|
Plagegeister aller Art und deren Bekämpfung: Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei SystemstartWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
31.08.2013, 13:54 | #61 |
| Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart nein, ging nicht. bin gerade unterwegs. checke es, wenn ich morgen wieder daheim bin und gebe dann bescheid. |
31.08.2013, 14:33 | #62 |
/// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart ok
__________________
__________________ |
01.09.2013, 15:15 | #63 |
| Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart also, die Online LED meines Modems leuchtet nicht (unitymedia). ich denke, dass muss erstmal geklärt werden. laut bedienung muss es leuchten. damit wird angezeigt, dass das modem eine verbindung zu unitymedia hat. super!!!
__________________ |
01.09.2013, 17:26 | #64 |
/// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Ruf dort mal an
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
03.09.2013, 06:43 | #65 |
| Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Wie durch ein Wunder hat sich das Problem "von selbst" gelöst. Funktioniert nun wieder ;-) Soll ich noch mal irgendeinen Scan zur Sicherheit machen? Wie entferne ich die MINITOOLBOX und FRST? |
03.09.2013, 08:22 | #66 |
/// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Poste ein frisches FRST log, ich schau nochmal drüber
__________________ --> Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart |
03.09.2013, 10:34 | #67 |
| Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-09-2013 Ran by *** (administrator) on ***-THINK on 03-09-2013 11:26:56 Running from C:\Users\***\Desktop Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Lenovo.) C:\Windows\system32\ibmpmsvc.exe (Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe (Lenovo) C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe (Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe (Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe (Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe (Lenovo.) C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe (Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Synaptics, Inc.) C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe (Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Lenovo) C:\Program Files\Lenovo\Access Connections\AcSvc.exe (Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe (Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\cssauth.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo) C:\Program Files\Lenovo\Access Connections\ACTray.exe (Lenovo) C:\Program Files\Lenovo\Access Connections\SvcGuiHlpr.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\password_manager.exe () C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Deutsche Telekom AG) C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tposdsvc.exe (Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe (TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe () C:\Program Files\Lenovo\System Update\SUService.exe () C:\Program Files\Lenovo\System Update\UNCServer.exe () C:\Program Files\Lenovo\System Update\TvsuCommandLauncher.exe () C:\Program Files\Lenovo\System Update\UACSdk.exe () C:\Program Files\Lenovo\System Update\Tvsukernel.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [cssauth] - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [3110200 2011-06-10] (Lenovo Group Limited) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2342200 2012-07-05] (Synaptics Incorporated) HKLM\...\Run: [ACTray] - C:\Program Files\Lenovo\Access Connections\ACTray.exe [433216 2011-10-20] (Lenovo) HKLM\...\Run: [TP-Link USB Printer Controller] - C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe [4428800 2012-03-23] () HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-06-20] (Microsoft Corporation) Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [X] Winlogon\Notify\ScCertProp: wlnotify.dll [X] HKLM\...\Policies\Explorer: [NoDrives] 0 HKCU\...\Policies\Explorer: [NoDrives] 0 HKU\Default\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation) HKU\Default\...\RunOnce: [] - [x] HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] () HKU\Default User\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation) HKU\Default User\...\RunOnce: [] - [x] HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] () IMEO\htcupctloader.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" IMEO\ncc.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk ShortcutTarget: VPN Client.lnk -> C:\Windows\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico () Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk ShortcutTarget: Mediencenter.lnk -> C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG) BootExecute: autocheck autochk * sdnclean.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LEMDF8&pc=MALC&src=IE-SearchBox; SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKCU - {A8945019-18BA-4ECC-B55E-160FD84D07CE} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=386496&p={searchTerms} SearchScopes: HKCU - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL = BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{6E46B758-E4D6-4596-807B-A57756BA850A}: [NameServer]212.23.115.132 212.23.115.148 FireFox: ======== FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @parallelgraphics.com/Cortona - C:\Program Files\Common Files\ParallelGraphics\Cortona\npCortona.dll (ParallelGraphics) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017319.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\ShareazaWebSearch.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12 FF Extension: ThinkVantage Password Manager - C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12 Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR DefaultSearchURL: (Delta Search) - hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=EA790027109593E9&affID=119357&tsp=4985 CHR DefaultSuggestURL: (Delta Search) - "suggest_url": "" CHR Plugin: (Shockwave Flash) - C:\Users\***\AppData\Local\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\***\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\***\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Cortona3D Viewer) - C:\Program Files\Mozilla Firefox\plugins\npCortona.dll (ParallelGraphics) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017319.dll (Amazon.com, Inc.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll () CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0 CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM\...\Chrome\Extension: [epojlgbehpaeekopencdagbdamnkppci] - C:\Program Files\LyriXeeker\128.crx ========================== Services (Whitelisted) ================= R2 AcPrfMgrSvc; C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe [134208 2011-10-20] (Lenovo) R2 AcSvc; C:\Program Files\Lenovo\Access Connections\AcSvc.exe [269376 2011-10-20] (Lenovo) R2 AMPPALR3; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [509448 2012-03-15] (Intel Corporation) R2 BTHSSecurityMgr; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [104208 2012-04-23] (Intel(R) Corporation) R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.) S4 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [50536 2010-07-27] (Lenovo Group Limited) R2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [45496 2010-04-07] (Lenovo Group Limited) S4 LENOVO.TPKNRSVC; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [74088 2010-07-27] (Lenovo Group Limited) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [93032 2010-04-07] (Lenovo Group Limited) R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-06-20] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-06-20] (Microsoft Corporation) R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] () S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1665120 2012-05-16] (Lenovo Group Limited) R2 ScrybeUpdater; C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe [1300264 2011-05-27] (Synaptics, Inc.) S4 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) R3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22376 2013-06-26] () R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [131432 2011-07-12] (Lenovo Group Limited) S2 ucsvc32; C:\Windows\system32\vaultsvd.exe [65024 2012-09-15] () R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2759984 2012-06-25] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== R3 AMPPAL; C:\Windows\System32\DRIVERS\AMPPAL.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider) S3 AMPPALP; C:\Windows\System32\DRIVERS\amppal.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider) R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation) S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.) R2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.) R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation) R1 MpKslda680a54; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9C5E938C-B321-4D69-AC9D-A8171BE83184}\MpKslda680a54.sys [29904 2013-09-03] (Microsoft Corporation) R3 NETwNs32; C:\Windows\System32\DRIVERS\Netwsn00.sys [10364416 2012-06-03] (Intel Corporation) S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [816792 2010-11-19] () S3 s117bus; C:\Windows\System32\DRIVERS\s117bus.sys [82984 2007-06-25] (MCCI Corporation) S3 s117mdfl; C:\Windows\System32\DRIVERS\s117mdfl.sys [14888 2007-06-25] (MCCI Corporation) S3 s117mdm; C:\Windows\System32\DRIVERS\s117mdm.sys [108456 2007-06-25] (MCCI Corporation) S3 s117mgmt; C:\Windows\System32\DRIVERS\s117mgmt.sys [100264 2007-06-25] (MCCI Corporation) S3 s117nd5; C:\Windows\System32\DRIVERS\s117nd5.sys [22952 2007-06-25] (MCCI Corporation) S3 s117obex; C:\Windows\System32\DRIVERS\s117obex.sys [98344 2007-06-25] (MCCI Corporation) S3 s117unic; C:\Windows\System32\DRIVERS\s117unic.sys [98856 2007-06-25] (MCCI Corporation) S3 SCR3XX2K; C:\Windows\System32\DRIVERS\SCR3XX2K.sys [57856 2010-01-07] (SCM Microsystems Inc.) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-07-05] (Synaptics Incorporated) R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [11976 2011-05-30] (Authentec Inc.) R3 TPLINKUDSMBus; C:\Windows\System32\Drivers\TPLINKUDSMBus.sys [89728 2012-03-08] (Windows (R) Codename Longhorn DDK provider) R3 TPLINKUDSTcpBus; C:\Windows\System32\Drivers\TPLINKUDSTcpBus.sys [146304 2012-03-08] (Windows (R) Codename Longhorn DDK provider) R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [10064 2011-06-06] (TuneUp Software) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13752 2009-09-29] () S3 catchme; \??\C:\Users\***\AppData\Local\Temp\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-02 19:31 - 2013-09-02 19:31 - 00001039 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-09-02 19:31 - 2013-09-02 19:31 - 00000000 ____D C:\Program Files\VideoLAN 2013-09-02 19:28 - 2013-09-02 19:30 - 23003252 _____ C:\Users\***\Downloads\vlc-2.0.8_win32.exe 2013-08-30 08:01 - 2013-08-30 08:04 - 00030269 _____ C:\Users\***\Desktop\Addition.txt 2013-08-30 07:59 - 2013-08-30 07:59 - 00000000 ____D C:\FRST 2013-08-30 07:58 - 2013-09-03 11:26 - 01084685 _____ (Farbar) C:\Users\***\Desktop\FRST.exe 2013-08-30 07:55 - 2013-08-30 08:00 - 00038885 _____ C:\Users\***\Desktop\Result.txt 2013-08-30 07:53 - 2013-08-30 07:54 - 00760937 _____ (Farbar) C:\Users\***\Desktop\MiniToolBox.exe 2013-08-27 15:38 - 2013-08-27 15:38 - 00013927 _____ C:\Users\***\Desktop\Immatrikulationsbescheinigung_***.pdf - Verknüpfung.lnk 2013-08-25 19:50 - 2013-08-25 19:50 - 00001082 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-25 19:50 - 2013-08-25 19:50 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-08-25 19:50 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-08-25 19:35 - 2013-08-25 19:35 - 00533892 _____ C:\Users\***\Desktop\noscript_security_suite-2.6.7.1-sm_fn_fx.xpi.zip 2013-08-25 19:29 - 2013-08-25 19:29 - 00000000 ____D C:\Users\***\Downloads\noscript_security_suite-2.6.7.1-sm_fn_fx.xpi 2013-08-25 15:42 - 2013-08-25 15:42 - 00000054 _____ C:\Users\***\AppData\Roaming\WB.CFG 2013-08-25 15:42 - 2013-08-25 15:42 - 00000005 _____ C:\Users\***\AppData\Roaming\WBPU-TTL.DAT 2013-08-25 14:41 - 2013-08-25 14:41 - 00714352 _____ C:\Users\***\Downloads\ZipOpenerSetup.exe 2013-08-25 14:39 - 2013-08-25 14:40 - 00533892 _____ C:\Users\***\Downloads\noscript_security_suite-2.6.7.1-sm_fn_fx.xpi.zip 2013-08-25 14:28 - 2013-08-25 14:28 - 00001120 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-08-25 14:27 - 2013-08-25 14:27 - 00282008 _____ (Mozilla) C:\Users\***\Downloads\Firefox Setup Stub 23.0.1.exe 2013-08-23 15:12 - 2013-08-23 15:15 - 00000000 ____D C:\Windows\system32\MRT 2013-08-23 15:01 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-23 15:01 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-23 15:01 - 2013-07-26 05:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-23 15:01 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-23 15:01 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-23 15:01 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-23 15:01 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-23 15:01 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-23 15:01 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-23 15:01 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-23 15:01 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-23 15:01 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-23 15:01 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-23 15:01 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-23 15:01 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-23 15:01 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-23 14:56 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-23 14:56 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-23 14:56 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-08-23 14:56 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-23 14:56 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-23 14:56 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-23 14:56 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-23 14:56 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-23 14:56 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-23 14:56 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-23 14:56 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-23 14:56 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-08-23 14:56 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-08-23 14:56 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-08-23 14:54 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-23 13:23 - 2013-08-23 14:36 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2013-08-23 13:17 - 2013-08-23 13:17 - 00000000 ____D C:\Users\***\Desktop\tweaking.com_windows_repair_aio 2013-08-23 13:12 - 2013-08-23 13:12 - 03268369 _____ C:\Users\***\Desktop\tweaking.com_windows_repair_aio.zip 2013-08-22 11:52 - 2013-08-22 11:52 - 00000000 ____D C:\Users\***\AppData\Roaming\Yahoo! 2013-08-22 11:47 - 2013-08-22 11:47 - 00000000 ____D C:\ProgramData\Yahoo! 2013-08-22 11:46 - 2013-08-22 11:47 - 00000000 ____D C:\Program Files\Yahoo! 2013-08-22 11:45 - 2013-08-22 11:45 - 00444024 _____ (Yahoo! Inc.) C:\Users\***\Downloads\msgr11de.exe 2013-08-22 10:25 - 2013-08-22 10:25 - 00211349 _____ C:\Users\***\Downloads\MicrosoftFixit.wu.Run (1).zip 2013-08-22 10:24 - 2013-08-22 10:25 - 00211349 _____ C:\Users\***\Downloads\MicrosoftFixit.wu.Run.zip 2013-08-22 10:11 - 2013-08-22 10:11 - 36271144 _____ (Safer-Networking Ltd. ) C:\Users\***\Downloads\spybot-2.1 (1).exe 2013-08-22 10:08 - 2013-08-22 10:09 - 36364784 _____ (Safer-Networking Ltd. ) C:\Users\***\Downloads\spybotsd-2.1.20-SR1.exe 2013-08-22 09:42 - 2013-08-22 09:42 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-08-22 09:40 - 2013-08-22 09:40 - 00903080 _____ (Oracle Corporation) C:\Users\***\Downloads\chromeinstall-7u25.exe 2013-08-21 13:40 - 2013-08-26 14:49 - 00000000 ____D C:\AdwCleaner 2013-08-21 10:19 - 2013-08-21 10:19 - 00012990 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).CAL 2013-08-21 10:18 - 2013-08-21 10:18 - 00038458 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).ADR 2013-08-19 23:02 - 2013-08-19 23:02 - 00001732 _____ C:\tvtpktfilter.dat 2013-08-18 16:21 - 2013-08-18 16:46 - 410116739 _____ C:\Users\***\Downloads\1308_banana_0236.wmv 2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi 2013-08-16 10:15 - 2013-08-16 10:32 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar 2013-08-16 07:41 - 2013-08-16 12:38 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar 2013-08-16 07:41 - 2013-08-16 10:13 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar 2013-08-15 14:55 - 2013-08-15 18:05 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar 2013-08-15 14:48 - 2013-08-16 13:11 - 00000000 ____D C:\Program Files\JDownloader 2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe 2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc 2013-08-14 23:02 - 2013-08-14 23:03 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip 2013-08-14 22:59 - 2013-08-14 23:01 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip 2013-08-14 21:19 - 2013-08-14 21:21 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip 2013-08-14 19:56 - 2013-08-14 19:58 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip 2013-08-14 19:53 - 2013-08-14 19:54 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip 2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip 2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip 2013-08-14 19:43 - 2013-08-14 19:44 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip 2013-08-14 19:22 - 2013-08-14 19:24 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip 2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip 2013-08-14 17:34 - 2013-08-14 17:49 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar 2013-08-14 14:55 - 2013-08-14 14:57 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip 2013-08-12 07:52 - 2013-08-12 08:13 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv 2013-08-06 14:48 - 2013-08-23 13:38 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk ==================== One Month Modified Files and Folders ======= 2013-09-03 11:26 - 2013-08-30 07:58 - 01084685 _____ (Farbar) C:\Users\***\Desktop\FRST.exe 2013-09-03 11:17 - 2010-12-06 10:29 - 00000000 ____D C:\Users\***\AppData\Roaming\Skype 2013-09-03 10:38 - 2012-08-15 16:10 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-09-03 10:36 - 2012-09-17 23:07 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job 2013-09-03 10:20 - 2010-11-19 04:22 - 01099519 _____ C:\Windows\WindowsUpdate.log 2013-09-03 10:00 - 2011-06-05 15:43 - 00000466 _____ C:\Windows\Tasks\SystemToolsDailyTest.job 2013-09-03 07:38 - 2012-08-15 16:10 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-03 07:38 - 2010-12-06 19:21 - 00000000 ___SD C:\Users\***\Documents\Briefe 2013-09-03 07:37 - 2013-09-02 19:32 - 00000000 ____D C:\Users\***\AppData\Roaming\vlc 2013-09-03 07:31 - 2013-04-05 08:37 - 00000000 ___RD C:\Users\***\Mediencenter 2013-09-02 19:43 - 2009-07-21 07:30 - 00390040 