) -- C:\Windows\SysNative\drivers\SABI.sys (SAMSUNG ELECTRONICS) DRV:64bit: - (clwvd) -- C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation) DRV:64bit: - (SGDrv) -- C:\Windows\SysNative\drivers\SGDrv64.sys (Phoenix Technologies Ltd.) DRV:64bit: - (FTDIBUS) -- C:\Windows\SysNative\drivers\ftdibus.sys (FTDI Ltd.) DRV:64bit: - (FTSER2K) -- C:\Windows\SysNative\drivers\ftser2k.sys (FTDI Ltd.) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:64bit: - (usbser) -- C:\Windows\SysNative\drivers\usbser.sys (Microsoft Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC) DRV - (bdfwfpf_pc) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys (BitDefender SRL) DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC) DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C5 32 0E 03 84 04 CE 01 [binary data] IE - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.update: false FF - prefs.js..browser.search.defaultenginename: "Bing " FF - prefs.js..browser.search.order.3: "Bing " FF - prefs.js..browser.search.selectedEngine: "Bing " FF - prefs.js..browser.search.update: false FF - prefs.js..browser.startup.homepage: "hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP&dt=072513" FF - prefs.js..extensions.enabledAddons: %7BE634117B-33A8-4C70-8210-198010F03834%7D:1.0 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1 FF - prefs.js..keyword.URL: "hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=072513&q=" FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.6: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Bitdefender.com/PasswordManager;version=17.8: C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll (Bitdefender) FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER\BDTBEXT [2013.07.04 11:51:54 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ffpwdman@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\ [2013.07.04 11:52:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.05.01 00:28:09 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender\bdtbext [2013.07.04 11:51:54 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\extensions\\{E634117B-33A8-4C70-8210-198010F03834}: C:\Users\S***\AppData\Roaming\20003.012 [2013.07.16 01:29:37 | 000,000,000 | ---D | M] [2013.02.06 23:31:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\S***\AppData\Roaming\mozilla\Extensions [2013.07.25 15:20:35 | 000,002,402 | ---- | M] () -- C:\Users\S***\AppData\Roaming\mozilla\firefox\profiles\yar7htw3.default\searchplugins\bingp.xml [2013.05.01 00:24:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2013.07.16 01:29:37 | 000,000,000 | ---D | M] (Java Link Helper) -- C:\USERS\S***\APPDATA\ROAMING\20003.012 [2013.05.01 00:28:09 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2013.02.01 21:33:32 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.02.01 21:33:32 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2013.02.01 21:33:32 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2013.02.01 21:33:32 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2013.02.01 21:33:32 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2013.02.01 21:33:32 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2013.08.03 16:18:35 | 000,000,824 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (Bitdefender-Geldbörse) - {09F58E74-42B4-4D70-BA26-35FC954E7A17} - C:\Programme\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender) O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2:64bit: - BHO: (no name) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No CLSID value found. O2 - BHO: (Bitdefender-Geldbörse) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Programme\Bitdefender\Bitdefender\antispam32\pmbxie.dll (Bitdefender) O2 - BHO: (no name) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No CLSID value found. O4:64bit: - HKLM..\Run: [Bdagent] C:\Program Files\Bitdefender\Bitdefender\bdagent.exe (Bitdefender) O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKU\.DEFAULT..\Run: [Bitdefender-Geldbörse] C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe (Bitdefender) O4 - HKU\.DEFAULT..\Run: [Bitdefender-Geldbörse-Agent] C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe (Bitdefender) O4 - HKU\.DEFAULT..\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe (Bitdefender) O4 - HKU\S-1-5-18..\Run: [Bitdefender-Geldbörse] C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe (Bitdefender) O4 - HKU\S-1-5-18..\Run: [Bitdefender-Geldbörse-Agent] C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe (Bitdefender) O4 - HKU\S-1-5-18..\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe (Bitdefender) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000..\Run: [] File not found O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000..\Run: [Bitdefender-Geldbörse] C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe (Bitdefender) O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000..\Run: [Bitdefender-Geldbörse-Agent] C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe (Bitdefender) O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000..\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe (Bitdefender) O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000..\Run: [HP Officejet Pro 8500 A910 (NET)] C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.) O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000..\Run: [PureSync] C:\Program Files (x86)\PureSync\PureSyncTray.exe (Jumping Bytes) O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000..\Run: [UseerSideBar] C:\Users\S***\AppData\Roaming\prapproxy32.exe () O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1007..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-216033253-3173365450-1935379270-1007..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\S***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221 O7 - HKU\S-1-5-21-216033253-3173365450-1935379270-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9:64bit: - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found O9:64bit: - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AC932D40-F612-4F6D-A109-A662D6E296A8}: DhcpNameServer = 192.168.178.1 O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008.11.15 11:52:50 | 000,161,088 | R--- | M] (Take-Two Interactive Software, Inc.) - E:\Autorun.exe -- [ UDF ] O32 - AutoRun File - [2008.10.11 19:03:48 | 000,000,054 | R--- | M] () - E:\Autorun.inf -- [ UDF ] O32 - AutoRun File - [2009.07.14 10:26:40 | 000,000,043 | ---- | M] () - H:\AUTORUN.INF -- [ FAT32 ] O32 - AutoRun File - [2013.08.04 00:47:50 | 000,000,000 | RHSD | M] - I:\autorun.inf -- [ FAT32 ] O33 - MountPoints2\{00753381-7a74-11e2-8242-9718ea92fce8}\Shell - "" = AutoRun O33 - MountPoints2\{00753381-7a74-11e2-8242-9718ea92fce8}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.08.03 17:22:53 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Local\bdch [2013.08.03 17:22:06 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch [2013.08.03 17:15:39 | 000,076,944 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\bdvedisk.sys [2013.08.03 17:11:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender [2013.08.03 17:11:27 | 000,000,000 | ---D | C] -- C:\ProgramData\BDLogging [2013.08.03 17:10:34 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\capicom.dll [2013.08.03 17:10:34 | 000,093,600 | ---- | C] (BitDefender LLC) -- C:\Windows\SysNative\drivers\BdfNdisf6.sys [2013.08.03 17:10:34 | 000,082,384 | ---- | C] (BitDefender SRL) -- C:\Windows\SysNative\drivers\bdsandbox.sys [2013.08.03 17:10:31 | 000,718,840 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\avc3.sys [2013.08.03 17:10:31 | 000,593,144 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\avckf.sys [2013.08.03 17:10:31 | 000,261,056 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\avchv.sys [2013.08.03 16:41:12 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2013.08.03 16:41:06 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\Bitdefender [2013.08.03 16:29:47 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\QuickScan [2013.08.03 16:23:26 | 000,147,232 | ---- | C] (BitDefender LLC) -- C:\Windows\SysNative\drivers\gzflt.sys [2013.08.03 16:23:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2013.08.03 16:23:24 | 000,383,048 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\SysNative\drivers\trufos.sys [2013.08.03 16:23:24 | 000,000,000 | ---D | C] -- C:\Program Files\Bitdefender [2013.08.03 16:12:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Bitdefender [2013.08.03 16:12:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Bitdefender [2013.08.02 15:18:59 | 000,000,000 | ---D | C] -- C:\Users\S***\Desktop\Spiele_Zusatz [2013.08.02 10:07:40 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\UsAgt [2013.08.02 05:44:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2013.08.02 05:43:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy 2 [2013.07.30 22:56:29 | 000,000,000 | ---D | C] -- C:\Users\S***\Desktop\Ralf [2013.07.30 22:15:49 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\Thunderbird [2013.07.24 23:02:46 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Local\Adobe [2013.07.20 23:39:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft [2013.07.20 23:39:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft [2013.07.20 22:36:27 | 000,000,000 | ---D | C] -- C:\Users\S***\Desktop\Neuer Ordner [2013.07.18 21:50:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack x64 [2013.07.18 21:50:49 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack x64 [2013.07.16 01:29:34 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\20003.012 [2013.07.16 01:27:15 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\xmldm [2013.07.16 01:27:14 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\ckoock [2013.07.15 21:41:04 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Local\Chromium [2013.07.15 18:58:53 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll [2013.07.15 18:58:53 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll [2013.07.15 18:58:53 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll [2013.07.15 18:58:53 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll [2013.07.15 18:58:52 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll [2013.07.15 18:58:52 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll [2013.07.15 18:58:51 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll [2013.07.15 18:58:51 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll [2013.07.15 18:58:51 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll [2013.07.15 18:58:51 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll [2013.07.15 18:58:51 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll [2013.07.15 18:58:50 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll [2013.07.15 18:58:50 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll [2013.07.15 18:58:50 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll [2013.07.15 18:58:49 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll [2013.07.15 18:58:49 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll [2013.07.15 18:58:49 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll [2013.07.15 18:58:49 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll [2013.07.15 18:58:49 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll [2013.07.15 18:58:49 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll [2013.07.15 18:58:48 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll [2013.07.15 18:58:48 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll [2013.07.15 18:58:48 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll [2013.07.15 18:58:48 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll [2013.07.15 18:58:47 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll [2013.07.15 18:58:47 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll [2013.07.15 18:58:47 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll [2013.07.15 18:58:47 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll [2013.07.15 18:58:46 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll [2013.07.15 18:58:46 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll [2013.07.15 18:58:46 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll [2013.07.15 18:58:46 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll [2013.07.15 18:58:46 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll [2013.07.15 18:58:46 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll [2013.07.15 18:58:46 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll [2013.07.15 18:58:46 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2013.07.15 18:58:46 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll [2013.07.15 18:58:45 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll [2013.07.15 18:58:45 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll [2013.07.15 18:58:45 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll [2013.07.15 18:58:45 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll [2013.07.15 18:58:45 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll [2013.07.15 18:58:45 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll [2013.07.15 18:58:44 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll [2013.07.15 18:58:44 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll [2013.07.15 18:58:44 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll [2013.07.15 18:58:44 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll [2013.07.15 18:58:44 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll [2013.07.15 18:58:44 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll [2013.07.15 18:58:44 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll [2013.07.15 18:58:44 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll [2013.07.15 18:58:44 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll [2013.07.15 18:58:44 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll [2013.07.15 18:58:43 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll [2013.07.15 18:58:43 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll [2013.07.15 18:58:43 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll [2013.07.15 18:58:43 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll [2013.07.15 18:58:43 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll [2013.07.15 18:58:43 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll [2013.07.15 15:53:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Rockstar Games [2013.07.14 12:39:24 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT [2013.07.12 22:46:57 | 000,000,000 | -HSD | C] -- C:\ProgramData\SecuROM [2013.07.12 22:32:30 | 000,000,000 | ---D | C] -- D:\Documents\Games for Windows - LIVE Demos [2013.07.12 22:32:17 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll [2013.07.12 22:31:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace [2013.07.12 22:09:52 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\Eciwyg [2013.07.12 22:09:52 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\Ditacep [2013.07.12 18:34:45 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll [2013.07.12 18:34:45 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll [2013.07.12 18:34:45 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll [2013.07.12 18:34:44 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll [2013.07.12 16:23:59 | 000,000,000 | ---D | C] -- D:\Documents\Rockstar Games [2013.07.12 16:20:40 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2013.07.12 16:20:19 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Local\Rockstar Games [2013.07.12 16:19:55 | 000,000,000 | RH-D | C] -- C:\Users\S***\AppData\Roaming\SecuROM [2013.07.12 16:19:02 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll [2013.07.12 16:18:11 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll [2013.07.12 16:18:11 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll [2013.07.12 16:18:11 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll [2013.07.12 16:18:11 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll [2013.07.12 16:18:10 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll [2013.07.12 16:18:10 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll [2013.07.12 16:18:10 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll [2013.07.12 16:18:10 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll [2013.07.12 16:18:10 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll [2013.07.12 16:18:10 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll [2013.07.12 16:18:10 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll [2013.07.12 16:18:10 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll [2013.07.12 16:18:10 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll [2013.07.12 16:18:10 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll [2013.07.12 16:15:55 | 000,000,000 | ---D | C] -- D:\Documents\Microsoft Hardware [2013.07.12 16:15:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE [2013.07.11 00:31:18 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2013.07.11 00:31:18 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2013.07.11 00:31:17 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2013.07.11 00:31:17 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2013.07.11 00:31:17 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [2013.07.11 00:31:17 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe [2013.07.11 00:31:17 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2013.07.11 00:31:17 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2013.07.11 00:31:17 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013.07.11 00:31:17 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2013.07.11 00:31:17 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2013.07.11 00:31:16 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013.07.11 00:31:16 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013.07.11 00:31:16 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013.07.11 00:31:15 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013.07.10 23:07:01 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2013.07.10 23:05:40 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll [2013.07.10 23:05:40 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll [2013.07.10 23:05:39 | 001,887,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2013.07.10 23:05:39 | 001,620,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2013.07.07 20:28:15 | 000,000,000 | ---D | C] -- D:\Documents\Max Payne 2 Savegames [2013.07.07 20:26:53 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games [2013.07.07 20:24:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games [2013.07.07 20:07:05 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71.dll [2013.07.07 20:07:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Rockstar Games [2013.07.07 20:06:25 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\Wuuq [2013.07.07 20:06:25 | 000,000,000 | ---D | C] -- C:\Users\S***\AppData\Roaming\Qilei [2 C:\Users\S***\AppData\Roaming\*.tmp files -> C:\Users\S***\AppData\Roaming\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.08.05 07:59:55 | 000,016,752 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.08.05 07:59:55 | 000,016,752 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.08.05 07:50:58 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013.08.05 07:50:58 | 000,696,870 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2013.08.05 07:50:58 | 000,652,148 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013.08.05 07:50:58 | 000,148,134 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2013.08.05 07:50:58 | 000,121,080 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013.08.05 07:46:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.08.05 07:46:18 | 4187,381,759 | -HS- | M] () -- C:\hiberfil.sys [2013.08.05 01:41:31 | 000,007,626 | ---- | M] () -- C:\Users\S***\AppData\Local\Resmon.ResmonCfg [2013.08.04 19:06:52 | 000,239,701 | ---- | M] () -- C:\Users\S***\Desktop\Nokia N8-00 16 GB - Dunkelgrau (Ohne Simlock) 12 MP - Smartphone TOP! (ID68) _ eBay.pdf [2013.08.04 12:36:54 | 000,000,686 | -H-- | M] () -- C:\bdr-cf01 [2013.08.04 11:54:24 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2013.08.04 11:54:24 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2013.08.03 17:15:39 | 000,076,944 | ---- | M] (BitDefender) -- C:\Windows\SysNative\drivers\bdvedisk.sys [2013.08.03 17:12:08 | 001,205,422 | ---- | M] () -- C:\ProgramData\1375540566.bdinstall.bin [2013.08.03 17:11:58 | 000,000,385 | ---- | M] () -- C:\Windows\SysNative\user_gensett.xml [2013.08.03 17:11:31 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_avchv_01009.Wdf [2013.08.03 16:34:36 | 000,393,727 | ---- | M] () -- C:\ProgramData\1375539782.bdinstall.bin [2013.08.03 16:20:52 | 000,073,240 | ---- | M] () -- C:\Users\S***\AppData\Roaming\xcomwiz32.jpg [2013.08.03 16:19:12 | 000,000,085 | ---- | M] () -- C:\Windows\wininit.ini [2013.08.03 16:18:35 | 000,000,824 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2013.07.29 11:56:08 | 000,000,418 | ---- | M] () -- C:\Windows\tasks\Wise Care 365 PC Checkup Task.job [2013.07.24 23:07:27 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.07.24 23:07:25 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013.07.24 23:07:25 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013.07.24 17:42:13 | 000,367,712 | ---- | M] () -- C:\Users\S***\AppData\Roaming\AcroIEHelpe006286.dll [2013.07.24 17:42:13 | 000,007,496 | ---- | M] () -- C:\Users\S***\AppData\Roaming\BAcroIEHelpe006286.dll [2013.07.16 01:29:44 | 000,007,496 | ---- | M] () -- C:\Users\S***\AppData\Roaming\BAcroIEHelpe005285.dll [2013.07.16 01:29:13 | 000,000,656 | ---- | M] () -- C:\Users\S***\AppData\Roaming\rost.dat [2013.07.13 00:32:25 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo [2013.07.12 16:19:02 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll [2013.07.11 05:58:09 | 000,381,096 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013.07.10 17:59:23 | 000,000,428 | ---- | M] () -- C:\Windows\tasks\Wise Care 365.job [2013.07.09 18:08:01 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job [2013.07.07 14:34:41 | 000,000,408 | ---- | M] () -- C:\Windows\tasks\Wise Turbo Checker.job [2 C:\Users\S***\AppData\Roaming\*.tmp files -> C:\Users\S***\AppData\Roaming\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.08.04 19:06:52 | 000,239,701 | ---- | C] () -- C:\Users\S***\Desktop\Nokia N8-00 16 GB - Dunkelgrau (Ohne Simlock) 12 MP - Smartphone TOP! (ID68) _ eBay.pdf [2013.08.03 17:20:50 | 002,510,608 | -H-- | C] () -- C:\bdr-bz01 [2013.08.03 17:20:49 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2013.08.03 17:20:48 | 038,518,480 | -H-- | C] () -- C:\bdr-im01.gz [2013.08.03 17:20:48 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2013.08.03 17:12:08 | 001,205,422 | ---- | C] () -- C:\ProgramData\1375540566.bdinstall.bin [2013.08.03 17:11:58 | 000,000,385 | ---- | C] () -- C:\Windows\SysNative\user_gensett.xml [2013.08.03 17:11:42 | 000,000,686 | -H-- | C] () -- C:\bdr-cf01 [2013.08.03 17:11:31 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_avchv_01009.Wdf [2013.08.03 16:34:36 | 000,393,727 | ---- | C] () -- C:\ProgramData\1375539782.bdinstall.bin [2013.08.03 16:19:09 | 000,000,085 | ---- | C] () -- C:\Windows\wininit.ini [2013.07.29 11:56:08 | 000,000,418 | ---- | C] () -- C:\Windows\tasks\Wise Care 365 PC Checkup Task.job [2013.07.24 17:42:13 | 000,367,712 | ---- | C] () -- C:\Users\S***\AppData\Roaming\AcroIEHelpe006286.dll [2013.07.24 17:42:13 | 000,007,496 | ---- | C] () -- C:\Users\S***\AppData\Roaming\BAcroIEHelpe006286.dll [2013.07.23 17:11:12 | 000,073,240 | ---- | C] () -- C:\Users\S***\AppData\Roaming\xcomwiz32.jpg [2013.07.16 01:29:44 | 000,007,496 | ---- | C] () -- C:\Users\S***\AppData\Roaming\BAcroIEHelpe005285.dll [2013.07.16 01:29:13 | 000,000,656 | ---- | C] () -- C:\Users\S***\AppData\Roaming\rost.dat [2013.07.13 00:32:25 | 000,000,045 | ---- | C] () -- C:\Windows\SysWow64\initdebug.nfo [2013.05.27 14:39:33 | 000,000,832 | ---- | C] () -- C:\Users\S***\AppData\Local\recently-used.xbel [2013.03.25 13:34:42 | 000,001,632 | ---- | C] () -- C:\Users\S***\AppData\Roaming\MyMicroBalanceConfig.ini [2013.02.28 09:20:24 | 001,590,378 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2013.02.27 21:21:49 | 000,007,626 | ---- | C] () -- C:\Users\S***\AppData\Local\Resmon.ResmonCfg [2013.02.06 21:28:13 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini [2013.02.06 18:18:48 | 000,002,986 | ---- | C] () -- C:\Windows\HotFixList.ini [2012.03.26 20:19:10 | 000,755,188 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin [2012.03.26 20:19:08 | 000,561,508 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin [2012.03.26 20:03:46 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll [2012.03.26 18:53:42 | 013,024,768 | ---- | C] () -- C:\Windows\SysWow64\ig7icd32.dll [2012.02.02 23:08:26 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll [2009.10.31 12:08:11 | 000,364,480 | RHS- | C] () -- C:\Users\S***\AppData\Roaming\prapproxy32.exe [2009.10.31 12:08:11 | 000,353,504 | RHS- | C] () -- C:\Users\S***\AppData\Roaming\prapproxy32.dll ========== ZeroAccess Check ========== [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] < End of report > Code:
