| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: V9 Startseite bei IE+F.Fox- Wie entfernen ?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
22.08.2013, 10:02
| #1 |
 |  V9 Startseite bei IE+F.Fox- Wie entfernen ? Servus Ich habe mir die V9 Seuche eingefangen. (Browser: Firefox)+(Internet Explorer) Hat jemand Erfahrung damit wie man die am besten wieder los wird? Bitte nur wenn schon selbst erfolgreich beseitigt. Tipps wie: In den Extras das PlugIn deaktivieren oder der Anleitung auf der V9 Seite folgen etc. brauche ich nicht ! Da diese Methoden nicht funktionieren. hab das jetz zig mal durch,ohne erfolg verstehe sowieso nicht wie mann sich sowas einfangen kann hab als virenprogi Avast anti Virus und habe auch noch Malwarebytes am laufen,trotzdem fängt mann sich sowas ein hoffe es kann mir einer helfen Ps suche ein gutes Trojaner program zum Überprüfen des Pc,gibt es da etwas |
|
22.08.2013, 10:38
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | V9 Startseite bei IE+F.Fox- Wie entfernen ? Hallo und
__________________ Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
 Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
22.08.2013, 11:58
| #3 |
| | V9 Startseite bei IE+F.Fox- Wie entfernen ? Hallo danke erstmal für Hilfe
__________________hier ist die FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 02 Ran by GERDL (administrator) on 22-08-2013 12:52:43 Running from C:\Users\GERDL\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe (Uniblue Systems Ltd) C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Spotify Ltd) C:\Users\GERDL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe () C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe () C:\Program Files (x86)\Razer\DeathAdder\razertra.exe (Razer Inc.) C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe () C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Oracle Corporation) C:\Program Files (x86)\JDownloader\jre\bin\javaw.exe (Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe (Solid State Networks) C:\Users\GERDL\AppData\Local\Temp\install_flashplayer11x32ax_chra_awa_aih.exe (Microsoft Corporation) C:\Windows\system32\taskmgr.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_8_800_94_ActiveX.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe () C:\Program Files (x86)\Trojancheck 6\tc6.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13269064 2013-02-06] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7468784 2013-02-28] (Logitech Inc.) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation) HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2013-05-17] (ICQ, LLC.) HKCU\...\Run: [Spotify Web Helper] - C:\Users\GERDL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-09] (Spotify Ltd) HKCU\...\Run: [Spotify] - C:\Users\GERDL\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-09] (Spotify Ltd) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564016 2013-07-15] (Samsung) HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x] HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-15] (Samsung) HKCU\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIVE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION) MountPoints2: {46878852-c91a-11e2-92bc-6cf049057a11} - G:\SETUP.EXE MountPoints2: {a9d67d7f-a99a-11e2-904f-6cf049057a11} - F:\pushinst.exe HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-21] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [TaskTray] - [x] HKLM-x32\...\Run: [DeathAdder] - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [248320 2011-03-21] () HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502912 2012-04-03] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863360 2012-04-03] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software) HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-07-15] (Samsung Electronics Co., Ltd.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606 StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.v9.com/web/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=3538993 SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.v9.com/web/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=3538993 SearchScopes: HKLM-x32 - DefaultScope {0A070C62-11EB-452D-A5AD-4655FD8AE012} URL = SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.v9.com/web/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=3538993 SearchScopes: HKLM-x32 - {d3f22a84-2a84-49eb-91e6-5dadaaf0165d} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^GR^xdm516^YY^de&ptb=2889D461-468B-4CF6-BD3A-C1AE696FCA3E&ind=2013062006&n=77fce376&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKCU - DefaultScope {0A070C62-11EB-452D-A5AD-4655FD8AE012} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3293887&CUI=UN40124201419551628&UM=2 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0A070C62-11EB-452D-A5AD-4655FD8AE012 URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q&cr=2045151825&ir= SearchScopes: HKCU - {0A070C62-11EB-452D-A5AD-4655FD8AE012} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3293887&CUI=UN40124201419551628&UM=2 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - {78DC6520-62F5-F6B7-61E8-754CE1DEEBDD} URL = BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default FF user.js: detected! => C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\user.js FF SelectedSearchEngine: Mysearchdial FF Homepage: hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q&cr=2045151825&ir= FF Keyword.URL: user_pref("keyword.URL", ""); FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\delta.xml FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-1.xml FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-2.xml FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-3.xml FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-4.xml FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-5.xml FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin.xml FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\Mysearchdial.xml FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\searchplugins-backup FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\vgrabber-v16-customized-web-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml FF Extension: No Name - C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\Extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com FF Extension: No Name - C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com/" CHR Extension: () - C:\Users\GERDL\AppData\Local\Google\Chrome\User Data\Default\Extensions\agembgempdmebanhogdjbpcmppdmklbe\10.16.100.504_0 CHR HKLM-x32\...\Chrome\Extension: [agembgempdmebanhogdjbpcmppdmklbe] - C:\Users\GERDL\AppData\Local\CRE\agembgempdmebanhogdjbpcmppdmklbe.crx ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-20] (Advanced Micro Devices, Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\RpcAgentSrv.exe [71832 2009-04-22] (SiSoftware) R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [424104 2013-06-20] (Taiwan Shui Mu Chih Ching Technology Limited.) ==================== Drivers (Whitelisted) ==================== R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11904 2013-06-14] (Advanced Micro Devices Inc.) S0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2013-06-14] (Advanced Micro Devices, Inc.) R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices) R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-06] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-06] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-06] () S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin) R2 DRHARD64; C:\Windows\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software) R2 DRHMSR64; C:\Windows\system32\drivers\DRHMSR64.sys [14760 2011-12-06] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-30] (DT Soft Ltd) S3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH) R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware) S3 EverestDriver; \??\C:\Users\GERDL\AppData\Local\Temp\EverestDriver.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-22 12:50 - 2013-08-22 12:50 - 01576476 _____ (Farbar) C:\Users\GERDL\Downloads\FRST64.exe 2013-08-22 12:48 - 2013-08-22 12:48 - 00000000 ____D C:\FRST 2013-08-22 11:05 - 2013-08-22 11:05 - 00001015 _____ C:\Users\GERDL\Desktop\Trojancheck.lnk 2013-08-22 11:05 - 2013-08-22 11:05 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6 2013-08-22 09:22 - 2013-08-21 22:05 - 2824734107 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.German.720p.HDTV.x264-DN.mp4 2013-08-22 09:21 - 2013-08-22 09:22 - 41067236 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part27.rar 2013-08-22 09:21 - 2013-08-22 09:22 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part26.rar 2013-08-22 09:20 - 2013-08-22 09:21 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part25.rar 2013-08-22 09:20 - 2013-08-22 09:21 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part24.rar 2013-08-22 09:19 - 2013-08-22 09:20 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part23.rar 2013-08-22 09:19 - 2013-08-22 09:20 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part22.rar 2013-08-22 09:18 - 2013-08-22 09:19 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part21.rar 2013-08-22 09:18 - 2013-08-22 09:19 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part20.rar 2013-08-22 09:17 - 2013-08-22 09:18 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part19.rar 2013-08-22 09:16 - 2013-08-22 09:18 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part18.rar 2013-08-22 09:15 - 2013-08-22 09:16 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part17.rar 2013-08-22 09:15 - 2013-08-22 09:16 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part16.rar 2013-08-22 09:14 - 2013-08-22 09:15 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part15.rar 2013-08-22 09:14 - 2013-08-22 09:15 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part14.rar 2013-08-22 09:13 - 2013-08-22 09:14 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part13.rar 2013-08-22 09:12 - 2013-08-22 09:14 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part12.rar 2013-08-22 09:12 - 2013-08-22 09:13 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part11.rar 2013-08-22 09:11 - 2013-08-22 09:12 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part10.rar 2013-08-22 09:10 - 2013-08-22 09:12 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part09.rar 2013-08-22 09:10 - 2013-08-22 09:11 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part08.rar 2013-08-22 09:09 - 2013-08-22 09:10 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part07.rar 2013-08-22 09:08 - 2013-08-22 09:10 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part06.rar 2013-08-22 09:08 - 2013-08-22 09:09 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part05.rar 2013-08-22 09:07 - 2013-08-22 09:08 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part04.rar 2013-08-22 09:07 - 2013-08-22 09:08 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part03.rar 2013-08-22 09:06 - 2013-08-22 09:07 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part02.rar 2013-08-22 09:06 - 2013-08-22 09:07 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part01.rar 2013-08-22 09:05 - 2013-08-22 09:23 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-08-21 22:23 - 2013-08-21 22:23 - 40083640 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(360p_H.264-AAC).mp4 2013-08-21 22:18 - 2013-08-21 22:22 - 17235711 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(240p_H.264-AAC).3gp 2013-08-21 22:18 - 2013-08-21 22:19 - 06241354 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(144p_H.264-AAC).3gp 2013-08-21 22:17 - 2013-08-16 12:23 - 00000000 ____D C:\Users\GERDL\Downloads\Sie macht heiße Bilder mit ihrer geilen Freundin 2013-08-21 11:01 - 2013-08-21 11:02 - 00000000 ____D C:\Users\GERDL\Downloads\Equilibrium - Waldschrein (EP) (2013) 2013-08-20 18:47 - 2013-07-06 09:21 - 00000000 ____D C:\Users\GERDL\Downloads\poe-seelen 2013-08-20 18:41 - 2013-07-22 08:42 - 00000175 _____ C:\Users\GERDL\Downloads\Share-Online.biz Premium.url 2013-08-20 18:41 - 2013-07-22 08:42 - 00000141 _____ C:\Users\GERDL\Downloads\BitShare.com Premium.url 2013-08-20 18:41 - 2013-07-22 08:42 - 00000130 _____ C:\Users\GERDL\Downloads\Cloudzer.net Premium.url 2013-08-20 18:41 - 2013-07-22 08:42 - 00000123 _____ C:\Users\GERDL\Downloads\Uploaded.net Premium.url 2013-08-20 18:41 - 2013-07-22 08:42 - 00000122 _____ C:\Users\GERDL\Downloads\Freakshare.com Premium.url 2013-08-20 18:41 - 2013-07-20 13:38 - 1531820032 _____ C:\Users\GERDL\Downloads\Olympus.ld.HD.de-FIJ.avi 2013-08-20 18:31 - 2013-08-20 07:39 - 00000000 ____D C:\Users\GERDL\Downloads\Iron.Man.3.2013.German.AC3LD.BDRiP.XviD-HQX 2013-08-20 18:19 - 2013-08-18 23:08 - 1562562560 _____ C:\Users\GERDL\Downloads\The.Forbidden.Girl.HD.de.avi 2013-08-20 17:37 - 2013-08-13 09:00 - 00000000 ____D C:\Users\GERDL\Downloads\German Top 100 Single Charts 19.08.2013 2013-08-20 17:06 - 2013-08-20 17:33 - 00000000 ____D C:\Users\GERDL\Downloads\Kronehit Vol.13 2013-08-20 14:41 - 2013-08-20 14:41 - 00000000 ____D C:\Program Files (x86)\af0.net 2013-08-20 14:22 - 2013-03-18 21:02 - 244530063 _____ C:\Users\GERDL\Downloads\SWTCWS04E22.rar 2013-08-20 14:22 - 2013-03-18 21:00 - 244221655 _____ C:\Users\GERDL\Downloads\SWTCWS04E21.rar 2013-08-20 14:22 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E22.Rache.German.BDRip.XviD-iNTENTiON 2013-08-20 14:22 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E21.Brueder.German.BDRip.XviD-iNTENTiON 2013-08-20 14:19 - 2013-03-19 06:25 - 244277191 _____ C:\Users\GERDL\Downloads\SWTCWS04E19.rar 2013-08-20 14:19 - 2013-03-19 06:25 - 244080189 _____ C:\Users\GERDL\Downloads\SWTCWS04E20.rar 2013-08-20 14:19 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E20.Kopfgeld.German.BDRip.XviD-iNTENTiON 2013-08-20 14:19 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E19.Wiedergeburt.German.BDRip.XviD-iNTENTiON 2013-08-20 14:16 - 2013-03-19 06:23 - 245358203 _____ C:\Users\GERDL\Downloads\SWTCWS04E17.rar 2013-08-20 14:16 - 2013-03-19 06:22 - 244185659 _____ C:\Users\GERDL\Downloads\SWTCWS04E18.rar 2013-08-20 14:16 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E18.Doppeltes.Spiel.German.BDRip.XviD-iNTENTiON 2013-08-20 14:16 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E17.Entkommen.German.BDRip.XviD-iNTENTiON 2013-08-20 14:13 - 2013-03-19 06:22 - 244220791 _____ C:\Users\GERDL\Downloads\SWTCWS04E15.rar 2013-08-20 14:13 - 2013-03-19 06:22 - 244058713 _____ C:\Users\GERDL\Downloads\SWTCWS04E16.rar 2013-08-20 14:13 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E16.Freund.und.Feind.German.BDRip.XviD-iNTENTiON 2013-08-20 14:13 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E15.Transformer.German.BDRip.XviD-iNTENTiON 2013-08-20 14:11 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E14.Der.andere.Weg.German.BDRip.XviD-iNTENTiON 2013-08-20 14:10 - 2013-03-19 06:22 - 245715355 _____ C:\Users\GERDL\Downloads\SWTCWS04E13.rar 2013-08-20 14:10 - 2013-03-19 06:20 - 245804433 _____ C:\Users\GERDL\Downloads\SWTCWS04E14.rar 2013-08-20 14:10 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E13.Meister.und.Sklave.German.BDRip.XviD-iNTENTiON 2013-08-20 14:08 - 2013-03-19 06:20 - 244257613 _____ C:\Users\GERDL\Downloads\SWTCWS04E12.rar 2013-08-20 14:08 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E12.Sklaven.der.Republik.German.BDRip.XviD-iNTENTiON 2013-08-20 14:07 - 2013-03-19 06:17 - 245045913 _____ C:\Users\GERDL\Downloads\SWTCWS04E11.rar 2013-08-20 14:07 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E11.Sklaverei.German.BDRip.XviD-iNTENTiON 2013-08-20 14:05 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E10.Krells.Blutbad.German.BDRip.XviD-iNTENTiON 2013-08-20 14:04 - 2013-03-19 06:17 - 244301937 _____ C:\Users\GERDL\Downloads\SWTCWS04E09.rar 2013-08-20 14:04 - 2013-03-19 06:14 - 244157981 _____ C:\Users\GERDL\Downloads\SWTCWS04E10.rar 2013-08-20 14:04 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E09.Befehlsverweigerung.German.BDRip.XviD-iNTENTiON 2013-08-20 14:01 - 2013-03-19 06:18 - 244370839 _____ C:\Users\GERDL\Downloads\SWTCWS04E08.rar 2013-08-20 14:01 - 2013-03-19 06:17 - 244149407 _____ C:\Users\GERDL\Downloads\SWTCWS04E07.rar 2013-08-20 14:01 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E08.Die.Bruchpiloten.German.BDRip.XviD-iNTENTiON 2013-08-20 14:01 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E07.Die.Dunkelheit.von.Umbara.German.BDRip.XviD-iNTENTiON 2013-08-20 13:59 - 2013-03-19 06:18 - 245581577 _____ C:\Users\GERDL\Downloads\SWTCWS04E06.rar 2013-08-20 13:59 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E06.Zwischen.den.Welten.German.BDRip.XviD-iNTENTiON 2013-08-20 13:58 - 2013-03-19 06:13 - 247142371 _____ C:\Users\GERDL\Downloads\SWTCWS04E05.rar 2013-08-20 13:58 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E05.Unterwelt.German.BDRip.XviD-iNTENTiON 2013-08-20 13:55 - 2013-03-19 06:13 - 244347843 _____ C:\Users\GERDL\Downloads\SWTCWS04E04.rar 2013-08-20 13:55 - 2013-03-19 06:12 - 245489077 _____ C:\Users\GERDL\Downloads\SWTCWS04E03.rar 2013-08-20 13:55 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E04.Krieger.des.Schattens.German.BDRip.XviD-iNTENTiON 2013-08-20 13:55 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E03.Koenigreiche.muss.man.sich.verdienen.German.BDRip.XviD-iNTENTiON 2013-08-20 13:52 - 2013-03-19 06:26 - 244151074 _____ C:\Users\GERDL\Downloads\SWTCWS04E02.rar 2013-08-20 13:52 - 2013-03-19 06:12 - 244232815 _____ C:\Users\GERDL\Downloads\SWTCWS04E01.rar 2013-08-20 13:52 - 2013-01-07 22:16 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E02.Eine.letzte.Hoffnung.German.BDRip.XviD-iNTENTiON 2013-08-20 13:52 - 2013-01-07 22:16 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E01.Krieg.der.Meere.German.BDRip.XviD-iNTENTiON 2013-08-19 21:07 - 2013-08-19 21:07 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-08-19 13:36 - 2011-07-16 19:34 - 00000000 ____D C:\Users\GERDL\Downloads\var_keys_500HD_800HD_8000HD 2013-08-19 11:00 - 2013-08-21 09:03 - 00000005 _____ C:\Users\GERDL\AppData\Roaming\WBPU-TTL.DAT 2013-08-19 11:00 - 2013-08-19 11:00 - 00000058 _____ C:\Users\GERDL\AppData\Roaming\WB.CFG 2013-08-19 10:59 - 2013-08-19 10:59 - 00000681 _____ C:\Users\GERDL\Documents\GERDL - Verknüpfung.lnk 2013-08-19 10:09 - 2013-04-14 00:43 - 00000205 _____ C:\Users\GERDL\Downloads\cloudzer.net Premium Account.url 2013-08-19 10:09 - 2013-04-14 00:43 - 00000197 _____ C:\Users\GERDL\Downloads\UPLOADED.TO Premium Account.url 2013-08-19 10:00 - 2013-08-19 10:00 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Video Converter Packages 2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\Documents\My Received Files 2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\MusicNet 2013-08-19 09:55 - 2013-08-19 09:57 - 00000000 ____D C:\Program Files (x86)\iMesh Applications 2013-08-19 09:54 - 2013-08-22 12:00 - 00000286 _____ C:\Windows\Tasks\DSite.job 2013-08-19 09:54 - 2013-08-19 10:00 - 00003226 _____ C:\Windows\System32\Tasks\DSite 2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DSite 2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Program Files (x86)\VideoConverter 2013-08-19 09:51 - 2013-08-19 09:51 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Xilisoft 2013-08-19 09:50 - 2013-08-19 10:11 - 00002083 _____ C:\Users\Public\Desktop\Xilisoft MKV Converter.lnk 2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\ProgramData\Xilisoft 2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\Program Files (x86)\Xilisoft 2013-08-19 09:40 - 2013-08-19 09:40 - 00065536 _____ C:\Windows\IFinst27.exe 2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ch Editor 2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Program Files (x86)\Ch Editor 2013-08-19 09:27 - 2013-08-19 07:34 - 3716747201 _____ C:\Users\GERDL\Downloads\WWE Summer Slam 2013 German English 720p.mkv 2013-08-19 06:49 - 2013-08-19 06:49 - 00423709 _____ C:\Users\GERDL\AppData\Local\mysearchdial_speedial_v9.0.2.crx 2013-08-18 14:19 - 2013-08-18 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-15 18:45 - 2013-08-20 20:36 - 00000000 ____D C:\Users\GERDL\AppData\Local\Battle.net 2013-08-15 18:45 - 2013-08-15 18:48 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Battle.net 2013-08-15 18:45 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Blizzard Entertainment 2013-08-15 18:44 - 2013-08-15 18:45 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-08-15 18:44 - 2013-08-15 18:44 - 00001124 _____ C:\Users\Public\Desktop\Battle.net.lnk 2013-08-14 07:34 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 07:34 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 07:34 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 07:34 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 07:34 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 07:34 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 07:34 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 07:34 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 07:34 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 07:34 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 07:34 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 07:34 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 07:34 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 07:34 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 07:33 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 07:33 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 07:33 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 07:33 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 07:33 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 07:33 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 07:33 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 07:33 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 07:33 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 07:33 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 07:33 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 07:33 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 07:33 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 07:33 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 07:33 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 07:33 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 07:33 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 07:30 - 2013-08-14 07:32 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 07:29 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 07:29 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 07:29 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 07:29 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 07:29 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 07:29 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 07:29 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 07:29 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 07:28 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 07:28 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 07:28 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 07:28 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 07:28 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 07:28 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 07:28 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 07:28 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 07:28 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 07:28 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 07:28 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 07:28 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 07:28 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 07:28 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 07:28 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 07:28 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 07:28 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 07:28 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 07:28 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-12 16:28 - 2013-08-12 16:28 - 00002233 _____ C:\Users\GERDL\AppData\Local\recently-used.xbel 2013-08-11 15:19 - 2013-08-11 15:19 - 00000742 _____ C:\Users\Public\Desktop\My DocsToGo.lnk 