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-02 19:40 - 2013-06-19 10:00 - 00004502 _____ C:\Windows\setupact.log 2013-09-02 19:36 - 2012-09-17 23:07 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job 2013-09-02 19:31 - 2013-09-02 19:31 - 00001039 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-09-02 19:31 - 2013-09-02 19:31 - 00000000 ____D C:\Program Files\VideoLAN 2013-09-02 19:30 - 2013-09-02 19:28 - 23003252 _____ C:\Users\***\Downloads\vlc-2.0.8_win32.exe 2013-09-02 16:35 - 2013-07-24 15:24 - 00000000 ____D C:\Users\***\Documents\DGVT 2013-09-02 07:26 - 2010-11-19 04:14 - 00000000 ____D C:\Program Files\Lenovo 2013-09-02 07:26 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-02 07:26 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-01 20:10 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-01 17:06 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF 2013-08-30 08:04 - 2013-08-30 08:01 - 00030269 _____ C:\Users\***\Desktop\Addition.txt 2013-08-30 08:00 - 2013-08-30 07:55 - 00038885 _____ C:\Users\***\Desktop\Result.txt 2013-08-30 07:59 - 2013-08-30 07:59 - 00000000 ____D C:\FRST 2013-08-30 07:54 - 2013-08-30 07:53 - 00760937 _____ (Farbar) C:\Users\***\Desktop\MiniToolBox.exe 2013-08-29 19:34 - 2013-06-15 10:24 - 00000803 _____ C:\DelFix.txt 2013-08-29 19:10 - 2010-11-19 22:04 - 00000000 ____D C:\Users\*** 2013-08-29 19:10 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp 2013-08-29 19:09 - 2010-11-19 12:50 - 00000000 ____D C:\ProgramData\Lenovo 2013-08-29 19:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration 2013-08-29 19:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat 2013-08-28 15:22 - 2010-12-06 19:22 - 00000000 ____D C:\Users\***\Documents\Rezepte 2013-08-27 15:38 - 2013-08-27 15:38 - 00013927 _____ C:\Users\***\Desktop\Immatrikulationsbescheinigung_***.pdf - Verknüpfung.lnk 2013-08-26 14:49 - 2013-08-21 13:40 - 00000000 ____D C:\AdwCleaner 2013-08-25 20:18 - 2013-07-12 08:25 - 00097780 _____ C:\Windows\PFRO.log 2013-08-25 19:50 - 2013-08-25 19:50 - 00001082 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-25 19:50 - 2013-08-25 19:50 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-08-25 19:35 - 2013-08-25 19:35 - 00533892 _____ C:\Users\***\Desktop\noscript_security_suite-2.6.7.1-sm_fn_fx.xpi.zip 2013-08-25 19:29 - 2013-08-25 19:29 - 00000000 ____D C:\Users\***\Downloads\noscript_security_suite-2.6.7.1-sm_fn_fx.xpi 2013-08-25 15:42 - 2013-08-25 15:42 - 00000054 _____ C:\Users\***\AppData\Roaming\WB.CFG 2013-08-25 15:42 - 2013-08-25 15:42 - 00000005 _____ C:\Users\***\AppData\Roaming\WBPU-TTL.DAT 2013-08-25 15:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache 2013-08-25 15:07 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-08-25 14:51 - 2013-06-18 09:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-08-25 14:51 - 2010-11-20 00:06 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-08-25 14:50 - 2010-11-19 23:22 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-08-25 14:50 - 2009-07-14 04:04 - 00000478 _____ C:\Windows\win.ini 2013-08-25 14:41 - 2013-08-25 14:41 - 00714352 _____ C:\Users\***\Downloads\ZipOpenerSetup.exe 2013-08-25 14:40 - 2013-08-25 14:39 - 00533892 _____ C:\Users\***\Downloads\noscript_security_suite-2.6.7.1-sm_fn_fx.xpi.zip 2013-08-25 14:28 - 2013-08-25 14:28 - 00001120 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-08-25 14:27 - 2013-08-25 14:27 - 00282008 _____ (Mozilla) C:\Users\***\Downloads\Firefox Setup Stub 23.0.1.exe 2013-08-23 15:27 - 2009-07-14 06:33 - 00462328 _____ C:\Windows\system32\FNTCACHE.DAT 2013-08-23 15:24 - 2009-07-21 13:47 - 00000000 ____D C:\Program Files\Windows Journal 2013-08-23 15:24 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender 2013-08-23 15:24 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-08-23 15:15 - 2013-08-23 15:12 - 00000000 ____D C:\Windows\system32\MRT 2013-08-23 15:11 - 2011-02-02 10:18 - 00001912 _____ C:\Windows\epplauncher.mif 2013-08-23 15:09 - 2013-06-14 10:51 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-08-23 14:36 - 2013-08-23 13:23 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2013-08-23 14:10 - 2010-11-19 22:12 - 00127656 _____ C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-23 13:38 - 2013-08-06 14:48 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk 2013-08-23 13:38 - 2013-04-05 08:36 - 00001150 _____ C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk 2013-08-23 13:17 - 2013-08-23 13:17 - 00000000 ____D C:\Users\***\Desktop\tweaking.com_windows_repair_aio 2013-08-23 13:12 - 2013-08-23 13:12 - 03268369 _____ C:\Users\***\Desktop\tweaking.com_windows_repair_aio.zip 2013-08-22 11:52 - 2013-08-22 11:52 - 00000000 ____D C:\Users\***\AppData\Roaming\Yahoo! 2013-08-22 11:47 - 2013-08-22 11:47 - 00000000 ____D C:\ProgramData\Yahoo! 2013-08-22 11:47 - 2013-08-22 11:46 - 00000000 ____D C:\Program Files\Yahoo! 2013-08-22 11:45 - 2013-08-22 11:45 - 00444024 _____ (Yahoo! Inc.) C:\Users\***\Downloads\msgr11de.exe 2013-08-22 10:37 - 2012-04-09 18:07 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-08-22 10:37 - 2011-05-26 18:50 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-08-22 10:25 - 2013-08-22 10:25 - 00211349 _____ C:\Users\***\Downloads\MicrosoftFixit.wu.Run (1).zip 2013-08-22 10:25 - 2013-08-22 10:24 - 00211349 _____ C:\Users\***\Downloads\MicrosoftFixit.wu.Run.zip 2013-08-22 10:18 - 2013-07-10 18:36 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2 2013-08-22 10:16 - 2013-07-10 19:48 - 00029914 _____ C:\Windows\wininit.ini 2013-08-22 10:11 - 2013-08-22 10:11 - 36271144 _____ (Safer-Networking Ltd. ) C:\Users\***\Downloads\spybot-2.1 (1).exe 2013-08-22 10:09 - 2013-08-22 10:08 - 36364784 _____ (Safer-Networking Ltd. ) C:\Users\***\Downloads\spybotsd-2.1.20-SR1.exe 2013-08-22 09:42 - 2013-08-22 09:42 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-08-22 09:42 - 2013-06-14 12:02 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-08-22 09:42 - 2012-05-31 19:48 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2013-08-22 09:42 - 2012-05-31 19:48 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-08-22 09:42 - 2012-05-31 19:48 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-08-22 09:42 - 2010-11-20 09:53 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2013-08-22 09:42 - 2010-11-19 04:21 - 00000000 ____D C:\Program Files\Java 2013-08-22 09:40 - 2013-08-22 09:40 - 00903080 _____ (Oracle Corporation) C:\Users\***\Downloads\chromeinstall-7u25.exe 2013-08-21 17:41 - 2013-06-14 08:56 - 00000000 ___HD C:\Windows\system32\Settings 2013-08-21 17:41 - 2013-06-12 21:33 - 00000000 ____D C:\Windows\erdnt 2013-08-21 17:41 - 2013-06-10 11:41 - 00000000 ____D C:\Users\***\Downloads\RecBoot_1.3_Windows 2013-08-21 17:40 - 2013-06-14 12:02 - 00000000 ____D C:\Program Files\Common Files\Java 2013-08-21 17:40 - 2013-06-10 09:57 - 00000000 ____D C:\Program Files\iTunes 2013-08-21 17:40 - 2013-06-10 09:57 - 00000000 ____D C:\Program Files\iPod 2013-08-21 17:40 - 2013-05-17 13:25 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-08-21 17:40 - 2012-10-24 10:30 - 00000000 ____D C:\Program Files\Apple Software Update 2013-08-21 17:40 - 2012-09-11 08:19 - 00000000 ____D C:\ProgramData\Intel 2013-08-21 17:40 - 2012-09-11 08:18 - 00000000 ____D C:\Program Files\Cisco 2013-08-21 17:40 - 2012-08-15 16:10 - 00000000 ____D C:\Program Files\Google 2013-08-21 17:40 - 2012-07-05 10:19 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive 2013-08-21 17:40 - 2012-06-18 17:53 - 00000000 ____D C:\Program Files\DVDVideoSoft 2013-08-21 17:40 - 2012-05-31 19:48 - 00000000 ____D C:\Program Files\Oracle 2013-08-21 17:40 - 2012-04-02 09:52 - 00000000 ____D C:\Program Files\Common Files\L&H 2013-08-21 17:40 - 2011-12-23 11:25 - 00000000 ____D C:\Program Files\RUB 2013-08-21 17:40 - 2011-10-23 17:39 - 00000000 ____D C:\Program Files\mp3DirectCut 2013-08-21 17:40 - 2011-10-23 17:27 - 00000000 ____D C:\Program Files\MP3-Cutter 2013-08-21 17:40 - 2011-08-01 07:58 - 00000000 ____D C:\Program Files\Win7codecs 2013-08-21 17:40 - 2011-07-23 13:40 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-08-21 17:40 - 2011-07-23 13:40 - 00000000 ____D C:\Program Files\TuneUp Utilities 2011 2013-08-21 17:40 - 2011-07-18 11:27 - 00000000 ____D C:\Program Files\Amazon 2013-08-21 17:40 - 2011-06-24 13:25 - 00000000 ____D C:\Program Files\Common Files\ParallelGraphics 2013-08-21 17:40 - 2011-06-05 15:42 - 00000000 ____D C:\ProgramData\PC-Doctor for Windows 2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\Spirent Communications 2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\HTC 2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR 2013-08-21 17:40 - 2011-05-17 22:32 - 00000000 ____D C:\Program Files\FreeTime 2013-08-21 17:40 - 2011-05-16 08:15 - 00000000 ____D C:\ProgramData\Skype Extras 2013-08-21 17:40 - 2011-04-11 19:19 - 00000000 ____D C:\Program Files\Riva 2013-08-21 17:40 - 2011-04-11 19:19 - 00000000 ____D C:\Program Files\Common Files\SWF Studio 2013-08-21 17:40 - 2011-03-09 19:21 - 00000000 ____D C:\ProgramData\elsterformular 2013-08-21 17:40 - 2011-03-09 00:26 - 00000000 ____D C:\Windows\Minidump 2013-08-21 17:40 - 2011-02-28 16:46 - 00000000 ____D C:\Program Files\Citavi 3 2013-08-21 17:40 - 2011-02-28 16:45 - 00000000 ____D C:\ProgramData\Swiss Academic Software 2013-08-21 17:40 - 2011-02-14 13:47 - 00000000 ____D C:\Program Files\gs 2013-08-21 17:40 - 2011-02-13 15:08 - 00000000 ____D C:\Program Files\SecondLifeViewer2 2013-08-21 17:40 - 2011-01-12 13:20 - 00000000 ____D C:\Program Files\Common Files\Deterministic