Sorry, jetzt habe ichs....
FRST Logfile:
Code:
Alles auswählen Aufklappen ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-08-2013
Ran by Steffsalap (administrator) on 14-08-2013 03:19:51
Running from C:\Users\Steffsalap\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Agere Systems) C:\Windows\system32\agrsmsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WlanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
() C:\Program Files\GNU\GnuPG\dirmngr.exe
(Teruten) C:\Windows\system32\FsUsbExService.Exe
(Samsung Electronics Co., Ltd.) C:\Windows\system32\spool\drivers\w32x86\3\NetFaxServer.exe
() C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Cognizance Corporation) C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files\Core Temp\Core Temp.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
(ASUSTeK) C:\Windows\System32\ACEngSvr.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
() C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
() C:\Program Files\ASUS\ATK Hotkey\WDC.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\srspanel.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(PortableApps.com) C:\Users\Steffsalap\Documents\m\PortableApps\7-ZipPortable\7-ZipPortable.exe
(Igor Pavlov) C:\Users\Steffsalap\Documents\m\PortableApps\7-ZipPortable\App\7-Zip\7zFM.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WLanGUI.exe
(PortableApps.com) C:\Users\Steffsalap\Documents\m\PortableApps\PortableApps.com\PortableAppsPlatform.exe
(PortableApps.com) C:\Users\Steffsalap\Documents\m\PortableApps\FirefoxPortable\FirefoxPortable.exe
(Mozilla Corporation) C:\Users\Steffsalap\Documents\m\PortableApps\FirefoxPortable\App\firefox\firefox.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Microsoft Corporation) C:\Windows\System32\osk.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EaseUS EPM tray] - C:\Program Files\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe [2081792 2013-03-29] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-04-15] (DivX, LLC)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [KeePass 2 PreLoad] - C:\Program Files\KeePass Password Safe 2\KeePass.exe [1960448 2013-04-05] (Dominik Reichl)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [345144 2013-08-07] (Avira Operations GmbH & Co. KG)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
HKCU\...\Run: [PeerBlock] - C:\Program Files\PeerBlock\peerblock.exe [1866864 2010-10-14] (PeerBlock, LLC)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-03-20] (Samsung Electronics)
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [Boxcryptor.exe] - C:\Program Files\Boxcryptor\Boxcryptor.exe [986880 2013-06-16] (Secomba GmbH)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
SSODL: EldosMountNotificator-cbfs4 - {A8DEB7EB-750C-4316-88FA-0C8D48D4AA0E} - C:\Windows\system32\cbfsMntNtf4.dll (EldoS Corporation)
BootExecute: autocheck autochk * SmartDefragBootTime.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://startpage.com/deu/
SearchScopes: HKCU - DefaultScope {8A6767E7-09E6-4CFC-8DD3-A0033087D454} URL = https://startpage.com/do/search?query={searchTerms}&cat=web&pl=ie&language=deutsch
SearchScopes: HKCU - {0B5808E5-75E2-47BE-BDDD-FC88BF378215} URL = https://ixquick.com/do/metasearch.pl?query={searchTerms}&cat=web&pl=ie&language=deutsch
SearchScopes: HKCU - {8A6767E7-09E6-4CFC-8DD3-A0033087D454} URL = https://startpage.com/do/search?query={searchTerms}&cat=web&pl=ie&language=deutsch
SearchScopes: HKCU - {9615076B-D61F-4ECD-AF1C-F85E36C4E501} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
Winsock: Catalog5 08 C:\Windows\system32\tnnsgr74u.dll File Not found ()
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 22 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Steffsalap\AppData\Roaming\Mozilla\Firefox\Profiles\2ln5zejx.default
FF user.js: detected! => C:\Users\Steffsalap\AppData\Roaming\Mozilla\Firefox\Profiles\2ln5zejx.default\user.js
FF NetworkProxy: "type", 0
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @java.com/DTPlugin,version=10.4.1 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Steffsalap\AppData\Roaming\Mozilla\Firefox\Profiles\2ln5zejx.default\searchplugins\delta.xml
FF Extension: No Name - C:\Users\Steffsalap\AppData\Roaming\Mozilla\Firefox\Profiles\2ln5zejx.default\Extensions\fb_add_on@avm.de
FF Extension: m2k - C:\Users\Steffsalap\AppData\Roaming\Mozilla\Firefox\Profiles\2ln5zejx.default\Extensions\m2k@m2kdownloader.com.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-08-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-07] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-08-07] (Avira Operations GmbH & Co. KG)
R2 ASBroker; C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll [74240 2012-05-27] (Cognizance Corporation)
R2 ASChannel; C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll [131584 2012-05-27] (Cognizance Corporation)
R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536 2009-06-15] (ASUS)
R2 ATKGFNEXSrv; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2009-12-15] (ASUS)
R2 AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
R2 DirMngr; C:\Program Files\GNU\GnuPG\dirmngr.exe [218112 2013-05-28] ()
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\w32x86\3\NetFaxServer.exe [175104 2011-06-20] (Samsung Electronics Co., Ltd.)