ATTFilter OTL Extras logfile created on: 05.08.2013 08:01:46 - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = D:\Documents\09_Programme\02_Sicherheit\OTL
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
7,90 Gb Total Physical Memory | 5,23 Gb Available Physical Memory | 66,18% Memory free
15,80 Gb Paging File | 13,05 Gb Available in Paging File | 82,58% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 250,00 Gb Total Space | 117,79 Gb Free Space | 47,12% Space Free | Partition Type: NTFS
Drive D: | 656,43 Gb Total Space | 196,78 Gb Free Space | 29,98% Space Free | Partition Type: NTFS
Drive E: | 7,03 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive F: | 1863,01 Gb Total Space | 1122,59 Gb Free Space | 60,26% Space Free | Partition Type: NTFS
Drive G: | 44,90 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Drive H: | 29,83 Gb Total Space | 15,15 Gb Free Space | 50,80% Space Free | Partition Type: FAT32
Drive I: | 59,61 Gb Total Space | 13,55 Gb Free Space | 22,73% Space Free | Partition Type: FAT32
Computer Name: S***-PC | User Name: S*** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Opera x64\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera x64\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Opera x64\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera x64\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01449962-D8A1-4F19-ACBF-AED3F4BCB7A1}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{0EE345E6-9091-4890-9AFC-D60FBF178EF8}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{100CB82A-E7E3-4DC3-935E-3A9FFE9D4942}" = rport=137 | protocol=17 | dir=out | app=system |
"{1016EB3D-2ED0-41D8-A677-2D6BCB1BA961}" = lport=2869 | protocol=6 | dir=in | app=system |
"{1647F113-3493-4775-B976-CCCADFAEAEB4}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{21374D97-9EA9-4D30-BC94-9FB551865B4C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{29D5DEB7-77A1-4F1C-A00D-03A5F3984136}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{4E7C0342-19A1-41A7-A508-191E847300B1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4E92B9B4-BC00-4480-964D-73C88EF69E0D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{53391A7F-4E8E-4F8B-A9AA-5727E9FBF1A0}" = rport=445 | protocol=6 | dir=out | app=system |
"{690F0240-D3DB-4345-88C4-AC859DAA5749}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{70CD7DEB-91E0-45C5-AA1E-F9DD179D68BA}" = lport=137 | protocol=17 | dir=in | app=system |
"{774E8209-2067-4DCC-8B14-9C26013C93F0}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{799EC784-0F55-4124-9538-27CD49E5207C}" = rport=138 | protocol=17 | dir=out | app=system |
"{7DCD8A35-A5CE-4BE0-952A-1C31B598E423}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{7DD2E822-851A-4F70-B32A-61749077A79D}" = rport=10243 | protocol=6 | dir=out | app=system |
"{7DD717B5-0E47-4FA8-93F9-345D4F92EEF5}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{93AB9C1D-BAE2-4698-B1EC-6E6CA0326B87}" = lport=10243 | protocol=6 | dir=in | app=system |
"{A2D8EBCB-3FB1-4291-9B8D-8B754F8CADF3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B608D116-1832-4A34-A74B-2953C1D0CE4B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{BD60746A-A9EE-4E1D-9485-1C5EB25A39A4}" = lport=139 | protocol=6 | dir=in | app=system |
"{BF935185-5A7A-4916-A76F-22C5A46CFA7A}" = rport=139 | protocol=6 | dir=out | app=system |
"{C7A28A77-18BD-49B1-A12A-F8B562B91F1B}" = lport=138 | protocol=17 | dir=in | app=system |
"{C853D4E8-FEF8-4996-95C8-D02AC69C480F}" = lport=445 | protocol=6 | dir=in | app=system |
"{D098D023-BC4A-471C-B90C-BF04AD3A5F1E}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00D18771-CADB-47AF-88BD-2056B23A5FDE}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{074645EE-D32B-4E6F-90FB-9728383B6864}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"{114CF618-CBE8-4B99-8569-B9B7E407B40E}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{12C4AD99-5FAE-4ACD-B7D6-3C5A636EF388}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{13C84FE8-1D33-47FF-A841-CC8DD6D7707D}" = protocol=17 | dir=in | app=c:\program files\opera x64\pluginwrapper\opera_plugin_wrapper_32.exe |
"{14397AB9-6AFA-4357-8DCA-8E4ABB0E3D7A}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{17E860B7-4187-47F4-9D7D-58F07E94C0AA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1D123899-02AA-41D7-AF53-8F9C85BDBB59}" = protocol=6 | dir=in | app=c:\program files\opera x64\pluginwrapper\opera_plugin_wrapper.exe |
"{1DB3F827-0D16-4093-A662-2418BF9B9EB8}" = protocol=6 | dir=in | app=c:\program files (x86)\empire interactive\flatout ultimate carnage\fouc.exe |
"{27767662-F5B4-4492-879F-CD7B5011540D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{27A7417C-778D-4D03-919C-F8536A770550}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{27B6AA48-82CD-4F17-9F87-E23ED9CD7A81}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{3FF722FD-5755-456A-ACFD-0E943D63E86E}" = protocol=6 | dir=in | app=c:\users\S***\appdata\roaming\dropbox\bin\dropbox.exe |
"{416A296C-3DB5-4D0A-9D47-8194A268644E}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{45672948-A4F6-4BCE-A647-2DEBE2A645EE}" = dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\devicesetup.exe |
"{45C06954-08D7-4807-B71F-C5B3C00A18F6}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{475B40B0-F2D8-4C39-AC56-31430A765B69}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"{496055BA-156A-402F-8CC5-541CA1621EDF}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{5015824E-BB54-4642-A389-8D484323456B}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\eflc\launcheflc.exe |
"{53669ED5-1345-4E88-A63C-D0D05FBA06E4}" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |
"{552770CE-4DB5-4864-A5C2-1F5BA306117E}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe |
"{5E426699-4B05-4D9D-98C1-CCCC234F7C76}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5F9B696A-873D-498A-9BF3-09ED12DF3942}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{60C57774-DC62-4BD6-AA23-A7529AE32AB0}" = dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\sendafax.exe |
"{6A8FC293-5E28-46E1-8478-083C4CF70071}" = protocol=6 | dir=out | app=system |
"{6B30BA63-294F-4D61-B886-A0922D868C1C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{6CF1DC8B-531C-4A66-A2CB-219311C80216}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{6F98AC55-DF31-428E-908E-FC9910E23CFF}" = protocol=17 | dir=in | app=c:\program files\opera x64\opera.exe |
"{7AF2F3FF-D1CE-4622-A84E-CC17E307B504}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{815752E4-D3A6-4DC1-894F-1059D3AF0999}" = dir=in | app=c:\program files (x86)\nokia\nokia suite\nokiasuite.exe |
"{88A63B70-B7F0-458B-81E7-E62BD94CA1EF}" = dir=in | app=c:\program files\intel corporation\intel widi\widiapp.exe |
"{8994E586-07AE-4F6E-A1B1-1D166372BCC6}" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |
"{8E28FA88-F7F1-4B42-8197-FE545948CBF1}" = protocol=17 | dir=in | app=c:\program files\opera x64\opera.exe |
"{8E624D2E-1603-4568-9142-615424AD4DD9}" = protocol=6 | dir=in | app=c:\program files (x86)\landwirtschafts simulator 2013\farmingsimulator2013.exe |
"{8EAB9203-D136-4CBC-802C-7DA663D15A6C}" = dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\faxapplications.exe |
"{911B3AC6-F5D3-44CD-866D-B11FC232B0D7}" = protocol=6 | dir=in | app=c:\program files\opera x64\pluginwrapper\opera_plugin_wrapper_32.exe |
"{98C40EBE-1672-4EA8-B130-7E6D95EA1645}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{997B2A97-0820-4C9F-879C-8A3B8A2C09DD}" = dir=in | app=c:\program files (x86)\nokia\nokia suite\nokiasuite.exe |
"{9B1558F1-93D9-461E-B1B7-B0D954CAA674}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{9DCD78A8-DCFD-434E-9DCD-80630581E0C1}" = protocol=17 | dir=in | app=c:\users\S***\appdata\roaming\dropbox\bin\dropbox.exe |
"{A3CEF007-6CDB-4436-8D09-F786717C87B0}" = protocol=6 | dir=in | app=c:\program files\opera x64\opera.exe |
"{A56F8E1A-78A8-4DC5-9B7D-786E8FCE1887}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe |
"{A756E23A-C00C-4795-AD0A-D939DD81EB08}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{ABFFB82E-0A99-46B5-9FE7-DFF7030854A7}" = protocol=17 | dir=in | app=c:\program files\opera x64\pluginwrapper\opera_plugin_wrapper.exe |
"{B450F912-2AB0-40B2-B638-0BA86BC06C56}" = dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe |
"{B6A3C638-6AF7-4D82-8185-48897FC1840A}" = protocol=17 | dir=in | app=c:\program files\opera x64\pluginwrapper\opera_plugin_wrapper_32.exe |
"{B6BD3372-DCA5-4A2B-9C0A-41485BA2C3B0}" = protocol=17 | dir=in | app=c:\program files (x86)\landwirtschafts simulator 2013\farmingsimulator2013game.exe |
"{B8A7313B-C0EB-4F9D-90FA-F69E0F5A7635}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\max payne 3\playmaxpayne3.exe |
"{BCA192FF-FA98-4F00-9A30-0F7C39D2D78E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BCB0EE34-060E-435D-A31F-4108F13F9EA2}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\eflc\launcheflc.exe |
"{BFF88712-C756-4E1A-BA84-DBA56877A91C}" = protocol=6 | dir=in | app=c:\program files\opera x64\pluginwrapper\opera_plugin_wrapper.exe |
"{C16EB1B1-87AD-4BE2-A48B-39D84884219A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{C4359618-C367-45C7-A1FA-6BF56F15A65D}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\max payne 3\playmaxpayne3.exe |
"{C9096A2C-18E0-44D2-B2C0-657B7BC45668}" = protocol=6 | dir=in | app=c:\program files\opera x64\pluginwrapper\opera_plugin_wrapper_32.exe |
"{CE499AD8-B999-4043-95AA-4026D0545835}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\launchgtaiv.exe |
"{D36E2249-5E77-42B8-8BFC-3B23958113A8}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\eflc\eflc.exe |
"{D6F39479-D571-458A-A289-510D3862CA89}" = dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicatorcom.exe |
"{D9368146-DC1B-48DA-B181-D495FD9227D7}" = dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\digitalwizards.exe |
"{DD44E26C-DD69-4056-8D97-B5B411F9564D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DFC00A4E-7048-4B00-8264-7610F1D0D7BE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E05B0535-C340-4D00-89C6-E6450A785AE1}" = protocol=6 | dir=in | app=c:\program files (x86)\landwirtschafts simulator 2013\farmingsimulator2013game.exe |
"{E4F195C2-5DC4-4EB3-8CAE-1EAAFFB7FB35}" = protocol=6 | dir=in | app=c:\users\S***\appdata\roaming\dropbox\bin\dropbox.exe |
"{E6501E97-B32A-4595-A06F-0023ADED5468}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E6CD0399-1559-47D0-A816-607DC919A706}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{EB21CA26-C599-41AA-A36D-B4CEDBD160FD}" = protocol=17 | dir=in | app=c:\program files (x86)\empire interactive\flatout ultimate carnage\fouc.exe |
"{EC5BAE83-3235-4387-A26F-FD9BA4F412D5}" = protocol=17 | dir=in | app=c:\users\S***\appdata\roaming\dropbox\bin\dropbox.exe |
"{EFD60931-3B77-407C-92A0-B0B2A9854790}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"{F220A2C4-40C9-4A36-B098-C06E4799437B}" = protocol=17 | dir=in | app=c:\program files\opera x64\pluginwrapper\opera_plugin_wrapper.exe |
"{F55C7658-38A3-44E2-98DA-1F5232BDD940}" = protocol=6 | dir=in | app=c:\program files\opera x64\opera.exe |
"{F76760E4-8B71-43C2-9BD3-4AC5C5266B28}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{F921CA97-923B-4BFE-A1DD-3463F9CBDBE0}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\eflc\eflc.exe |
"{F95EA544-2793-4352-B745-D36BBF7F481A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{FB6605A8-A748-4173-B6A1-7137BDA02226}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"{FE0D18AF-482B-4096-A1DA-AFE0D1A6D6AA}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\launchgtaiv.exe |
"{FF794958-7333-439C-8928-2A6219D71F05}" = protocol=17 | dir=in | app=c:\program files (x86)\landwirtschafts simulator 2013\farmingsimulator2013.exe |
"TCP Query User{93DBBD36-A5B3-4CC9-8D79-C4C74BD0AC34}C:\program files (x86)\rockstar games\eflc\eflc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\eflc\eflc.exe |
"TCP Query User{9BA73467-7A6A-48A2-ACF3-4B4EF4AE276A}C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"TCP Query User{A218BE16-8F69-48CD-92F4-01C702E90414}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |
"TCP Query User{B4B57EE0-0769-44BC-BFF2-A322248F9DAE}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{C6966D1C-A947-4196-AE56-A48F6A9180D1}C:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe |
"UDP Query User{1656F7C9-C21C-4BD3-AEE5-7DF4AA2CCE9F}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{58306C4C-6309-4A0C-B94D-AE01682E9E0F}C:\program files (x86)\rockstar games\eflc\eflc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\eflc\eflc.exe |
"UDP Query User{683ED778-73F8-41A8-89A9-33A8A098A34A}C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"UDP Query User{BFD261B2-034C-4676-8DAE-3E40F979A47A}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |
"UDP Query User{E8426322-3D34-4E65-A73B-9422F24A39D2}C:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0738F5F1-8E70-49A6-8692-F5722E1E5A4D}" = Easy Support Center
"{09536BA1-E498-4CC3-B834-D884A67D7E34}" = Intel® Trusted Connect Service Client
"{0A8BEF69-0DD7-4A8F-9AED-0CB91BEBCB58}" = HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{24F93B56-61F5-415F-85B9-AA444DA34AFC}" = Microsoft-Maus- und Tastatur-Center
"{26A24AE4-039D-4CA4-87B4-2F86417007FF}" = Java 7 Update 7 (64-bit)
"{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel(R) Wireless Display
"{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6097158B-0184-4140-BEC3-7885794D2571}" = Intel(R) WiDi
"{680EDA59-9266-44B4-949E-0C24F65DFF82}" = Microsoft_VC100_CRT_SP1_x64
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{75AA90DC-1E08-472E-863A-65D661AE0F9C}" = S Agent
"{76FF0F03-B707-4332-B5D1-A56C8303514E}" = iTunes
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{867DE0DC-A93F-41EA-9654-A212514FA946}" = Oracle VM VirtualBox 4.2.4
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{90F00673-A276-4A58-B675-B426D39D1E09}" = Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1" = PDF-Viewer
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 296.87
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 296.87
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.7.13
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"{ECE5B218-A086-4E18-A362-D11181681457}" = Intel® PROSet/Wireless WiFi-Software
"{F0932859-AA60-459E-B843-0BDECA34E2C7}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F" = Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0)
"An Office-n-PDF senden_is1" = An Office-n-PDF senden (novaPDF OEM 7.7 printer)
"Bitdefender" = Bitdefender Internet Security
"CCleaner" = CCleaner
"GIMP-2_is1" = GIMP 2.8.2
"KLiteCodecPack64_is1" = K-Lite Codec Pack 9.9.0 (64-bit)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Mouse and Keyboard Center" = Microsoft-Maus- und Tastatur-Center
"Opera 12.16.1860" = Opera 12.16
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"VLC media player" = VLC media player 2.0.7
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{03CC9D58-B132-4CC0-A521-4F3660AA43C7}" = Movie Maker
"{0454BB9A-2A7A-4214-BDFF-937F7A711A44}" = Windows Live Communications Platform
"{0C808377-8C23-44ED-9016-05F42E6D4900}" = Nokia Suite
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Settings
"{1AA94747-3BF6-4237-9E1A-7B3067738FE1}" = Max Payne 3
"{20CCA7EC-9499-41FA-A134-B904ABCC36ED}" = FireArc Arcade
"{29373274-977E-413C-A4DE-DC0F8E80C429}" = Nokia Connectivity Cable Driver
"{30F99474-EBE3-4134-A02B-F6CD38CFE243}" = Photo Gallery
"{3CBD94C1-BA15-488C-888B-D8DD296CC6DC}" = Fotogalerie
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{411B07C7-9307-4AA7-932E-CB506E4CF3A3}" = SW Update
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CCBD1F4-CEEC-452A-9CB8-46564B501315}" = Windows Live UX Platform
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6
"{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8302}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8303}" = Grand Theft Auto IV
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{5D95AD35-368F-47D5-B63A-A082DDF00119}" = Microsoft Foto 2006 Suite Edition Editor
"{61B8B2F9-D8DA-4B24-89A9-DB09F38A4899}" = Grand Theft Auto: Episodes From Liberty City
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{690F5BA3-5DEB-42CD-962B-F687EE59FAA7}" = Windows Live Essentials
"{691F4068-81BF-49E3-B32E-FE3E16400119}" = Microsoft Foto 2006 Suite Edition Bibliothek
"{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}" = Windows Live PIMT Platform
"{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}" = PC Connectivity Solution
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}" = HP Update
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World
"{871B2A9D-0F12-44B3-88C1-E0CB10A232E4}" = HP Officejet Pro 8500 A910 Hilfe
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}" = Windows Live SOXE Definitions
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{90120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007
"{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_STANDARD_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_STANDARD_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_STANDARD_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_STANDARD_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_STANDARD_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_STANDARD_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_STANDARD_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_STANDARD_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_STANDARD_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0407-1000-0000000FF1CE}_STANDARD_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_STANDARD_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F7FC79B-3059-4264-9450-39EB368E3225}" = Microsoft Digital Image Library 9 - Blocker
"{A35B895D-2EBF-4415-88DC-4B0D44F379BB}" = Office-n-PDF 2
"{A6C48A9F-694A-4234-B3AA-62590B668927}" = Intel(R) Manageability Engine Firmware Recovery Agent
"{AD80049E-8CB4-4794-BF58-4A2834CFD37C}" = PureSync
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B727564C-47D3-473A-AC9E-F4BE7B1BD5D3}" = Windows Live UX Platform Language Pack
"{C268B5E1-A5DA-11DF-A289-005056C00008}" = Paragon Backup & Recovery™ 2012 Free
"{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}" = Windows Live Installer
"{C4C0444B-B404-42E0-B834-1C7CB67E1031}" = Nero 7 Premium
"{C4CD208D-E3A2-488B-A4F4-FD8DE3DADD25}_is1" = BMW M3 Challenge
"{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common
"{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR
"{CAF30EE3-A2E2-47BE-A37B-96524BCB3EF5}" = MyMicroBalance
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E1203F8C-FF34-4968-A4A5-B4F1F8533DAB}" = Photo Common
"{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86
"{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1" = Wise Care 365 version 2.23
"{ED6C77F9-4D7E-447C-9EC0-9A212D075535}" = Movie Maker
"{EFE1AB94-5466-4B6E-BE31-FF4C115FD25D}" = Max Payne 2
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F443C200-5A4B-4773-83F3-069867AE07BA}" = EFA3 - Bilder Kraftfahrzeugtechnik
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) OpenCL CPU Runtime
"{FE7C0B3D-50B9-4951-BE78-A321CBF86552}" = Windows Live SOXE
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.17
"CanonSolutionMenu" = Canon Utilities Solution Menu
"DAEMON Tools Lite" = DAEMON Tools Lite
"DVDFab 8 Qt_is1" = DVDFab 8.2.2.8 (26/02/2013) Qt
"DVDFab 8_is1" = DVDFab 8.0.6.8 (05/01/2011)
"FarmingSimulator2013DE_is1" = Landwirtschafts Simulator 2013
"FlatOut Ultimate Carnage" = FlatOut Ultimate Carnage
"Free YouTube Download_is1" = Free YouTube Download version 3.2.8.717
"freeocr_is1" = FreeOCR v4.2
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"LinuxLive USB Creator" = LinuxLive USB Creator
"Mozilla Firefox 20.0.1 (x86 de)" = Mozilla Firefox 20.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP Navigator EX 1.0" = Canon MP Navigator EX 1.0
"Nokia Suite" = Nokia Suite
"PictureItSuite_v11" = Microsoft Foto 2006 Suite Edition
"PokerTH 1.0" = PokerTH
"PureSync" = PureSync 3.7.6
"Rockstar Games Social Club" = Rockstar Games Social Club
"STANDARD" = Microsoft Office Standard 2007
"WinLiveSuite" = Windows Live Essentials
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-216033253-3173365450-1935379270-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 04.08.2013 07:13:38 | Computer Name = S***-PC | Source = WinMgmt | ID = 10
Description =
Error - 04.08.2013 07:29:47 | Computer Name = S***-PC | Source = WinMgmt | ID = 10
Description =
Error - 04.08.2013 07:41:21 | Computer Name = S***-PC | Source = WinMgmt | ID = 10
Description =
Error - 04.08.2013 07:42:44 | Computer Name = S***-PC | Source = WinMgmt | ID = 10
Description =
Error - 04.08.2013 08:15:09 | Computer Name = S***-PC | Source = WinMgmt | ID = 10
Description =
Error - 04.08.2013 14:08:38 | Computer Name = S***-PC | Source = Application Hang | ID = 1002
Description = Programm wmplayer.exe, Version 12.0.7601.17514 kann nicht mehr unter
Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
zu suchen. Prozess-ID: 16ac Startzeit: 01ce913d91bfd417 Endzeit: 7 Anwendungspfad:
C:\Program Files (x86)\Windows Media Player\wmplayer.exe Berichts-ID: def9867c-fd30-11e2-b278-50b7c37d7a4a
Error - 04.08.2013 14:09:14 | Computer Name = S***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514,
Zeitstempel: 0x4ce7ae7f Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015,
Zeitstempel: 0x50b8479b Ausnahmecode: 0x0000046b Fehleroffset: 0x0000000000009e5d
ID
des fehlerhaften Prozesses: 0x528 Startzeit der fehlerhaften Anwendung: 0x01ce913d522ca2d8
Pfad
der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe Pfad
des fehlerhaften Moduls: C:\Windows\system32\KERNELBASE.dll Berichtskennung: f82d2863-fd30-11e2-b278-50b7c37d7a4a
Error - 04.08.2013 18:06:32 | Computer Name = S***-PC | Source = .NET Runtime | ID = 1022
Description =
Error - 04.08.2013 18:14:14 | Computer Name = S***-PC | Source = .NET Runtime | ID = 1022
Description =
Error - 05.08.2013 01:47:26 | Computer Name = S***-PC | Source = WinMgmt | ID = 10
Description =
[ OSession Events ]
Error - 14.04.2013 14:09:39 | Computer Name = S***-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5
seconds with 0 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 04.08.2013 06:55:22 | Computer Name = S***-PC | Source = DCOM | ID = 10005
Description =
Error - 04.08.2013 06:55:22 | Computer Name = S***-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
Windows Search erreicht.