Networks 2013-08-21 17:40 - 2011-01-12 13:20 - 00000000 ____D C:\Program Files\Cisco Systems 2013-08-21 17:40 - 2011-01-11 18:00 - 00000000 ____D C:\Program Files\OLYMPUS 2013-08-21 17:40 - 2010-12-23 18:35 - 00000000 ____D C:\ProgramData\SafeNet Sentinel 2013-08-21 17:40 - 2010-12-23 18:33 - 00000000 ____D C:\Program Files\Common Files\IBM 2013-08-21 17:40 - 2010-12-23 18:32 - 00000000 ____D C:\Program Files\IBM 2013-08-21 17:40 - 2010-12-21 20:11 - 00000000 ____D C:\Program Files\Adobe 2013-08-21 17:40 - 2010-12-08 22:45 - 00000000 ____D C:\Program Files\Nero 2013-08-21 17:40 - 2010-12-08 22:45 - 00000000 ____D C:\Program Files\Common Files\Nero 2013-08-21 17:40 - 2010-12-06 10:29 - 00000000 ___RD C:\Program Files\Skype 2013-08-21 17:40 - 2010-12-06 10:29 - 00000000 ____D C:\ProgramData\Skype 2013-08-21 17:40 - 2010-11-29 22:16 - 00000000 ____D C:\Program Files\SeaMonkey 2013-08-21 17:40 - 2010-11-29 20:53 - 00000000 ____D C:\Program Files\Nvu 2013-08-21 17:40 - 2010-11-24 22:50 - 00000000 ____D C:\ProgramData\eBay 2013-08-21 17:40 - 2010-11-24 22:50 - 00000000 ____D C:\Program Files\eBay 2013-08-21 17:40 - 2010-11-20 10:08 - 00000000 ____D C:\ProgramData\Apple Computer 2013-08-21 17:40 - 2010-11-20 10:08 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-08-21 17:40 - 2010-11-20 09:59 - 00000000 ____D C:\ProgramData\Apple 2013-08-21 17:40 - 2010-11-20 09:57 - 00000000 ____D C:\Program Files\BASE&E-Plus 2013-08-21 17:40 - 2010-11-19 23:24 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-08-21 17:40 - 2010-11-19 23:22 - 00000000 ____D C:\Program Files\Microsoft Office 2013-08-21 17:40 - 2010-11-19 23:22 - 00000000 ____D C:\Program Files\Microsoft Analysis Services 2013-08-21 17:40 - 2010-11-19 23:21 - 00000000 __RHD C:\MSOCache 2013-08-21 17:40 - 2010-11-19 04:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2013-08-21 17:40 - 2010-11-19 04:35 - 00000000 ____D C:\Program Files\Windows Live 2013-08-21 17:40 - 2010-11-19 04:35 - 00000000 ____D C:\Program Files\Common Files\Windows Live 2013-08-21 17:40 - 2010-11-19 04:33 - 00000000 ____D C:\Program Files\NetWaiting 2013-08-21 17:40 - 2010-11-19 04:29 - 00000000 ____D C:\Program Files\PC-Doctor 2013-08-21 17:40 - 2010-11-19 04:28 - 00000000 ____D C:\Program Files\Verizon Wireless 2013-08-21 17:40 - 2010-11-19 04:26 - 00000000 ____D C:\ProgramData\Adobe 2013-08-21 17:40 - 2010-11-19 04:26 - 00000000 ____D C:\Program Files\ThinkVantage 2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\ProgramData\Ulead Systems 2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\Program Files\Corel 2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\Program Files\Common Files\Ulead Systems 2013-08-21 17:40 - 2010-11-19 04:21 - 00000000 ____D C:\Program Files\Common Files\Lenovo 2013-08-21 17:40 - 2010-11-19 04:20 - 00000000 ____D C:\swshare 2013-08-21 17:40 - 2010-11-19 04:18 - 00000000 ____D C:\Program Files\Common Files\Intel 2013-08-21 17:40 - 2010-11-19 04:18 - 00000000 ____D C:\Program Files\Common Files\InstallShield 2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\ThinkVantage Fingerprint Software 2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Protector Suite 2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Intel 2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\CONEXANT 2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Common Files\postureAgent 2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Intel 2013-08-21 17:40 - 2010-11-19 04:14 - 00000000 ____D C:\Program Files\Integrated Camera Driver 2013-08-21 17:40 - 2010-11-19 04:13 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-08-21 17:40 - 2010-11-19 04:13 - 00000000 ____D C:\Program Files\ThinkPad 2013-08-21 17:40 - 2010-11-19 04:12 - 00000000 ____D C:\Program Files\DIFX 2013-08-21 17:40 - 2010-11-19 04:10 - 00000000 ____D C:\Program Files\Synaptics 2013-08-21 17:40 - 2009-07-21 08:20 - 00000000 ____D C:\SWTOOLS 2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Sidebar 2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild 2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker 2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Windows NT 2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System 2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines 2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-08-21 17:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles 2013-08-21 13:43 - 2012-06-18 17:53 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft 2013-08-21 13:37 - 2011-06-05 15:43 - 00000528 _____ C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job 2013-08-21 13:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Cursors 2013-08-21 10:20 - 2011-05-17 22:35 - 00026624 ___SH C:\Users\***\Thumbs.db 2013-08-21 10:19 - 2013-08-21 10:19 - 00012990 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).CAL 2013-08-21 10:18 - 2013-08-21 10:18 - 00038458 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).ADR 2013-08-21 08:03 - 2010-11-19 04:29 - 00000000 ____D C:\ProgramData\PCDr 2013-08-19 23:05 - 2012-04-02 10:02 - 00000000 ____D C:\Program Files\Naturalsoft 2013-08-19 23:05 - 2012-01-15 18:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-08-19 23:05 - 2011-12-14 10:36 - 00000000 ____D C:\Program Files\SDA 2013-08-19 23:05 - 2011-06-13 14:56 - 00000000 ____D C:\ProgramData\Easybits GO 2013-08-19 23:05 - 2011-01-30 19:59 - 00000000 ____D C:\Program Files\Shareaza Applications 2013-08-19 23:05 - 2010-12-31 20:02 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-08-19 23:05 - 2010-11-19 04:28 - 00000000 ____D C:\ProgramData\AT&T 2013-08-19 23:04 - 2012-05-28 19:22 - 00000000 ____D C:\Program Files\ElsterFormular 2013-08-19 23:03 - 2012-04-02 10:52 - 00000000 ____D C:\Program Files\Balabolka 2013-08-19 23:03 - 2012-02-21 19:32 - 00000000 ____D C:\Program Files\Audible 2013-08-19 23:03 - 2010-11-19 04:28 - 00000000 ____D C:\Program Files\AT&T 2013-08-19 23:02 - 2013-08-19 23:02 - 00001732 _____ C:\tvtpktfilter.dat 2013-08-18 18:35 - 2010-12-06 19:21 - 00000000 ____D C:\Users\***\Documents\Kennwörter 2013-08-18 16:46 - 2013-08-18 16:21 - 410116739 _____ C:\Users\***\Downloads\1308_banana_0236.wmv 2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi 2013-08-16 13:11 - 2013-08-15 14:48 - 00000000 ____D C:\Program Files\JDownloader 2013-08-16 12:38 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar 2013-08-16 10:32 - 2013-08-16 10:15 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar 2013-08-16 10:13 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar 2013-08-15 18:05 - 2013-08-15 14:55 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar 2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe 2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc 2013-08-14 23:03 - 2013-08-14 23:02 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip 2013-08-14 23:01 - 2013-08-14 22:59 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip 2013-08-14 21:21 - 2013-08-14 21:19 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip 2013-08-14 19:58 - 2013-08-14 19:56 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip 2013-08-14 19:54 - 2013-08-14 19:53 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip 2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip 2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip 2013-08-14 19:44 - 2013-08-14 19:43 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip 2013-08-14 19:24 - 2013-08-14 19:22 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip 2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip 2013-08-14 17:49 - 2013-08-14 17:34 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar 2013-08-14 14:57 - 2013-08-14 14:55 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip 2013-08-12 08:13 - 2013-08-12 07:52 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv 2013-08-05 16:00 - 2010-11-20 09:07 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe Files to move or delete: ==================== C:\Users\***\AppData\Local\Temp\Mediencenter_3.8.1.2208.exe C:\Users\***\AppData\Local\Temp\Quarantine.exe C:\Users\***\AppData\Local\Temp\SetupHelper.exe C:\Users\***\AppData\Local\Temp\uninst1.exe C:\Users\***\AppData\Local\Temp\{96229774-D3A0-4410-8400-09B79865B300}\uts.exe C:\Users\***\AppData\Local\Temp\Temp1_tweaking.com_windows_repair_aio.zip\Tweaking.com - Windows Repair\Repair_Windows.exe C:\Users\***\AppData\Local\Temp\Temp1_MicrosoftFixit.wu.Run.zip\MicrosoftFixit.wu.Run.exe C:\Users\***\AppData\Local\Temp\is357113909\OpenItSetup.exe C:\Users\***\AppData\Local\Temp\is357113909\uninstaller.exe C:\Users\***\AppData\Local\Temp\is357113909\wajam_validate.exe C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\BExternal.dll C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\BUSolForMontiera.dll C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\ccp.exe C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\ChromeToolbarSetup.dll C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\CrxInstaller.dll C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\enhancedNT.dll C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\GUninstaller.exe C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\IEHelper.dll C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\MntrDLLInstall.dll C:\Users\***\AppData\Local\Temp\8A24118C-BAB0-7891-BE14-DC37AC1A1BC2\Latest\sqlite3.dll ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-01 17:55 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-09-2013 Ran by *** at 2013-09-03 11:28:24 Running from