ZBot / ZeuS Trojaner Telekombrief; VISA-card Hack

Lorenz_W · 10.09.2013, 15:56

Hier einmal der Inhalt der Logdatei vom AdwCleaner:
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.003 - Bericht erstellt am 10/09/2013 um 16:46:58
# Updated 07/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Lollo - LOLLO-PC
# Gestartet von : C:\Users\Lollo\Desktop\trojaner-board\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Program Files (x86)\delta
Ordner Gelöscht : C:\Users\Lollo\AppData\Local\FilesFrog Update Checker
Ordner Gelöscht : C:\Users\Lollo\AppData\Local\Temp\delta
Ordner Gelöscht : C:\Users\Lollo\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Lollo\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Lollo\AppData\Roaming\delta
Ordner Gelöscht : C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Ordner Gelöscht : C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\jetpack
Datei Gelöscht : C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\foxydeal.sqlite
Datei Gelöscht : C:\Windows\System32\Tasks\EPUpdater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\Somoto
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16502


-\\ Mozilla Firefox v24.0 (de)

-\\ Google Chrome v

[ Datei : C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : homepage
Gelöscht : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [103136 octets] - [08/09/2013 17:32:13]
AdwCleaner[R1].txt - [1456 octets] - [08/09/2013 17:54:23]
AdwCleaner[R2].txt - [3873 octets] - [10/09/2013 16:46:13]
AdwCleaner[S0].txt - [99933 octets] - [08/09/2013 17:33:21]
AdwCleaner[S1].txt - [1519 octets] - [08/09/2013 17:55:35]
AdwCleaner[S2].txt - [3405 octets] - [10/09/2013 16:46:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [3465 octets] ##########

--- --- ---

und der neue Inhalt vom FRST.txt:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-09-2013 01
Ran by Lollo (administrator) on LOLLO-PC on 10-09-2013 16:50:50
Running from C:\Users\Lollo\Desktop\trojaner-board
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~3\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\HitmanPro.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7311\Monitor.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Hauppauge Inc.) C:\Program Files (x86)\WinTV\EPG Services\System\EPGClient.exe
(FileServe Limited) C:\Program Files (x86)\FileServe Manager\FSStarter.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Dropbox, Inc.) C:\Users\Lollo\AppData\Roaming\Dropbox\bin\Dropbox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(PC Tools) C:\Program Files (x86)\ThreatFire\TFTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Andrea Electronics Corporation) C:\Windows\system32\AEADISRV.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Hauppauge Computer Works) C:\PROGRA~3\WinTV\EPG Services\System\EPGService.exe
() C:\Program Files (x86)\Folder Shield\FSService.exe
() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
(PC Tools) C:\Program Files (x86)\ThreatFire\TFService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(Ask.com) c:\program files (x86)\avira\antivir desktop\apnstub.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [855608 2007-09-27] (Microsoft Corporation)
HKLM\...\Run: [Monitor] - C:\Windows\PixArt\PAC7311\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Remote Mouse] - C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [1020416 2012-03-19] ()
HKCU\...\Run: [WindowsLivePhone] - C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe [787816 2008-12-22] (Microsoft Corporation)
HKLM-x32\...\Run: [WindowsLivePhone] - C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe [787816 2008-12-22] (Microsoft Corporation)
HKLM-x32\...\Run: [EPGServiceTool] - C:\Program Files (x86)\WinTV\EPG Services\System\EPGClient.exe [688128 2008-05-15] (Hauppauge Inc.)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [FileServe Manager Task] - C:\Program Files (x86)\FileServe Manager\FSStarter.exe [954648 2011-09-21] (FileServe Limited)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252296 2011-09-30] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [SoundMAXPnP] - C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1310720 2009-06-05] (Analog Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [348664 2012-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296096 2012-10-24] (RealNetworks, Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411440 2013-07-01] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [ThreatFire] - C:\Program Files (x86)\ThreatFire\TFTray.exe [378128 2011-02-22] (PC Tools)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\Default\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\ooVoo.exe [18784952 2010-02-07] (ooVoo LLC)
HKU\Default User\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\ooVoo.exe [18784952 2010-02-07] (ooVoo LLC)
HKU\UpdatusUser\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\ooVoo.exe [18784952 2010-02-07] (ooVoo LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lollo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * bootdelete