Error - 04.08.2013 06:55:22 | Computer Name = S***-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht
gestartet: %%1053
Error - 04.08.2013 07:41:29 | Computer Name = S***-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Server" wurde mit folgendem Fehler beendet: %%1115
Error - 04.08.2013 07:52:48 | Computer Name = S***-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "SW Update Service" wurde unerwartet beendet. Dies ist bereits
1 Mal passiert.
Error - 04.08.2013 14:05:49 | Computer Name = S***-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet
beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden
in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error - 04.08.2013 14:09:40 | Computer Name = S***-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet
beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden
in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error - 04.08.2013 14:40:52 | Computer Name = S***-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet
beendet. Dies ist bereits 3 Mal passiert.
Error - 05.08.2013 01:47:34 | Computer Name = S***-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.
Error - 05.08.2013 01:52:20 | Computer Name = S***-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
< End of report >
Gruß Daniel |
|
05.08.2013, 08:19
| #2 |
| /// the machine /// TB-Ausbilder    | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
05.08.2013, 09:17
| #3 |
| | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe Vielen Dank für die schnelle Antwort
__________________FRST.txt FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-08-2013
Ran by S*** (administrator) on 05-08-2013 10:10:29
Running from D:\Documents\09_Programme\02_Sicherheit\Rettung
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Could not list processes ===============
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [x]
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2867984 2013-02-06] (Synaptics Incorporated)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1716832 2013-06-27] (Bitdefender)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKCU\...\Run: [PureSync] - C:\Program Files (x86)\PureSync\PureSyncTray.exe [907808 2013-04-29] (Jumping Bytes)
HKCU\...\Run: [HP Officejet Pro 8500 A910 (NET)] - C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [UseerSideBar] - C:\Users\S***\AppData\Roaming\prapproxy32.exe [364480 2009-10-31] ()
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [520496 2013-06-19] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [971136 2013-06-20] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [609576 2013-06-19] (Bitdefender)
MountPoints2: {00753381-7a74-11e2-8242-9718ea92fce8} - F:\LaunchU3.exe -a
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [260968 2012-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [215400 2012-05-28] (NVIDIA Corporation)
Startup: C:\Users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\S***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
BHO: Bitdefender-Geldbörse - {09F58E74-42B4-4D70-BA26-35FC954E7A17} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No File
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default
FF user.js: detected! => C:\Users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default\user.js
FF SelectedSearchEngine: Bing
FF Homepage: hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP&dt=072513
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=072513&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Bitdefender.com/PasswordManager;version=17.8 - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll (Bitdefender)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF HKLM-x32\...\Firefox\Extensions: [ffpwdman@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF HKCU\...\Firefox\Extensions: [{E634117B-33A8-4C70-8210-198010F03834}] C:\Users\S***\AppData\Roaming\20003.012
FF Extension: Java Link Helper - C:\Users\S***\AppData\Roaming\20003.012
==================== Services (Whitelisted) =================
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [75584 2013-06-19] (Bitdefender)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2013-02-06] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2013-02-06] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-08-23] ()
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 SamsungDeviceConfigurationWinService; C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [31624 2012-02-13] ()
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [2956336 2013-05-15] (Samsung Electronics CO., LTD.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-06-19] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1502080 2013-06-20] (Bitdefender)
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [718840 2013-04-17] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [593144 2013-04-17] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [109056 2013-01-29] (BitDefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82384 2012-11-12] (BitDefender SRL)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-06] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [147232 2012-10-04] (BitDefender LLC)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [39728 2011-11-17] (Paragon Software Group)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11523072 2012-09-30] (Intel Corporation)
R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [383048 2013-01-28] (BitDefender S.R.L.)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider)
R3 XHCIPort; C:\Windows\System32\DRIVERS\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider)
S3 SBIOSIO; \??\C:\Users\S***\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-05 10:10 - 2013-08-05 10:10 - 00000000 ____D C:\FRST
2013-08-05 10:08 - 2013-08-05 10:08 - 01788733 _____ (Farbar) C:\Users\S***\Downloads\FRST64.exe
2013-08-05 07:47 - 2013-08-05 07:56 - 00027470 _____ C:\Windows\WindowsUpdate.log
2013-08-05 07:47 - 2013-08-05 07:47 - 00000168 _____ C:\Windows\setupact.log
2013-08-05 07:47 - 2013-08-05 07:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-05 07:46 - 2013-08-05 07:46 - 00009842 _____ C:\Windows\PFRO.log
2013-08-04 09:40 - 2013-08-04 09:40 - 00000000 ____D C:\Users\S***\Downloads\Bitdefender
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\Users\S***\AppData\Local\bdch
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\ProgramData\bdch
2013-08-03 17:21 - 2013-08-03 17:21 - 00000385 _____ C:\Users\S***\AppData\Roaminguser_gensett.xml
2013-08-03 17:20 - 2013-08-04 11:54 - 00253404 ____H C:\bdr-ld01
2013-08-03 17:20 - 2013-08-04 11:54 - 00009216 ____H C:\bdr-ld01.mbr
2013-08-03 17:20 - 2013-06-25 18:20 - 38518480 ____H C:\bdr-im01.gz
2013-08-03 17:20 - 2012-08-15 15:28 - 02510608 ____H C:\bdr-bz01
2013-08-03 17:15 - 2013-08-03 17:15 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2013-08-03 17:12 - 2013-08-03 17:12 - 01205422 _____ C:\ProgramData\1375540566.bdinstall.bin
2013-08-03 17:11 - 2013-08-04 12:36 - 00000686 ____H C:\bdr-cf01
2013-08-03 17:11 - 2013-08-03 17:11 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____D C:\ProgramData\BDLogging
2013-08-03 17:10 - 2013-04-17 14:59 - 00718840 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2013-08-03 17:10 - 2013-04-17 14:59 - 00593144 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2013-08-03 17:10 - 2013-02-22 19:46 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys
2013-08-03 17:10 - 2012-11-12 18:11 - 00082384 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2013-08-03 17:10 - 2012-11-02 14:17 - 00261056 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys
2013-08-03 17:10 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2013-08-03 16:41 - 2013-08-03 16:41 - 00000000 ____D C:\Users\S***\AppData\Roaming\Bitdefender
2013-08-03 16:34 - 2013-08-03 16:34 - 00393727 _____ C:\ProgramData\1375539782.bdinstall.bin
2013-08-03 16:29 - 2013-08-03 16:29 - 00000000 ____D C:\Users\S***\AppData\Roaming\QuickScan
2013-08-03 16:23 - 2013-08-03 17:11 - 00000000 ____D C:\ProgramData\Bitdefender
2013-08-03 16:23 - 2013-08-03 16:23 - 00000000 ____D C:\Program Files\Bitdefender
2013-08-03 16:23 - 2013-01-28 15:57 - 00383048 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2013-08-03 16:23 - 2012-10-04 14:30 - 00147232 ____N (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2013-08-03 16:19 - 2013-08-03 16:19 - 00000085 _____ C:\Windows\wininit.ini
2013-08-03 16:18 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20130803-161835.backup
2013-08-03 16:12 - 2013-08-03 16:23 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-08-03 14:34 - 2013-08-03 14:43 - 00000361 _____ C:\Users\S***\AppData\Roaming\urlsps.txt
2013-08-02 15:18 - 2013-08-02 15:19 - 00000000 ____D C:\Users\S***\Desktop\Spiele_Zusatz
2013-08-02 10:07 - 2013-08-02 10:08 - 00000000 ____D C:\Users\S***\AppData\Roaming\UsAgt
2013-08-02 05:44 - 2013-08-02 08:21 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-02 05:43 - 2013-08-03 16:19 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-30 22:56 - 2013-07-31 00:06 - 00000000 ____D C:\Users\S***\Desktop\Ralf
2013-07-30 22:15 - 2013-08-04 20:18 - 00000000 ____D C:\Users\S***\AppData\Roaming\Thunderbird
2013-07-29 11:56 - 2013-07-29 11:56 - 00000418 _____ C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job
2013-07-24 23:02 - 2013-07-24 23:11 - 00000000 ____D C:\Users\S***\AppData\Local\Adobe
2013-07-24 17:42 - 2013-07-24 17:42 - 00367712 _____ C:\Users\S***\AppData\Roaming\AcroIEHelpe006286.dll
2013-07-24 17:42 - 2013-07-24 17:42 - 00007496 _____ C:\Users\S***\AppData\Roaming\BAcroIEHelpe006286.dll
2013-07-20 23:39 - 2013-07-20 23:39 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-20 22:36 - 2013-07-20 22:55 - 00000000 ____D C:\Users\S***\Desktop\Neuer Ordner
2013-07-18 21:50 - 2013-07-18 21:50 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-07-16 01:29 - 2013-07-24 17:42 - 00000050 _____ C:\Users\S***\AppData\Roaming\AcroIEHelpe.txt
2013-07-16 01:29 - 2013-07-16 01:29 - 00007496 _____ C:\Users\S***\AppData\Roaming\BAcroIEHelpe005285.dll
2013-07-16 01:29 - 2013-07-16 01:29 - 00000656 _____ C:\Users\S***\AppData\Roaming\rost.dat
2013-07-16 01:29 - 2013-07-16 01:29 - 00000000 ____D C:\Users\S***\AppData\Roaming\20003.012
2013-07-16 01:27 - 2013-08-02 10:12 - 00000000 ____D C:\Users\S***\AppData\Roaming\xmldm
2013-07-16 01:27 - 2013-07-16 01:27 - 00552126 _____ C:\Users\S***\AppData\Roaming\dict.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00001365 _____ C:\Users\S***\AppData\Roaming\jserv.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00000260 _____ C:\Users\S***\AppData\Roaming\srvblck5.tmp
2013-07-16 01:27 - 2013-07-16 01:27 - 00000000 ____D C:\Users\S***\AppData\Roaming\ckoock
2013-07-16 01:27 - 2013-07-16 01:27 - 00000000 _____ C:\Users\S***\AppData\Roaming\yar7htw3.default.tmp
2013-07-15 21:41 - 2013-07-15 21:41 - 00000000 ____D C:\Users\S***\AppData\Local\Chromium
2013-07-15 18:58 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-07-15 18:58 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-07-15 18:58 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-07-15 18:58 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-07-15 18:58 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-07-15 18:58 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-07-15 18:58 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-07-15 18:58 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-07-15 18:58 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-07-15 18:58 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-07-15 18:58 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-07-15 15:53 - 2013-07-15 15:53 - 00000000 ____D C:\ProgramData\Rockstar Games
2013-07-14 12:39 - 2013-07-14 12:53 - 00000000 ____D C:\Windows\system32\MRT
2013-07-13 00:32 - 2013-07-13 00:32 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-07-12 22:46 - 2013-07-12 22:46 - 00000000 __SHD C:\ProgramData\SecuROM
2013-07-12 22:32 - 2013-07-12 22:32 - 00000000 ____D D:\Documents\Games for Windows - LIVE Demos
2013-07-12 22:32 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-07-12 22:09 - 2013-07-19 13:54 - 00000000 ____D C:\Users\S***\AppData\Roaming\Eciwyg
2013-07-12 22:09 - 2013-07-19 13:39 - 00000000 ____D C:\Users\S***\AppData\Roaming\Ditacep
2013-07-12 18:34 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-07-12 18:34 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-07-12 18:34 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-07-12 18:34 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-07-12 16:23 - 2013-07-15 21:41 - 00000000 ____D D:\Documents\Rockstar Games
2013-07-12 16:20 - 2013-07-12 18:34 - 00000000 ____D C:\Users\S***\AppData\Local\Rockstar Games
2013-07-12 16:19 - 2013-07-12 16:19 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2013-07-12 16:19 - 2013-07-12 16:19 - 00000000 __RHD C:\Users\S***\AppData\Roaming\SecuROM
2013-07-12 16:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-07-12 16:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-07-12 16:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-07-12 16:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-07-12 16:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-07-12 16:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-07-12 16:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-07-12 16:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-07-12 16:15 - 2013-07-12 22:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-12 16:15 - 2013-07-12 16:15 - 00000000 ____D D:\Documents\Microsoft Hardware
2013-07-11 00:31 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 00:31 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 00:31 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 00:31 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 00:31 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 00:31 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 00:31 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 00:31 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 00:31 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-10 23:07 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 23:07 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 23:05 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 23:05 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 23:05 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 23:05 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 22:55 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-07 20:28 - 2013-07-11 20:41 - 00000000 ____D D:\Documents\Max Payne 2 Savegames
2013-07-07 20:26 - 2013-07-07 20:26 - 00000000 ____D C:\Users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-07-07 20:20 - 2003-05-23 12:28 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-07-07 20:20 - 2003-05-23 12:28 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-07-07 20:07 - 2013-07-29 00:59 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2013-07-07 20:07 - 2003-05-23 12:28 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2013-07-07 20:06 - 2013-08-03 15:01 - 00000000 ____D C:\Users\S***\AppData\Roaming\Qilei
2013-07-07 20:06 - 2013-07-07 20:06 - 00000000 ____D C:\Users\S***\AppData\Roaming\Wuuq
==================== One Month Modified Files and Folders =======
2013-08-05 10:08 - 2013-08-05 10:08 - 01788733 _____ (Farbar) C:\Users\S***\Downloads\FRST64.exe
2013-08-05 07:59 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-05 07:59 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-05 07:56 - 2013-08-05 07:47 - 00027470 _____ C:\Windows\WindowsUpdate.log
2013-08-05 07:50 - 2011-03-20 11:08 - 00696870 _____ C:\Windows\system32\perfh007.dat
2013-08-05 07:50 - 2011-03-20 11:08 - 00148134 _____ C:\Windows\system32\perfc007.dat
2013-08-05 07:50 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-05 07:49 - 2013-03-29 19:22 - 00000000 ____D C:\Users\S***\AppData\Roaming\Dropbox
2013-08-05 07:48 - 2013-03-01 22:49 - 00000000 ____D C:\Users\S***\AppData\Roaming\Wise Care 365
2013-08-05 07:47 - 2013-08-05 07:47 - 00000168 _____ C:\Windows\setupact.log
2013-08-05 07:47 - 2013-08-05 07:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-05 07:46 - 2013-08-05 07:46 - 00009842 _____ C:\Windows\PFRO.log
2013-08-05 01:41 - 2013-02-27 21:21 - 00007626 _____ C:\Users\S***\AppData\Local\Resmon.ResmonCfg
2013-08-05 01:36 - 2013-02-06 20:40 - 00000000 ____D C:\Users\S***\AppData\Roaming\Skype
2013-08-05 01:35 - 2013-02-06 23:19 - 00000000 ____D C:\Users\S***\AppData\Roaming\vlc
2013-08-04 20:18 - 2013-07-30 22:15 - 00000000 ____D C:\Users\S***\AppData\Roaming\Thunderbird
2013-08-04 20:18 - 2013-02-27 20:27 - 00000000 ____D D:\Documents\03_Kathi
2013-08-04 14:15 - 2013-04-06 14:37 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-08-04 14:15 - 2013-04-06 14:37 - 00000000 ____D C:\Windows\system32\NV
2013-08-04 14:14 - 2013-04-06 14:25 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-04 12:36 - 2013-08-03 17:11 - 00000686 ____H C:\bdr-cf01
2013-08-04 11:54 - 2013-08-03 17:20 - 00253404 ____H C:\bdr-ld01
2013-08-04 11:54 - 2013-08-03 17:20 - 00009216 ____H C:\bdr-ld01.mbr
2013-08-04 10:09 - 2013-02-27 19:32 - 00000000 ____D D:\Documents\01_Briefverkehr & Dokumente
2013-08-04 09:40 - 2013-08-04 09:40 - 00000000 ____D C:\Users\S***\Downloads\Bitdefender
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\Users\S***\AppData\Local\bdch
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\ProgramData\bdch
2013-08-03 17:21 - 2013-08-03 17:21 - 00000385 _____ C:\Users\S***\AppData\Roaminguser_gensett.xml
2013-08-03 17:15 - 2013-08-03 17:15 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2013-08-03 17:12 - 2013-08-03 17:12 - 01205422 _____ C:\ProgramData\1375540566.bdinstall.bin
2013-08-03 17:11 - 2013-08-03 17:11 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____D C:\ProgramData\BDLogging
2013-08-03 17:11 - 2013-08-03 16:23 - 00000000 ____D C:\ProgramData\Bitdefender
2013-08-03 16:41 - 2013-08-03 16:41 - 00000000 ____D C:\Users\S***\AppData\Roaming\Bitdefender
2013-08-03 16:34 - 2013-08-03 16:34 - 00393727 _____ C:\ProgramData\1375539782.bdinstall.bin
2013-08-03 16:29 - 2013-08-03 16:29 - 00000000 ____D C:\Users\S***\AppData\Roaming\QuickScan
2013-08-03 16:23 - 2013-08-03 16:23 - 00000000 ____D C:\Program Files\Bitdefender
2013-08-03 16:23 - 2013-08-03 16:12 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-08-03 16:19 - 2013-08-03 16:19 - 00000085 _____ C:\Windows\wininit.ini
2013-08-03 16:19 - 2013-08-02 05:43 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-03 15:01 - 2013-07-07 20:06 - 00000000 ____D C:\Users\S***\AppData\Roaming\Qilei
2013-08-03 14:43 - 2013-08-03 14:34 - 00000361 _____ C:\Users\S***\AppData\Roaming\urlsps.txt
2013-08-02 15:19 - 2013-08-02 15:18 - 00000000 ____D C:\Users\S***\Desktop\Spiele_Zusatz
2013-08-02 10:12 - 2013-07-16 01:27 - 00000000 ____D C:\Users\S***\AppData\Roaming\xmldm
2013-08-02 10:08 - 2013-08-02 10:07 - 00000000 ____D C:\Users\S***\AppData\Roaming\UsAgt
2013-08-02 08:21 - 2013-08-02 05:44 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-31 00:06 - 2013-07-30 22:56 - 00000000 ____D C:\Users\S***\Desktop\Ralf
2013-07-29 11:56 - 2013-07-29 11:56 - 00000418 _____ C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job