R2 spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496 2007-08-03] ()
R2 Update-Service; C:\Windows\System32\UpdSvc.dll [114000 2011-12-13] (Joosoft.com GmbH)
S2 Dnscache; %SystemRoot%\System32\pouavouqn.dll [x]
==================== Drivers (Whitelisted) ====================
R2 ASMMAP; C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [13880 2009-07-02] (ASUS)
R3 ATSWPDRV; C:\Windows\System32\DRIVERS\ATSwpDrv.sys [146824 2007-06-16] (AuthenTec, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-08-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-08-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-08-07] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
R1 cbfs4; C:\Windows\system32\drivers\cbfs4.sys [322112 2013-06-05] (EldoS Corporation)
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20032 2012-06-26] (Devguru Co., Ltd)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14920 2013-03-07] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9160 2013-03-07] ()
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] ()
R3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [586752 2010-10-22] (AVM GmbH)
R2 ghaio; C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [20936 2013-04-07] ()
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [9344 2009-04-17] (GARMIN Corp.)
R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [54784 2007-12-18] (ITE Tech. Inc. )
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [5632 2012-07-25] ( )
S3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [14392 2008-12-24] (ATK0100)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-07] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-14] (Samsung Electronics)
R3 vpnpbus; C:\Windows\System32\DRIVERS\vpnpbus.sys [15936 2013-06-05] (EldoS Corporation)
R3 ALSysIO; \??\C:\Users\STEFFS~1\AppData\Local\Temp\ALSysIO.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 MUXMP; system32\DRIVERS\mux.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 XDva391; \??\C:\Windows\system32\XDva391.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-14 03:18 - 2013-08-14 03:18 - 01068733 _____ (Farbar) C:\Users\Steffsalap\Desktop\FRST.exe
2013-08-14 01:16 - 2013-08-14 01:16 - 00050477 _____ C:\Users\Steffsalap\Desktop\Defogger.exe
2013-08-14 01:14 - 2013-08-14 01:14 - 00377856 _____ C:\Users\Steffsalap\Desktop\test_2.1.19163.exe
2013-08-14 00:13 - 2013-08-14 00:17 - 00000180 _____ C:\Users\Steffsalap\Desktop\battlenetaccount.txt
2013-08-13 21:06 - 2013-08-13 21:06 - 00000022 _____ C:\Windows\S.dirmngr
2013-08-12 00:18 - 2013-08-13 21:39 - 00000000 ____D C:\Continuum.S02E13
2013-08-10 00:35 - 2013-08-13 21:39 - 00000000 ____D C:\Continuum.S02E12
2013-08-09 14:57 - 2013-08-09 14:57 - 00000000 ____D C:\Dexter.S07E08.Argentinien.x264-ITG
2013-08-09 14:17 - 2013-08-09 14:38 - 497236980 _____ C:\Dexter.S07E08.Argentinien.x264-ITG.rar
2013-08-09 13:54 - 2013-08-09 13:54 - 00000000 ____D C:\Dexter.S07E07.Chemie.x264-ITG
2013-08-09 13:54 - 2013-08-09 13:54 - 00000000 ____D C:\Dexter.S07E06.Die.Sehnsucht.nach.Schnee.x264-ITG
2013-08-09 13:53 - 2013-08-09 13:54 - 00000000 ____D C:\Dexter.S07E05.Kampfansage.x264-ITG
2013-08-09 13:53 - 2013-08-09 13:53 - 00000000 ____D C:\Users\Steffsalap\AppData\Roaming\Avira
2013-08-09 13:52 - 2013-08-09 13:53 - 00000000 ____D C:\Dexter.S07E04.In.Rauch.aufgeloest.XviD-ITG