2013-08-11 15:19 - 2013-08-11 15:19 - 00000000 ___SD C:\Users\GERDL\Documents\My DocsToGo 2013-08-11 15:18 - 2013-08-11 15:19 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DocumentsToGoDesktopAndroid 2013-08-11 15:18 - 2013-08-11 15:18 - 00001314 _____ C:\Users\Public\Desktop\Documents To Go Desktop for Android.lnk 2013-08-11 15:18 - 2013-08-11 15:18 - 00000000 ____D C:\Program Files (x86)\Documents To Go Desktop for Android 2013-08-11 15:15 - 2013-08-10 21:33 - 00295933 _____ C:\Users\GERDL\Desktop\tippen2013-2014---1-17 spieltage.xlsx 2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Windows\PCHEALTH 2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 2013-08-10 11:41 - 2013-08-10 11:44 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Users\GERDL\AppData\Local\Microsoft Help 2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files\Microsoft Office 2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-08-10 11:40 - 2013-08-10 11:40 - 00000000 __RHD C:\MSOCache 2013-08-06 16:47 - 2013-08-06 16:47 - 00000000 ____D C:\Users\GERDL\AppData\Local\GHISLER 2013-08-06 16:45 - 2013-08-06 16:49 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\GHISLER 2013-08-06 16:45 - 2013-08-06 16:46 - 00000000 ____D C:\totalcmd 2013-08-06 16:45 - 2013-08-06 16:45 - 00000646 _____ C:\Users\GERDL\Desktop\Total Commander 64 bit.lnk 2013-08-06 16:45 - 2013-08-06 16:45 - 00000632 _____ C:\Users\GERDL\Desktop\Total Commander.lnk 2013-08-06 16:45 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander 2013-07-29 07:30 - 2013-07-29 07:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump 2013-07-29 05:24 - 2013-06-21 02:07 - 00203672 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys 2013-07-29 05:24 - 2013-06-21 02:07 - 00103448 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys 2013-07-29 05:22 - 2013-08-19 10:48 - 00000000 ____D C:\Program Files (x86)\MyFree Codec 2013-07-29 05:22 - 2013-07-29 05:22 - 00002006 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2013-07-29 05:22 - 2013-07-29 05:22 - 00001996 _____ C:\Users\Public\Desktop\Samsung Kies.lnk 2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log 2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\Documents\samsung 2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Samsung 2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Local\Samsung 2013-07-29 05:21 - 2013-06-14 19:57 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll 2013-07-29 05:20 - 2013-07-29 05:22 - 00000000 ____D C:\ProgramData\Samsung 2013-07-29 05:20 - 2013-07-29 05:22 - 00000000 ____D C:\Program Files (x86)\Samsung 2013-07-29 05:20 - 2013-06-14 19:56 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll 2013-07-29 05:19 - 2013-07-29 05:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Downloaded Installations 2013-07-28 11:52 - 2013-08-19 10:59 - 00000000 ____D C:\Program Files (x86)\VS Revo Group ==================== One Month Modified Files and Folders ======= 2013-08-22 12:50 - 2013-08-22 12:52 - 01576476 _____ (Farbar) C:\Users\GERDL\Desktop\FRST64.exe 2013-08-22 12:50 - 2013-08-22 12:50 - 01576476 _____ (Farbar) C:\Users\GERDL\Downloads\FRST64.exe 2013-08-22 12:48 - 2013-08-22 12:48 - 00000000 ____D C:\FRST 2013-08-22 12:45 - 2013-05-30 13:51 - 00000000 ____D C:\Program Files (x86)\WinZipper 2013-08-22 12:43 - 2013-04-08 20:11 - 01373226 _____ C:\Windows\WindowsUpdate.log 2013-08-22 12:42 - 2013-04-08 20:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-08-22 12:06 - 2013-07-13 10:51 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-22 12:00 - 2013-08-19 09:54 - 00000286 _____ C:\Windows\Tasks\DSite.job 2013-08-22 11:05 - 2013-08-22 11:05 - 00001015 _____ C:\Users\GERDL\Desktop\Trojancheck.lnk 2013-08-22 11:05 - 2013-08-22 11:05 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6 2013-08-22 10:55 - 2013-04-14 19:24 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\TS3Client 2013-08-22 10:43 - 2013-05-20 16:43 - 00001170 _____ C:\Windows\Tasks\Plus-HD-1.3-updater.job 2013-08-22 10:43 - 2013-05-20 16:43 - 00001082 _____ C:\Windows\Tasks\Plus-HD-1.3-enabler.job 2013-08-22 10:42 - 2013-05-20 16:42 - 00001748 _____ C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job 2013-08-22 10:38 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-08-22 09:23 - 2013-08-22 09:05 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-08-22 09:22 - 2013-08-22 09:21 - 41067236 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part27.rar 2013-08-22 09:22 - 2013-08-22 09:21 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part26.rar 2013-08-22 09:21 - 2013-08-22 09:20 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part25.rar 2013-08-22 09:21 - 2013-08-22 09:20 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part24.rar 2013-08-22 09:20 - 2013-08-22 09:19 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part23.rar 2013-08-22 09:20 - 2013-08-22 09:19 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part22.rar 2013-08-22 09:19 - 2013-08-22 09:18 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part21.rar 2013-08-22 09:19 - 2013-08-22 09:18 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part20.rar 2013-08-22 09:18 - 2013-08-22 09:17 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part19.rar 2013-08-22 09:18 - 2013-08-22 09:16 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part18.rar 2013-08-22 09:16 - 2013-08-22 09:15 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part17.rar 2013-08-22 09:16 - 2013-08-22 09:15 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part16.rar 2013-08-22 09:15 - 2013-08-22 09:14 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part15.rar 2013-08-22 09:15 - 2013-08-22 09:14 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part14.rar 2013-08-22 09:14 - 2013-08-22 09:13 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part13.rar 2013-08-22 09:14 - 2013-08-22 09:12 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part12.rar 2013-08-22 09:13 - 2013-08-22 09:12 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part11.rar 2013-08-22 09:12 - 2013-08-22 09:11 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part10.rar 2013-08-22 09:12 - 2013-08-22 09:10 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part09.rar 2013-08-22 09:11 - 2013-08-22 09:10 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part08.rar 2013-08-22 09:10 - 2013-08-22 09:09 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part07.rar 2013-08-22 09:10 - 2013-08-22 09:08 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part06.rar 2013-08-22 09:09 - 2013-08-22 09:08 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part05.rar 2013-08-22 09:08 - 2013-08-22 09:07 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part04.rar 2013-08-22 09:08 - 2013-08-22 09:07 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part03.rar 2013-08-22 09:07 - 2013-08-22 09:06 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part02.rar 2013-08-22 09:07 - 2013-08-22 09:06 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part01.rar 2013-08-22 09:05 - 2013-07-13 10:51 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-22 09:05 - 2013-04-08 20:54 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-22 09:05 - 2013-04-08 20:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-22 09:05 - 2013-04-08 20:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-22 09:00 - 2013-05-18 12:56 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Spotify 2013-08-22 09:00 - 2013-05-17 18:18 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\ICQ 2013-08-22 08:59 - 2013-04-09 15:33 - 00000000 ____D C:\Users\GERDL\AppData\Local\Adobe 2013-08-22 08:44 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-22 08:44 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-22 08:37 - 2013-07-13 10:51 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-22 08:37 - 2013-07-06 12:38 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-08-22 08:37 - 2013-05-30 13:58 - 00000000 ____D C:\Users\GERDL\Documents\Mein Steuer-Sparbuch Heute 2013-08-22 08:36 - 2013-06-14 07:04 - 00000340 _____ C:\Windows\Tasks\dsmonitor.job 2013-08-22 08:36 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-22 08:36 - 2009-07-14 06:51 - 00049562 _____ C:\Windows\setupact.log 2013-08-21 22:23 - 2013-08-21 22:23 - 40083640 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(360p_H.264-AAC).mp4 2013-08-21 22:22 - 2013-08-21 22:18 - 17235711 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(240p_H.264-AAC).3gp 2013-08-21 22:21 - 2013-04-22 20:04 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\vlc 2013-08-21 22:19 - 2013-08-21 22:18 - 06241354 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(144p_H.264-AAC).3gp 2013-08-21 22:05 - 2013-08-22 09:22 - 2824734107 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.German.720p.HDTV.x264-DN.mp4 2013-08-21 11:02 - 2013-08-21 11:01 - 00000000 ____D C:\Users\GERDL\Downloads\Equilibrium - Waldschrein (EP) (2013) 2013-08-21 09:03 - 2013-08-19 11:00 - 00000005 _____ C:\Users\GERDL\AppData\Roaming\WBPU-TTL.DAT 2013-08-21 08:58 - 2013-05-18 12:57 - 00000000 ____D C:\Users\GERDL\AppData\Local\Spotify 2013-08-20 20:36 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Battle.net 2013-08-20 20:22 - 2009-07-14 19:58 - 00698688 _____ C:\Windows\system32\perfh007.dat 2013-08-20 20:22 - 2009-07-14 19:58 - 00148828 _____ C:\Windows\system32\perfc007.dat 2013-08-20 20:22 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-20 17:33 - 2013-08-20 17:06 - 00000000 ____D C:\Users\GERDL\Downloads\Kronehit Vol.13 2013-08-20 15:47 - 2013-05-20 16:43 - 00000000 ____D C:\ProgramData\eSafe 2013-08-20 15:47 - 2013-05-20 16:42 - 00000000 ____D C:\Program Files (x86)\Plus-HD-1.3 2013-08-20 15:47 - 2013-04-10 06:22 - 00063452 _____ C:\Windows\PFRO.log 2013-08-20 15:01 - 2013-05-02 14:37 - 00000000 ____D C:\Program Files (x86)\PolarEdit 2013-08-20 14:41 - 2013-08-20 14:41 - 00000000 ____D C:\Program Files (x86)\af0.net 2013-08-20 09:33 - 2013-04-09 06:56 - 00000000 ____D C:\Program Files\WinRAR 2013-08-20 07:39 - 2013-08-20 18:31 - 00000000 ____D C:\Users\GERDL\Downloads\Iron.Man.3.2013.German.AC3LD.BDRiP.XviD-HQX 2013-08-19 21:07 - 2013-08-19 21:07 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-08-19 11:00 - 2013-08-19 11:00 - 00000058 _____ C:\Users\GERDL\AppData\Roaming\WB.CFG 2013-08-19 10:59 - 2013-08-19 10:59 - 00000681 _____ C:\Users\GERDL\Documents\GERDL - Verknüpfung.lnk 2013-08-19 10:59 - 2013-07-28 11:52 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-08-19 10:49 - 2013-04-08 20:16 - 00000000 ____D C:\Users\GERDL 2013-08-19 10:48 - 2013-07-29 05:22 - 00000000 ____D C:\Program Files (x86)\MyFree Codec 2013-08-19 10:11 - 2013-08-19 09:50 - 00002083 _____ C:\Users\Public\Desktop\Xilisoft MKV Converter.lnk 2013-08-19 10:00 - 2013-08-19 10:00 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Video Converter Packages 2013-08-19 10:00 - 2013-08-19 09:54 - 00003226 _____ C:\Windows\System32\Tasks\DSite 2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\Documents\My Received Files 2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\MusicNet 2013-08-19 09:57 - 2013-08-19 09:55 - 00000000 ____D C:\Program Files (x86)\iMesh Applications 2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DSite 2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Program Files (x86)\VideoConverter 2013-08-19 09:51 - 2013-08-19 09:51 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Xilisoft 2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\ProgramData\Xilisoft 2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\Program Files (x86)\Xilisoft 2013-08-19 09:40 - 2013-08-19 09:40 - 00065536 _____ C:\Windows\IFinst27.exe 2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ch Editor 2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Program Files (x86)\Ch Editor 2013-08-19 07:34 - 2013-08-19 09:27 - 3716747201 _____ C:\Users\GERDL\Downloads\WWE Summer Slam 2013 German English 720p.mkv 2013-08-19 06:50 - 2013-04-09 06:57 - 00000000 ____D C:\ProgramData\Adobe 2013-08-19 06:49 - 2013-08-19 06:49 - 00423709 _____ C:\Users\GERDL\AppData\Local\mysearchdial_speedial_v9.0.2.crx 