2013-07-29 00:59 - 2013-07-07 20:07 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2013-07-29 00:59 - 2013-02-06 17:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-27 11:40 - 2013-02-06 23:19 - 00000000 ____D C:\Users\S***\AppData\Roaming\dvdcss
2013-07-25 15:09 - 2013-02-06 20:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-25 15:09 - 2013-02-06 20:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-24 23:11 - 2013-07-24 23:02 - 00000000 ____D C:\Users\S***\AppData\Local\Adobe
2013-07-24 23:07 - 2013-02-06 20:50 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-24 23:07 - 2013-02-06 20:50 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-24 23:07 - 2013-02-06 20:50 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-24 17:42 - 2013-07-24 17:42 - 00367712 _____ C:\Users\S***\AppData\Roaming\AcroIEHelpe006286.dll
2013-07-24 17:42 - 2013-07-24 17:42 - 00007496 _____ C:\Users\S***\AppData\Roaming\BAcroIEHelpe006286.dll
2013-07-24 17:42 - 2013-07-16 01:29 - 00000050 _____ C:\Users\S***\AppData\Roaming\AcroIEHelpe.txt
2013-07-20 23:39 - 2013-07-20 23:39 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-20 23:39 - 2013-02-06 21:35 - 00000000 ____D C:\Users\S***\AppData\Roaming\DVDVideoSoft
2013-07-20 22:55 - 2013-07-20 22:36 - 00000000 ____D C:\Users\S***\Desktop\Neuer Ordner
2013-07-19 13:54 - 2013-07-12 22:09 - 00000000 ____D C:\Users\S***\AppData\Roaming\Eciwyg
2013-07-19 13:39 - 2013-07-12 22:09 - 00000000 ____D C:\Users\S***\AppData\Roaming\Ditacep
2013-07-18 21:50 - 2013-07-18 21:50 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-07-16 01:29 - 2013-07-16 01:29 - 00007496 _____ C:\Users\S***\AppData\Roaming\BAcroIEHelpe005285.dll
2013-07-16 01:29 - 2013-07-16 01:29 - 00000656 _____ C:\Users\S***\AppData\Roaming\rost.dat
2013-07-16 01:29 - 2013-07-16 01:29 - 00000000 ____D C:\Users\S***\AppData\Roaming\20003.012
2013-07-16 01:27 - 2013-07-16 01:27 - 00552126 _____ C:\Users\S***\AppData\Roaming\dict.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00001365 _____ C:\Users\S***\AppData\Roaming\jserv.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00000260 _____ C:\Users\S***\AppData\Roaming\srvblck5.tmp
2013-07-16 01:27 - 2013-07-16 01:27 - 00000000 ____D C:\Users\S***\AppData\Roaming\ckoock
2013-07-16 01:27 - 2013-07-16 01:27 - 00000000 _____ C:\Users\S***\AppData\Roaming\yar7htw3.default.tmp
2013-07-15 21:41 - 2013-07-15 21:41 - 00000000 ____D C:\Users\S***\AppData\Local\Chromium
2013-07-15 21:41 - 2013-07-12 16:23 - 00000000 ____D D:\Documents\Rockstar Games
2013-07-15 15:53 - 2013-07-15 15:53 - 00000000 ____D C:\ProgramData\Rockstar Games
2013-07-15 06:15 - 2013-04-06 14:25 - 00000000 ____D C:\Users\UpdatusUser.S***-PC.000
2013-07-15 01:46 - 2013-02-06 17:30 - 00000000 ____D C:\ProgramData\Samsung
2013-07-14 12:53 - 2013-07-14 12:39 - 00000000 ____D C:\Windows\system32\MRT
2013-07-13 00:32 - 2013-07-13 00:32 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-07-13 00:32 - 2013-02-06 20:26 - 00000000 ____D C:\Program Files\Opera x64
2013-07-12 22:46 - 2013-07-12 22:46 - 00000000 __SHD C:\ProgramData\SecuROM
2013-07-12 22:32 - 2013-07-12 22:32 - 00000000 ____D D:\Documents\Games for Windows - LIVE Demos
2013-07-12 22:31 - 2013-07-12 16:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-12 21:38 - 2013-02-06 22:13 - 00000000 ____D C:\Users\S***\AppData\Local\Windows Live
2013-07-12 21:29 - 2013-02-06 09:17 - 00000000 ____D C:\Windows\Panther
2013-07-12 18:34 - 2013-07-12 16:20 - 00000000 ____D C:\Users\S***\AppData\Local\Rockstar Games
2013-07-12 16:19 - 2013-07-12 16:19 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2013-07-12 16:19 - 2013-07-12 16:19 - 00000000 __RHD C:\Users\S***\AppData\Roaming\SecuROM
2013-07-12 16:15 - 2013-07-12 16:15 - 00000000 ____D D:\Documents\Microsoft Hardware
2013-07-11 20:41 - 2013-07-07 20:28 - 00000000 ____D D:\Documents\Max Payne 2 Savegames
2013-07-11 05:58 - 2009-07-14 06:45 - 00381096 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 00:57 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 00:57 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 00:57 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 00:32 - 2013-02-06 21:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 17:59 - 2013-03-01 23:28 - 00000428 _____ C:\Windows\Tasks\Wise Care 365.job
2013-07-09 18:08 - 2013-02-06 17:33 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-07-09 06:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-07 23:14 - 2013-02-27 20:27 - 00000000 ____D D:\Documents\08_Vorlagen
2013-07-07 20:26 - 2013-07-07 20:26 - 00000000 ____D C:\Users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-07-07 20:06 - 2013-07-07 20:06 - 00000000 ____D C:\Users\S***\AppData\Roaming\Wuuq
2013-07-07 14:34 - 2013-04-28 14:30 - 00000408 _____ C:\Windows\Tasks\Wise Turbo Checker.job
2013-07-06 14:23 - 2013-03-19 18:09 - 00000000 ____D C:\Users\S***\AppData\Roaming\PC Suite
2013-07-06 08:11 - 2013-02-06 20:26 - 00000000 ____D C:\Program Files (x86)\Opera x64
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-03 03:40
==================== End Of Log ============================
--- --- --- --- --- --- Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-08-2013
Ran by S*** at 2013-08-05 10:10:44
Running from D:\Documents\09_Programme\02_Sicherheit\Rettung
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe SVG Viewer 3.0 (x32 Version: 3.0)
Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17)
An Office-n-PDF senden (novaPDF OEM 7.7 printer)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Bitdefender Internet Security (Version: 17.13.0.551)
BMW M3 Challenge (x32 Version: BMW M3 Challenge v1.0.0.0)
Bonjour (Version: 3.0.0.10)
Canon MP Navigator EX 1.0 (x32)
Canon Utilities Solution Menu (x32)
CCleaner (Version: 3.27)
CyberLink YouCam (x32 Version: 3.1.4417)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.46.1.0328)
dows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
Dropbox (HKCU Version: 2.0.22)
DVDFab 8.0.6.8 (05/01/2011) (x32)
DVDFab 8.2.2.8 (26/02/2013) Qt (x32)
Easy Settings (x32 Version: 1.1)
Easy Support Center (Version: 1.2.32)
EFA3 - Bilder Kraftfahrzeugtechnik (x32 Version: 1.0.0)
FireArc Arcade (x32 Version: 0.5.19)
FlatOut Ultimate Carnage (x32)
Fotogalerie (x32 Version: 16.4.3505.0912)
Free YouTube Download version 3.2.8.717 (x32 Version: 3.2.8.717)
FreeOCR v4.2 (x32)
GIMP 2.8.2 (Version: 2.8.2)
Grand Theft Auto IV (x32 Version: 1.0.0013.131)
Grand Theft Auto IV (x32 Version: 1.00.0000)
Grand Theft Auto: Episodes From Liberty City (x32 Version: 1.1.0.0)
HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät (Version: 28.0.1315.0)
HP Officejet Pro 8500 A910 Hilfe (x32 Version: 140.0.2.2)
HP Update (x32 Version: 5.003.003.001)
I.R.I.S. OCR (x32 Version: 12.3.4.0)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.35342)
Intel(R) Management Engine Components (x32 Version: 8.0.2.1410)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2712)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.3.0.0398)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.0.0.0086)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) WiDi (Version: 3.5.40.0)
Intel(R) Wireless Display
Intel® PROSet/Wireless WiFi-Software (Version: 15.03.1000.1637)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
iTunes (Version: 11.0.4.4)
Java 7 Update 7 (64-bit) (Version: 7.0.70)
K-Lite Codec Pack 9.9.0 (64-bit) (Version: 9.9.0)
Landwirtschafts Simulator 2013 (x32 Version: 1.0)
LinuxLive USB Creator (x32 Version: 2.8)
Max Payne 2 (x32 Version: 1.01.102)
Max Payne 3 (x32 Version: 1.0.0.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Digital Image Library 9 - Blocker (x32 Version: 9.00.0000)
Microsoft Foto 2006 Suite Edition (x32 Version: 11.0.0422)
Microsoft Foto 2006 Suite Edition Bibliothek (x32 Version: 11.0.0422)
Microsoft Foto 2006 Suite Edition Editor (x32 Version: 11.0.0422)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Standard 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)
Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 20.0.1 (x86 de) (x32 Version: 20.0.1)
Mozilla Maintenance Service (x32 Version: 20.0.1)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyMicroBalance (x32 Version: 2.5.5)
Need For Speed™ World (x32 Version: 1.0.0.1398)
Nero 7 Premium (x32 Version: 7.02.6839)
neroxml (x32 Version: 1.0.0)
Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0)
Nokia Suite (x32 Version: 3.8.30.0)
NVIDIA Grafiktreiber 296.87 (Version: 296.87)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA Optimus 1.7.13 (Version: 1.7.13)
NVIDIA PhysX (x32 Version: 9.12.0213)
NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213)
NVIDIA Systemsteuerung 296.87 (Version: 296.87)
NVIDIA Update Components (Version: 1.7.13)
Office-n-PDF 2 (x32 Version: 2)
Opera 12.16 (Version: 12.16.1860)
Oracle VM VirtualBox 4.2.4 (Version: 4.2.4)
Paragon Backup & Recovery™ 2012 Free (x32 Version: 90.00.0003)
PC Connectivity Solution (x32 Version: 12.0.109.0)
PDFCreator (x32 Version: 1.6.2)
PDF-Viewer (Version: 2.5.208.0)
Photo Gallery (x32 Version: 16.4.3505.0912)
PokerTH (x32 Version: 1.0)
PureSync (x32 Version: 3.7.6)
PureSync 3.7.6 (x32 Version: 3.7.6)
Realtek Ethernet Controller Driver (x32 Version: 7.50.1123.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6716)
Rockstar Games Social Club (x32 Version: 1.1.0.6)
S Agent (Version: 1.1.41)
Skype™ 6.6 (x32 Version: 6.6.106)
SW Update (x32 Version: 2.1.15)
Synaptics Pointing Device Driver (Version: 15.3.40.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817563) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VLC media player 2.0.7 (Version: 2.0.7)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Wise Care 365 version 2.23 (x32 Version: 2.7.1)
==================== Restore Points =========================
14-07-2013 23:45:55 Installed SW Update
15-07-2013 13:52:36 Installiert Max Payne 3
17-07-2013 18:13:17 Avira Free Antivirus - 17.07.2013 20:13
28-07-2013 22:59:30 Installiert Grand Theft Auto: Episodes From Liberty City
02-08-2013 03:31:36 Windows Update
04-08-2013 01:01:46 Windows Update
04-08-2013 12:28:41 OTL Restore Point - 04.08.2013 14:28:35
04-08-2013 23:46:04 Created by Wise Care 365
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-08-03 16:18 - 00000824 ____R C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {060FF4A9-633E-443E-AA80-A59FE7E72708} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {0FD878BE-E546-449B-9182-6D3C1FCD2926} - System32\Tasks\Games\UpdateCheck_S-1-5-21-216033253-3173365450-1935379270-1000
Task: {149B5CEE-DF0F-455F-A710-59AD3E6B025A} - System32\Tasks\EasySpeedUpManager => C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe [2012-01-31] (Samsung Electronics)
Task: {153ED8B1-961C-41C9-B705-A35A91862150} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {22960E43-A5EC-484F-B252-1B3988F4E51B} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {307EB4A5-D9D1-4AE3-8037-819AA4778001} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {3269AD91-D635-462C-9924-0E9EB56CA9D0} - System32\Tasks\SCCSpeedBoot => C:\Program Files (x86)\Samsung\Easy Settings\SCCSpeedBoot.exe [2012-03-27] (Samsung Electronics Co., Ltd.)
Task: {512326E1-57BE-4291-8F14-0DDC9DBAADF4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6603BA3A-6901-4CCF-B6E5-359E096F748E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-01-23] (Piriform Ltd)
Task: {69F81879-0F77-427E-8909-7F0211A9B783} - System32\Tasks\MovieColorEnhancer => C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe [2012-04-25] (Samsung Electronics Co., Ltd.)
Task: {78F515CA-B6E1-418B-94FD-0953A96279EF} - System32\Tasks\EasySupportCenter => C:\Program Files\Samsung\Easy Support Center\SamoyedAgent.exe [2013-01-22] (Samsung Electronics CO., LTD.)
Task: {797AFFB5-9E5B-40C5-914C-7A96271D4F14} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe [2012-05-30] (Samsung Electronics Co., Ltd.)
Task: {88DFA171-0DAF-4417-86B7-B70C3332A9F2} - System32\Tasks\SmartSetting => C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe [2012-05-02] (Samsung Electronics Co., Ltd.)
Task: {95215142-E27B-42F5-9293-0820CE5F5BF1} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)
Task: {96C2D942-2D29-45B1-8ACD-C4F5EDDD32D5} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-05-08] (Samsung Electronics CO., LTD.)
Task: {9CA86CB8-BDD6-4EE0-B4B7-D9D08A1095F7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24] (Adobe Systems Incorporated)
Task: {AFD069EE-E224-43A7-95BB-7957D9AEC611} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-05-23] (WiseCleaner.COM)
Task: {B6FFE33D-3FD3-466F-A416-D718DBAB8FD1} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {BEEBA711-D4BE-4D5A-BA04-956410B89510} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {C5AF5B25-FC45-4C44-93BA-A9CC3E9701E3} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {DB87D482-B153-426F-A58A-EF2D2CE8C490} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {DE93A608-9B62-4572-8596-4CCB5BA66138} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {EEE2E1AE-9C75-4797-8DE3-A2ECE4D5DB66} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {F13BB6D2-4D0C-40AF-9A5A-7D0915D03F44} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-08-17] (CyberLink)
Task: {F3CFF79F-8E7A-4126-A726-C7D9F6FCB0D5} - System32\Tasks\Wise Care 365 => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe [2013-04-26] (WiseCleaner.com)
Task: {FC5A3093-8EBE-431E-BAA7-98227382E614} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe [2012-04-03] (Samsung Electronics)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseCare365.exe
Task: C:\Windows\Tasks\Wise Care 365.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/05/2013 07:47:26 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/05/2013 00:14:14 AM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.1008 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 7564. Meldungs-ID: [0x2509].
Error: (08/05/2013 00:06:32 AM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.1008 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 6740. Meldungs-ID: [0x2509].
Error: (08/04/2013 08:09:14 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7ae7f
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b8479b
Ausnahmecode: 0x0000046b
Fehleroffset: 0x0000000000009e5d
ID des fehlerhaften Prozesses: 0x528
Startzeit der fehlerhaften Anwendung: 0xwmpnetwk.exe0
Pfad der fehlerhaften Anwendung: wmpnetwk.exe1
Pfad des fehlerhaften Moduls: wmpnetwk.exe2
Berichtskennung: wmpnetwk.exe3
Error: (08/04/2013 08:08:38 PM) (Source: Application Hang) (User: )
Description: Programm wmplayer.exe, Version 12.0.7601.17514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 16ac
Startzeit: 01ce913d91bfd417
Endzeit: 7
Anwendungspfad: C:\Program Files (x86)\Windows Media Player\wmplayer.exe
Berichts-ID: def9867c-fd30-11e2-b278-50b7c37d7a4a
Error: (08/04/2013 02:15:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/04/2013 01:42:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/04/2013 01:41:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/04/2013 01:29:47 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/04/2013 01:13:38 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (08/05/2013 07:52:20 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error: (08/05/2013 07:47:34 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.
Error: (08/04/2013 08:40:52 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.
Error: (08/04/2013 08:09:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/04/2013 08:05:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/04/2013 01:52:48 PM) (Source: Service Control Manager) (User: )
Description: Dienst "SW Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/04/2013 01:41:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Server" wurde mit folgendem Fehler beendet:
%%1115
Error: (08/04/2013 00:55:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/04/2013 00:55:22 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (08/04/2013 00:55:22 PM) (Source: DCOM) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}
Microsoft Office Sessions:
=========================
Error: (04/14/2013 08:09:39 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5 seconds with 0 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 8089.4 MB
Available physical RAM: 5072.7 MB
Total Pagefile: 16176.98 MB
Available Pagefile: 13041.32 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:250 GB) (Free:117.49 GB) NTFS (Disk=0 Partition=2)
Drive d: () (Fixed) (Total:656.43 GB) (Free:196.78 GB) NTFS (Disk=0 Partition=3)
Drive e: (GTA IV Disc 1) (CDROM) (Total:7.03 GB) (Free:0 GB) UDF
Drive f: (TOSHIBA EXT) (Fixed) (Total:1863.01 GB) (Free:1122.59 GB) NTFS (Disk=1 Partition=1)
Drive g: (LF3 Grundl. Etec) (CDROM) (Total:0.04 GB) (Free:0 GB) UDF
Drive h: (MULTIBOOT) (Removable) (Total:29.83 GB) (Free:15.15 GB) FAT32 (Disk=3 Partition=1)
Drive i: (SCHMIDT_3) (Removable) (Total:59.61 GB) (Free:13.55 GB) FAT32 (Disk=2 Partition=1)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 8D8AB3F7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=250 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=656 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=25 GB) - (Type=27)
========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 1863 GB) (Disk ID: C79DB495)
Partition 1: (Not Active) - (Size=-198626420736) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 60 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=60 GB) - (Type=0C)
========================================================
Disk: 3 (Size: 30 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=30 GB) - (Type=0C)
==================== End Of Log ============================
|
|
05.08.2013, 11:30
| #4 |
| /// the machine /// TB-Ausbilder | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.08.2013, 14:27
| #5 |
| | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe Combofix.txt Code:
ATTFilter ComboFix 13-08-05.01 - S*** 05.08.2013 14:46:27.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8089.5740 [GMT 2:00]
ausgeführt von:: c:\users\S***\Desktop\ComboFix.exe
AV: Bitdefender Antivirus *Disabled/Updated* {9B5F5313-CAF9-DD97-C460-E778420237B4}
FW: Bitdefender Firewall *Disabled* {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}
SP: Bitdefender Spyware-Schutz *Disabled/Updated* {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1375539782.bdinstall.bin
c:\programdata\1375540566.bdinstall.bin
c:\programdata\Roaming
c:\users\S***\AppData\Roaming\20003.012
c:\users\S***\AppData\Roaming\20003.012\chrome.manifest
c:\users\S***\AppData\Roaming\20003.012\components\AcroFF.txt
c:\users\S***\AppData\Roaming\20003.012\components\AcroFF003012.dll
c:\users\S***\AppData\Roaming\20003.012\install.rdf
c:\users\S***\AppData\Roaming\AcroIEHelpe.txt
c:\users\S***\AppData\Roaming\AcroIEHelpe006286.dll
c:\users\S***\AppData\Roaming\BAcroIEHelpe005285.dll
c:\users\S***\AppData\Roaming\BAcroIEHelpe006286.dll
c:\users\S***\AppData\Roaming\prapproxy32.dll
c:\users\S***\AppData\Roaming\prapproxy32.exe
c:\users\S***\AppData\Roaming\srvblck5.tmp
c:\users\S***\AppData\Roaming\xcomwiz32.jpg
c:\users\S***\AppData\Roaming\yar7htw3.default.tmp
c:\windows\wininit.ini
D:\install.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-07-05 bis 2013-08-05 ))))))))))))))))))))))))))))))
.