2013-08-09 13:52 - 2013-08-09 13:52 - 00000000 ____D C:\Dexter.S07E03.Todeslabyrinth.XviD-ITG
2013-08-09 13:51 - 2013-08-09 13:52 - 00000000 ____D C:\Dexter.S07E02.Auf.Schritt.und.Tritt.XviD-ITG
2013-08-09 13:50 - 2013-08-09 13:51 - 00000000 ____D C:\Dexter.S07E01.Erschuetternde.Wahrheit.XviD-ITG
2013-08-09 05:50 - 2013-08-09 05:52 - 00000000 ____D C:\2013 Paddeltour Niers
2013-08-09 05:50 - 2013-08-07 23:50 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-09 05:50 - 2013-08-07 23:50 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-09 05:50 - 2013-08-07 23:50 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-09 05:50 - 2013-08-07 23:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-08-09 05:48 - 2013-08-09 05:48 - 00000796 _____ C:\Windows\setupact.log
2013-08-09 05:48 - 2013-08-09 05:48 - 00000000 _____ C:\Windows\setuperr.log
2013-08-07 23:26 - 2013-08-07 23:29 - 00000000 ____D C:\Windows\system32\MRT
2013-08-07 01:15 - 2013-08-07 01:15 - 00000783 _____ C:\Users\Steffsalap\Desktop\Drehscheibe Online Foren 01 - News [Köln HBF] Lokführer überfährt Signal (WDR + Link).website
2013-08-07 01:07 - 2013-08-13 21:39 - 00000000 ____D C:\Continuum.S02E11
2013-08-01 09:30 - 2013-08-01 09:30 - 00000719 _____ C:\Users\Steffsalap\Desktop\XKeyscore Wie die NSA-Überwachung funktioniert - SPIEGEL ONLINE.website
2013-07-30 22:38 - 2013-08-13 21:39 - 00000000 ____D C:\Continuum.S02E10
2013-07-30 22:31 - 2013-08-13 21:39 - 00000000 ____D C:\Continuum.S02E09
2013-07-29 17:28 - 2013-08-09 13:45 - 00003434 _____ C:\Windows\PFRO.log
2013-07-28 19:47 - 2013-07-30 22:30 - 00000000 ____D C:\Oblivion-iND.part1
2013-07-24 18:52 - 2013-07-24 18:52 - 04100432 _____ (Piriform Ltd) C:\Users\Steffsalap\Downloads\dfsetup215.exe
2013-07-22 12:40 - 2013-07-28 19:04 - 00000000 ____D C:\Olympus.has.Fallen.AOE
2013-07-22 00:40 - 2013-07-28 19:09 - 00000000 ____D C:\Pacific.Rim-PsO.part1
2013-07-18 01:02 - 2013-08-12 15:52 - 00000000 ____D C:\Girls.S01E03.Alle.abenteuerlustigen.Frauen.haben.das.German.BDRip.XviD-GZCrew
2013-07-17 11:17 - 2013-08-12 15:52 - 00000000 ____D C:\Girls.S01E02.Vagina.Panik.German.BDRip.XviD-GZCrew
2013-07-16 23:52 - 2013-08-12 15:52 - 00000000 ____D C:\Girls.S01E01.Kalter.Entzug.German.BDRip.XviD-GZCrew
2013-07-16 02:52 - 2013-07-16 02:52 - 00000479 _____ C:\Users\Steffsalap\Desktop\China Polizistinnen streiten sich um eine Kreuzung -Video - SPIEGEL ONLINE.website
2013-07-16 02:51 - 2013-07-16 02:51 - 00000498 _____ C:\Users\Steffsalap\Desktop\Moskau Lkw mit Gastanks verursacht Explosionen auf Autobahn -Video - SPIEGEL ONLINE.website
2013-07-16 02:44 - 2013-07-16 02:44 - 00000657 _____ C:\Users\Steffsalap\Desktop\Paul Watzlawick - Wenn die Lösung das Problem ist - YouTube.website
2013-07-15 23:33 - 2013-07-15 23:33 - 04396440 _____ (Piriform Ltd) C:\Users\Steffsalap\Downloads\ccsetup403.exe
==================== One Month Modified Files and Folders =======
2013-08-14 03:19 - 2013-08-14 03:19 - 00000000 ____D C:\FRST
2013-08-14 03:18 - 2013-08-14 03:18 - 01068733 _____ (Farbar) C:\Users\Steffsalap\Desktop\FRST.exe
2013-08-14 03:06 - 2006-11-02 14:47 - 00003744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-14 03:06 - 2006-11-02 14:47 - 00003744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-14 02:07 - 2011-11-16 08:30 - 01140165 _____ C:\Windows\WindowsUpdate.log