C:\Users\***\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 Access Help (Version: 3.01) Adobe AIR (Version: 3.2.0.2070) Adobe Flash Player 11 ActiveX (Version: 11.8.800.94) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03) Advertising Center (Version: 0.0.0.2) AirPort (Version: 5.6.1.2) Akamai NetSession Interface Amazon MP3-Downloader 1.0.17 (Version: 1.0.17) AMR to MP3 Converter 1.4 Anzeige am Bildschirm (Version: 6.61.00) Apple Software Update (Version: 2.1.3.127) Bing Bar (Version: 6.3.2322.0) Bonjour (Version: 3.0.0.10) Burn.Now 4.5 (Version: 4.5.0) Cisco Systems VPN Client 5.0.06.0160 (Version: 5.0.6) Citavi (Version: 3.0.3.0) Client Security - Password Manager (Version: 8.30.0049.00) Conexant 20585 SmartAudio HD (Version: 4.95.48.50) Corel Burn.Now Lenovo Edition (Version: 4.5.0) Corel DVD MovieFactory 7 (Version: 7.0.0) Corel DVD MovieFactory Lenovo Edition (Version: 7.0.0) Cortona3D Viewer (Version: 6.0.180) Create Recovery Media (Version: 1.20.0.00) D3DX10 (Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition DHTML Editing Component (Version: 6.02.0001) Dienstprogramm "ThinkPad UltraNav" (Version: 2.13.0) Direct DiscRecorder (Version: 1.00.0000) Disable AMT Profile Synchronization Pop-up for Windows Vista/7 (Version: 1.00) Dropbox (HKCU Version: 1.4.7) Energie-Manager (Version: 6.32) FileZilla Client 3.0.11 (Version: 3.0.11) FormatFactory 2.60 (Version: 2.60) Free YouTube Download version 3.1.29.608 (Version: 3.1.29.608) GIMP 2.8.2 (Version: 2.8.2) Google Chrome (HKCU Version: 29.0.1547.62) Google Update Helper (Version: 1.3.21.153) GPL Ghostscript 9.00 HTC BMP USB Driver (Version: 1.0.5375) HTC Driver Installer (Version: 3.0.0.021) HTC Sync (Version: 3.2.20) IBM SPSS Amos 20 (Version: 20.0.0) IBM SPSS Smartreader 19 (Version: 19.0.0) Integrated Camera Driver Installer Package Ver.1.1.0.48 (Version: 1.1.0.48) Intel PROSet Wireless Intel(R) Control Center (Version: 1.2.1.1007) Intel(R) Management Engine Components (Version: 6.0.0.1179) Intel(R) Network Connections Drivers (Version: 16.8) Intel(R) Processor Graphics (Version: 8.15.10.2622) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.2.0.0284) Intel® PROSet/Wireless WiFi-Software (Version: 15.02.0000.1258) iTunes (Version: 11.0.4.4) Java 7 Update 25 (Version: 7.0.250) Java Auto Updater (Version: 2.1.9.5) Java(TM) 6 Update 26 (Version: 6.0.260) JavaFX 2.1.0 (Version: 2.1.0) Junk Mail filter update (Version: 15.4.3502.0922) Lenovo Auto Scroll Utility (Version: 1.11) Lenovo Patch Utility (Version: 1.3.0.9) Lenovo System Interface Driver (Version: 1.05) Lenovo System Update (Version: 5.02.0018) Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23) Lenovo Warranty Information (Version: 1.0.0004.00) Lenovo Welcome (Version: 2.0.020.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Mediencenter 3.8.1.2208 (HKCU Version: 3.8.1.2208) Mesh Runtime (Version: 15.4.5722.2) Message Center Plus (Version: 2.0.0012.00) Messenger Companion (Version: 15.4.3502.0922) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Outlook Connector (Version: 14.0.5118.5000) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Professional 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Single Image 2010 (Version: 14.0.7015.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (Version: 14.0.5120.5000) Microsoft Reader Text-to-Speech deutsch (Version: 01.00.0000) Microsoft Research AutoCollage Touch 2009 (Version: 2.00.2009) Microsoft Search Enhancement Pack (Version: 3.0.133.0) Microsoft Security Client (Version: 4.3.0215.0) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0) Microsoft Security Essentials (Version: 4.3.215.0) Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Mobile Broadband Connect (Version: 3.5.0010) Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1) Mozilla Maintenance Service (Version: 23.0.1) MP3-Cutter MP4 To MP3 Converter V3.0 MSVCRT (Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0) MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0) MSXML 4.0 SP3 Parser (Version: 4.30.2100.0) Nero 9 Essentials Nero BurnRights (Version: 3.4.13.100) Nero BurnRights Help (Version: 3.4.4.100) Nero ControlCenter (Version: 9.0.0.1) Nero DiscSpeed (Version: 5.4.13.100) Nero DiscSpeed Help (Version: 5.4.4.100) Nero DriveSpeed (Version: 4.4.12.100) Nero DriveSpeed Help (Version: 4.4.4.100) Nero InfoTool (Version: 6.4.12.100) Nero InfoTool Help (Version: 6.4.4.100) Nero Installer (Version: 4.4.9.0) Nero Online Upgrade (Version: 1.3.0.0) Nero StartSmart (Version: 9.4.38.100) Nero StartSmart Help (Version: 9.4.38.100) neroxml (Version: 1.0.0) Nvu 1.0 (Version: 1.0) OLYMPUS Digital Camera Updater (Version: 1.0.1) Prezi Desktop (Version: 4.0.4) RedMon - Redirection Port Monitor Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00) Rescue and Recovery (Version: 4.30.0025.00) RICOH R5U230 Media Driver ver.2.06.02.02 (Version: 2.06.02.02) Riva FLV Player (Version: 1.0.0000) RUBICon (Version: 2.0.25) SeaMonkey 2.14.1 (x86 de) (Version: 2.14.1) SecondLifeViewer2 (remove only) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition Skype Click to Call (Version: 6.3.11079) Skype™ 6.6 (Version: 6.6.106) Synaptics Gesture Suite featuring SYNAPTICS | Scrybe (Version: 1.6.5.17120) ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.2.1.3200) ThinkPad FullScreen Magnifier (Version: 2.40) ThinkPad Modem Adapter (Version: 7.80.5.0) ThinkPad Power Management Driver (Version: 1.60.0.4) ThinkPad UltraNav Driver (Version: 16.2.5.0) ThinkVantage Access Connections (Version: 5.85) ThinkVantage Communications Utility (Version: 1.42) ThinkVantage Fingerprint Software (Version: 5.9.6.7084) ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.5) TP-LINK USB Printer Controller (Version: 1.0.12.0323) TrueCrypt (Version: 7.1) TuneUp Utilities 2011 (Version: 10.0.4600.4) TuneUp Utilities Language Pack (de-DE) (Version: 10.0.4600.4) Turbo Lister 2 (Version: 2.00.0000) Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.3) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition Update for Zip Opener Verizon Wireless Mobile Broadband Self Activation (Version: 3.1.4) VLC media player 2.0.8 (Version: 2.0.8) Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430) (Version: 04/08/2010 6.3.5.430) Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) (Version: 06/15/2009 6.2.0.9000) Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (Version: 07/30/2009 6.2.0.9405) Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (Version: 09/11/2009 6.2.0.9407) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800) Windows Live Communications Platform (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3538.0513) Windows Live Family Safety (Version: 15.4.3538.0513) Windows Live Fotogalerie (Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (Version: 15.4.3502.0922) Windows Live Mail (Version: 15.4.3502.0922) Windows Live Mesh (Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2) Windows Live Messenger (Version: 15.4.3538.0513) Windows Live Messenger Companion Core (Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (Version: 15.4.3502.0922) Windows Live Photo Common (Version: 15.4.3502.0922) Windows Live Photo Gallery (Version: 15.4.3502.0922) Windows Live PIMT Platform (Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (Version: 15.4.3502.0922) Windows Live SOXE Definitions (Version: 15.4.3502.0922) Windows Live Sync (Version: 14.0.8089.726) Windows Live UX Platform (Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (Version: 15.4.3508.1109) Windows Live Writer (Version: 15.4.3502.0922) Windows Live Writer Resources (Version: 15.4.3502.0922) Windows Media Player Firefox Plugin (Version: 1.0.0.8) Windows-Treiberpaket - Intel (e1kexpress) Net (12/10/2009 11.5.10.0) (Version: 12/10/2009 11.5.10.0) Windows-Treiberpaket - Intel (HECI) System (09/17/2009 6.0.0.1179) (Version: 09/17/2009 6.0.0.1179) Windows-Treiberpaket - Intel System (06/04/2009 1.0.0.0002) (Version: 06/04/2009 1.0.0.0002) Windows-Treiberpaket - Intel System (10/28/2009 9.1.1.1022) (Version: 10/28/2009 9.1.1.1022) Windows-Treiberpaket - Intel USB (08/20/2009 9.1.1.1020) (Version: 08/20/2009 9.1.1.1020) Windows-Treiberpaket - Lenovo 1.60.0.4 (11/18/2009 1.60.0.4) (Version: 11/18/2009 1.60.0.4) Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (Version: 09/09/2009 1.0.0.0) Windows-Treiberpaket - Ricoh Company MS Host Controller (10/26/2009 6.10.02.07) (Version: 10/26/2009 6.10.02.07) Yahoo! Messenger ==================== Restore Points ========================= 29-08-2013 17:34:18 Ende der Bereinigung 02-09-2013 17:23:06 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:04 - 2013-06-14 08:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => start w32time task_started Task: {11BFD002-5FCA-46D7-99CA-18A467A48F38} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.) Task: {13C99129-D58F-49E1-99F9-1C0DCD48B19F} - System32\Tasks\TVT\LaunchRnR => %RR%\rrcmd.exe No File Task: {1631E089-C57A-4C05-8158-1AA11FE20171} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.) Task: {2525E1DE-6003-4A8B-B586-B1CDDF3064AC} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-06-20] (Microsoft Corporation) Task: {2A571016-1477-49AC-92F4-A2CBB3D8184A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: {412A5331-F0C6-4A64-87C4-10A0012DD990} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => start osppsvc Task: {6C26C17B-8034-430E-AC63-BB219FCC7542} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.) Task: {6C830667-035D-4E6B-AE67-F0C5060B94F0} - System32\Tasks\Google Updater and Installer => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.) Task: {6D481D47-466F-4473-8112-A6430136B9C9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.) Task: {6D687FBC-4CD2-44E3-A378-9EC04F756E46} - System32\Tasks\JavaUpdateSched => C:\Windows\System32\jusched.exe No File Task: {7814C411-5DA0-4099-867E-44CB36E8EC4F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.) Task: {83905B62-68C4-4219-ACFD-F8AA00DE5CE1} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe No File Task: {8BA6B856-B798-4A06-8E00-9A0AFDCE5E26} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {96212594-E16D-462A-B7E8-2AEE724C769B} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe No File Task: {A75D7978-16F0-48CA-BF7F-D302E42DCC11} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files\Lenovo\System Update\tvsuShim.exe [2013-06-26] () Task: {AE20DA03-B461-418F-B755-C2074ABC1CE8} - System32\Tasks\Express FilesUpdate => C:\Program Files\ExpressFiles\EFUpdater.exe No File Task: {B216C86A-81DA-43DB-B488-769BD1E0BAB0} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation) Task: {B34FDA2D-FD35-4628-8A56-5E0E9BF6F53A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {BB98A262-CF96-46EF-982D-77B6A6EA3D11} - System32\Tasks\{5242E32B-A714-49F4-AD46-3C3D63060455} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.) Task: {C6932140-D1C0-4FA2-8C6B-7CFCEE01EF21} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] () Task: {CE82BD9A-B1C2-44CA-93AC-BD318095C569} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.) Task: {D369F111-A4A5-4D2F-83B3-DB9D615F375D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11] (Adobe Systems Incorporated) Task: {DE60EDDC-F3A9-49B5-8F42-F9BE72945AB0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.) Task: {E704046D-1829-4F64-AA25-9E186D07E3B8} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files\TuneUp Utilities 2011\OneClick.exe [2011-12-13] (TuneUp Software) Task: {EB252E21-311D-4A0E-A926-C4EADB1D0701} - System32\Tasks\Message Center plus => C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-27] () Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe ==================== Loaded Modules (whitelisted) ============= 2010-11-19 04:16 - 2012-01-10 13:55 - 07988224 _____ (Intel Corporation) C:\Windows\system32\igd10umd32.dll 2010-11-19 04:16 - 2009-11-21 08:34 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\D3Dx10_40.dll 2011-06-10 14:28 - 2011-06-10 14:28 - 00558392 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\tvtpwm_windows_hook.dll 2011-06-10 14:28 - 2011-06-10 14:28 - 01516856 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\tvtpwm_interface.dll 2013-02-12 16:30 - 2013-02-12 16:30 - 00540672 _____ (Deutsche Telekom AG) C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll 2011-02-18 07:12 - 2011-02-18 07:12 - 00094208 _____ (Dropbox, Inc.) C:\Users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll 2009-04-29 03:13 - 2009-04-29 03:13 - 00499712 _____ (Microsoft Corporation) C:\Users\***\AppData\Roaming\Dropbox\bin\MSVCP71.dll 2008-03-04 02:34 - 2008-03-04 02:34 - 00348160 _____ (Microsoft Corporation) C:\Users\***\AppData\Roaming\Dropbox\bin\MSVCR71.dll 2011-10-20 13:11 - 2011-10-20 13:11 - 00695360 _____ (Lenovo) C:\Program Files\Lenovo\Access Connections\ACDeskBand.dll 2011-10-20 13:09 - 2011-10-20 13:09 - 00252992 _____ (Lenovo) C:\Program Files\Lenovo\Access Connections\AcLocSettings.dll 2011-10-20 13:09 - 2011-10-20 13:09 - 00478272 _____ (Lenovo) C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll 2011-10-20 13:09 - 2011-10-20 13:09 - 00126016 _____ (Lenovo) C:\Program Files\Lenovo\Access Connections\ACHelper.dll 2011-10-20 13:10 - 2011-10-20 13:10 - 00244800 _____ (Lenovo) C:\Program Files\Lenovo\Access Connections\AcSvcStub.dll 2010-11-19 04:18 - 2012-05-16 06:32 - 04395104 _____ (Lenovo Group Limited) C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL 2010-11-19 04:18 - 2012-05-16 06:32 - 00094208 _____ () C:\Program Files\ThinkPad\Utilities\GR\PWMRT32V.DLL 2010-11-19 04:18 - 2012-05-16 06:32 - 02838592 _____ (Lenovo Group Limited) C:\Program Files\ThinkPad\Utilities\PWMIF32V.DLL 2011-12-28 06:40 - 2011-12-28 06:40 - 00022080 _____ (Lenovo.) C:\Windows\system32\Sensor.dll 2008-06-15 16:48 - 2008-06-15 16:48 - 00094720 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll 2009-10-22 00:09 - 2009-10-22 00:09 - 01047552 _____ (Microsoft Corporation) C:\Windows\system32\MFC71U.DLL 2011-10-20 11:48 - 2011-10-20 11:48 - 00038912 _____ (Lenovo) C:\Program Files\Lenovo\Access Connections\Res\GR\GUIHlprRes.dll 2013-08-23 14:55 - 2013-04-24 00:57 - 05932696 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll 2013-08-23 15:29 - 2013-08-23 15:29 - 11499520 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll 2011-02-28 17:02 - 2011-02-28 17:02 - 00903680 _____ (Swiss Academic Software) C:\Windows\assembly\GAC_32\SwissAcademic.Citavi.IEPicker\1.0.0.0__f59eabe05cc67589\SwissAcademic.Citavi.IEPicker.dll 2013-08-23 15:29 - 2013-08-23 15:29 - 07989760 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll 2013-08-23 15:30 - 2013-08-23 15:30 - 01593344 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll 2013-08-23 15:30 - 2013-08-23 15:30 - 12436480 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\28ea347a952d20959ac6ae02d7457d39\System.Windows.Forms.ni.dll 2013-01-09 08:38 - 2012-10-05 12:53 - 00364656 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll 2011-02-28 16:46 - 2011-02-28 16:46 - 00126976 _____ ( ) C:\Windows\assembly\GAC\Interop.SHDocVw\1.1.0.0__4b827ebe229d539f\Interop.SHDocVw.dll 2009-07-14 01:27 - 2009-07-14 03:16 - 00561664 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll 2010-11-19 23:24 - 2010-11-19 23:24 - 08007680 _____ ( ) C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll 2011-06-17 03:01 - 2011-06-17 03:01 - 01101824 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80.DLL 2011-06-17 03:01 - 2011-06-17 03:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\MFC80DEU.DLL 2012-09-11 08:14 - 2008-03-13 18:46 - 00079224 _____ (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\hkvolkey.DLL 2011-06-10 14:28 - 2011-06-10 14:28 - 00693560 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\tvtpwm_keyboard_hook.dll 2009-07-14 02:19 - 2009-07-14 03:16 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2009-07-14 02:19 - 2009-07-14 03:16 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2011-04-27 14:49 - 2010-11-20 14:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2011-04-27 14:49 - 2010-11-20 14:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2012-09-11 08:12 - 2012-01-10 13:17 - 00284672 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc 2011-12-13 10:29 - 2011-12-13 10:29 - 00030016 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2011\SDShelEx-win32.dll 2013-02-12 16:30 - 2013-02-12 16:30 - 00127488 _____ (Deutsche Telekom AG) C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ContextMenuHandler.dll 2011-06-10 14:00 - 2011-06-10 14:00 - 00947512 _____ (Lenovo Group Limited) C:\Windows\system32\cssuserdatadispatcher.dll 2011-06-10 14:00 - 2011-06-10 14:00 - 02819384 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\csswait.dll 2011-06-10 14:01 - 2011-06-10 14:01 - 00685368 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\css_banner.dll 2011-06-10 14:00 - 2011-06-10 14:00 - 01701176 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\cssdlgpwentry.dll 2011-06-10 14:00 - 2011-06-10 14:00 - 01430840 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\dlganswerprompt.dll 2011-06-10 13:50 - 2011-06-10 13:50 - 00439608 _____ (Lenovo) C:\Windows\system32\tvttsp.dll 2011-06-10 13:50 - 2011-06-10 13:50 - 00734520 _____ (Lenovo) C:\Windows\system32\tcsrpc.dll 2011-06-10 13:45 - 2011-06-10 13:45 - 00075064 _____ (Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_think_res.dll 2011-06-10 14:01 - 2011-06-10 14:01 - 05219640 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\css_think_res.dll 2011-06-10 13:59 - 2011-06-10 13:59 - 02884920 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\css_strings.dll 2011-09-21 13:20 - 2011-09-21 13:20 - 00262472 _____ (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\pscssint.dll 2011-09-21 13:19 - 2011-09-21 13:19 - 00074056 _____ (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\vti.dll 2011-09-21 11:39 - 2011-09-21 11:39 - 00441160 _____ (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\infql2.dll 2011-09-21 13:30 - 2011-09-21 13:30 - 00539464 _____ (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\bpwb.dll 2011-09-21 13:39 - 2011-09-21 13:39 - 01182536 _____ (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\qlbase.dll 2011-09-21 13:01 - 2011-09-21 13:01 - 01615176 _____ (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\homefus2.dll 2010-12-07 01:00 - 2012-07-05 21:44 - 00535864 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll 2012-09-11 08:20 - 2012-07-05 21:44 - 00175416 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll 2003-03-18 21:14 - 2003-03-18 21:14 - 00499712 _____ (Microsoft Corporation) C:\Program Files\Lenovo\Access Connections\MSVCP71.dll 2003-02-21 05:42 - 2003-02-21 05:42 - 00348160 _____ (Microsoft Corporation) C:\Program Files\Lenovo\Access Connections\MSVCR71.dll 2011-10-20 13:09 - 2011-10-20 13:09 - 01555520 _____ (Lenovo) C:\Program Files\Lenovo\Access Connections\ACGUIHlpr.dll 2011-10-20 13:10 - 2011-10-20 13:10 - 00216128 _____ (Lenovo) C:\Program Files\Lenovo\Access Connections\AcPrfMgr.dll 2003-03-18 22:12 - 2003-03-18 22:12 - 01047552 _____ (Microsoft Corporation) C:\Program Files\Lenovo\Access Connections\MFC71U.DLL 2011-10-20 11:47 - 2011-10-20 11:47 - 00009728 _____ (Lenovo) C:\Program Files\Lenovo\Access Connections\Res\GR\TrayRes.dll 2011-06-10 14:37 - 2011-06-10 14:37 - 01242424 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\csspwm_initialization.dll 2011-04-27 14:48 - 2010-11-20 14:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2013-04-26 06:13 - 2013-04-26 06:13 - 06734472 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll 2010-03-18 14:16 - 2010-03-18 14:16 - 00771424 _____ (Microsoft Corporation) C:\Windows\system32\MSVCR100_CLR0400.