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.fcbayern.telekom.de/de/aktuell/news/index.php/
URLSearchHook: (No Name) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {43665783-1F33-49DF-A5E0-F6AB1EA26D13} URL = hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms}
SearchScopes: HKCU - {70F9B597-721C-42AF-90C2-8CCFE3EE2C91} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3279453&CUI=UN54875140188532717&UM=2
SearchScopes: HKCU - {D7DB45DB-0816-467d-879E-4BB791A10049} URL = hxxp://www.ask.com/web?&o=13795&l=dis&q={searchTerms}
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: FileServeManager - {00000001-AB3B-4334-9DA2-EC6B2A02AFC6} - C:\Program Files (x86)\FileServe Manager\FileServeBHO.dll (FileServe Limited)
BHO-x32: Octh Class - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File
Toolbar: HKLM-x32 - No Name - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File
Toolbar: HKLM-x32 - Gutscheinmieze - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - C:\Users\Lollo\AppData\Roaming\Gutscheinmieze\toolbar.dll (Synatix GmbH)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File
Toolbar: HKCU - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Lollo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Lollo\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Lollo\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Lollo\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\google-und-download-suche.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\foxsearch.src
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FoxyProxy Basic - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\foxyproxy@eric.h.jung
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\ich@maltegoetz.de
FF Extension: Move Media Player - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\moveplayer@movenetworks.com
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\staged
FF Extension: VideoGet FireFox extension - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{85E85FF9-E50C-42DE-8A3D-61485FD6C8DB}
FF Extension: WOT - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: Adobe DLM (powered by getPlus(R)) - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: radiobar - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\radiobar@toolbar.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: LoudMo Contextual Ad Assistant - C:\Program Files (x86)\Mozilla Firefox\extensions\{ec31c095-4846-647b-b006-7e33f0c57393}
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}] C:\Program Files (x86)\FileServe Manager\FireFox_Extension\{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}
FF Extension: FileServe Manager - C:\Program Files (x86)\FileServe Manager\FireFox_Extension\{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchURL: (Linkury Smartbar Search) - hxxp://www.google.com
CHR DefaultSuggestURL: (Linkury Smartbar Search) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Injovo Extension Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.412_0\npbrowserext.dll No File
CHR Plugin: (FileServe Manager) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpgkjhpjldibdbbppfcabadmpfenkdfe\1.0.0.3466_0\FSChromeAddOn.dll No File
CHR Plugin: (Skype Toolbars) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll No File
CHR Plugin: (Conduit Chrome Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0\plugins/ConduitChromeApiPlugin.dll No File
CHR Plugin: (Conduit Radio Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0\plugins/np-cwmp.dll No File
CHR Plugin: (Conduit Chrome Approve TB Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0\plugins/ChromeApproveTBPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Gutscheinmieze-Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\npmieze.dll No File
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (getPlusPlus for Adobe 16263) - C:\Program Files (x86)\Mozilla Firefox\plugins\np_gp.dll (NOS Microsystems Ltd.)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U2) - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
CHR Plugin: (My Web Search Plugin Stub) - C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Facebook Desktop) - C:\Users\Lollo\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Lollo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Google Drive) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Gmail) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [fpgkjhpjldibdbbppfcabadmpfenkdfe] - C:\Program Files (x86)\FileServe Manager\FSChromeAddOn.crx
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM-x32\...\Chrome\Extension: [oolkekjjhnaeaahibbnfebmogackofpf] - C:\Users\Lollo\AppData\Local\CRE\oolkekjjhnaeaahibbnfebmogackofpf.crx

==================== Services (Whitelisted) =================

R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [111616 2009-06-05] (Andrea Electronics Corporation)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86224 2012-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110032 2012-09-03] (Avira Operations GmbH & Co. KG)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)
S2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3128856 2012-02-28] (devolo AG)
R2 EPGService; C:\PROGRA~3\WinTV\EPG Services\System\EPGService.exe [437248 2008-05-30] (Hauppauge Computer Works)
S2 FSService; C:\Program Files (x86)\Folder Shield\FSService.exe [28672 2003-05-26] ()
S3 getPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll [68000 2010-03-29] (NOS Microsystems Ltd.)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [109352 2013-09-08] (SurfRight B.V.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S2 MySQL; C:\Program Files (x86)\MySQL\MySQL Server 5.5\my.ini [8924 2011-07-02] ()
R2 ThreatFire; C:\Program Files (x86)\ThreatFire\TFService.exe [70928 2011-02-22] (PC Tools)
S2 NovacomD; C:\Program Files (x86)\Palm\SDK\bin\novacom\amd64\novacomd.exe [x]
S2 Protector by IB Updater; C:\Program Files\Protector by IB\ExtensionUpdaterService.exe [x]