.
2013-08-05 12:53 . 2013-08-05 12:53 -------- d-----w- c:\users\UpdatusUser.S***-PC.000\AppData\Local\temp
2013-08-05 12:53 . 2013-08-05 12:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-08-05 12:48 . 2013-08-05 12:48 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{65B8578A-28A8-446F-9329-6845EF983D11}\offreg.dll
2013-08-05 08:10 . 2013-08-05 08:10 -------- d-----w- C:\FRST
2013-08-03 15:22 . 2013-08-03 15:22 -------- d-----w- c:\users\S***\AppData\Local\bdch
2013-08-03 15:22 . 2013-08-03 15:22 -------- d-----w- c:\programdata\bdch
2013-08-03 15:15 . 2013-08-03 15:15 76944 ----a-w- c:\windows\system32\drivers\bdvedisk.sys
2013-08-03 15:11 . 2013-08-03 15:11 -------- d-----w- c:\programdata\BDLogging
2013-08-03 15:10 . 2013-02-22 17:46 93600 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys
2013-08-03 15:10 . 2012-11-12 16:11 82384 ----a-w- c:\windows\system32\drivers\bdsandbox.sys
2013-08-03 15:10 . 2007-04-11 09:11 511328 ----a-w- c:\windows\capicom.dll
2013-08-03 15:10 . 2013-04-17 12:59 593144 ----a-w- c:\windows\system32\drivers\avckf.sys
2013-08-03 15:10 . 2013-04-17 12:59 718840 ----a-w- c:\windows\system32\drivers\avc3.sys
2013-08-03 15:10 . 2012-11-02 12:17 261056 ----a-w- c:\windows\system32\drivers\avchv.sys
2013-08-03 14:41 . 2013-08-03 14:41 -------- d-----w- c:\users\S***\AppData\Roaming\Bitdefender
2013-08-03 14:29 . 2013-08-03 14:29 -------- d-----w- c:\users\S***\AppData\Roaming\QuickScan
2013-08-03 14:23 . 2013-08-03 15:11 -------- d-----w- c:\programdata\Bitdefender
2013-08-03 14:23 . 2012-10-04 12:30 147232 ------w- c:\windows\system32\drivers\gzflt.sys
2013-08-03 14:23 . 2013-08-03 14:23 -------- d-----w- c:\program files\Bitdefender
2013-08-03 14:23 . 2013-01-28 13:57 383048 ----a-w- c:\windows\system32\drivers\trufos.sys
2013-08-03 14:12 . 2013-08-03 14:23 -------- d-----w- c:\program files\Common Files\Bitdefender
2013-08-03 14:12 . 2013-08-03 14:12 -------- d-----w- c:\program files (x86)\Common Files\Bitdefender
2013-08-02 21:37 . 2013-07-15 01:34 9460976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{65B8578A-28A8-446F-9329-6845EF983D11}\mpengine.dll
2013-08-02 08:07 . 2013-08-02 08:08 -------- d-----w- c:\users\S***\AppData\Roaming\UsAgt
2013-08-02 03:44 . 2013-08-02 06:21 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2013-08-02 03:43 . 2013-08-03 14:19 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2013-07-30 20:15 . 2013-08-04 18:18 -------- d-----w- c:\users\S***\AppData\Roaming\Thunderbird
2013-07-24 21:02 . 2013-07-24 21:11 -------- d-----w- c:\users\S***\AppData\Local\Adobe
2013-07-20 21:39 . 2013-07-20 21:39 -------- d-----w- c:\program files (x86)\DVDVideoSoft
2013-07-20 21:39 . 2013-07-20 21:39 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
2013-07-18 19:50 . 2013-07-18 19:50 -------- d-----w- c:\program files\K-Lite Codec Pack x64
2013-07-15 23:27 . 2013-08-02 08:12 -------- d-----w- c:\users\S***\AppData\Roaming\xmldm
2013-07-15 23:27 . 2013-07-15 23:27 -------- d-----w- c:\users\S***\AppData\Roaming\ckoock
2013-07-15 19:41 . 2013-07-15 19:41 -------- d-----w- c:\users\S***\AppData\Local\Chromium
2013-07-15 13:53 . 2013-07-15 13:53 -------- d-----w- c:\programdata\Rockstar Games
2013-07-14 10:39 . 2013-07-14 10:53 -------- d-----w- c:\windows\system32\MRT
2013-07-12 20:46 . 2013-07-12 20:46 -------- d-sh--w- c:\programdata\SecuROM
2013-07-12 20:32 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2013-07-12 20:09 . 2013-07-19 11:54 -------- d-----w- c:\users\S***\AppData\Roaming\Eciwyg
2013-07-12 20:09 . 2013-07-19 11:39 -------- d-----w- c:\users\S***\AppData\Roaming\Ditacep
2013-07-12 16:34 . 2009-03-16 12:18 517448 ----a-w- c:\windows\SysWow64\XAudio2_4.dll
2013-07-12 16:34 . 2009-03-16 12:18 235352 ----a-w- c:\windows\SysWow64\xactengine3_4.dll
2013-07-12 16:34 . 2009-03-09 13:27 4178264 ----a-w- c:\windows\SysWow64\D3DX9_41.dll
2013-07-12 16:34 . 2009-03-16 12:18 22360 ----a-w- c:\windows\SysWow64\X3DAudio1_6.dll
2013-07-12 14:20 . 2013-07-12 16:34 -------- d-----w- c:\users\S***\AppData\Local\Rockstar Games
2013-07-12 14:19 . 2013-07-12 14:19 -------- d--h--r- c:\users\S***\AppData\Roaming\SecuROM
2013-07-12 14:19 . 2013-07-12 14:19 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2013-07-12 14:15 . 2013-07-12 20:31 -------- d-----w- c:\program files (x86)\Microsoft Games for Windows - LIVE
2013-07-10 21:07 . 2013-04-10 05:48 1732608 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-10 21:07 . 2013-04-10 05:46 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-10 21:07 . 2013-04-10 05:46 1393152 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-10 21:07 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-10 21:07 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2013-07-10 21:07 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2013-07-10 21:07 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-07-10 21:05 . 2013-05-27 05:50 1011712 ----a-w- c:\program files\Windows Defender\MpSvc.dll
2013-07-10 21:05 . 2013-05-27 05:50 571904 ----a-w- c:\program files\Windows Defender\MpClient.dll
2013-07-10 21:05 . 2013-05-27 05:50 314880 ----a-w- c:\program files\Windows Defender\MpCommu.dll
2013-07-10 21:05 . 2013-05-27 04:57 4608 ----a-w- c:\program files (x86)\Windows Defender\MsMpLics.dll
2013-07-10 21:05 . 2013-05-27 04:57 54784 ----a-w- c:\program files (x86)\Windows Defender\MpOAV.dll
2013-07-10 21:05 . 2013-05-27 04:57 392704 ----a-w- c:\program files (x86)\Windows Defender\MpClient.dll
2013-07-10 21:05 . 2013-05-27 03:15 9216 ----a-w- c:\program files (x86)\Windows Defender\MpAsDesc.dll
2013-07-10 21:05 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll
2013-07-10 21:05 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-10 21:05 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-10 21:05 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-10 20:55 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-07-07 18:20 . 2003-05-23 10:28 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2013-07-07 18:20 . 2003-05-23 10:28 499712 ----a-w- c:\windows\SysWow64\msvcp71.dll
2013-07-07 18:07 . 2013-07-28 22:59 -------- d-----w- c:\program files (x86)\Rockstar Games
2013-07-07 18:07 . 2003-05-23 10:28 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2013-07-07 18:06 . 2002-12-05 12:10 155648 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2013-07-07 18:06 . 2002-12-02 13:22 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2013-07-07 18:06 . 2002-12-02 11:33 57344 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2013-07-07 18:06 . 2002-12-02 11:33 237568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2013-07-07 18:06 . 2003-02-27 14:12 696320 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2013-07-07 18:06 . 2013-08-03 13:01 -------- d-----w- c:\users\S***\AppData\Roaming\Qilei
2013-07-07 18:06 . 2013-07-07 18:06 -------- d-----w- c:\users\S***\AppData\Roaming\Wuuq
2013-07-07 18:06 . 2013-07-07 18:06 163972 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2013-07-07 18:06 . 2013-07-07 18:06 282756 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-24 21:07 . 2013-02-06 18:50 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-24 21:07 . 2013-02-06 18:50 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-23 22:57 . 2013-02-06 19:04 78277128 ----a-w- c:\windows\system32\MRT.exe
2013-05-17 11:50 . 2012-07-17 13:37 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-13 05:51 . 2013-06-11 19:27 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-05-13 05:51 . 2013-06-11 19:27 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-05-13 05:51 . 2013-06-11 19:27 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-05-13 05:50 . 2013-06-11 19:27 52224 ----a-w- c:\windows\system32\certenc.dll
2013-05-13 04:45 . 2013-06-11 19:27 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-05-13 04:45 . 2013-06-11 19:27 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-05-13 04:45 . 2013-06-11 19:27 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-05-13 03:43 . 2013-06-11 19:27 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-05-13 03:08 . 2013-06-11 19:27 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-05-13 03:08 . 2013-06-11 19:27 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-05-10 05:49 . 2013-06-11 19:22 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-05-10 03:20 . 2013-06-11 19:22 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-05-08 06:39 . 2013-06-11 19:27 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 130736 ----a-w- c:\users\S***\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 130736 ----a-w- c:\users\S***\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 130736 ----a-w- c:\users\S***\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"PureSync"="c:\program files (x86)\PureSync\PureSyncTray.exe" [2013-04-29 907808]
"HP Officejet Pro 8500 A910 (NET)"="c:\program files\HP\HP Officejet Pro 8500 A910\Bin\ScanToPCActivationApp.exe" [2012-10-17 2573416]
"Bitdefender-Geldbörse-Agent"="c:\program files\Bitdefender\Bitdefender\pmbxag.exe" [2013-06-19 520496]
"Bitdefender-Geldbörse-Anwendungs-Agent"="c:\program files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe" [2013-06-19 609576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Bitdefender-Geldbörse-Agent"="c:\program files\Bitdefender\Bitdefender\pmbxag.exe" [2013-06-19 520496]
"Bitdefender-Geldbörse"="c:\program files\Bitdefender\Bitdefender\pwdmanui.exe" [2013-06-20 971136]
"Bitdefender-Geldbörse-Anwendungs-Agent"="c:\program files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe" [2013-06-19 609576]
.
c:\users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\S***\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 SWUpdateService;SW Update Service;c:\programdata\Samsung\SW Update Service\SWMAgent.exe;c:\programdata\Samsung\SW Update Service\SWMAgent.exe [x]
R2 WiseBootAssistant;Wise Boot Assistant;c:\program files (x86)\Wise\Wise Care 365\BootTime.exe;c:\program files (x86)\Wise\Wise Care 365\BootTime.exe [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys;c:\windows\SYSNATIVE\DRIVERS\avckf.sys [x]
R3 bdfwfpf_pc;bdfwfpf_pc;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [x]
R3 BDSandBox;BDSandBox;c:\windows\system32\drivers\bdsandbox.sys;c:\windows\SYSNATIVE\drivers\bdsandbox.sys [x]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys;c:\windows\SYSNATIVE\drivers\intelaud.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 SBIOSIO;SBIOSIO;c:\users\S***\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys;c:\users\S***\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 BdDesktopParental;Bitdefender Desktop Parental Control;c:\program files\Bitdefender\Bitdefender\bdparentalservice.exe;c:\program files\Bitdefender\Bitdefender\bdparentalservice.exe [x]
S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys;c:\windows\SYSNATIVE\DRIVERS\avc3.sys [x]
S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys;c:\windows\SYSNATIVE\DRIVERS\gzflt.sys [x]
S0 hotcore3;hc3ServiceName;c:\windows\system32\DRIVERS\hotcore3.sys;c:\windows\SYSNATIVE\DRIVERS\hotcore3.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [x]
S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys;c:\windows\SYSNATIVE\Drivers\SABI.sys [x]
S1 Uim_VIM;UIM Virtual Image Plugin;c:\windows\system32\Drivers\uim_vimx64.sys;c:\windows\SYSNATIVE\Drivers\uim_vimx64.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [x]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 SamsungDeviceConfigurationWinService;SamsungDeviceConfiguration;c:\program files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe;c:\program files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [x]
S2 SGDrv;SGDrv;c:\windows\system32\DRIVERS\SGdrv64.sys;c:\windows\SYSNATIVE\DRIVERS\SGdrv64.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 UPDATESRV;Bitdefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender\updatesrv.exe;c:\program files\Bitdefender\Bitdefender\updatesrv.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed - Virtueller Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 avchv;avchv Function Driver;c:\windows\system32\DRIVERS\avchv.sys;c:\windows\SYSNATIVE\DRIVERS\avchv.sys [x]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [x]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys;c:\windows\SYSNATIVE\drivers\btmaud.sys [x]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys;c:\windows\SYSNATIVE\DRIVERS\btmaux.sys [x]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys;c:\windows\SYSNATIVE\DRIVERS\btmhsf.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 ibtfltcoex;ibtfltcoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys;c:\windows\SYSNATIVE\DRIVERS\iBtFltCoex.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys;c:\windows\SYSNATIVE\DRIVERS\iwdbus.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usb3Hub;USB-IF USB 3.0 Hub;c:\windows\system32\DRIVERS\usb3Hub.sys;c:\windows\SYSNATIVE\DRIVERS\usb3Hub.sys [x]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
S3 XHCIPort;USB-IF xHCI USB Host Controller;c:\windows\system32\DRIVERS\XHCIPort.sys;c:\windows\SYSNATIVE\DRIVERS\XHCIPort.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-06 21:07]
.
2013-02-06 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 12:41]
.
2013-07-09 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 12:41]
.
2013-07-29 c:\windows\Tasks\Wise Care 365 PC Checkup Task.job
- c:\program files (x86)\Wise\Wise Care 365\WiseCare365.exe [2013-03-01 12:45]
.
2013-07-10 c:\windows\Tasks\Wise Care 365.job
- c:\program files (x86)\Wise\Wise Care 365\WiseTray.exe [2013-03-01 12:57]
.
2013-07-07 c:\windows\Tasks\Wise Turbo Checker.job
- c:\program files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-04-28 12:54]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 164016 ----a-w- c:\users\S***\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 164016 ----a-w- c:\users\S***\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 164016 ----a-w- c:\users\S***\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 164016 ----a-w- c:\users\S***\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-12-19 11406608]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-08-20 13192848]
"Bdagent"="c:\program files\Bitdefender\Bitdefender\bdagent.exe" [2013-06-27 1716832]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default\
FF - prefs.js: browser.search.selectedEngine - Bing
FF - prefs.js: browser.startup.homepage - hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP&dt=072513
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=072513&q=
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file)
Wow6432Node-HKCU-Run-UseerSideBar - c:\users\S***\AppData\Roaming\prapproxy32.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
BHO-{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-216033253-3173365450-1935379270-1000\Software\SecuROM\License information*]
"datasecu"=hex:60,e5,24,ee,5a,10,49,2e,e4,3a,d2,0d,8e,98,36,89,1c,a4,8e,60,f8,
6f,d7,85,ee,d9,28,20,fb,df,70,61,f4,7b,75,9f,ae,93,bf,29,bc,2c,d5,49,f1,48,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-08-05 14:54:51
ComboFix-quarantined-files.txt 2013-08-05 12:54
.
Vor Suchlauf: 13 Verzeichnis(se), 125.737.054.208 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 125.569.703.936 Bytes frei
.
- - End Of File - - AA7AE3FB2DC3A40DE09EB16E21837AA7
D41D8CD98F00B204E9800998ECF8427E
|
|
05.08.2013, 19:28
| #6 |
| /// the machine /// TB-Ausbilder | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe |
|
06.08.2013, 07:56
| #7 |
| | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe AdwCleaner: Code:
ATTFilter # AdwCleaner v2.306 - Datei am 06/08/2013 um 08:23:20 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : S*** - S***-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\S***\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Ordner Gelöscht : C:\Users\S***\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\S***\AppData\Roaming\pdfforge
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16635
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v20.0.1 (de)
Datei : C:\Users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default\prefs.js
C:\Users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default\user.js ... Gelöscht !