2013-08-14 01:16 - 2013-08-14 01:16 - 00050477 _____ C:\Users\Steffsalap\Desktop\Defogger.exe
2013-08-14 01:14 - 2013-08-14 01:14 - 00377856 _____ C:\Users\Steffsalap\Desktop\test_2.1.19163.exe
2013-08-14 00:17 - 2013-08-14 00:13 - 00000180 _____ C:\Users\Steffsalap\Desktop\battlenetaccount.txt
2013-08-13 22:31 - 2011-11-27 02:27 - 00000000 ____D C:\Users\Steffsalap\AppData\Roaming\Mozilla
2013-08-13 22:27 - 2013-04-21 23:29 - 00000000 ____D C:\Users\Steffsalap\AppData\Roaming\vlc
2013-08-13 22:27 - 2006-11-02 12:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-13 21:39 - 2013-08-12 00:18 - 00000000 ____D C:\Continuum.S02E13
2013-08-13 21:39 - 2013-08-10 00:35 - 00000000 ____D C:\Continuum.S02E12
2013-08-13 21:39 - 2013-08-07 01:07 - 00000000 ____D C:\Continuum.S02E11
2013-08-13 21:39 - 2013-07-30 22:38 - 00000000 ____D C:\Continuum.S02E10
2013-08-13 21:39 - 2013-07-30 22:31 - 00000000 ____D C:\Continuum.S02E09
2013-08-13 21:39 - 2013-07-04 12:40 - 00000000 ____D C:\Continuum.S02E08
2013-08-13 21:13 - 2013-03-14 21:41 - 00000027 _____ C:\Users\Steffsalap\AppData\Roaming\Network Meter_Usage.ini
2013-08-13 21:10 - 2011-11-16 00:35 - 00037397 _____ C:\ProgramData\nvModes.001
2013-08-13 21:10 - 2011-11-16 00:34 - 00037397 _____ C:\ProgramData\nvModes.dat
2013-08-13 21:06 - 2013-08-13 21:06 - 00000022 _____ C:\Windows\S.dirmngr
2013-08-13 21:06 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-13 10:20 - 2011-11-16 08:31 - 00000012 _____ C:\Windows\bthservsdp.dat
2013-08-13 10:20 - 2006-11-02 15:01 - 00032630 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-13 00:52 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\LogFiles
2013-08-12 15:52 - 2013-07-18 01:02 - 00000000 ____D C:\Girls.S01E03.Alle.abenteuerlustigen.Frauen.haben.das.German.BDRip.XviD-GZCrew
2013-08-12 15:52 - 2013-07-17 11:17 - 00000000 ____D C:\Girls.S01E02.Vagina.Panik.German.BDRip.XviD-GZCrew
2013-08-12 15:52 - 2013-07-16 23:52 - 00000000 ____D C:\Girls.S01E01.Kalter.Entzug.German.BDRip.XviD-GZCrew
2013-08-12 13:58 - 2013-05-17 16:13 - 00000000 ____D C:\Shootout
2013-08-11 23:57 - 2013-04-07 23:59 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2013-08-09 14:57 - 2013-08-09 14:57 - 00000000 ____D C:\Dexter.S07E08.Argentinien.x264-ITG
2013-08-09 14:38 - 2013-08-09 14:17 - 497236980 _____ C:\Dexter.S07E08.Argentinien.x264-ITG.rar
2013-08-09 13:54 - 2013-08-09 13:54 - 00000000 ____D C:\Dexter.S07E07.Chemie.x264-ITG
2013-08-09 13:54 - 2013-08-09 13:54 - 00000000 ____D C:\Dexter.S07E06.Die.Sehnsucht.nach.Schnee.x264-ITG
2013-08-09 13:54 - 2013-08-09 13:53 - 00000000 ____D C:\Dexter.S07E05.Kampfansage.x264-ITG
2013-08-09 13:53 - 2013-08-09 13:53 - 00000000 ____D C:\Users\Steffsalap\AppData\Roaming\Avira
2013-08-09 13:53 - 2013-08-09 13:52 - 00000000 ____D C:\Dexter.S07E04.In.Rauch.aufgeloest.XviD-ITG
2013-08-09 13:52 - 2013-08-09 13:52 - 00000000 ____D C:\Dexter.S07E03.Todeslabyrinth.XviD-ITG
2013-08-09 13:52 - 2013-08-09 13:51 - 00000000 ____D C:\Dexter.S07E02.Auf.Schritt.und.Tritt.XviD-ITG
2013-08-09 13:51 - 2013-08-09 13:50 - 00000000 ____D C:\Dexter.S07E01.Erschuetternde.Wahrheit.XviD-ITG
2013-08-09 13:45 - 2013-07-29 17:28 - 00003434 _____ C:\Windows\PFRO.log
2013-08-09 05:52 - 2013-08-09 05:50 - 00000000 ____D C:\2013 Paddeltour Niers