==================== Drivers (Whitelisted) ====================

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206648 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-09-03] (Avira GmbH)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-07-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2013-03-21] (AVG Technologies CZ, s.r.o.)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-09-03] (Avira GmbH)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2012-09-03] (Avira GmbH)
S0 bxShield; C:\Windows\SysWow64\Drivers\bxShield.sys [45056 2003-05-26] (Alfa Corporation)
R3 HCW3x64; C:\Windows\System32\DRIVERS\HCW3x64.sys [1087872 2007-03-26] (Hauppauge Computer Works inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2012-11-20] (CACE Technologies)
S3 PAC7311; C:\Windows\System32\DRIVERS\PA707UCM.SYS [602112 2006-11-08] (PixArt Imaging Inc.)
S3 Ph3xIB64; C:\Windows\System32\DRIVERS\Ph3xIB64.sys [1627520 2009-06-10] (NXP Semiconductors)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2011-06-10] (Duplex Secure Ltd.)
R0 TfFsMon; C:\Windows\System32\drivers\TfFsMon.sys [65072 2011-02-22] (PC Tools)
R3 TfNetMon; C:\Windows\system32\drivers\TfNetMon.sys [41888 2011-02-22] (PC Tools)
R3 TfNetMon; C:\Windows\system32\drivers\TfNetMon.sys [41888 2011-02-22] (PC Tools)
R0 TfSysMon; C:\Windows\System32\drivers\TfSysMon.sys [74824 2011-02-22] (PC Tools)
S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [145936 2010-03-25] (Sun Microsystems, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S0 bxShield; System32\Drivers\bxShield.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
U5 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] (Microsoft Corporation)
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP3\WNt500x64\Sandra.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-10 16:28 - 2013-09-10 16:29 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2013-09-10 11:02 - 2013-09-10 11:10 - 00000000 ____D C:\Users\Lollo\Documents\Masterarbeit
2013-09-09 10:54 - 2013-09-09 10:54 - 00000000 ___HD C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2013-09-08 22:00 - 2013-09-08 22:02 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-08 22:00 - 2013-09-08 22:00 - 00000000 ____D C:\Users\Lollo\.thumb
2013-09-08 21:59 - 2013-09-08 22:02 - 00000000 ____D C:\Program Files (x86)\DVDStyler
2013-09-08 21:59 - 2013-09-08 21:59 - 00001073 _____ C:\Users\Lollo\Desktop\DVDStyler.lnk
2013-09-08 19:39 - 2013-09-08 19:39 - 00000000 ____D C:\32788R22FWJFW
2013-09-08 18:07 - 2013-09-08 18:08 - 00000000 ____D C:\Qoobox
2013-09-08 18:06 - 2013-09-08 18:06 - 00000000 ____D C:\Windows\erdnt
2013-09-08 17:48 - 2013-09-08 17:48 - 600194561 _____ C:\Windows\MEMORY.DMP
2013-09-08 17:48 - 2013-09-08 17:48 - 00498368 _____ C:\Windows\Minidump\090813-98998-01.dmp
2013-09-08 17:32 - 2013-09-10 16:47 - 00000000 ____D C:\AdwCleaner
2013-09-08 17:21 - 2013-09-08 17:21 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-08 17:20 - 2013-09-08 17:20 - 01110476 _____ C:\Users\Lollo\Downloads\7z920.exe
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup.exe
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup (1).exe
2013-09-08 11:51 - 2013-09-08 11:51 - 00000000 ____D C:\FRST
2013-09-08 11:50 - 2013-09-10 16:50 - 00000000 ____D C:\Users\Lollo\Desktop\trojaner-board
2013-09-08 11:36 - 2013-09-08 11:36 - 00001979 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-09-08 11:11 - 2013-09-08 11:41 - 00000582 _____ C:\Users\Lollo\Downloads\defogger_disable.log
2013-09-08 11:11 - 2013-09-08 11:41 - 00000060 _____ C:\Users\Lollo\defogger_reenable
2013-09-08 11:09 - 2013-09-08 11:09 - 00056006 _____ C:\Windows\system32\.crusader
2013-09-08 10:43 - 2013-09-08 22:00 - 00000000 ____D C:\Program Files (x86)\ThreatFire
2013-09-08 10:43 - 2013-09-08 10:43 - 09876312 _____ (PC Tools                                                    ) C:\Users\Lollo\Downloads\tfinstall.exe
2013-09-08 10:43 - 2013-09-08 10:43 - 00000898 _____ C:\Users\Public\Desktop\ThreatFire.lnk
2013-09-08 10:43 - 2013-09-08 10:43 - 00000000 ____D C:\ProgramData\PC Tools
2013-09-08 10:43 - 2011-02-22 13:57 - 00074824 _____ (PC Tools) C:\Windows\system32\Drivers\TfSysMon.sys
2013-09-08 10:43 - 2011-02-22 13:57 - 00065072 _____ (PC Tools) C:\Windows\system32\Drivers\TfFsMon.sys
2013-09-08 10:43 - 2011-02-22 13:57 - 00041888 _____ (PC Tools) C:\Windows\system32\Drivers\TfNetMon.sys