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [2120 octets] - [06/08/2013 08:23:20]
########## EOF - C:\AdwCleaner[S1].txt - [2180 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.3.3 (08.04.2013:1)
OS: Windows 7 Home Premium x64
Ran by S*** on 06.08.2013 at 8:35:19,40
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\S***\AppData\Roaming\mozilla\firefox\profiles\yar7htw3.default\minidumps [1 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.08.2013 at 8:39:32,32
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-08-2013
Ran by S*** (administrator) on 06-08-2013 08:46:57
Running from D:\Documents\09_Programme\02_Sicherheit\Rettung
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Jumping Bytes) C:\Program Files (x86)\PureSync\PureSyncTray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\ScanToPCActivationApp.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Dropbox, Inc.) C:\Users\S***\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Opera Software) C:\Program Files\Opera x64\opera.exe
(Opera Software) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [x]
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2867984 2013-02-06] (Synaptics Incorporated)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1716832 2013-06-27] (Bitdefender)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKCU\...\Run: [PureSync] - C:\Program Files (x86)\PureSync\PureSyncTray.exe [907808 2013-04-29] (Jumping Bytes)
HKCU\...\Run: [HP Officejet Pro 8500 A910 (NET)] - C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [520496 2013-06-19] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [609576 2013-06-19] (Bitdefender)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [260968 2012-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [215400 2012-05-28] (NVIDIA Corporation)
Startup: C:\Users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\S***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Bitdefender-Geldbörse - {09F58E74-42B4-4D70-BA26-35FC954E7A17} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default
FF SelectedSearchEngine: Bing
FF Homepage: hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP&dt=072513
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=072513&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Bitdefender.com/PasswordManager;version=17.8 - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll (Bitdefender)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF HKLM-x32\...\Firefox\Extensions: [ffpwdman@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF HKCU\...\Firefox\Extensions: [{E634117B-33A8-4C70-8210-198010F03834}] C:\Users\S***\AppData\Roaming\20003.012
==================== Services (Whitelisted) =================
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [75584 2013-06-19] (Bitdefender)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2013-02-06] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2013-02-06] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-08-23] ()
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 SamsungDeviceConfigurationWinService; C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [31624 2012-02-13] ()
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [2956336 2013-05-15] (Samsung Electronics CO., LTD.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-06-19] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1502080 2013-06-20] (Bitdefender)
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [718840 2013-04-17] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [593144 2013-04-17] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [109056 2013-01-29] (BitDefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82384 2012-11-12] (BitDefender SRL)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-06] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [147232 2012-10-04] (BitDefender LLC)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [39728 2011-11-17] (Paragon Software Group)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11523072 2012-09-30] (Intel Corporation)
R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [383048 2013-01-28] (BitDefender S.R.L.)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider)
R3 XHCIPort; C:\Windows\System32\DRIVERS\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 SBIOSIO; \??\C:\Users\S***\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-06 08:39 - 2013-08-06 08:39 - 00000762 _____ C:\Users\S***\Desktop\JRT.txt
2013-08-06 08:35 - 2013-08-06 08:35 - 00000000 ____D C:\Windows\ERUNT
2013-08-06 08:23 - 2013-08-06 08:23 - 00002245 _____ C:\AdwCleaner[S1].txt
2013-08-05 22:30 - 2013-08-05 22:30 - 00666633 _____ C:\Users\S***\Desktop\adwcleaner.exe
2013-08-05 22:30 - 2013-08-05 22:30 - 00562008 _____ (Oleg N. Scherbakov) C:\Users\S***\Desktop\JRT.exe
2013-08-05 14:54 - 2013-08-05 14:54 - 00034006 _____ C:\ComboFix.txt
2013-08-05 14:45 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-05 14:45 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-05 14:45 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-05 14:42 - 2013-08-05 14:54 - 00000000 ____D C:\Qoobox
2013-08-05 14:42 - 2013-08-05 14:53 - 00000000 ____D C:\Windows\erdnt
2013-08-05 14:36 - 2013-08-05 14:37 - 05100219 ____R (Swearware) C:\Users\S***\Desktop\ComboFix.exe
2013-08-05 10:10 - 2013-08-05 10:10 - 00000000 ____D C:\FRST
2013-08-05 10:08 - 2013-08-05 10:08 - 01788733 _____ (Farbar) C:\Users\S***\Downloads\FRST64.exe
2013-08-05 07:47 - 2013-08-06 08:26 - 00000504 _____ C:\Windows\setupact.log
2013-08-05 07:47 - 2013-08-06 08:24 - 00086231 _____ C:\Windows\WindowsUpdate.log
2013-08-05 07:47 - 2013-08-05 07:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-05 07:46 - 2013-08-05 15:01 - 00010382 _____ C:\Windows\PFRO.log
2013-08-04 09:40 - 2013-08-04 09:40 - 00000000 ____D C:\Users\S***\Downloads\Bitdefender
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\Users\S***\AppData\Local\bdch
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\ProgramData\bdch
2013-08-03 17:21 - 2013-08-03 17:21 - 00000385 _____ C:\Users\S***\AppData\Roaminguser_gensett.xml
2013-08-03 17:20 - 2013-08-04 11:54 - 00253404 ____H C:\bdr-ld01
2013-08-03 17:20 - 2013-08-04 11:54 - 00009216 ____H C:\bdr-ld01.mbr
2013-08-03 17:20 - 2013-06-25 18:20 - 38518480 ____H C:\bdr-im01.gz
2013-08-03 17:20 - 2012-08-15 15:28 - 02510608 ____H C:\bdr-bz01
2013-08-03 17:15 - 2013-08-03 17:15 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2013-08-03 17:11 - 2013-08-04 12:36 - 00000686 ____H C:\bdr-cf01
2013-08-03 17:11 - 2013-08-03 17:11 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____D C:\ProgramData\BDLogging
2013-08-03 17:10 - 2013-04-17 14:59 - 00718840 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2013-08-03 17:10 - 2013-04-17 14:59 - 00593144 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2013-08-03 17:10 - 2013-02-22 19:46 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys
2013-08-03 17:10 - 2012-11-12 18:11 - 00082384 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2013-08-03 17:10 - 2012-11-02 14:17 - 00261056 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys
2013-08-03 17:10 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2013-08-03 16:41 - 2013-08-03 16:41 - 00000000 ____D C:\Users\S***\AppData\Roaming\Bitdefender
2013-08-03 16:29 - 2013-08-03 16:29 - 00000000 ____D C:\Users\S***\AppData\Roaming\QuickScan
2013-08-03 16:23 - 2013-08-03 17:11 - 00000000 ____D C:\ProgramData\Bitdefender
2013-08-03 16:23 - 2013-08-03 16:23 - 00000000 ____D C:\Program Files\Bitdefender
2013-08-03 16:23 - 2013-01-28 15:57 - 00383048 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2013-08-03 16:23 - 2012-10-04 14:30 - 00147232 ____N (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2013-08-03 16:18 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20130803-161835.backup
2013-08-03 16:12 - 2013-08-03 16:23 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-08-03 14:34 - 2013-08-03 14:43 - 00000361 _____ C:\Users\S***\AppData\Roaming\urlsps.txt
2013-08-02 15:18 - 2013-08-02 15:19 - 00000000 ____D C:\Users\S***\Desktop\Spiele_Zusatz
2013-08-02 10:07 - 2013-08-02 10:08 - 00000000 ____D C:\Users\S***\AppData\Roaming\UsAgt
2013-08-02 05:44 - 2013-08-02 08:21 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-02 05:43 - 2013-08-03 16:19 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-30 22:56 - 2013-07-31 00:06 - 00000000 ____D C:\Users\S***\Desktop\Ralf
2013-07-30 22:15 - 2013-08-04 20:18 - 00000000 ____D C:\Users\S***\AppData\Roaming\Thunderbird
2013-07-29 11:56 - 2013-07-29 11:56 - 00000418 _____ C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job
2013-07-24 23:02 - 2013-07-24 23:11 - 00000000 ____D C:\Users\S***\AppData\Local\Adobe
2013-07-20 23:39 - 2013-07-20 23:39 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-20 22:36 - 2013-07-20 22:55 - 00000000 ____D C:\Users\S***\Desktop\Neuer Ordner
2013-07-18 21:50 - 2013-07-18 21:50 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-07-16 01:29 - 2013-07-16 01:29 - 00000656 _____ C:\Users\S***\AppData\Roaming\rost.dat
2013-07-16 01:27 - 2013-08-02 10:12 - 00000000 ____D C:\Users\S***\AppData\Roaming\xmldm
2013-07-16 01:27 - 2013-07-16 01:27 - 00552126 _____ C:\Users\S***\AppData\Roaming\dict.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00001365 _____ C:\Users\S***\AppData\Roaming\jserv.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00000000 ____D C:\Users\S***\AppData\Roaming\ckoock
2013-07-15 21:41 - 2013-07-15 21:41 - 00000000 ____D C:\Users\S***\AppData\Local\Chromium
2013-07-15 18:58 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-07-15 18:58 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-07-15 18:58 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-07-15 18:58 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-07-15 18:58 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-07-15 18:58 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-07-15 18:58 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-07-15 18:58 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-07-15 18:58 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-07-15 18:58 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-07-15 18:58 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-07-15 15:53 - 2013-07-15 15:53 - 00000000 ____D C:\ProgramData\Rockstar Games
2013-07-14 12:39 - 2013-07-14 12:53 - 00000000 ____D C:\Windows\system32\MRT
2013-07-13 00:32 - 2013-07-13 00:32 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-07-12 22:46 - 2013-07-12 22:46 - 00000000 __SHD C:\ProgramData\SecuROM
2013-07-12 22:32 - 2013-07-12 22:32 - 00000000 ____D D:\Documents\Games for Windows - LIVE Demos
2013-07-12 22:32 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-07-12 22:09 - 2013-07-19 13:54 - 00000000 ____D C:\Users\S***\AppData\Roaming\Eciwyg
2013-07-12 22:09 - 2013-07-19 13:39 - 00000000 ____D C:\Users\S***\AppData\Roaming\Ditacep
2013-07-12 18:34 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-07-12 18:34 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-07-12 18:34 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-07-12 18:34 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-07-12 16:23 - 2013-07-15 21:41 - 00000000 ____D D:\Documents\Rockstar Games
2013-07-12 16:20 - 2013-07-12 18:34 - 00000000 ____D C:\Users\S***\AppData\Local\Rockstar Games
2013-07-12 16:19 - 2013-07-12 16:19 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2013-07-12 16:19 - 2013-07-12 16:19 - 00000000 __RHD C:\Users\S***\AppData\Roaming\SecuROM
2013-07-12 16:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-07-12 16:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-07-12 16:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-07-12 16:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-07-12 16:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-07-12 16:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-07-12 16:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-07-12 16:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-07-12 16:15 - 2013-07-12 22:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-12 16:15 - 2013-07-12 16:15 - 00000000 ____D D:\Documents\Microsoft Hardware
2013-07-11 00:31 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 00:31 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 00:31 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 00:31 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 00:31 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 00:31 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 00:31 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 00:31 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 00:31 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-10 23:07 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 23:07 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 23:05 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 23:05 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 23:05 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 23:05 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 22:55 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-07 20:28 - 2013-07-11 20:41 - 00000000 ____D D:\Documents\Max Payne 2 Savegames
2013-07-07 20:26 - 2013-07-07 20:26 - 00000000 ____D C:\Users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-07-07 20:20 - 2003-05-23 12:28 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-07-07 20:20 - 2003-05-23 12:28 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-07-07 20:07 - 2013-07-29 00:59 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2013-07-07 20:07 - 2003-05-23 12:28 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2013-07-07 20:06 - 2013-08-03 15:01 - 00000000 ____D C:\Users\S***\AppData\Roaming\Qilei
2013-07-07 20:06 - 2013-07-07 20:06 - 00000000 ____D C:\Users\S***\AppData\Roaming\Wuuq
==================== One Month Modified Files and Folders =======
2013-08-06 08:39 - 2013-08-06 08:39 - 00000762 _____ C:\Users\S***\Desktop\JRT.txt
2013-08-06 08:35 - 2013-08-06 08:35 - 00000000 ____D C:\Windows\ERUNT
2013-08-06 08:35 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-06 08:35 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-06 08:34 - 2013-08-05 07:47 - 00086231 _____ C:\Windows\WindowsUpdate.log
2013-08-06 08:32 - 2011-03-20 11:08 - 00696870 _____ C:\Windows\system32\perfh007.dat
2013-08-06 08:32 - 2011-03-20 11:08 - 00148134 _____ C:\Windows\system32\perfc007.dat
2013-08-06 08:32 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-06 08:27 - 2013-03-29 19:22 - 00000000 ____D C:\Users\S***\AppData\Roaming\Dropbox
2013-08-06 08:26 - 2013-08-05 07:47 - 00000504 _____ C:\Windows\setupact.log
2013-08-06 08:26 - 2013-03-01 22:49 - 00000000 ____D C:\Users\S***\AppData\Roaming\Wise Care 365
2013-08-06 08:23 - 2013-08-06 08:23 - 00002245 _____ C:\AdwCleaner[S1].txt
2013-08-06 08:17 - 2013-02-06 20:40 - 00000000 ____D C:\Users\S***\AppData\Roaming\Skype
2013-08-05 22:30 - 2013-08-05 22:30 - 00666633 _____ C:\Users\S***\Desktop\adwcleaner.exe
2013-08-05 22:30 - 2013-08-05 22:30 - 00562008 _____ (Oleg N. Scherbakov) C:\Users\S***\Desktop\JRT.exe
2013-08-05 15:01 - 2013-08-05 07:46 - 00010382 _____ C:\Windows\PFRO.log
2013-08-05 14:54 - 2013-08-05 14:54 - 00034006 _____ C:\ComboFix.txt
2013-08-05 14:54 - 2013-08-05 14:42 - 00000000 ____D C:\Qoobox
2013-08-05 14:53 - 2013-08-05 14:42 - 00000000 ____D C:\Windows\erdnt
2013-08-05 14:53 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-05 14:37 - 2013-08-05 14:36 - 05100219 ____R (Swearware) C:\Users\S***\Desktop\ComboFix.exe
2013-08-05 12:30 - 2013-02-27 19:32 - 00000000 ____D D:\Documents\01_Briefverkehr & Dokumente
2013-08-05 10:10 - 2013-08-05 10:10 - 00000000 ____D C:\FRST
2013-08-05 10:08 - 2013-08-05 10:08 - 01788733 _____ (Farbar) C:\Users\S***\Downloads\FRST64.exe
2013-08-05 07:47 - 2013-08-05 07:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-05 01:41 - 2013-02-27 21:21 - 00007626 _____ C:\Users\S***\AppData\Local\Resmon.ResmonCfg
2013-08-05 01:35 - 2013-02-06 23:19 - 00000000 ____D C:\Users\S***\AppData\Roaming\vlc
2013-08-04 20:18 - 2013-07-30 22:15 - 00000000 ____D C:\Users\S***\AppData\Roaming\Thunderbird
2013-08-04 20:18 - 2013-02-27 20:27 - 00000000 ____D D:\Documents\03_Kathi
2013-08-04 14:15 - 2013-04-06 14:37 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-08-04 14:15 - 2013-04-06 14:37 - 00000000 ____D C:\Windows\system32\NV
2013-08-04 14:14 - 2013-04-06 14:25 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-04 12:36 - 2013-08-03 17:11 - 00000686 ____H C:\bdr-cf01
2013-08-04 11:54 - 2013-08-03 17:20 - 00253404 ____H C:\bdr-ld01
2013-08-04 11:54 - 2013-08-03 17:20 - 00009216 ____H C:\bdr-ld01.mbr
2013-08-04 09:40 - 2013-08-04 09:40 - 00000000 ____D C:\Users\S***\Downloads\Bitdefender
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\Users\S***\AppData\Local\bdch
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\ProgramData\bdch
2013-08-03 17:21 - 2013-08-03 17:21 - 00000385 _____ C:\Users\S***\AppData\Roaminguser_gensett.xml
2013-08-03 17:15 - 2013-08-03 17:15 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2013-08-03 17:11 - 2013-08-03 17:11 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____D C:\ProgramData\BDLogging
2013-08-03 17:11 - 2013-08-03 16:23 - 00000000 ____D C:\ProgramData\Bitdefender
2013-08-03 16:41 - 2013-08-03 16:41 - 00000000 ____D C:\Users\S***\AppData\Roaming\Bitdefender
2013-08-03 16:29 - 2013-08-03 16:29 - 00000000 ____D C:\Users\S***\AppData\Roaming\QuickScan
2013-08-03 16:23 - 2013-08-03 16:23 - 00000000 ____D C:\Program Files\Bitdefender
2013-08-03 16:23 - 2013-08-03 16:12 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-08-03 16:19 - 2013-08-02 05:43 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-03 15:01 - 2013-07-07 20:06 - 00000000 ____D C:\Users\S***\AppData\Roaming\Qilei
2013-08-03 14:43 - 2013-08-03 14:34 - 00000361 _____ C:\Users\S***\AppData\Roaming\urlsps.txt
2013-08-02 15:19 - 2013-08-02 15:18 - 00000000 ____D C:\Users\S***\Desktop\Spiele_Zusatz
2013-08-02 10:12 - 2013-07-16 01:27 - 00000000 ____D C:\Users\S***\AppData\Roaming\xmldm
2013-08-02 10:08 - 2013-08-02 10:07 - 00000000 ____D C:\Users\S***\AppData\Roaming\UsAgt
2013-08-02 08:21 - 2013-08-02 05:44 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-31 00:06 - 2013-07-30 22:56 - 00000000 ____D C:\Users\S***\Desktop\Ralf
2013-07-29 11:56 - 2013-07-29 11:56 - 00000418 _____ C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job
2013-07-29 00:59 - 2013-07-07 20:07 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2013-07-29 00:59 - 2013-02-06 17:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-27 11:40 - 2013-02-06 23:19 - 00000000 ____D C:\Users\S***\AppData\Roaming\dvdcss
2013-07-25 15:09 - 2013-02-06 20:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-25 15:09 - 2013-02-06 20:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-24 23:11 - 2013-07-24 23:02 - 00000000 ____D C:\Users\S***\AppData\Local\Adobe
2013-07-24 23:07 - 2013-02-06 20:50 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-24 23:07 - 2013-02-06 20:50 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-24 23:07 - 2013-02-06 20:50 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-20 23:39 - 2013-07-20 23:39 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-20 23:39 - 2013-02-06 21:35 - 00000000 ____D C:\Users\S***\AppData\Roaming\DVDVideoSoft
2013-07-20 22:55 - 2013-07-20 22:36 - 00000000 ____D C:\Users\S***\Desktop\Neuer Ordner
2013-07-19 13:54 - 2013-07-12 22:09 - 00000000 ____D C:\Users\S***\AppData\Roaming\Eciwyg
2013-07-19 13:39 - 2013-07-12 22:09 - 00000000 ____D C:\Users\S***\AppData\Roaming\Ditacep
2013-07-18 21:50 - 2013-07-18 21:50 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-07-16 01:29 - 2013-07-16 01:29 - 00000656 _____ C:\Users\S***\AppData\Roaming\rost.dat
2013-07-16 01:27 - 2013-07-16 01:27 - 00552126 _____ C:\Users\S***\AppData\Roaming\dict.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00001365 _____ C:\Users\S***\AppData\Roaming\jserv.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00000000 ____D C:\Users\S***\AppData\Roaming\ckoock
2013-07-15 21:41 - 2013-07-15 21:41 - 00000000 ____D C:\Users\S***\AppData\Local\Chromium
2013-07-15 21:41 - 2013-07-12 16:23 - 00000000 ____D D:\Documents\Rockstar Games
2013-07-15 15:53 - 2013-07-15 15:53 - 00000000 ____D C:\ProgramData\Rockstar Games
2013-07-15 06:15 - 2013-04-06 14:25 - 00000000 ____D C:\Users\UpdatusUser.S***-PC.000
2013-07-15 01:46 - 2013-02-06 17:30 - 00000000 ____D C:\ProgramData\Samsung
2013-07-14 12:53 - 2013-07-14 12:39 - 00000000 ____D C:\Windows\system32\MRT
2013-07-13 00:32 - 2013-07-13 00:32 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-07-13 00:32 - 2013-02-06 20:26 - 00000000 ____D C:\Program Files\Opera x64
2013-07-12 22:46 - 2013-07-12 22:46 - 00000000 __SHD C:\ProgramData\SecuROM
2013-07-12 22:32 - 2013-07-12 22:32 - 00000000 ____D D:\Documents\Games for Windows - LIVE Demos
2013-07-12 22:31 - 2013-07-12 16:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-12 21:38 - 2013-02-06 22:13 - 00000000 ____D C:\Users\S***\AppData\Local\Windows Live
2013-07-12 21:29 - 2013-02-06 09:17 - 00000000 ____D C:\Windows\Panther
2013-07-12 18:34 - 2013-07-12 16:20 - 00000000 ____D C:\Users\S***\AppData\Local\Rockstar Games
2013-07-12 16:19 - 2013-07-12 16:19 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2013-07-12 16:19 - 2013-07-12 16:19 - 00000000 __RHD C:\Users\S***\AppData\Roaming\SecuROM
2013-07-12 16:15 - 2013-07-12 16:15 - 00000000 ____D D:\Documents\Microsoft Hardware
2013-07-11 20:41 - 2013-07-07 20:28 - 00000000 ____D D:\Documents\Max Payne 2 Savegames