2013-08-09 05:50 - 2011-11-17 16:24 - 00000000 ____D C:\ProgramData\Avira
2013-08-09 05:49 - 2011-11-17 16:24 - 00000000 ____D C:\Program Files\Avira
2013-08-09 05:48 - 2013-08-09 05:48 - 00000796 _____ C:\Windows\setupact.log
2013-08-09 05:48 - 2013-08-09 05:48 - 00000000 _____ C:\Windows\setuperr.log
2013-08-07 23:50 - 2013-08-09 05:50 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-07 23:50 - 2013-08-09 05:50 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-07 23:50 - 2013-08-09 05:50 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-07 23:50 - 2013-08-09 05:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-08-07 23:29 - 2013-08-07 23:26 - 00000000 ____D C:\Windows\system32\MRT
2013-08-07 01:15 - 2013-08-07 01:15 - 00000783 _____ C:\Users\Steffsalap\Desktop\Drehscheibe Online Foren 01 - News [Köln HBF] Lokführer überfährt Signal (WDR + Link).website
2013-08-05 16:53 - 2012-01-28 11:43 - 00000000 ____D C:\Program Files\CDBurnerXP
2013-08-01 09:30 - 2013-08-01 09:30 - 00000719 _____ C:\Users\Steffsalap\Desktop\XKeyscore Wie die NSA-Überwachung funktioniert - SPIEGEL ONLINE.website
2013-07-30 22:30 - 2013-07-28 19:47 - 00000000 ____D C:\Oblivion-iND.part1
2013-07-30 22:23 - 2013-06-16 20:27 - 00000000 ____D C:\After.Earth
2013-07-29 17:29 - 2012-10-08 21:51 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-29 17:28 - 2006-11-02 14:42 - 00000000 ____D C:\Windows\WindowsMobile
2013-07-28 19:44 - 2012-05-15 03:52 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-07-28 19:44 - 2011-12-13 23:04 - 00000000 ____D C:\Users\STEFFS~1\AppData\Local\Adobe
2013-07-28 19:44 - 2011-11-17 09:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-07-28 19:09 - 2013-07-22 00:40 - 00000000 ____D C:\Pacific.Rim-PsO.part1
2013-07-28 19:08 - 2013-07-09 09:34 - 00000000 ____D C:\Star.Trek.Into.Darkness.XviD-PsO.part1
2013-07-28 19:04 - 2013-07-22 12:40 - 00000000 ____D C:\Olympus.has.Fallen.AOE
2013-07-28 14:52 - 2011-12-12 21:30 - 00000000 ____D C:\Program Files\JDownloader
2013-07-25 07:19 - 2012-11-26 17:12 - 00000000 ____D C:\Program Files\Defraggler
2013-07-24 18:52 - 2013-07-24 18:52 - 04100432 _____ (Piriform Ltd) C:\Users\Steffsalap\Downloads\dfsetup215.exe
2013-07-17 11:21 - 2013-07-04 00:32 - 00000958 _____ C:\Users\Steffsalap\Desktop\Papierkorb.lnk
2013-07-16 02:52 - 2013-07-16 02:52 - 00000479 _____ C:\Users\Steffsalap\Desktop\China Polizistinnen streiten sich um eine Kreuzung -Video - SPIEGEL ONLINE.website
2013-07-16 02:51 - 2013-07-16 02:51 - 00000498 _____ C:\Users\Steffsalap\Desktop\Moskau Lkw mit Gastanks verursacht Explosionen auf Autobahn -Video - SPIEGEL ONLINE.website
2013-07-16 02:44 - 2013-07-16 02:44 - 00000657 _____ C:\Users\Steffsalap\Desktop\Paul Watzlawick - Wenn die Lösung das Problem ist - YouTube.website
2013-07-15 23:34 - 2011-11-25 22:22 - 00000000 ____D C:\Program Files\CCleaner
2013-07-15 23:33 - 2013-07-15 23:33 - 04396440 _____ (Piriform Ltd) C:\Users\Steffsalap\Downloads\ccsetup403.exe
2013-07-15 23:30 - 2012-02-11 01:18 - 00000000 ____D C:\Users\Steffsalap\AppData\Roaming\Winamp
Files to move or delete:
====================
C:\ProgramData\nvModes.dat
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-13 21:15
==================== End Of Log ============================
--- --- ---
__________________
14.08.2013, 21:01
Hybrid-Darstellung