2013-08-19 06:03 - 2013-04-09 07:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-08-18 23:08 - 2013-08-20 18:19 - 1562562560 _____ C:\Users\GERDL\Downloads\The.Forbidden.Girl.HD.de.avi 2013-08-18 14:19 - 2013-08-18 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-18 12:52 - 2013-04-23 18:26 - 00000000 ____D C:\Users\GERDL\AppData\Local\._Revolution_ 2013-08-17 00:04 - 2013-04-19 11:05 - 00000000 ____D C:\Program Files (x86)\Epson Software 2013-08-16 12:23 - 2013-08-21 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Sie macht heiße Bilder mit ihrer geilen Freundin 2013-08-15 18:48 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Battle.net 2013-08-15 18:45 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Blizzard Entertainment 2013-08-15 18:45 - 2013-08-15 18:44 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-08-15 18:44 - 2013-08-15 18:44 - 00001124 _____ C:\Users\Public\Desktop\Battle.net.lnk 2013-08-14 19:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-14 17:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2013-08-14 07:32 - 2013-08-14 07:30 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 07:30 - 2013-04-09 03:52 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-13 09:00 - 2013-08-20 17:37 - 00000000 ____D C:\Users\GERDL\Downloads\German Top 100 Single Charts 19.08.2013 2013-08-12 16:28 - 2013-08-12 16:28 - 00002233 _____ C:\Users\GERDL\AppData\Local\recently-used.xbel 2013-08-12 16:28 - 2013-06-13 19:25 - 00000000 ____D C:\Users\GERDL\.gimp-2.8 2013-08-11 15:19 - 2013-08-11 15:19 - 00000742 _____ C:\Users\Public\Desktop\My DocsToGo.lnk 2013-08-11 15:19 - 2013-08-11 15:19 - 00000000 ___SD C:\Users\GERDL\Documents\My DocsToGo 2013-08-11 15:19 - 2013-08-11 15:18 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DocumentsToGoDesktopAndroid 2013-08-11 15:18 - 2013-08-11 15:18 - 00001314 _____ C:\Users\Public\Desktop\Documents To Go Desktop for Android.lnk 2013-08-11 15:18 - 2013-08-11 15:18 - 00000000 ____D C:\Program Files (x86)\Documents To Go Desktop for Android 2013-08-11 00:22 - 2009-07-14 06:45 - 00291840 _____ C:\Windows\system32\FNTCACHE.DAT 2013-08-10 21:33 - 2013-08-11 15:15 - 00295933 _____ C:\Users\GERDL\Desktop\tippen2013-2014---1-17 spieltage.xlsx 2013-08-10 12:08 - 2013-04-08 20:43 - 00062480 _____ C:\Users\GERDL\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-10 11:44 - 2013-08-10 11:41 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Windows\PCHEALTH 2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 2013-08-10 11:42 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Users\GERDL\AppData\Local\Microsoft Help 2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files\Microsoft Office 2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-08-10 11:41 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew 2013-08-10 11:40 - 2013-08-10 11:40 - 00000000 __RHD C:\MSOCache 2013-08-06 16:49 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\GHISLER 2013-08-06 16:47 - 2013-08-06 16:47 - 00000000 ____D C:\Users\GERDL\AppData\Local\GHISLER 2013-08-06 16:46 - 2013-08-06 16:45 - 00000000 ____D C:\totalcmd 2013-08-06 16:45 - 2013-08-06 16:45 - 00000646 _____ C:\Users\GERDL\Desktop\Total Commander 64 bit.lnk 2013-08-06 16:45 - 2013-08-06 16:45 - 00000632 _____ C:\Users\GERDL\Desktop\Total Commander.lnk 2013-08-06 16:45 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander 2013-08-04 14:09 - 2013-04-16 23:17 - 00000000 ____D C:\Program Files (x86)\JDownloader 2013-08-02 07:42 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-07-29 07:30 - 2013-07-29 07:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump 2013-07-29 05:22 - 2013-07-29 05:22 - 00002006 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2013-07-29 05:22 - 2013-07-29 05:22 - 00001996 _____ C:\Users\Public\Desktop\Samsung Kies.lnk 2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log 2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\Documents\samsung 2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Samsung 2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Local\Samsung 2013-07-29 05:22 - 2013-07-29 05:20 - 00000000 ____D C:\ProgramData\Samsung 2013-07-29 05:22 - 2013-07-29 05:20 - 00000000 ____D C:\Program Files (x86)\Samsung 2013-07-29 05:20 - 2013-04-08 20:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-07-29 05:19 - 2013-07-29 05:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Downloaded Installations 2013-07-28 11:53 - 2013-07-20 21:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Conduit 2013-07-26 07:13 - 2013-08-14 07:34 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-26 07:13 - 2013-08-14 07:33 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-26 07:13 - 2013-08-14 07:33 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-26 07:12 - 2013-08-14 07:34 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-26 07:12 - 2013-08-14 07:34 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-26 07:12 - 2013-08-14 07:34 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-26 07:12 - 2013-08-14 07:34 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-26 07:12 - 2013-08-14 07:33 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-26 07:12 - 2013-08-14 07:33 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-26 07:12 - 2013-08-14 07:33 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-26 07:12 - 2013-08-14 07:33 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-26 07:12 - 2013-08-14 07:33 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-26 07:12 - 2013-08-14 07:33 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-26 07:12 - 2013-08-14 07:33 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-26 05:35 - 2013-08-14 07:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-26 05:13 - 2013-08-14 07:33 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-26 05:13 - 2013-08-14 07:33 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-26 05:12 - 2013-08-14 07:34 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-26 05:12 - 2013-08-14 07:34 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-26 05:12 - 2013-08-14 07:34 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-26 05:12 - 2013-08-14 07:34 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-26 05:12 - 2013-08-14 07:33 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-26 05:12 - 2013-08-14 07:33 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-26 05:12 - 2013-08-14 07:33 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-26 05:12 - 2013-08-14 07:33 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-26 05:12 - 2013-08-14 07:33 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-26 05:11 - 2013-08-14 07:34 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-26 05:11 - 2013-08-14 07:33 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-26 04:49 - 2013-08-14 07:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-26 04:39 - 2013-08-14 07:34 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-26 03:59 - 2013-08-14 07:34 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-25 11:25 - 2013-08-14 07:28 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-25 10:57 - 2013-08-14 07:28 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-22 09:48 ==================== End Of Log ============================ und hier die Addition.txt FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-08-2013 02 Ran by GERDL at 2013-08-22 12:53:36 Running from C:\Users\GERDL\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= AdblockIE (x32 Version: 1.2) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) AMD Accelerated Video Transcoding (Version: 12.10.100.30320) AMD APP SDK Runtime (Version: 10.0.1124.2) AMD Catalyst Install Manager (Version: 8.0.911.0) AMD Drag and Drop Transcoding (Version: 2.00.0000) AMD Fuel (Version: 2013.0320.2223.38347) AMD Media Foundation Decoders (Version: 1.0.80320.2221) AMD Steady Video Plug-In (Version: 2.06.0000) AMD VISION Engine Control Center (x32 Version: 2013.0320.2223.38347) Anleitung für Epson Connect (x32) Avast License by ZeNiX [2012-06-29] (x32) avast! Free Antivirus (x32 Version: 8.0.1489.0) AVM FRITZ!WLAN (x32 Version: 1.2.0.0) Battle.net (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0320.2223.38347) Catalyst Control Center InstallProxy (x32 Version: 2013.0320.2223.38347) Catalyst Control Center Localization All (x32 Version: 2013.0320.2223.38347) CCC Help Chinese Standard (x32 Version: 2013.0320.2222.38347) CCC Help Chinese Traditional (x32 Version: 2013.0320.2222.38347) CCC Help Czech (x32 Version: 2013.0320.2222.38347) CCC Help Danish (x32 Version: 2013.0320.2222.38347) CCC Help Dutch (x32 Version: 2013.0320.2222.38347) CCC Help English (x32 Version: 2013.0320.2222.38347) CCC Help Finnish (x32 Version: 2013.0320.2222.38347) CCC Help French (x32 Version: 2013.0320.2222.38347) CCC Help German (x32 Version: 2013.0320.2222.38347) CCC Help Greek (x32 Version: 2013.0320.2222.38347) CCC Help Hungarian (x32 Version: 2013.0320.2222.38347) CCC Help Italian (x32 Version: 2013.0320.2222.38347) CCC Help Japanese (x32 Version: 2013.0320.2222.38347) CCC Help Korean (x32 Version: 2013.0320.2222.38347) CCC Help Norwegian (x32 Version: 2013.0320.2222.38347) CCC Help Polish (x32 Version: 2013.0320.2222.38347) CCC Help Portuguese (x32 Version: 2013.0320.2222.38347) CCC Help Russian (x32 Version: 2013.0320.2222.38347) CCC Help Spanish (x32 Version: 2013.0320.2222.38347) CCC Help Swedish (x32 Version: 2013.0320.2222.38347) CCC Help Thai (x32 Version: 2013.0320.2222.38347) CCC Help Turkish (x32 Version: 2013.0320.2222.38347) ccc-utility64 (Version: 2013.0320.2223.38347) CDBurnerXP (x32 Version: 4.5.1.4003) Ch Editor (x32) DAEMON Tools Lite (x32 Version: 4.47.1.0333) DEUTSCHLAND SPIELT GAME CENTER (x32 Version: 1.0.0.47) Documents To Go Desktop for Android (x32 Version: 3.0000.037) Dr. Hardware 2013 13.0d (x32) dreamboxEDIT -- The one and only settings editor for your Dreambox (x32) Driver Genius Professional Edition (x32 Version: 10.0) DriverScanner (x32 Version: 4.0.11.0) Epson Benutzerhandbuch WF-2530 Series (x32) Epson Connect Printer Setup (x32 Version: 1.1.1) Epson Easy Photo Print 2 (x32 Version: 2.4.0.0) Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000) Epson Event Manager (x32 Version: 3.01.0005) Epson E-Web Print (x32 Version: 1.17.0000) Epson FAX Utility (x32 Version: 1.30.00) Epson Netzwerkhandbuch WF-2530 Series (x32) Epson PC-FAX Driver (x32) EPSON Printer Finder (x32 Version: 1.0.0) EPSON Scan (x32) EpsonNet Print (x32 Version: 2.5.00) EVEREST Home Edition v2.20 (x32 Version: 2.20) Free Video to DVD Converter version 5.0.24.419 (x32 Version: 5.0.24.419) GIMP 2.8.4 (Version: 2.8.4) Google Chrome (x32 Version: 29.0.1547.57) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752) Google Update Helper (x32 Version: 1.3.21.153) ICQ7M (x32 Version: 7.8) IncrediMail (x32 Version: 6.3.9.5260) IncrediMail 2.0 (x32 Version: 6.3.9.5260) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) JDownloader 0.9 (x32 Version: 0.9) Logitech Gaming Software (Version: 8.45.88) Logitech Gaming Software 8.45 (Version: 8.45.88) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4.5 (Version: 4.5.50709) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709) Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1) Mozilla Maintenance Service (x32 Version: 23.0.1) Mozilla Thunderbird 17.0.5 (x86 de) (x32 Version: 17.0.5) Nero Burning ROM (x32 Version: 12.0.20000) Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000) Nero BurningROM 12 (x32 Version: 12.0.00300) Nero ControlCenter (x32 Version: 11.0.15200) Nero ControlCenter Help (CHM) (x32 Version: 12.0.5000) Nero Core Components (x32 Version: 11.0.18100) Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0) Nero Update (x32 Version: 11.0.11800.31.0) ON WF-2530 Series Printer Uninstall Plus-HD-1.3 (x32 Version: 1.27.153.0) Prerequisite installer (x32 Version: 12.0.0002) Razer DeathAdder(TM) Mouse (x32 Version: 3.03) Realtek Ethernet Controller Driver (x32 Version: 7.69.304.2013) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6839) Samsung Kies (x32 Version: 2.6.0.13064_2) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0) SetEditOctagon (remove only) (x32) SiSoftware Sandra Lite 2013.SP3a (Version: 19.44.2013.5) Software Updater (x32 Version: 4.1.1) Spotify (HKCU Version: 0.9.1.57.ge7405149) TeamSpeak 3 Client (Version: 3.0.10) Total Commander 64-bit (Remove or Repair) (Version: 8.01) Trojancheck 6 (x32) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1) Update for Video Converter (HKCU) Video Converter Packages (HKCU) VLC media player 2.0.6 (x32 Version: 2.0.6) WinRAR 4.20 (64-Bit) (Version: 4.20.0) WinZipper (x32 Version: 1.4.8) WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137) Xilisoft MKV Converter (x32 Version: 7.0.1.1219) ==================== Restore Points ========================= 20-08-2013 07:39:45 Windows Update 20-08-2013 12:40:47 Installed AdblockIE 20-08-2013 13:00:38 Photo Notifier and Animation Creator wurde entfernt. ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {074F9911-569C-4B77-9013-BFC8F76FC92E} - System32\Tasks\0 => c:\program files\internet explorer\iexplore.exe [2013-07-26] (Microsoft Corporation) Task: {1AD22E8F-EBA2-468A-BD86-57100EB26C4B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-13] (Google Inc.) Task: {2E40F464-8BF6-41D2-9C0D-C64297D40478} - System32\Tasks\Plus-HD-1.3-enabler => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-enabler.exe [2013-05-20] (Plus HD) Task: {4F41F563-E566-4AE7-AF1F-97A36F0A03C1} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {53961B92-7EE8-4B20-A657-891A9FD25A36} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe No File Task: {59F756E6-B93C-4EAF-B84E-5C90EC358761} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {78662844-9B9C-4354-B540-AE70408E0651} - System32\Tasks\Omiga Plus RunAsStdUser => C:\Program Files (x86)\Omiga Plus\omigaplus.exe No File Task: {7B1FAB7F-3AC7-4E84-AFAF-2ED525C8976B} - System32\Tasks\dsmonitor => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe [2013-05-27] (Uniblue Systems Ltd) Task: {7DC04877-F3DC-4909-BD2C-83A32027DC40} - System32\Tasks\Plus-HD-1.3-updater => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-updater.exe [2013-05-20] (Plus HD) Task: {83F5FA30-DC84-403D-83D9-9E0682D90BBD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-13] (Google Inc.) Task: {9446D2FA-B395-42BF-8030-7732B9DAF0B9} - System32\Tasks\4547 => C:\Windows\System32\wscript.exe [2009-07-14] (Microsoft Corporation) Task: {9781F73E-73AC-456B-92E8-C491D15F22CD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-22] (Adobe Systems Incorporated) Task: {B6A43609-8D56-4E0A-BE12-D7DCF7E14A55} - System32\Tasks\DealPly => C:\Users\GERDL\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE No File Task: {D120D613-4625-4FC8-AA5B-4BB2D915F299} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software) Task: {DAC20E81-BF07-4D3C-9994-73699E99BA23} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {E804B04D-B511-485B-876D-D6DDDE469810} - System32\Tasks\DSite => C:\Users\GERDL\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE [2013-08-19] () Task: {F275F796-51B0-4246-9CF3-BC32216EB4CC} - System32\Tasks\Plus-HD-1.3-firefoxinstaller => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe [2013-05-20] (Plus HD) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DSite.job => C:\Users\GERDL\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE Task: C:\Windows\Tasks\dsmonitor.job => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Plus-HD-1.3-enabler.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-enabler.exe Task: C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe Task: C:\Windows\Tasks\Plus-HD-1.3-updater.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-updater.exe ==================== Faulty Device Manager Devices ============= Name: avast! Firewall NDIS Filter Miniport Description: avast! Firewall NDIS Filter Miniport Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: ALWIL Software Service: aswNdis Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. ==================== Event log errors: ========================= Application errors: ================== Error: (08/22/2013 00:51:48 PM) (Source: Application Hang) (User: ) Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 180 Startzeit: 01ce9f25602f9e79 Endzeit: 2 Anwendungspfad: C:\Users\GERDL\Downloads\FRST64.exe Berichts-ID: Error: (08/22/2013 11:06:06 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: tc6.exe, Version: 6.0.0.0, Zeitstempel: 0x2a425e19 Name des fehlerhaften Moduls: tc6.exe, Version: 6.0.0.0, Zeitstempel: 0x2a425e19 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00001f6c ID des fehlerhaften Prozesses: 0x156c Startzeit der fehlerhaften Anwendung: 0xtc6.exe0 Pfad der fehlerhaften Anwendung: tc6.exe1 Pfad des fehlerhaften Moduls: tc6.exe2 Berichtskennung: tc6.exe3 Error: (08/22/2013 09:53:56 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0". Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (08/22/2013 09:48:51 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (08/21/2013 10:20:43 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x138c Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0 Pfad der fehlerhaften Anwendung: wmplayer.exe1 Pfad des fehlerhaften Moduls: wmplayer.exe2 Berichtskennung: wmplayer.exe3 Error: (08/20/2013 08:28:05 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x34b4 Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0 Pfad der fehlerhaften Anwendung: wmplayer.exe1 Pfad des fehlerhaften Moduls: wmplayer.exe2 Berichtskennung: wmplayer.exe3 Error: (08/20/2013 08:25:51 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x14a4 Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0 Pfad der fehlerhaften Anwendung: wmplayer.exe1 Pfad des fehlerhaften Moduls: wmplayer.exe2 Berichtskennung: wmplayer.exe3 Error: (08/20/2013 08:22:55 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x998 Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0 Pfad der fehlerhaften Anwendung: wmplayer.exe1 Pfad des fehlerhaften Moduls: wmplayer.exe2 Berichtskennung: wmplayer.exe3 Error: (08/20/2013 08:22:33 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x341c Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0 Pfad der fehlerhaften Anwendung: wmplayer.exe1 Pfad des fehlerhaften Moduls: wmplayer.exe2 Berichtskennung: wmplayer.exe3 Error: (08/20/2013 04:33:28 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x388 Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0 Pfad der fehlerhaften Anwendung: wmplayer.exe1 Pfad des fehlerhaften Moduls: wmplayer.exe2 Berichtskennung: wmplayer.exe3 System errors: ============= Error: (08/22/2013 00:42:58 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (08/22/2013 00:42:58 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (08/22/2013 00:42:58 PM) (Source: PNRPSvc) (User: ) Description: 0x80630801 Error: (08/22/2013 00:42:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (08/22/2013 00:42:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (08/22/2013 00:42:57 PM) (Source: PNRPSvc) (User: ) Description: 0x80630801 Error: (08/22/2013 00:18:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (08/22/2013 00:18:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (08/22/2013 00:18:06 PM) (Source: PNRPSvc) (User: ) Description: 0x80630801 Error: (08/22/2013 00:07:36 PM) (Source: Disk) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1. Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2013-06-12 20:21:10.331 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\GERDL\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-12 20:21:10.207 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\GERDL\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-12 20:21:09.367 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-12 20:21:09.196 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 27% Total physical RAM: 10237.55 MB Available physical RAM: 7399.48 MB Total Pagefile: 20473.29 MB Available Pagefile: 15742.04 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:346.44 GB) NTFS Drive d: (MyDrive) (Fixed) (Total:465.76 GB) (Free:157.06 GB) NTFS Drive g: (OFFICE12) (CDROM) (Total:0.56 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 660E024F) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 466 GB) (Disk ID: 420080D9) Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
|
22.08.2013, 12:31
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9 Startseite bei IE+F.Fox- Wie entfernen ?Code:
ATTFilter C:\Users\GERDL\Downloads\Iron.Man.3.2013.German.AC3LD.BDRiP.XviD-HQX
C:\Users\GERDL\Downloads\The.Forbidden.Girl.HD.de.avi
C:\Users\GERDL\Downloads\German Top 100 Single Charts 19.08.2013
C:\Users\GERDL\Downloads\Kronehit Vol.13
C:\Users\GERDL\Downloads\SWTCWS04E22.rar
C:\Users\GERDL\Downloads\SWTCWS04E21.rar
C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E22.Rache.German.BDRip.XviD-iNTENTiON
C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E21.Brueder.German.BDRip.XviD-iNTENTiON
C:\Users\GERDL\Downloads\SWTCWS04E19.rar
C:\Users\GERDL\Downloads\SWTCWS04E20.rar
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
22.08.2013, 12:55
| #5 | |
| | V9 Startseite bei IE+F.Fox- Wie entfernen ?Zitat:
 sollte aber nicht das Problem sein,den hab eigentlich schon lange nichts mehr runter geladen,da ich die zeit gar nicht habe,abe abe diese Woche Urlaub da konnte ich es wieder mal nicht lassen.aber nun zu meinen Problem wie bekomme ich den mist weg |
|
22.08.2013, 12:57
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9 Startseite bei IE+F.Fox- Wie entfernen ? Lange???  Die Datumsstempel dieser dubiosen Downloads sind tw. von heute morgen 9:20!!  Adware/Junkware/Toolbars entfernen 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ --> V9 Startseite bei IE+F.Fox- Wie entfernen ? |
|
22.08.2013, 14:41
| #7 |
| | V9 Startseite bei IE+F.Fox- Wie entfernen ? so hab das mal gemacht hoffe es war alles richtig Code:
ATTFilter # AdwCleaner v3.000 - Report created 22/08/2013 at 14:05:38
# Updated 20/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : GERDL - GERDL-PC
# Running from : C:\Users\GERDL\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\eSafe
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
Folder Deleted : C:\Program Files (x86)\iMesh Applications
Folder Deleted : C:\Program Files (x86)\Omiga Plus
Folder Deleted : C:\Program Files (x86)\Common Files\337
Folder Deleted : C:\Users\GERDL\AppData\Local\Conduit
Folder Deleted : C:\Users\GERDL\AppData\Local\Temp\AirInstaller
Folder Deleted : C:\Users\GERDL\AppData\Local\Temp\Desk365
Folder Deleted : C:\Users\GERDL\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\GERDL\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\GERDL\AppData\Roaming\337
Folder Deleted : C:\Users\GERDL\AppData\Roaming\DSite
Folder Deleted : C:\Users\GERDL\AppData\Roaming\eIntaller
Folder Deleted : C:\Users\GERDL\AppData\Roaming\Omiga Plus
Folder Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\Extensions\{AD9A41D2-9A49-4FA6-A79E-71A0785364C8}
File Deleted : C:\END
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\delta.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-1.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-2.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-3.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-4.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-5.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\Mysearchdial.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\v9.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\user.js
File Deleted : C:\Windows\System32\Tasks\Dealply
File Deleted : C:\Windows\Tasks\DSite.job
File Deleted : C:\Windows\System32\Tasks\DSite
File Deleted : C:\Windows\System32\Tasks\Omiga Plus RunAsStdUser
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\GERDL\Desktop\Internet Explorer (64-bit).lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer (64-bit).lnk
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0031257.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox.1
Key Deleted : HKLM\SOFTWARE\5c28fdee06fe848