2013-07-11 05:58 - 2009-07-14 06:45 - 00381096 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 00:57 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 00:57 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 00:57 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 00:32 - 2013-02-06 21:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 17:59 - 2013-03-01 23:28 - 00000428 _____ C:\Windows\Tasks\Wise Care 365.job
2013-07-09 18:08 - 2013-02-06 17:33 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-07-09 06:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-07 23:14 - 2013-02-27 20:27 - 00000000 ____D D:\Documents\08_Vorlagen
2013-07-07 20:26 - 2013-07-07 20:26 - 00000000 ____D C:\Users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-07-07 20:06 - 2013-07-07 20:06 - 00000000 ____D C:\Users\S***\AppData\Roaming\Wuuq
2013-07-07 14:34 - 2013-04-28 14:30 - 00000408 _____ C:\Windows\Tasks\Wise Turbo Checker.job
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-03 03:40
==================== End Of Log ============================
--- --- --- --- --- --- |
|
06.08.2013, 16:33
| #8 |
| /// the machine /// TB-Ausbilder | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exeESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.08.2013, 02:24
| #9 |
| | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe Hi Schrauber, der Scan ist in Arbeit. Es wird wohl noch ein paar Stunden dauern, bis es durch ist.  Gruß Daniel |
|
07.08.2013, 12:18
| #10 |
| /// the machine /// TB-Ausbilder | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.08.2013, 14:24
| #11 |
| | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe Hallo, als erstes mal ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=5970d6986bb07242a285b363d267b6a6
# engine=14680
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-07 10:45:02
# local_time=2013-08-07 12:45:02 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 99301 127502152 0 0
# scanned=560205
# found=3
# cleaned=0
# scan_time=36007
sh=15B3451B4027F695130FB8E6BC33D063C1FD1137 ft=1 fh=af018f1f1f63e22b vn="a variant of Win32/Injector.AKPF trojan" ac=I fn="C:\Qoobox\Quarantine\C\Users\S***\AppData\Roaming\xcomwiz32.jpg.vir"
sh=57D83CC101F34AA2241C5E4616CF2728E1EE7CDD ft=1 fh=a9e817b8dc24f1d8 vn="Win32/Adware.1ClickDownload.AM application" ac=I fn="H:\Backup\Schmidt_3\Sicherung Netbook\Videos\Hotel.Tanssilvanien.WEBRip.German.AC3MD.XVID-DerSchuft.exe"
sh=8DCD8C0622FE17F12D36F983AAA3F6320D9BD737 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="H:\S***-PC\Backup Set 2013-03-03 190001\Backup Files 2013-04-07 190001\Backup files 4.zip"
Code:
ATTFilter Results of screen317's Security Check version 0.99.71
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Bitdefender Antivirus
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Adobe Flash Player 11.8.800.94
Mozilla Firefox 20.0.1 Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-08-2013
Ran by S*** (administrator) on 07-08-2013 15:12:38
Running from D:\Documents\09_Programme\02_Sicherheit\Rettung
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Jumping Bytes) C:\Program Files (x86)\PureSync\PureSyncTray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\ScanToPCActivationApp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe
(Dropbox, Inc.) C:\Users\S***\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\ControlCenter.exe
(Opera Software) C:\Program Files\Opera x64\opera.exe
(Opera Software) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\BdParentalSysTray.exe
(PortableApps.com) I:\Portable\ThunderbirdPortable\ThunderbirdPortable.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [x]
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2867984 2013-02-06] (Synaptics Incorporated)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1716832 2013-06-27] (Bitdefender)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKCU\...\Run: [PureSync] - C:\Program Files (x86)\PureSync\PureSyncTray.exe [907808 2013-04-29] (Jumping Bytes)
HKCU\...\Run: [HP Officejet Pro 8500 A910 (NET)] - C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [520496 2013-06-19] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [609576 2013-06-19] (Bitdefender)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll,C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
Startup: C:\Users\S***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\S***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Bitdefender-Geldbörse - {09F58E74-42B4-4D70-BA26-35FC954E7A17} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default
FF SelectedSearchEngine: Bing
FF Homepage: hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP&dt=072513
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=072513&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Bitdefender.com/PasswordManager;version=17.8 - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll (Bitdefender)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\S***\AppData\Roaming\Mozilla\Firefox\Profiles\yar7htw3.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF HKLM-x32\...\Firefox\Extensions: [ffpwdman@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF HKCU\...\Firefox\Extensions: [{E634117B-33A8-4C70-8210-198010F03834}] C:\Users\S***\AppData\Roaming\20003.012
==================== Services (Whitelisted) =================
R2 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [75584 2013-06-19] (Bitdefender)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2013-02-06] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2013-02-06] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-08-23] ()
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 SamsungDeviceConfigurationWinService; C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [31624 2012-02-13] ()
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [2956336 2013-05-15] (Samsung Electronics CO., LTD.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-06-19] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1502080 2013-06-20] (Bitdefender)
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [718840 2013-04-17] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [593144 2013-04-17] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
R1 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [109056 2013-01-29] (BitDefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82384 2012-11-12] (BitDefender SRL)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-06] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [147232 2012-10-04] (BitDefender LLC)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [39728 2011-11-17] (Paragon Software Group)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11523072 2012-09-30] (Intel Corporation)
R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [383048 2013-01-28] (BitDefender S.R.L.)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider)
R3 XHCIPort; C:\Windows\System32\DRIVERS\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 SBIOSIO; \??\C:\Users\S***\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-06 19:05 - 2013-08-07 15:04 - 00891098 _____ C:\Users\S***\Desktop\SecurityCheck.exe
2013-08-06 19:03 - 2013-08-06 19:04 - 02347384 _____ (ESET) C:\Users\S***\Desktop\esetsmartinstaller_enu.exe
2013-08-06 10:17 - 2013-08-06 10:17 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-08-06 10:05 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-08-06 10:05 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-08-06 10:05 - 2012-08-23 16:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2013-08-06 10:05 - 2012-08-23 16:07 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-08-06 10:05 - 2012-08-23 15:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-08-06 10:05 - 2012-08-23 15:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-08-06 10:05 - 2012-08-23 15:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-08-06 10:05 - 2012-08-23 15:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-08-06 10:05 - 2012-08-23 15:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-08-06 10:05 - 2012-08-23 15:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-08-06 10:05 - 2012-08-23 15:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-08-06 10:05 - 2012-08-23 15:17 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-08-06 10:05 - 2012-08-23 15:06 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-08-06 10:05 - 2012-08-23 14:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-08-06 10:05 - 2012-08-23 13:20 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-08-06 10:05 - 2012-08-23 13:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-08-06 10:05 - 2012-08-23 13:14 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-08-06 10:05 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2013-08-06 10:05 - 2012-08-23 12:54 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-08-06 10:05 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-08-06 10:05 - 2012-08-23 12:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-08-06 10:05 - 2012-08-23 12:22 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-08-06 10:05 - 2012-08-23 11:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-08-06 10:05 - 2012-08-23 10:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-08-06 10:05 - 2012-08-23 10:13 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-08-06 10:04 - 2013-08-07 03:02 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-06 10:04 - 2013-08-07 03:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-08-06 09:18 - 2012-08-24 20:13 - 00154480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-08-06 09:18 - 2012-08-24 20:09 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-08-06 09:18 - 2012-08-24 20:05 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-08-06 09:18 - 2012-08-24 20:03 - 01448448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-08-06 09:18 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-08-06 09:18 - 2012-08-24 18:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-08-06 09:18 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-08-06 09:18 - 2012-05-04 13:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-08-06 09:18 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-08-06 08:39 - 2013-08-06 08:39 - 00000762 _____ C:\Users\S***\Desktop\JRT.txt
2013-08-06 08:35 - 2013-08-06 08:35 - 00000000 ____D C:\Windows\ERUNT
2013-08-06 08:23 - 2013-08-06 08:23 - 00002245 _____ C:\AdwCleaner[S1].txt
2013-08-05 22:30 - 2013-08-05 22:30 - 00666633 _____ C:\Users\S***\Desktop\adwcleaner.exe
2013-08-05 22:30 - 2013-08-05 22:30 - 00562008 _____ (Oleg N. Scherbakov) C:\Users\S***\Desktop\JRT.exe
2013-08-05 14:54 - 2013-08-05 14:54 - 00034006 _____ C:\ComboFix.txt
2013-08-05 14:45 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-05 14:45 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-05 14:45 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-05 14:45 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-05 14:42 - 2013-08-05 14:54 - 00000000 ____D C:\Qoobox
2013-08-05 14:42 - 2013-08-05 14:53 - 00000000 ____D C:\Windows\erdnt
2013-08-05 14:36 - 2013-08-05 14:37 - 05100219 ____R (Swearware) C:\Users\S***\Desktop\ComboFix.exe
2013-08-05 10:10 - 2013-08-05 10:10 - 00000000 ____D C:\FRST
2013-08-05 10:08 - 2013-08-05 10:08 - 01788733 _____ (Farbar) C:\Users\S***\Downloads\FRST64.exe
2013-08-05 07:47 - 2013-08-07 09:05 - 00247619 _____ C:\Windows\WindowsUpdate.log
2013-08-05 07:47 - 2013-08-06 10:20 - 00002535 _____ C:\Windows\setupact.log
2013-08-05 07:47 - 2013-08-05 07:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-05 07:46 - 2013-08-05 15:01 - 00010382 _____ C:\Windows\PFRO.log
2013-08-04 09:40 - 2013-08-04 09:40 - 00000000 ____D C:\Users\S***\Downloads\Bitdefender
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\Users\S***\AppData\Local\bdch
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\ProgramData\bdch
2013-08-03 17:21 - 2013-08-03 17:21 - 00000385 _____ C:\Users\S***\AppData\Roaminguser_gensett.xml
2013-08-03 17:20 - 2013-08-04 11:54 - 00253404 ____H C:\bdr-ld01
2013-08-03 17:20 - 2013-08-04 11:54 - 00009216 ____H C:\bdr-ld01.mbr
2013-08-03 17:20 - 2013-06-25 18:20 - 38518480 ____H C:\bdr-im01.gz
2013-08-03 17:20 - 2012-08-15 15:28 - 02510608 ____H C:\bdr-bz01
2013-08-03 17:15 - 2013-08-03 17:15 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2013-08-03 17:11 - 2013-08-04 12:36 - 00000686 ____H C:\bdr-cf01
2013-08-03 17:11 - 2013-08-03 17:11 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____D C:\ProgramData\BDLogging
2013-08-03 17:10 - 2013-04-17 14:59 - 00718840 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2013-08-03 17:10 - 2013-04-17 14:59 - 00593144 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2013-08-03 17:10 - 2013-02-22 19:46 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys
2013-08-03 17:10 - 2012-11-12 18:11 - 00082384 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2013-08-03 17:10 - 2012-11-02 14:17 - 00261056 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys
2013-08-03 17:10 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2013-08-03 16:41 - 2013-08-03 16:41 - 00000000 ____D C:\Users\S***\AppData\Roaming\Bitdefender
2013-08-03 16:29 - 2013-08-03 16:29 - 00000000 ____D C:\Users\S***\AppData\Roaming\QuickScan
2013-08-03 16:23 - 2013-08-03 17:11 - 00000000 ____D C:\ProgramData\Bitdefender
2013-08-03 16:23 - 2013-08-03 16:23 - 00000000 ____D C:\Program Files\Bitdefender
2013-08-03 16:23 - 2013-01-28 15:57 - 00383048 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2013-08-03 16:23 - 2012-10-04 14:30 - 00147232 ____N (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2013-08-03 16:18 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20130803-161835.backup
2013-08-03 16:12 - 2013-08-03 16:23 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-08-03 14:34 - 2013-08-03 14:43 - 00000361 _____ C:\Users\S***\AppData\Roaming\urlsps.txt
2013-08-02 15:18 - 2013-08-02 15:19 - 00000000 ____D C:\Users\S***\Desktop\Spiele_Zusatz
2013-08-02 10:07 - 2013-08-02 10:08 - 00000000 ____D C:\Users\S***\AppData\Roaming\UsAgt
2013-08-02 05:44 - 2013-08-02 08:21 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-02 05:43 - 2013-08-03 16:19 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-30 22:56 - 2013-07-31 00:06 - 00000000 ____D C:\Users\S***\Desktop\Ralf
2013-07-30 22:15 - 2013-08-07 15:12 - 00000000 ____D C:\Users\S***\AppData\Roaming\Thunderbird
2013-07-29 11:56 - 2013-07-29 11:56 - 00000418 _____ C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job
2013-07-24 23:02 - 2013-07-24 23:11 - 00000000 ____D C:\Users\S***\AppData\Local\Adobe
2013-07-20 23:39 - 2013-07-20 23:39 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-20 22:36 - 2013-07-20 22:55 - 00000000 ____D C:\Users\S***\Desktop\Neuer Ordner
2013-07-18 21:50 - 2013-07-18 21:50 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-07-16 01:29 - 2013-07-16 01:29 - 00000656 _____ C:\Users\S***\AppData\Roaming\rost.dat
2013-07-16 01:27 - 2013-08-02 10:12 - 00000000 ____D C:\Users\S***\AppData\Roaming\xmldm
2013-07-16 01:27 - 2013-07-16 01:27 - 00552126 _____ C:\Users\S***\AppData\Roaming\dict.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00001365 _____ C:\Users\S***\AppData\Roaming\jserv.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00000000 ____D C:\Users\S***\AppData\Roaming\ckoock
2013-07-15 21:41 - 2013-07-15 21:41 - 00000000 ____D C:\Users\S***\AppData\Local\Chromium
2013-07-15 18:58 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-07-15 18:58 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-07-15 18:58 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-07-15 18:58 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-07-15 18:58 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-07-15 18:58 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-07-15 18:58 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-07-15 18:58 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-07-15 18:58 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-07-15 18:58 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-07-15 18:58 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-07-15 18:58 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-07-15 18:58 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-07-15 18:58 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-07-15 18:58 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-07-15 18:58 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-07-15 18:58 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-07-15 18:58 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-07-15 18:58 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-07-15 15:53 - 2013-07-15 15:53 - 00000000 ____D C:\ProgramData\Rockstar Games
2013-07-14 12:39 - 2013-07-14 12:53 - 00000000 ____D C:\Windows\system32\MRT
2013-07-13 00:32 - 2013-07-13 00:32 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-07-12 22:46 - 2013-07-12 22:46 - 00000000 __SHD C:\ProgramData\SecuROM
2013-07-12 22:32 - 2013-07-12 22:32 - 00000000 ____D D:\Documents\Games for Windows - LIVE Demos
2013-07-12 22:32 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-07-12 22:09 - 2013-07-19 13:54 - 00000000 ____D C:\Users\S***\AppData\Roaming\Eciwyg
2013-07-12 22:09 - 2013-07-19 13:39 - 00000000 ____D C:\Users\S***\AppData\Roaming\Ditacep
2013-07-12 18:34 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-07-12 18:34 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-07-12 18:34 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-07-12 18:34 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-07-12 16:23 - 2013-07-15 21:41 - 00000000 ____D D:\Documents\Rockstar Games
2013-07-12 16:20 - 2013-07-12 18:34 - 00000000 ____D C:\Users\S***\AppData\Local\Rockstar Games
2013-07-12 16:19 - 2013-07-12 16:19 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2013-07-12 16:19 - 2013-07-12 16:19 - 00000000 __RHD C:\Users\S***\AppData\Roaming\SecuROM
2013-07-12 16:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-07-12 16:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-07-12 16:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-07-12 16:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-07-12 16:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-07-12 16:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-07-12 16:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-07-12 16:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-07-12 16:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-07-12 16:15 - 2013-07-12 22:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-12 16:15 - 2013-07-12 16:15 - 00000000 ____D D:\Documents\Microsoft Hardware
2013-07-11 00:31 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 00:31 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 00:31 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 00:31 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 00:31 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 00:31 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 00:31 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 00:31 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 00:31 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 00:31 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 00:31 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 00:31 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-10 23:07 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 23:07 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 23:05 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 23:05 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 23:05 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 23:05 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 22:55 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
==================== One Month Modified Files and Folders =======
2013-08-07 15:12 - 2013-07-30 22:15 - 00000000 ____D C:\Users\S***\AppData\Roaming\Thunderbird
2013-08-07 15:04 - 2013-08-06 19:05 - 00891098 _____ C:\Users\S***\Desktop\SecurityCheck.exe
2013-08-07 09:05 - 2013-08-05 07:47 - 00247619 _____ C:\Windows\WindowsUpdate.log
2013-08-07 03:02 - 2013-08-06 10:04 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-07 03:02 - 2013-08-06 10:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-08-07 02:41 - 2013-02-06 20:40 - 00000000 ____D C:\Users\S***\AppData\Roaming\Skype
2013-08-07 02:31 - 2011-03-20 11:08 - 00696870 _____ C:\Windows\system32\perfh007.dat
2013-08-07 02:31 - 2011-03-20 11:08 - 00148134 _____ C:\Windows\system32\perfc007.dat
2013-08-07 02:31 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-06 22:59 - 2013-02-27 20:27 - 00000000 ____D D:\Documents\03_Kathi
2013-08-06 19:04 - 2013-08-06 19:03 - 02347384 _____ (ESET) C:\Users\S***\Desktop\esetsmartinstaller_enu.exe
2013-08-06 10:32 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-06 10:32 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-06 10:23 - 2013-03-29 19:22 - 00000000 ____D C:\Users\S***\AppData\Roaming\Dropbox
2013-08-06 10:21 - 2013-04-06 14:37 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-08-06 10:21 - 2013-04-06 14:37 - 00000000 ____D C:\Windows\system32\NV
2013-08-06 10:21 - 2013-04-06 14:25 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-06 10:21 - 2013-03-01 22:49 - 00000000 ____D C:\Users\S***\AppData\Roaming\Wise Care 365
2013-08-06 10:20 - 2013-08-05 07:47 - 00002535 _____ C:\Windows\setupact.log
2013-08-06 10:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-08-06 10:17 - 2013-08-06 10:17 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-08-06 10:09 - 2013-04-06 14:25 - 00000000 ____D C:\Users\UpdatusUser.S***-PC.000
2013-08-06 08:39 - 2013-08-06 08:39 - 00000762 _____ C:\Users\S***\Desktop\JRT.txt
2013-08-06 08:35 - 2013-08-06 08:35 - 00000000 ____D C:\Windows\ERUNT
2013-08-06 08:23 - 2013-08-06 08:23 - 00002245 _____ C:\AdwCleaner[S1].txt