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 14416896 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\cf58670896c5313b9b52f026f4455a5d\mscorlib.ni.dll 2013-04-26 06:13 - 2013-04-26 06:13 - 00057496 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 09099776 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System\de853615c8224ba5d9aa9b76276c6d98\System.ni.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 03858944 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\b3ed31a444f444325ddb64b290ed2f1e\WindowsBase.ni.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 11451904 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\001aeb860d7f2ba416e0fedc606fee98\PresentationCore.ni.dll 2013-08-23 15:20 - 2013-08-23 15:20 - 18003456 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\56a1feb800860a3bc5d8a45ee92a77ec\PresentationFramework.ni.dll 2013-08-24 18:59 - 2013-08-24 18:59 - 01801728 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\4d277a8481c203a35c58bd277a2e71df\System.Xaml.ni.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 07070720 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\c25ede0d0127774c504c4fc41d4de273\System.Core.ni.dll 2013-07-23 13:01 - 2013-07-23 13:01 - 01664160 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll 2010-03-18 14:16 - 2010-03-18 14:16 - 00801136 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationNative_v0400.dll 2012-10-09 10:39 - 2012-10-09 10:39 - 00387672 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 01014272 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\df40dab689e9d8febfb943599ba79f8d\System.Configuration.ni.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 05628928 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\884bcbd22130ebeb1211bc7bcc3910c9\System.Xml.ni.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 00595968 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\228b114c79c5d9024bdb4cc580e32c09\PresentationFramework.Aero.ni.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 01667584 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\3a3fc0216674bdea0be809b305517c98\System.Drawing.ni.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 13199360 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\1a3b614a84244ea5fa4147b5cf007333\System.Windows.Forms.ni.dll 2013-08-24 19:02 - 2013-08-24 19:02 - 01218560 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\6c422db78c17838c3eb9f9fcc01ca63f\System.Management.ni.dll 2010-03-18 14:16 - 2010-03-18 14:16 - 00031576 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\wminet_utils.dll 2013-08-24 19:00 - 2013-08-24 19:00 - 02647552 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\420022aad3481c670eb86a4ca72d5b43\System.Runtime.Serialization.ni.dll 2009-07-14 01:33 - 2009-07-14 03:09 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\security.dll 2013-08-24 19:00 - 2013-08-24 19:00 - 00143360 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\af7d7a2e47e0ac57b4f0fe5e0c1cda9a\SMDiagnostics.ni.dll 2013-08-24 19:00 - 2013-08-24 19:00 - 01021952 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\d82770dc4e5fee30ca8a7244bf7f613a\System.Runtime.DurableInstancing.ni.dll 2009-07-14 01:42 - 2009-07-14 03:14 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2009-07-14 01:42 - 2009-07-14 03:16 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ScrRun.dll 2010-12-07 00:55 - 2012-01-10 14:12 - 00581120 _____ (Intel Corporation) C:\Windows\system32\igdumdx32.dll 2010-12-07 00:55 - 2012-01-10 14:18 - 06323712 _____ (Intel Corporation) C:\Windows\system32\igdumd32.dll 2012-09-11 08:14 - 2009-06-30 11:28 - 00034080 _____ (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tposdsvc.dll 2012-09-11 08:14 - 2011-04-28 14:38 - 00077160 _____ (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tplhmm.dll 2010-12-07 00:15 - 2010-07-30 16:21 - 00034152 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.dll 2012-09-11 08:14 - 2011-06-28 12:56 - 00125288 _____ (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\enlpu32.dll 2013-08-25 15:06 - 2013-08-25 15:06 - 00771584 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\10054f798f1a896d5176581777ca7406\System.Runtime.Remoting.ni.dll 2012-11-28 11:47 - 2012-10-16 09:39 - 00561664 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcLayers.DLL 2013-08-24 19:00 - 2013-08-24 19:00 - 00221696 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\7bf3e4deef4483205017aa7b13194845\System.ServiceProcess.ni.dll 2010-03-18 14:16 - 2010-03-18 14:16 - 00688472 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll 2013-06-26 16:00 - 2013-06-26 16:00 - 00103272 _____ () C:\Program Files\Lenovo\System Update\tvsutil.dll 2013-08-23 15:19 - 2013-08-23 15:19 - 06817280 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\8fefdc1ecedf91a104b084c7d8200bde\System.Data.ni.dll 2013-08-25 14:41 - 2013-08-25 14:41 - 02975064 _____ (Microsoft Corporation) C:\Windows\Microsoft.Net\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll 2013-06-26 15:57 - 2013-06-26 15:57 - 00053608 _____ () C:\Program Files\Lenovo\System Update\SocksSSLConnector.dll 2011-06-17 03:03 - 2011-06-17 03:03 - 00225280 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll 2013-08-25 14:28 - 2013-08-14 19:55 - 03551640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2009-07-14 01:22 - 2009-07-14 03:15 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\FunDisc.dll 2009-07-14 01:22 - 2009-07-14 03:15 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\fdproxy.dll 2013-06-18 10:26 - 2013-06-18 10:26 - 16033160 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll 2013-06-27 19:26 - 2013-06-27 19:26 - 18635968 _____ (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll 2013-04-04 01:09 - 2013-04-04 01:09 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf 2013-03-20 13:20 - 2013-03-20 13:20 - 06665896 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\1031\OUTLLIBR.DLL 2012-01-18 03:24 - 2012-01-18 03:24 - 72524600 _____ (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\office14\MSORES.DLL 2012-12-14 15:05 - 2012-12-14 15:05 - 03205728 _____ (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\office14\1031\MSOINTL.DLL 2010-01-09 22:37 - 2010-01-09 22:37 - 00127232 _____ (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL 2013-01-15 12:33 - 2013-01-15 12:33 - 01367640 _____ (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\office14\riched20.dll 2013-02-18 14:39 - 2013-02-18 14:39 - 03253344 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\olmapi32.dll 2012-08-25 06:10 - 2012-08-25 06:10 - 01193080 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\1031\mapir.dll 2012-10-31 12:23 - 2012-10-31 12:23 - 00079968 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\Intldate.dll 2013-06-27 21:06 - 2013-06-27 21:06 - 19404960 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\wwlib.dll 2013-06-27 21:07 - 2013-06-27 21:07 - 01758376 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\gfx.dll 2013-06-27 21:21 - 2013-06-27 21:21 - 20536488 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\oart.dll 2013-02-18 14:39 - 2013-02-18 14:39 - 00135784 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\contab32.dll 2013-06-27 22:08 - 2013-06-27 22:08 - 00234200 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\omsxp32.dll 2013-02-18 14:39 - 2013-02-18 14:39 - 01204888 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\mspst32.dll 2013-02-14 15:51 - 2013-02-14 15:51 - 00309832 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\pstprx32.dll 2013-02-14 15:51 - 2013-02-14 15:51 - 00523880 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLMIME.DLL 2013-02-14 15:48 - 2013-02-14 15:48 - 00071280 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ADDINS\ColleagueImport.dll 2010-06-29 09:24 - 2010-06-29 09:24 - 02182536 _____ (Microsoft Corporation) C:\Program Files\Common Files\System\MSMAPI\MSNCON32.DLL 2012-05-17 07:36 - 2012-05-17 07:36 - 00046712 _____ (Microsoft Corporation) C:\Program Files\Common Files\System\MSMAPI\1031\MSMAPI32.DLL 2010-05-08 00:12 - 2010-05-08 00:12 - 00171368 _____ (Microsoft Corporation) C:\Program Files\Common Files\System\MSMAPI\1031\MSNCONR.DLL 2013-03-09 00:04 - 2013-03-09 00:04 - 00699056 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONBttnOL.dll 2013-03-09 00:02 - 2013-03-09 00:02 - 02491080 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\SOCIALCONNECTOR.DLL 2011-06-17 03:03 - 2011-06-17 03:03 - 03781960 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90u.dll 2011-06-17 03:04 - 2011-06-17 03:04 - 00063312 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_49768ef57548175e\MFC90DEU.DLL 2011-04-27 14:48 - 2010-11-20 14:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\MAPI32.dll 2013-02-14 15:46 - 2013-02-14 15:46 - 01044048 _____ () C:\Program Files\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll 2010-03-20 23:14 - 2010-03-20 23:14 - 