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C522512A-9C2C-4DE5-9F63-976B560FEF14}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7C3B01BC-53A5-48A0-A43B-0C67731134B9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0ABE0FED-50E7-4E42-A125-57C0A11DBCDE}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D3F22A84-2A84-49EB-91E6-5DADAAF0165D}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\Imesh
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\mysearchdial
Key Deleted : HKCU\Software\mysearchdial.com
Key Deleted : HKCU\Software\V9
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\Toolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Desksvc
Key Deleted : HKLM\Software\eSafeSecControl
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\ImInstaller
Key Deleted : HKLM\Software\V9
Key Deleted : HKLM\Software\V9Software
Key Deleted : [x64] HKLM\SOFTWARE\DomaIQ
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16660
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v23.0.1 (de)
[ File : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\prefs.js ]
Line Deleted : user_pref("CT3293887_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1375004247777,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3293887&octid=CT3293887&SearchSource=61&CUI=UN34707285961225229&UM=2&UP=SP1BA74EF2-8F65-4AF8-B663-072C99548DD2");
Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "Vgrabber V1.6 Customized Web Search");
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?octid=CT3293887&ctid=CT3293887&SearchSource=2&CUI=UN34707285961225229&UM=2&q=");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.5.3&q=");
Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3293887");
Line Deleted : user_pref("browser.search.defaultenginename", "Mysearchdial");
Line Deleted : user_pref("browser.search.defaultthis.engineName", "Vgrabber V1.6 Customized Web Search");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3293887&CUI=UN34707285961225229&UM=2&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("browser.search.order.1", "Mysearchdial");
Line Deleted : user_pref("browser.search.selectedEngine", "Mysearchdial");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q&cr=[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.backgroundjs", "\n\n/*****************************************************************************[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.js", "\n\n /************************************************************************************\[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_102.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_104.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_13.name", "CrossriderAppUtils");
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_14.name", "CrossriderUtils");
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_155.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_78.name", "CrossriderInfo");
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_91.code", "(function(h){var p=(function(){var R=0;var Z=\"\";function Q(ac){return [...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
Line Deleted : user_pref("extensions.crossrider.bic", "13ecfa5eb97f197a8d02e1dbe9394705");
Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.bbDpng", "21");
Line Deleted : user_pref("extensions.delta.cntry", "DE");
Line Deleted : user_pref("extensions.delta.dfltLng", "en");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.delta.hdrMd5", "CB3357C3C0B71BC0082058E337984DC5");
Line Deleted : user_pref("extensions.delta.id", "74a7dc4900000000000024651140774f");
Line Deleted : user_pref("extensions.delta.instlDay", "15816");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.lastVrsnTs", "1.8.16.1618:08:03");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.sg", "azb");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.16.16");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.16.1618:08:03");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.16.16");
Line Deleted : user_pref("extensions.mysearchdial.aflt", "airmsd");
Line Deleted : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Line Deleted : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q");
Line Deleted : user_pref("extensions.mysearchdial.cntry", "DE");
Line Deleted : user_pref("extensions.mysearchdial.cr", "2045151825");
Line Deleted : user_pref("extensions.mysearchdial.dfltLng", "");
Line Deleted : user_pref("extensions.mysearchdial.dfltSrch", true);
Line Deleted : user_pref("extensions.mysearchdial.dnsErr", true);
Line Deleted : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...]
Line Deleted : user_pref("extensions.mysearchdial.excTlbr", false);
Line Deleted : user_pref("extensions.mysearchdial.hdrMd5", "D1DE022BBEBA61FC38C515448EBA51FC");
Line Deleted : user_pref("extensions.mysearchdial.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1[...]
Line Deleted : user_pref("extensions.mysearchdial.id", "6CF049057A11DC49");
Line Deleted : user_pref("extensions.mysearchdial.instlDay", "15936");
Line Deleted : user_pref("extensions.mysearchdial.instlRef", "");
Line Deleted : user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1[...]
Line Deleted : user_pref("extensions.mysearchdial.lastVrsnTs", "");
Line Deleted : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1[...]
Line Deleted : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.sg", "{smplGrp}");
Line Deleted : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.tlbrId", "base");
Line Deleted : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1[...]
Line Deleted : user_pref("extensions.mysearchdial.vrsn", "");
Line Deleted : user_pref("extensions.mysearchdial.vrsni", "");
Line Deleted : user_pref("extensions.mysearchdial_i.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial_i.newTab", false);
Line Deleted : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Line Deleted : user_pref("extensions.mysearchdial_i.vrsnTs", "6:49:43");
Line Deleted : user_pref("icqtoolbar.engineVerified", false);
Line Deleted : user_pref("icqtoolbar.firstTbRun", false);
Line Deleted : user_pref("icqtoolbar.geolastmodified", 1374930562);
Line Deleted : user_pref("icqtoolbar.icqgeo", 49);
Line Deleted : user_pref("icqtoolbar.installTime", "1369283356");
Line Deleted : user_pref("icqtoolbar.previousFFVersion", "22.0");
Line Deleted : user_pref("icqtoolbar.showPc", false);
Line Deleted : user_pref("icqtoolbar.skip_default_search", "no");
Line Deleted : user_pref("icqtoolbar.uninstStatSent", true);
Line Deleted : user_pref("icqtoolbar.uniqueID", "136568848913656883691365792110894");
Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3293887&octid=CT3293887&SearchSource=61&CUI=UN34707285961225229&UM=2&UP=SP1BA74EF2-8F65-4AF8-B663-072C99548DD2");
Line Deleted : user_pref("smartbar.machineId", "JOVG1TDVWI5NFFM+ZNFGNMWJ4UKN9VUS8XKJVOUB4TIPWP5T8Q2XNZCSYM/P0NXMBPJQBLB0LHE9ZA7MVBEQ+G");
-\\ Google Chrome v29.0.1547.57
[ File : C:\Users\GERDL\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [22175 octets] - [22/08/2013 14:05:20]
AdwCleaner[S0].txt - [20371 octets] - [22/08/2013 14:05:38]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [20432 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.3 (08.21.2013:1)
OS: Windows 7 Home Premium x64
Ran by GERDL on 22.08.2013 at 14:14:15,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dsiteproducts
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\lyrixeeker
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\plus-hd-1.3
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\uniblue
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\driverscanner
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322122257}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660366126657}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322122257}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660366126657}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3293887
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660366126657}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366126657}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0A070C62-11EB-452D-A5AD-4655FD8AE012}
~~~ Files
Successfully deleted: [File] C:\Windows\Tasks\dsmonitor.job
Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-1.3-enabler.job
Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-1.3-updater.job
Successfully deleted: [File] "C:\Users\GERDL\appdata\local\mysearchdial_speedial_v9.0.2.crx"
Successfully deleted: [File] "C:\Users\GERDL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\driverscanner.lnk"
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\uniblue\driverscanner"
Successfully deleted: [Folder] "C:\Users\GERDL\AppData\Roaming\uniblue\driverscanner"
Successfully deleted: [Folder] "C:\Users\GERDL\appdata\local\cre"
Successfully deleted: [Folder] "C:\Program Files (x86)\driver-soft"
Successfully deleted: [Folder] "C:\Program Files (x86)\uniblue\driverscanner"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
~~~ FireFox
Emptied folder: C:\Users\GERDL\AppData\Roaming\mozilla\firefox\profiles\wexuu7i6.default\minidumps [34 files]
~~~ Chrome
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.08.2013 at 14:19:53,13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 02
Ran by GERDL (administrator) on 22-08-2013 15:37:39
Running from C:\Users\GERDL\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(ICQ, LLC.) C:\Program Files (x86)\ICQ7M\ICQ.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDWebCam.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Spotify Ltd) C:\Users\GERDL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\GERDL\AppData\Roaming\Spotify\spotify.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE
() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe
() C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files (x86)\Razer\DeathAdder\razertra.exe
(Razer Inc.) C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe
() C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13269064 2013-02-06] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7468784 2013-02-28] (Logitech Inc.)
HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2013-05-17] (ICQ, LLC.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\GERDL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\GERDL\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564016 2013-07-15] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-15] (Samsung)
HKCU\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIVE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
MountPoints2: {46878852-c91a-11e2-92bc-6cf049057a11} - G:\SETUP.EXE
MountPoints2: {a9d67d7f-a99a-11e2-904f-6cf049057a11} - F:\pushinst.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TaskTray] - [x]
HKLM-x32\...\Run: [DeathAdder] - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [248320 2011-03-21] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502912 2012-04-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863360 2012-04-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-07-15] (Samsung Electronics Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0A070C62-11EB-452D-A5AD-4655FD8AE012 URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q&cr=2045151825&ir=
SearchScopes: HKCU - {78DC6520-62F5-F6B7-61E8-754CE1DEEBDD} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\vgrabber-v16-customized-web-search.xml
FF Extension: No Name - C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\Extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: () - C:\Users\GERDL\AppData\Local\Google\Chrome\User Data\Default\Extensions\agembgempdmebanhogdjbpcmppdmklbe\10.16.100.504_0
CHR HKLM-x32\...\Chrome\Extension: [agembgempdmebanhogdjbpcmppdmklbe] - C:\Users\GERDL\AppData\Local\CRE\agembgempdmebanhogdjbpcmppdmklbe.crx
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-20] (Advanced Micro Devices, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\RpcAgentSrv.exe [71832 2009-04-22] (SiSoftware)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [424104 2013-06-20] (Taiwan Shui Mu Chih Ching Technology Limited.)
==================== Drivers (Whitelisted) ====================
R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11904 2013-06-14] (Advanced Micro Devices Inc.)