2013-08-05 22:30 - 2013-08-05 22:30 - 00666633 _____ C:\Users\S***\Desktop\adwcleaner.exe
2013-08-05 22:30 - 2013-08-05 22:30 - 00562008 _____ (Oleg N. Scherbakov) C:\Users\S***\Desktop\JRT.exe
2013-08-05 15:01 - 2013-08-05 07:46 - 00010382 _____ C:\Windows\PFRO.log
2013-08-05 14:54 - 2013-08-05 14:54 - 00034006 _____ C:\ComboFix.txt
2013-08-05 14:54 - 2013-08-05 14:42 - 00000000 ____D C:\Qoobox
2013-08-05 14:53 - 2013-08-05 14:42 - 00000000 ____D C:\Windows\erdnt
2013-08-05 14:53 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-05 14:37 - 2013-08-05 14:36 - 05100219 ____R (Swearware) C:\Users\S***\Desktop\ComboFix.exe
2013-08-05 12:30 - 2013-02-27 19:32 - 00000000 ____D D:\Documents\01_Briefverkehr & Dokumente
2013-08-05 10:10 - 2013-08-05 10:10 - 00000000 ____D C:\FRST
2013-08-05 10:08 - 2013-08-05 10:08 - 01788733 _____ (Farbar) C:\Users\S***\Downloads\FRST64.exe
2013-08-05 07:47 - 2013-08-05 07:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-05 01:41 - 2013-02-27 21:21 - 00007626 _____ C:\Users\S***\AppData\Local\Resmon.ResmonCfg
2013-08-05 01:35 - 2013-02-06 23:19 - 00000000 ____D C:\Users\S***\AppData\Roaming\vlc
2013-08-04 12:36 - 2013-08-03 17:11 - 00000686 ____H C:\bdr-cf01
2013-08-04 11:54 - 2013-08-03 17:20 - 00253404 ____H C:\bdr-ld01
2013-08-04 11:54 - 2013-08-03 17:20 - 00009216 ____H C:\bdr-ld01.mbr
2013-08-04 09:40 - 2013-08-04 09:40 - 00000000 ____D C:\Users\S***\Downloads\Bitdefender
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\Users\S***\AppData\Local\bdch
2013-08-03 17:22 - 2013-08-03 17:22 - 00000000 ____D C:\ProgramData\bdch
2013-08-03 17:21 - 2013-08-03 17:21 - 00000385 _____ C:\Users\S***\AppData\Roaminguser_gensett.xml
2013-08-03 17:15 - 2013-08-03 17:15 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2013-08-03 17:11 - 2013-08-03 17:11 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2013-08-03 17:11 - 2013-08-03 17:11 - 00000000 ____D C:\ProgramData\BDLogging
2013-08-03 17:11 - 2013-08-03 16:23 - 00000000 ____D C:\ProgramData\Bitdefender
2013-08-03 16:41 - 2013-08-03 16:41 - 00000000 ____D C:\Users\S***\AppData\Roaming\Bitdefender
2013-08-03 16:29 - 2013-08-03 16:29 - 00000000 ____D C:\Users\S***\AppData\Roaming\QuickScan
2013-08-03 16:23 - 2013-08-03 16:23 - 00000000 ____D C:\Program Files\Bitdefender
2013-08-03 16:23 - 2013-08-03 16:12 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-08-03 16:19 - 2013-08-02 05:43 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-03 15:01 - 2013-07-07 20:06 - 00000000 ____D C:\Users\S***\AppData\Roaming\Qilei
2013-08-03 14:43 - 2013-08-03 14:34 - 00000361 _____ C:\Users\S***\AppData\Roaming\urlsps.txt
2013-08-02 15:19 - 2013-08-02 15:18 - 00000000 ____D C:\Users\S***\Desktop\Spiele_Zusatz
2013-08-02 10:12 - 2013-07-16 01:27 - 00000000 ____D C:\Users\S***\AppData\Roaming\xmldm
2013-08-02 10:08 - 2013-08-02 10:07 - 00000000 ____D C:\Users\S***\AppData\Roaming\UsAgt
2013-08-02 08:21 - 2013-08-02 05:44 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-31 00:06 - 2013-07-30 22:56 - 00000000 ____D C:\Users\S***\Desktop\Ralf
2013-07-29 11:56 - 2013-07-29 11:56 - 00000418 _____ C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job
2013-07-29 00:59 - 2013-07-07 20:07 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2013-07-29 00:59 - 2013-02-06 17:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-27 11:40 - 2013-02-06 23:19 - 00000000 ____D C:\Users\S***\AppData\Roaming\dvdcss
2013-07-25 15:09 - 2013-02-06 20:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-25 15:09 - 2013-02-06 20:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-24 23:11 - 2013-07-24 23:02 - 00000000 ____D C:\Users\S***\AppData\Local\Adobe
2013-07-24 23:07 - 2013-02-06 20:50 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-24 23:07 - 2013-02-06 20:50 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-24 23:07 - 2013-02-06 20:50 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-20 23:39 - 2013-07-20 23:39 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-20 23:39 - 2013-02-06 21:35 - 00000000 ____D C:\Users\S***\AppData\Roaming\DVDVideoSoft
2013-07-20 22:55 - 2013-07-20 22:36 - 00000000 ____D C:\Users\S***\Desktop\Neuer Ordner
2013-07-19 13:54 - 2013-07-12 22:09 - 00000000 ____D C:\Users\S***\AppData\Roaming\Eciwyg
2013-07-19 13:39 - 2013-07-12 22:09 - 00000000 ____D C:\Users\S***\AppData\Roaming\Ditacep
2013-07-18 21:50 - 2013-07-18 21:50 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-07-16 01:29 - 2013-07-16 01:29 - 00000656 _____ C:\Users\S***\AppData\Roaming\rost.dat
2013-07-16 01:27 - 2013-07-16 01:27 - 00552126 _____ C:\Users\S***\AppData\Roaming\dict.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00001365 _____ C:\Users\S***\AppData\Roaming\jserv.txt
2013-07-16 01:27 - 2013-07-16 01:27 - 00000000 ____D C:\Users\S***\AppData\Roaming\ckoock
2013-07-15 21:41 - 2013-07-15 21:41 - 00000000 ____D C:\Users\S***\AppData\Local\Chromium
2013-07-15 21:41 - 2013-07-12 16:23 - 00000000 ____D D:\Documents\Rockstar Games
2013-07-15 15:53 - 2013-07-15 15:53 - 00000000 ____D C:\ProgramData\Rockstar Games
2013-07-15 01:46 - 2013-02-06 17:30 - 00000000 ____D C:\ProgramData\Samsung
2013-07-14 12:53 - 2013-07-14 12:39 - 00000000 ____D C:\Windows\system32\MRT
2013-07-13 00:32 - 2013-07-13 00:32 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-07-13 00:32 - 2013-02-06 20:26 - 00000000 ____D C:\Program Files\Opera x64
2013-07-12 22:46 - 2013-07-12 22:46 - 00000000 __SHD C:\ProgramData\SecuROM
2013-07-12 22:32 - 2013-07-12 22:32 - 00000000 ____D D:\Documents\Games for Windows - LIVE Demos
2013-07-12 22:31 - 2013-07-12 16:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-12 21:38 - 2013-02-06 22:13 - 00000000 ____D C:\Users\S***\AppData\Local\Windows Live
2013-07-12 21:29 - 2013-02-06 09:17 - 00000000 ____D C:\Windows\Panther
2013-07-12 18:34 - 2013-07-12 16:20 - 00000000 ____D C:\Users\S***\AppData\Local\Rockstar Games
2013-07-12 16:19 - 2013-07-12 16:19 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2013-07-12 16:19 - 2013-07-12 16:19 - 00000000 __RHD C:\Users\S***\AppData\Roaming\SecuROM
2013-07-12 16:15 - 2013-07-12 16:15 - 00000000 ____D D:\Documents\Microsoft Hardware
2013-07-11 20:41 - 2013-07-07 20:28 - 00000000 ____D D:\Documents\Max Payne 2 Savegames
2013-07-11 05:58 - 2009-07-14 06:45 - 00381096 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 00:57 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 00:57 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 00:57 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 00:32 - 2013-02-06 21:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 17:59 - 2013-03-01 23:28 - 00000428 _____ C:\Windows\Tasks\Wise Care 365.job
2013-07-09 18:08 - 2013-02-06 17:33 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-07-09 06:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-03 03:40
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Brauchen wir von dem FRST auch das Addition.txt? Gruß Daniel Wenn ich schon den Haken vergesse, dann leg ich nach und alles ist vollständig. Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-08-2013
Ran by S*** at 2013-08-07 15:17:53
Running from D:\Documents\09_Programme\02_Sicherheit\Rettung
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe SVG Viewer 3.0 (x32 Version: 3.0)
Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17)
An Office-n-PDF senden (novaPDF OEM 7.7 printer)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Bitdefender Internet Security (Version: 17.13.0.551)
BMW M3 Challenge (x32 Version: BMW M3 Challenge v1.0.0.0)
Bonjour (Version: 3.0.0.10)
Canon MP Navigator EX 1.0 (x32)
Canon Utilities Solution Menu (x32)
CCleaner (Version: 3.27)
CyberLink YouCam (x32 Version: 3.1.4417)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.46.1.0328)
dows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
Dropbox (HKCU Version: 2.0.22)
DVDFab 8.0.6.8 (05/01/2011) (x32)
DVDFab 8.2.2.8 (26/02/2013) Qt (x32)
Easy Settings (x32 Version: 1.1)
Easy Support Center (Version: 1.2.32)
EFA3 - Bilder Kraftfahrzeugtechnik (x32 Version: 1.0.0)
FireArc Arcade (x32 Version: 0.5.19)
FlatOut Ultimate Carnage (x32)
Fotogalerie (x32 Version: 16.4.3505.0912)
Free YouTube Download version 3.2.8.717 (x32 Version: 3.2.8.717)
FreeOCR v4.2 (x32)
GIMP 2.8.2 (Version: 2.8.2)
Grand Theft Auto IV (x32 Version: 1.0.0013.131)
Grand Theft Auto IV (x32 Version: 1.00.0000)
Grand Theft Auto: Episodes From Liberty City (x32 Version: 1.1.0.0)
HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät (Version: 28.0.1315.0)
HP Officejet Pro 8500 A910 Hilfe (x32 Version: 140.0.2.2)
HP Update (x32 Version: 5.003.003.001)
I.R.I.S. OCR (x32 Version: 12.3.4.0)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.35342)
Intel(R) Management Engine Components (x32 Version: 8.0.2.1410)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2712)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.3.0.0398)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.0.0.0086)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) WiDi (Version: 3.5.40.0)
Intel(R) Wireless Display
Intel® PROSet/Wireless WiFi-Software (Version: 15.03.1000.1637)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
iTunes (Version: 11.0.4.4)
Java 7 Update 7 (64-bit) (Version: 7.0.70)
K-Lite Codec Pack 9.9.0 (64-bit) (Version: 9.9.0)
Landwirtschafts Simulator 2013 (x32 Version: 1.0)
LinuxLive USB Creator (x32 Version: 2.8)
Max Payne 2 (x32 Version: 1.01.102)
Max Payne 3 (x32 Version: 1.0.0.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Digital Image Library 9 - Blocker (x32 Version: 9.00.0000)
Microsoft Foto 2006 Suite Edition (x32 Version: 11.0.0422)
Microsoft Foto 2006 Suite Edition Bibliothek (x32 Version: 11.0.0422)
Microsoft Foto 2006 Suite Edition Editor (x32 Version: 11.0.0422)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Standard 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 20.0.1 (x86 de) (x32 Version: 20.0.1)
Mozilla Maintenance Service (x32 Version: 20.0.1)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyMicroBalance (x32 Version: 2.5.5)
Need For Speed™ World (x32 Version: 1.0.0.1398)
Nero 7 Premium (x32 Version: 7.02.6839)
neroxml (x32 Version: 1.0.0)
Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0)
Nokia Suite (x32 Version: 3.8.30.0)
NVIDIA Grafiktreiber 306.97 (Version: 306.97)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA Optimus 1.10.8 (Version: 1.10.8)
NVIDIA PhysX (x32 Version: 9.12.0213)
NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213)
NVIDIA Systemsteuerung 306.97 (Version: 306.97)
NVIDIA Update 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
Office-n-PDF 2 (x32 Version: 2)
Opera 12.16 (Version: 12.16.1860)
Oracle VM VirtualBox 4.2.4 (Version: 4.2.4)
Paragon Backup & Recovery™ 2012 Free (x32 Version: 90.00.0003)
PC Connectivity Solution (x32 Version: 12.0.109.0)
PDFCreator (x32 Version: 1.6.2)
PDF-Viewer (Version: 2.5.208.0)
Photo Gallery (x32 Version: 16.4.3505.0912)
PokerTH (x32 Version: 1.0)
PureSync (x32 Version: 3.7.6)
PureSync 3.7.6 (x32 Version: 3.7.6)
Realtek Ethernet Controller Driver (x32 Version: 7.50.1123.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6716)
Rockstar Games Social Club (x32 Version: 1.1.0.6)
S Agent (Version: 1.1.41)
Skype™ 6.6 (x32 Version: 6.6.106)
SW Update (x32 Version: 2.1.15)
Synaptics Pointing Device Driver (Version: 15.3.40.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817563) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VLC media player 2.0.7 (Version: 2.0.7)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Wise Care 365 version 2.23 (x32 Version: 2.7.1)
==================== Restore Points =========================
02-08-2013 03:31:36 Windows Update
04-08-2013 01:01:46 Windows Update
04-08-2013 12:28:41 OTL Restore Point - 04.08.2013 14:28:35
04-08-2013 23:46:04 Created by Wise Care 365
06-08-2013 08:03:43 Windows Update
07-08-2013 01:00:43 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-08-05 14:53 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {060FF4A9-633E-443E-AA80-A59FE7E72708} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {0FD878BE-E546-449B-9182-6D3C1FCD2926} - System32\Tasks\Games\UpdateCheck_S-1-5-21-216033253-3173365450-1935379270-1000
Task: {149B5CEE-DF0F-455F-A710-59AD3E6B025A} - System32\Tasks\EasySpeedUpManager => C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe [2012-01-31] (Samsung Electronics)
Task: {153ED8B1-961C-41C9-B705-A35A91862150} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {22960E43-A5EC-484F-B252-1B3988F4E51B} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {307EB4A5-D9D1-4AE3-8037-819AA4778001} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {3269AD91-D635-462C-9924-0E9EB56CA9D0} - System32\Tasks\SCCSpeedBoot => C:\Program Files (x86)\Samsung\Easy Settings\SCCSpeedBoot.exe [2012-03-27] (Samsung Electronics Co., Ltd.)
Task: {512326E1-57BE-4291-8F14-0DDC9DBAADF4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6603BA3A-6901-4CCF-B6E5-359E096F748E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-01-23] (Piriform Ltd)
Task: {69F81879-0F77-427E-8909-7F0211A9B783} - System32\Tasks\MovieColorEnhancer => C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe [2012-04-25] (Samsung Electronics Co., Ltd.)
Task: {78F515CA-B6E1-418B-94FD-0953A96279EF} - System32\Tasks\EasySupportCenter => C:\Program Files\Samsung\Easy Support Center\SamoyedAgent.exe [2013-01-22] (Samsung Electronics CO., LTD.)
Task: {797AFFB5-9E5B-40C5-914C-7A96271D4F14} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe [2012-05-30] (Samsung Electronics Co., Ltd.)
Task: {88DFA171-0DAF-4417-86B7-B70C3332A9F2} - System32\Tasks\SmartSetting => C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe [2012-05-02] (Samsung Electronics Co., Ltd.)
Task: {95215142-E27B-42F5-9293-0820CE5F5BF1} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {96C2D942-2D29-45B1-8ACD-C4F5EDDD32D5} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-05-08] (Samsung Electronics CO., LTD.)
Task: {9CA86CB8-BDD6-4EE0-B4B7-D9D08A1095F7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24] (Adobe Systems Incorporated)
Task: {AFD069EE-E224-43A7-95BB-7957D9AEC611} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-05-23] (WiseCleaner.COM)
Task: {B6FFE33D-3FD3-466F-A416-D718DBAB8FD1} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {BEEBA711-D4BE-4D5A-BA04-956410B89510} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {C5AF5B25-FC45-4C44-93BA-A9CC3E9701E3} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {DB87D482-B153-426F-A58A-EF2D2CE8C490} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {DE93A608-9B62-4572-8596-4CCB5BA66138} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {EEE2E1AE-9C75-4797-8DE3-A2ECE4D5DB66} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {F13BB6D2-4D0C-40AF-9A5A-7D0915D03F44} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-08-17] (CyberLink)
Task: {F3CFF79F-8E7A-4126-A726-C7D9F6FCB0D5} - System32\Tasks\Wise Care 365 => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe [2013-04-26] (WiseCleaner.com)
Task: {FC5A3093-8EBE-431E-BAA7-98227382E614} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe [2012-04-03] (Samsung Electronics)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseCare365.exe
Task: C:\Windows\Tasks\Wise Care 365.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/07/2013 02:56:21 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/07/2013 02:38:17 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/07/2013 02:37:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/06/2013 07:04:28 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/06/2013 10:20:44 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/06/2013 10:18:05 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: setup.exe_Microsoft Mouse and Keyboard Center, Version: 2.2.173.0, Zeitstempel: 0x518a3ffd
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b83c8a
Ausnahmecode: 0xe06d7363
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x1498
Startzeit der fehlerhaften Anwendung: 0xsetup.exe_Microsoft Mouse and Keyboard Center0
Pfad der fehlerhaften Anwendung: setup.exe_Microsoft Mouse and Keyboard Center1
Pfad des fehlerhaften Moduls: setup.exe_Microsoft Mouse and Keyboard Center2
Berichtskennung: setup.exe_Microsoft Mouse and Keyboard Center3
Error: (08/06/2013 10:00:33 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c92c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001a6920
ID des fehlerhaften Prozesses: 0x1724
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Error: (08/06/2013 09:01:19 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (08/07/2013 09:05:32 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst VSSERV erreicht.
Error: (08/06/2013 10:26:03 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error: (08/06/2013 09:00:42 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intel(R) PROSet/Wireless Event Log" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/06/2013 09:00:42 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) PROSet/Wireless Event Log erreicht.
Microsoft Office Sessions:
=========================
Error: (04/14/2013 08:09:39 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2013-08-05 14:52:51.670
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-08-05 14:52:51.638
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 48%
Total physical RAM: 8089.4 MB
Available physical RAM: 4203.66 MB
Total Pagefile: 16176.98 MB
Available Pagefile: 12399.18 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:250 GB) (Free:116.87 GB) NTFS (Disk=0 Partition=2)
Drive d: () (Fixed) (Total:656.43 GB) (Free:196.78 GB) NTFS (Disk=0 Partition=3)
Drive e: (GTA IV Disc 1) (CDROM) (Total:7.03 GB) (Free:0 GB) UDF
Drive f: (TOSHIBA EXT) (Fixed) (Total:1863.01 GB) (Free:1122.59 GB) NTFS (Disk=1 Partition=1)
Drive g: (LF3 Grundl. Etec) (CDROM) (Total:0.04 GB) (Free:0 GB) UDF
Drive h: (Freecom XS) (Fixed) (Total:931.5 GB) (Free:222.56 GB) NTFS (Disk=3 Partition=1)
Drive i: (SCHMIDT_3) (Removable) (Total:59.61 GB) (Free:13.55 GB) FAT32 (Disk=2 Partition=1)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 8D8AB3F7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=250 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=656 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=25 GB) - (Type=27)
========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 1863 GB) (Disk ID: C79DB495)
Partition 1: (Not Active) - (Size=-198626420736) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 60 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=60 GB) - (Type=0C)
========================================================
Disk: 3 (Size: 932 GB) (Disk ID: 444E0C94)
Partition 1: (Active) - (Size=931 GB) - (Type=07 NTFS)
==================== End Of Log ============================
  Ne, ich bin froh, dass mir jemand dabei hilft. Das Windows ist noch nicht lange installiert und jetzt gerade alles so richtig eingerichtet. |
|
07.08.2013, 20:16
| #12 |
| /// the machine /// TB-Ausbilder | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe Hast du denn noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.08.2013, 20:47
| #13 |
| | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe Hallo Schrauber, erstmal ein großes Danke für die tolle Unterstützung und Anleitung. ich hab keine Probleme mehr, zumindest nicht mit den Trojanern oder mit Meldungen von Bitdefender oder ähnlichem. Aber ein paar andere Sachen kommen mir spanisch vor an dem Computer. Ich weiß nicht ob das hier her passt. Mein E-Mail Programm zum Beispiel (Thunderbird, Portable) startet nur wenn ich es vorher "installiere" funktioniert aber an meinen anderen Computern einwandfrei vom gleichen Stick. Aber auch die Tasten zur Helligkeitsregelung funktionieren nicht und die Samsung Leisebetriebsfunktion gehen nicht mehr. Die Helligkeitsregelung kann ich nur noch über Windows oder über das Samsung Control Center einstellen. Dieser Leisebetrieb wird auch über dieses Control Center gesteuert. Leider muss das drauf sein, weil sonst keine FN-Tasten funktionieren. Ich hab keine Ahnung was ich da machen soll. Ich wollte dieses Control Center schon neu installieren aber das geht leider auch nicht, weil eine andere Samsung Software, die die Updates steuert sagt. Junge das ist schon drauf du kannst es nicht mehr installieren. Und dieses Samsung Control Center taucht auch nicht in der Programmliste der Systemsteuerung auf  .Das ist etwas wo ich noch nicht dahinter gekommen bin aber mit den Virus und anderen Schadprogrammen ist nun alles soweit sauber, meint mein Bitdefender. Gruß Daniel |
|
08.08.2013, 06:52
| #14 |
| /// the machine /// TB-Ausbilder | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe schonmal versucht es zu deinstallieren und dann neu zu installieren?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.08.2013, 20:43
| #15 |
| | Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe Eigentlich genau das ist mein Problem. Dieses Samsung Control Center hat keine Uninstallsoftware installiert und erscheint in der Systemsteuerung nicht in der Programmliste. Leider musste ich es ja installieren, weil diese Software die FN-Tasten überhaupt erst benutzbar macht. Gruß Huiboh Achso was ich noch sagen wollte. Thunderbird Portable hat jetzt ein Update gemacht und startet seither wieder völlig normal. Gruß Huiboh |
|
| Themen zu Bitdefender stoppt C:\Users\S*****\AppData\Roaming\Prapproxy32.exe |
| 7-zip, application/pdf:, avira, bho, blockiert, bonjour, converter, cpu, defender, error, explorer, firefox, flash player, format, grand theft auto, helper, home, iexplore.exe, install.exe, logfile, monitor, msvcrt, nvpciflt.sys, officejet, plug-in, prozess, realtek, registry, rundll, senden, sicherheit, smartphone, spyware, svchost.exe, tracker, trojaner, udp, virtualbox, virus, wrapper |
WARNUNG an die MITLESER: 
Linear-Darstellung