00063872 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\1031\UmOutlookStrings.dll 2012-10-31 12:29 - 2012-10-31 12:29 - 00297064 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\SHAREPOINTPROVIDER.DLL 2010-07-20 15:16 - 2010-07-20 15:16 - 00332648 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WindowsLiveProvider.DLL 2013-01-08 07:25 - 2013-01-08 07:25 - 00640216 _____ (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL 2011-01-12 19:59 - 2011-01-12 19:59 - 00043352 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\outlrpc.dll 2013-02-18 14:39 - 2013-02-18 14:39 - 00331840 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\exsec32.dll 2010-03-20 15:43 - 2010-03-20 15:43 - 00405376 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\1031\omsintl.dll 2011-01-08 12:48 - 2011-01-08 12:48 - 00991576 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\1031\wwintl.dll 2012-10-31 12:20 - 2012-10-31 12:20 - 00766560 _____ (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL 2009-07-14 01:43 - 2009-07-14 03:15 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\HLINK.DLL 2013-06-27 22:08 - 2013-06-27 22:08 - 00725704 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OMSMAIN.DLL 2012-11-05 13:08 - 2012-11-05 13:08 - 00322680 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\outlph.dll 2012-11-05 13:08 - 2012-11-05 13:08 - 00408144 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\rtfhtml.dll 2009-10-19 17:13 - 2009-10-19 17:13 - 00676152 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLFLTR.DLL 2009-07-14 01:15 - 2009-07-14 03:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\idndl.dll 2010-12-21 03:29 - 2010-12-21 03:29 - 00218976 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\msproof7.dll 2011-09-13 05:50 - 2011-09-13 05:50 - 00592616 _____ (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL 2011-04-27 14:48 - 2010-11-20 14:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2011-04-27 14:48 - 2010-11-20 14:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2013-06-21 09:53 - 2013-06-21 09:53 - 00088680 ____R (Skype Technologies) C:\Program Files\Skype\Updater\Updater.dll 2013-08-23 15:01 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2011-04-27 14:48 - 2010-11-20 14:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll 2011-04-27 14:48 - 2010-11-20 14:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2012-09-11 08:21 - 2011-05-23 15:33 - 00126976 _____ (Ricoh co.,Ltd.) C:\Windows\system32\5U877.ax 2011-04-27 14:48 - 2010-11-20 14:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\kswdmcap.ax 2013-02-27 15:16 - 2013-01-13 22:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\D3D10Warp.dll 2013-08-22 10:37 - 2013-08-22 10:37 - 16230792 ____R (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\Flash32_11_8_800_94.ocx 2013-05-14 14:41 - 2013-05-14 14:41 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\ImgUtil.dll 2011-09-13 07:42 - 2011-09-13 07:42 - 01444584 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\OFFICE14\PROOF\1031\MSGR3GE.DLL 2012-10-31 12:41 - 2012-10-31 12:41 - 01588856 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\OFFICE14\PROOF\MSSP7GE.DLL 2012-10-31 12:41 - 2012-10-31 12:41 - 00307336 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\mscss7ge.dll 2010-12-21 03:29 - 2010-12-21 03:29 - 00471984 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\css7Data0007.dll 2009-07-14 02:56 - 2010-11-20 14:20 - 00747520 _____ (Microsoft Corporation) C:\Windows\system32\spool\DRIVERS\W32X86\3\UNIDRVUI.DLL 2009-07-14 02:17 - 2010-11-20 14:21 - 00375296 _____ (Microsoft Corporation) C:\Windows\system32\spool\DRIVERS\W32X86\3\UNIDRV.DLL 2007-02-08 02:28 - 2007-02-08 02:28 - 00262144 _____ (Kyocera Mita Corporation) C:\Windows\system32\spool\DRIVERS\W32X86\3\kyres2.dll 2005-06-08 23:32 - 2005-06-08 23:32 - 00092160 _____ (Kyocera Mita Corp.) C:\Windows\system32\spool\DRIVERS\W32X86\3\KyoFont3.dll ==================== Alternate Data Streams (whitelisted) ========== AlternateDataStreams: C:\Users\***\Thumbs.db:encryptable ==================== Faulty Device Manager Devices ============= Name: Cisco Systems VPN Adapter Description: Cisco Systems VPN Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/02/2013 08:11:58 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: vaultsvd.exe, Version: 1.0.0.1, Zeitstempel: 0x7a76d535 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x01d528a5 ID des fehlerhaften Prozesses: 0xcd0 Startzeit der fehlerhaften Anwendung: 0xvaultsvd.exe0 Pfad der fehlerhaften Anwendung: vaultsvd.exe1 Pfad des fehlerhaften Moduls: vaultsvd.exe2 Berichtskennung: vaultsvd.exe3 Error: (09/02/2013 07:43:37 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (09/02/2013 09:02:44 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (09/02/2013 09:02:26 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "6.0.0.6u9b41" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (09/02/2013 09:01:40 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (09/02/2013 09:01:34 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "6.0.0.6u9b41" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (09/02/2013 07:25:06 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (09/01/2013 05:57:40 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (09/01/2013 05:57:22 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "6.0.0.6u9b41" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (09/01/2013 05:56:30 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. System errors: ============= Error: (09/03/2013 07:31:37 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (09/02/2013 08:12:00 PM) (Source: Service Control Manager) (User: ) Description: Dienst "Intel(R) Management Ericsson" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (09/02/2013 07:10:38 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (09/02/2013 04:52:05 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (09/02/2013 07:24:27 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (09/01/2013 08:14:48 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (09/01/2013 08:11:43 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde nicht richtig gestartet. Error: (09/01/2013 08:10:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (09/01/2013 08:08:55 PM) (Source: DCOM) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (09/01/2013 08:06:13 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Microsoft Office Sessions: ========================= Error: (09/02/2013 08:11:58 PM) (Source: Application Error)(User: ) Description: vaultsvd.exe1.0.0.17a76d535unknown0.0.0.000000000c000000501d528a5cd001cea73e86094d40C:\Windows\system32\vaultsvd.exeunknown27cb20b0-13fb-11e3-97da-70f395445e99 Error: (09/02/2013 07:43:37 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (09/02/2013 09:02:44 AM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\HTC\HTC Sync 3.0\FDAgentForOutlook64.exe Error: (09/02/2013 09:02:26 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversion6.0.0.6u9b41C:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dllC:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dll19 Error: (09/02/2013 09:01:40 AM) (Source: SideBySide)(User: ) Description: C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dllC:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll0 Error: (09/02/2013 09:01:34 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversion6.0.0.6u9b41C:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack200.exeC:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack200.exe19 Error: (09/02/2013 07:25:06 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (09/01/2013 05:57:40 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\HTC\HTC Sync 3.0\FDAgentForOutlook64.exe Error: (09/01/2013 05:57:22 PM) (Source: SideBySide)(User: ) Description: assemblyIdentityversion6.0.0.6u9b41C:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dllC:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dll19 Error: (09/01/2013 05:56:30 PM) (Source: SideBySide)(User: ) Description: C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dllC:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll0 ==================== Memory info =========================== Percentage of memory in use: 67% Total physical RAM: 2995.67 MB Available physical RAM: 974.66 MB Total Pagefile: 5989.63 MB Available Pagefile: 3326.21 MB Total Virtual: 2047.88 MB Available Virtual: 1909.94 MB ==================== Drives ================================ Drive c: (Windows7_OS) (Fixed) (Total:454.33 GB) (Free:58.37 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive q: (Lenovo_Recovery) (Fixed) (Total:10.25 GB) (Free:5.04 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: BD6B6839) Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=454 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=10 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
03.09.2013, 11:56 | #68 |
/// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
03.09.2013, 13:01 | #69 |
| Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Alles erledigt ;-) Danke ;-) |
03.09.2013, 18:06 | #70 |
/// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart |
.dll, entfernen, erscheint, fehlermeldung, gelöscht, google, keine updates, komplett, komplett entfernen, lässt sich nicht entfernen, nicht möglich, pup.optional.bandoo, pup.optional.datamngr, pup.optional.somoto, pup.optional.startpage, pup.optional.sweetim, spybot, systemwiederherstellung, sämtliche, windows system update, windows update |