S0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2013-06-14] (Advanced Micro Devices, Inc.)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-06] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-06] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-06] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R2 DRHARD64; C:\Windows\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software)
R2 DRHMSR64; C:\Windows\system32\drivers\DRHMSR64.sys [14760 2011-12-06] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-30] (DT Soft Ltd)
S3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 EverestDriver; \??\C:\Users\GERDL\AppData\Local\Temp\EverestDriver.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-22 14:14 - 2013-08-22 14:14 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:13 - 2013-08-22 14:13 - 01021455 _____ (Thisisu) C:\Users\GERDL\Downloads\JRT.exe
2013-08-22 14:13 - 2013-08-22 14:13 - 01021455 _____ (Thisisu) C:\Users\GERDL\Desktop\JRT.exe
2013-08-22 14:11 - 2013-08-22 14:11 - 00020525 _____ C:\Users\GERDL\Desktop\AdwCleaner[S0].txt
2013-08-22 14:04 - 2013-08-22 14:06 - 00000000 ____D C:\AdwCleaner
2013-08-22 14:04 - 2013-08-22 14:04 - 00975858 _____ C:\Users\GERDL\Downloads\adwcleaner.exe
2013-08-22 14:04 - 2013-08-22 14:04 - 00975858 _____ C:\Users\GERDL\Desktop\adwcleaner.exe
2013-08-22 12:53 - 2013-08-22 12:53 - 00024260 _____ C:\Users\GERDL\Desktop\Addition.txt
2013-08-22 12:52 - 2013-08-22 12:50 - 01576476 _____ (Farbar) C:\Users\GERDL\Desktop\FRST64.exe
2013-08-22 12:48 - 2013-08-22 12:48 - 00000000 ____D C:\FRST
2013-08-22 11:05 - 2013-08-22 11:05 - 00001015 _____ C:\Users\GERDL\Desktop\Trojancheck.lnk
2013-08-22 11:05 - 2013-08-22 11:05 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-08-22 09:05 - 2013-08-22 09:23 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-20 14:41 - 2013-08-20 14:41 - 00000000 ____D C:\Program Files (x86)\af0.net
2013-08-19 21:07 - 2013-08-19 21:07 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-19 11:00 - 2013-08-21 09:03 - 00000005 _____ C:\Users\GERDL\AppData\Roaming\WBPU-TTL.DAT
2013-08-19 11:00 - 2013-08-19 11:00 - 00000058 _____ C:\Users\GERDL\AppData\Roaming\WB.CFG
2013-08-19 10:59 - 2013-08-19 10:59 - 00000681 _____ C:\Users\GERDL\Documents\GERDL - Verknüpfung.lnk
2013-08-19 10:00 - 2013-08-19 10:00 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Video Converter Packages
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\Documents\My Received Files
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\MusicNet
2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-19 09:51 - 2013-08-19 09:51 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Xilisoft
2013-08-19 09:50 - 2013-08-19 10:11 - 00002083 _____ C:\Users\Public\Desktop\Xilisoft MKV Converter.lnk
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\ProgramData\Xilisoft
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\Program Files (x86)\Xilisoft
2013-08-19 09:40 - 2013-08-19 09:40 - 00065536 _____ C:\Windows\IFinst27.exe
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ch Editor
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Program Files (x86)\Ch Editor
2013-08-18 14:19 - 2013-08-18 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 18:45 - 2013-08-20 20:36 - 00000000 ____D C:\Users\GERDL\AppData\Local\Battle.net
2013-08-15 18:45 - 2013-08-15 18:48 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Battle.net
2013-08-15 18:45 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Blizzard Entertainment
2013-08-15 18:44 - 2013-08-15 18:45 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-08-15 18:44 - 2013-08-15 18:44 - 00001124 _____ C:\Users\Public\Desktop\Battle.net.lnk
2013-08-14 07:34 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 07:34 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 07:34 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 07:34 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 07:34 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 07:34 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 07:34 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 07:34 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-14 07:34 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-14 07:34 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-14 07:34 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-14 07:34 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 07:34 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 07:34 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 07:33 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 07:33 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 07:33 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 07:33 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 07:33 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 07:30 - 2013-08-14 07:32 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 07:29 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 07:29 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 07:29 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 07:29 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 07:29 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 07:29 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 07:29 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 07:29 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 07:28 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 07:28 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 07:28 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 07:28 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 07:28 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 07:28 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 07:28 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 07:28 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 07:28 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 07:28 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 07:28 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 07:28 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 07:28 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 07:28 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 07:28 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 07:28 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 07:28 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 07:28 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 07:28 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-12 16:28 - 2013-08-12 16:28 - 00002233 _____ C:\Users\GERDL\AppData\Local\recently-used.xbel
2013-08-11 15:19 - 2013-08-11 15:19 - 00000742 _____ C:\Users\Public\Desktop\My DocsToGo.lnk
2013-08-11 15:19 - 2013-08-11 15:19 - 00000000 ___SD C:\Users\GERDL\Documents\My DocsToGo
2013-08-11 15:18 - 2013-08-11 15:19 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DocumentsToGoDesktopAndroid
2013-08-11 15:18 - 2013-08-11 15:18 - 00001314 _____ C:\Users\Public\Desktop\Documents To Go Desktop for Android.lnk
2013-08-11 15:18 - 2013-08-11 15:18 - 00000000 ____D C:\Program Files (x86)\Documents To Go Desktop for Android
2013-08-11 15:15 - 2013-08-10 21:33 - 00295933 _____ C:\Users\GERDL\Desktop\tippen2013-2014---1-17 spieltage.xlsx
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 11:41 - 2013-08-10 11:44 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Users\GERDL\AppData\Local\Microsoft Help
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-10 11:40 - 2013-08-10 11:40 - 00000000 __RHD C:\MSOCache
2013-08-06 16:47 - 2013-08-06 16:47 - 00000000 ____D C:\Users\GERDL\AppData\Local\GHISLER
2013-08-06 16:45 - 2013-08-06 16:49 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\GHISLER
2013-08-06 16:45 - 2013-08-06 16:46 - 00000000 ____D C:\totalcmd
2013-08-06 16:45 - 2013-08-06 16:45 - 00000646 _____ C:\Users\GERDL\Desktop\Total Commander 64 bit.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000632 _____ C:\Users\GERDL\Desktop\Total Commander.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-07-29 07:30 - 2013-07-29 07:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-07-29 05:24 - 2013-06-21 02:07 - 00203672 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2013-07-29 05:24 - 2013-06-21 02:07 - 00103448 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2013-07-29 05:22 - 2013-08-19 10:48 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-07-29 05:22 - 2013-07-29 05:22 - 00002006 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00001996 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\Documents\samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Local\Samsung
2013-07-29 05:21 - 2013-06-14 19:57 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2013-07-29 05:20 - 2013-07-29 05:22 - 00000000 ____D C:\ProgramData\Samsung
2013-07-29 05:20 - 2013-07-29 05:22 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-07-29 05:20 - 2013-06-14 19:56 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll
2013-07-29 05:19 - 2013-07-29 05:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Downloaded Installations
2013-07-28 11:52 - 2013-08-19 10:59 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
==================== One Month Modified Files and Folders =======
2013-08-22 15:35 - 2013-08-22 14:19 - 00003407 _____ C:\Users\GERDL\Desktop\JRT.txt
2013-08-22 15:35 - 2013-07-13 10:51 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-22 15:35 - 2013-04-08 20:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-22 14:28 - 2013-05-18 12:56 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Spotify
2013-08-22 14:16 - 2013-06-14 07:05 - 00000000 ____D C:\ProgramData\Uniblue
2013-08-22 14:16 - 2013-06-14 07:04 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Uniblue
2013-08-22 14:16 - 2013-06-14 07:04 - 00000000 ____D C:\Program Files (x86)\Uniblue
2013-08-22 14:14 - 2013-08-22 14:14 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:14 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-22 14:14 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-22 14:13 - 2013-08-22 14:13 - 01021455 _____ (Thisisu) C:\Users\GERDL\Downloads\JRT.exe
2013-08-22 14:13 - 2013-08-22 14:13 - 01021455 _____ (Thisisu) C:\Users\GERDL\Desktop\JRT.exe
2013-08-22 14:11 - 2013-08-22 14:11 - 00020525 _____ C:\Users\GERDL\Desktop\AdwCleaner[S0].txt
2013-08-22 14:10 - 2013-04-08 20:11 - 01380263 _____ C:\Windows\WindowsUpdate.log
2013-08-22 14:08 - 2013-05-17 18:18 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\ICQ
2013-08-22 14:07 - 2013-07-13 10:51 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-22 14:07 - 2013-04-10 06:22 - 00064050 _____ C:\Windows\PFRO.log
2013-08-22 14:07 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-22 14:07 - 2009-07-14 06:51 - 00049618 _____ C:\Windows\setupact.log
2013-08-22 14:06 - 2013-08-22 14:04 - 00000000 ____D C:\AdwCleaner
2013-08-22 14:05 - 2013-04-12 16:41 - 00000000 ____D C:\ProgramData\ICQ
2013-08-22 14:05 - 2013-04-09 07:07 - 00001053 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-22 14:05 - 2013-04-08 20:16 - 00000995 _____ C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-22 14:05 - 2013-04-08 20:16 - 00000965 _____ C:\Users\GERDL\Desktop\Internet Explorer (64-bit).lnk
2013-08-22 14:04 - 2013-08-22 14:04 - 00975858 _____ C:\Users\GERDL\Downloads\adwcleaner.exe
2013-08-22 14:04 - 2013-08-22 14:04 - 00975858 _____ C:\Users\GERDL\Desktop\adwcleaner.exe
2013-08-22 12:53 - 2013-08-22 12:53 - 00024260 _____ C:\Users\GERDL\Desktop\Addition.txt
2013-08-22 12:52 - 2013-04-09 15:33 - 00000000 ____D C:\Users\GERDL\AppData\Local\Adobe
2013-08-22 12:50 - 2013-08-22 12:52 - 01576476 _____ (Farbar) C:\Users\GERDL\Desktop\FRST64.exe
2013-08-22 12:48 - 2013-08-22 12:48 - 00000000 ____D C:\FRST
2013-08-22 12:45 - 2013-05-30 13:51 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-08-22 11:05 - 2013-08-22 11:05 - 00001015 _____ C:\Users\GERDL\Desktop\Trojancheck.lnk
2013-08-22 11:05 - 2013-08-22 11:05 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-08-22 10:55 - 2013-04-14 19:24 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\TS3Client
2013-08-22 10:38 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-08-22 09:23 - 2013-08-22 09:05 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-22 09:05 - 2013-07-13 10:51 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-22 09:05 - 2013-04-08 20:54 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-22 09:05 - 2013-04-08 20:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-22 09:05 - 2013-04-08 20:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-22 08:37 - 2013-07-06 12:38 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-22 08:37 - 2013-05-30 13:58 - 00000000 ____D C:\Users\GERDL\Documents\Mein Steuer-Sparbuch Heute
2013-08-21 22:21 - 2013-04-22 20:04 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\vlc
2013-08-21 09:03 - 2013-08-19 11:00 - 00000005 _____ C:\Users\GERDL\AppData\Roaming\WBPU-TTL.DAT
2013-08-21 08:58 - 2013-05-18 12:57 - 00000000 ____D C:\Users\GERDL\AppData\Local\Spotify
2013-08-20 20:36 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Battle.net
2013-08-20 20:22 - 2009-07-14 19:58 - 00698688 _____ C:\Windows\system32\perfh007.dat
2013-08-20 20:22 - 2009-07-14 19:58 - 00148828 _____ C:\Windows\system32\perfc007.dat
2013-08-20 20:22 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-20 15:47 - 2013-05-20 16:42 - 00000000 ____D C:\Program Files (x86)\Plus-HD-1.3
2013-08-20 15:01 - 2013-05-02 14:37 - 00000000 ____D C:\Program Files (x86)\PolarEdit
2013-08-20 14:41 - 2013-08-20 14:41 - 00000000 ____D C:\Program Files (x86)\af0.net
2013-08-20 09:33 - 2013-04-09 06:56 - 00000000 ____D C:\Program Files\WinRAR
2013-08-19 21:07 - 2013-08-19 21:07 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-19 11:00 - 2013-08-19 11:00 - 00000058 _____ C:\Users\GERDL\AppData\Roaming\WB.CFG
2013-08-19 10:59 - 2013-08-19 10:59 - 00000681 _____ C:\Users\GERDL\Documents\GERDL - Verknüpfung.lnk
2013-08-19 10:59 - 2013-07-28 11:52 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-08-19 10:49 - 2013-04-08 20:16 - 00000000 ____D C:\Users\GERDL
2013-08-19 10:48 - 2013-07-29 05:22 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-08-19 10:11 - 2013-08-19 09:50 - 00002083 _____ C:\Users\Public\Desktop\Xilisoft MKV Converter.lnk
2013-08-19 10:00 - 2013-08-19 10:00 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Video Converter Packages
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\Documents\My Received Files
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\MusicNet
2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-19 09:51 - 2013-08-19 09:51 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Xilisoft
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\ProgramData\Xilisoft
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\Program Files (x86)\Xilisoft
2013-08-19 09:40 - 2013-08-19 09:40 - 00065536 _____ C:\Windows\IFinst27.exe
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ch Editor
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Program Files (x86)\Ch Editor
2013-08-19 06:50 - 2013-04-09 06:57 - 00000000 ____D C:\ProgramData\Adobe
2013-08-19 06:03 - 2013-04-09 07:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-18 14:19 - 2013-08-18 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-18 12:52 - 2013-04-23 18:26 - 00000000 ____D C:\Users\GERDL\AppData\Local\._Revolution_
2013-08-17 00:04 - 2013-04-19 11:05 - 00000000 ____D C:\Program Files (x86)\Epson Software
2013-08-15 18:48 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Battle.net
2013-08-15 18:45 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Blizzard Entertainment
2013-08-15 18:45 - 2013-08-15 18:44 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-08-15 18:44 - 2013-08-15 18:44 - 00001124 _____ C:\Users\Public\Desktop\Battle.net.lnk
2013-08-14 19:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 17:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-14 07:32 - 2013-08-14 07:30 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 07:30 - 2013-04-09 03:52 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-12 16:28 - 2013-08-12 16:28 - 00002233 _____ C:\Users\GERDL\AppData\Local\recently-used.xbel
2013-08-12 16:28 - 2013-06-13 19:25 - 00000000 ____D C:\Users\GERDL\.gimp-2.8
2013-08-11 15:19 - 2013-08-11 15:19 - 00000742 _____ C:\Users\Public\Desktop\My DocsToGo.lnk
2013-08-11 15:19 - 2013-08-11 15:19 - 00000000 ___SD C:\Users\GERDL\Documents\My DocsToGo
2013-08-11 15:19 - 2013-08-11 15:18 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DocumentsToGoDesktopAndroid
2013-08-11 15:18 - 2013-08-11 15:18 - 00001314 _____ C:\Users\Public\Desktop\Documents To Go Desktop for Android.lnk
2013-08-11 15:18 - 2013-08-11 15:18 - 00000000 ____D C:\Program Files (x86)\Documents To Go Desktop for Android
2013-08-11 00:22 - 2009-07-14 06:45 - 00291840 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-10 21:33 - 2013-08-11 15:15 - 00295933 _____ C:\Users\GERDL\Desktop\tippen2013-2014---1-17 spieltage.xlsx
2013-08-10 12:08 - 2013-04-08 20:43 - 00062480 _____ C:\Users\GERDL\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-10 11:44 - 2013-08-10 11:41 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 11:42 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Users\GERDL\AppData\Local\Microsoft Help
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-10 11:41 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew
2013-08-10 11:40 - 2013-08-10 11:40 - 00000000 __RHD C:\MSOCache
2013-08-06 16:49 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\GHISLER
2013-08-06 16:47 - 2013-08-06 16:47 - 00000000 ____D C:\Users\GERDL\AppData\Local\GHISLER
2013-08-06 16:46 - 2013-08-06 16:45 - 00000000 ____D C:\totalcmd
2013-08-06 16:45 - 2013-08-06 16:45 - 00000646 _____ C:\Users\GERDL\Desktop\Total Commander 64 bit.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000632 _____ C:\Users\GERDL\Desktop\Total Commander.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-08-04 14:09 - 2013-04-16 23:17 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-08-02 07:42 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-29 07:30 - 2013-07-29 07:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-07-29 05:22 - 2013-07-29 05:22 - 00002006 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00001996 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\Documents\samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Local\Samsung
2013-07-29 05:22 - 2013-07-29 05:20 - 00000000 ____D C:\ProgramData\Samsung
2013-07-29 05:22 - 2013-07-29 05:20 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-07-29 05:20 - 2013-04-08 20:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-29 05:19 - 2013-07-29 05:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Downloaded Installations
2013-07-26 07:13 - 2013-08-14 07:34 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-26 07:13 - 2013-08-14 07:33 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-26 07:13 - 2013-08-14 07:33 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-26 05:35 - 2013-08-14 07:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-26 05:13 - 2013-08-14 07:33 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-26 05:13 - 2013-08-14 07:33 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-26 05:11 - 2013-08-14 07:34 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-26 05:11 - 2013-08-14 07:33 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-26 04:49 - 2013-08-14 07:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-26 04:39 - 2013-08-14 07:34 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-26 03:59 - 2013-08-14 07:34 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-25 11:25 - 2013-08-14 07:28 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-25 10:57 - 2013-08-14 07:28 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-22 09:48
==================== End Of Log ============================
|
|
22.08.2013, 14:44
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9 Startseite bei IE+F.Fox- Wie entfernen ? Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM) Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
|
22.08.2013, 14:50
| #9 |
| | V9 Startseite bei IE+F.Fox- Wie entfernen ? werd ich machen gleich eine frage hab ich noch,,ist das Virenprogram das ich habe gut oder nicht zu empfehlen  benutze avast anti virus freewareoder kenst du ein gutes das mann empfehlen kann,,würd mir auch eins kaufen hauptsache 100% sicher |
|
22.08.2013, 14:52
| #10 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9 Startseite bei IE+F.Fox- Wie entfernen ? Avast ist ok und wird auch von uns empfohlen Zitat:
Schon garnicht nur mit einem Virenscanner! Ei System ist immer so sicher, wie der Anwender es eingerichtet hat und pflegt
__________________ Logfiles bitte immer in CODE-Tags posten |
|
22.08.2013, 17:05
| #11 |
| | V9 Startseite bei IE+F.Fox- Wie entfernen ? hallo wurde nichts mehr gefunden problem ist nun gelöst danke dir |
|
22.08.2013, 18:36
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9 Startseite bei IE+F.Fox- Wie entfernen ? Bitte trotzdem beide Logs posten
__________________ Logfiles bitte immer in CODE-Tags posten |
|
22.08.2013, 21:09
| #13 |
| | V9 Startseite bei IE+F.Fox- Wie entfernen ? hallo  sorry hab wohl esset online scanner Übersehn Er hatt wieder was gefundenCode:
ATTFilter Malwarebytes Anti-Malware (PRO) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.22.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16660 GERDL :: GERDL-PC [Administrator] Schutz: Aktiviert 22.08.2013 19:49:58 mbam-log-2013-08-22 (19-49-58).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 369161 Laufzeit: 32 Minute(n), 51 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=0fe5615e983f4e42aa78ffbcce395736
# engine=14869
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-22 05:40:13
# local_time=2013-08-22 07:40:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 3583533 153903085 0 0
# compatibility_mode=5893 16776573 100 94 7196 128823063 0 0
# scanned=211024
# found=5
# cleaned=0
# scan_time=6641
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\AppData\Local\IM\Identities\{C69B1FCB-E357-4BAC-9B3C-2A926BA242D5}\Message Store\Attachments\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=AC40992B000498F496E667772A50361A5A8E364C ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus" ac=I fn="C:\Users\GERDL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\AWB5P75T\firstload_com[1].htm"
sh=DA602313EC344E31F340105C29DF699267F73B84 ft=1 fh=34999f3f19837452 vn="multiple threats" ac=I fn="C:\Users\GERDL\AppData\Local\Temp\is1070216317\yontoo-C4.exe"
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\Desktop\Ihre_letzte_Mahnung_01.07.2013\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=F2CE0586FEAD9177CB5522DE3C684D1EA167BB37 ft=0 fh=0000000000000000 vn="a variant of Android/Plankton.I trojan" ac=I fn="C:\Users\GERDL\Documents\samsung\Kies\Backup\GT-I9300\GT-I9300_+4915141909356\GT-I9300_20130729053154\Others\blackmart\downloads\com.gtp.nextlauncher.2147483600.apk"
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=0fe5615e983f4e42aa78ffbcce395736
# engine=14869
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-22 06:24:33
# local_time=2013-08-22 08:24:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 3586193 153905745 0 0
# compatibility_mode=5893 16776573 100 94 6193 128825723 0 0
# scanned=82552
# found=3
# cleaned=0
# scan_time=2397
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\AppData\Local\IM\Identities\{C69B1FCB-E357-4BAC-9B3C-2A926BA242D5}\Message Store\Attachments\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=AC40992B000498F496E667772A50361A5A8E364C ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus" ac=I fn="C:\Users\GERDL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\AWB5P75T\firstload_com[1].htm"
sh=DA602313EC344E31F340105C29DF699267F73B84 ft=1 fh=34999f3f19837452 vn="multiple threats" ac=I fn="C:\Users\GERDL\AppData\Local\Temp\is1070216317\yontoo-C4.exe"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=0fe5615e983f4e42aa78ffbcce395736
# engine=14872
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-22 08:02:20
# local_time=2013-08-22 10:02:20 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 3592060 153911612 0 0
# compatibility_mode=5893 16776573 100 94 12060 128831590 0 0
# scanned=163722
# found=3
# cleaned=0
# scan_time=3530
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\AppData\Local\IM\Identities\{C69B1FCB-E357-4BAC-9B3C-2A926BA242D5}\Message Store\Attachments\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\Desktop\Ihre_letzte_Mahnung_01.07.2013\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=F2CE0586FEAD9177CB5522DE3C684D1EA167BB37 ft=0 fh=0000000000000000 vn="a variant of Android/Plankton.I trojan" ac=I fn="C:\Users\GERDL\Documents\samsung\Kies\Backup\GT-I9300\GT-I9300_+4915141909356\GT-I9300_20130729053154\Others\blackmart\downloads\com.gtp.nextlauncher.2147483600.apk"
|
|
22.08.2013, 21:50
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9 Startseite bei IE+F.Fox- Wie entfernen ? Das erste ist nur der Mailanhang selbst. Löschen. Das andere löschen wir mit TFC: TFC - Temp File Cleaner Lade dir  TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu V9 Startseite bei IE+F.Fox- Wie entfernen ? |
| anleitung, anti, avast, beste, besten, brauche, browser, deaktivieren, einfangen, entfernen, erfahrung, erfolgreich, explorer, firefox, folge, folgen, fängt, interne, internet, internet explorer, laufen, malwarebytes, plugin, seite, startseite, wie entfernen |
Linear-Darstellung