2013-09-08 10:41 - 2013-09-08 10:41 - 00001909 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-09-08 10:41 - 2013-09-08 10:41 - 00000000 ____D C:\Program Files\HitmanPro
2013-09-08 10:40 - 2013-09-08 11:13 - 00000000 ____D C:\ProgramData\HitmanPro
2013-09-08 10:37 - 2013-09-08 10:40 - 09879648 _____ (SurfRight B.V.) C:\Users\Lollo\Downloads\hitmanpro_x64.exe
2013-09-02 10:41 - 2013-09-02 10:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 19:55 - 2013-07-25 05:54 - 17830400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-17 19:55 - 2013-07-25 05:37 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-17 19:55 - 2013-07-25 05:35 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-17 19:55 - 2013-07-25 05:31 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-17 19:55 - 2013-07-25 05:30 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-17 19:55 - 2013-07-25 05:29 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-17 19:55 - 2013-07-25 05:29 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-17 19:55 - 2013-07-25 05:29 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-17 19:55 - 2013-07-25 05:27 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-17 19:55 - 2013-07-25 05:27 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-17 19:55 - 2013-07-25 05:26 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-17 19:55 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-17 19:55 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-17 19:55 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-17 19:55 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-17 19:55 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-17 19:55 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-08-17 19:55 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-17 19:55 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-08-17 19:55 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-17 19:55 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-17 19:55 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-17 15:23 - 2013-08-17 15:24 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-17 15:23 - 2013-08-17 15:24 - 00000000 ____D C:\Program Files\iTunes
2013-08-17 15:23 - 2013-08-17 15:23 - 00000000 ____D C:\Program Files\iPod
2013-08-17 14:06 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-17 14:06 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-17 14:06 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-17 14:06 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-17 14:06 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-17 14:06 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-17 14:06 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-17 14:06 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-17 14:06 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-17 14:06 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-17 14:06 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-17 14:06 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-17 14:05 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-17 14:05 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-17 14:05 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-17 14:05 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-10 16:50 - 2013-09-08 11:50 - 00000000 ____D C:\Users\Lollo\Desktop\trojaner-board
2013-09-10 16:49 - 2011-10-28 08:50 - 00074627 _____ C:\Windows\setupact.log
2013-09-10 16:49 - 2011-04-27 12:13 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Dropbox
2013-09-10 16:49 - 2009-12-15 20:03 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-10 16:49 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-10 16:49 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-10 16:47 - 2013-09-08 17:32 - 00000000 ____D C:\AdwCleaner
2013-09-10 16:42 - 2013-09-10 16:45 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Desktop\phoneclean-setup-2.2.2.exe
2013-09-10 16:40 - 2009-07-14 06:45 - 00013776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-10 16:40 - 2009-07-14 06:45 - 00013776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-10 16:35 - 2009-12-13 16:25 - 01299571 _____ C:\Windows\WindowsUpdate.log
2013-09-10 16:29 - 2013-09-10 16:28 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2013-09-10 14:47 - 2009-12-13 23:31 - 00000000 ____D C:\ProgramData\Adobe
2013-09-10 13:07 - 2009-07-14 19:58 - 00673986 _____ C:\Windows\system32\perfh007.dat
2013-09-10 13:07 - 2009-07-14 19:58 - 00135448 _____ C:\Windows\system32\perfc007.dat
2013-09-10 13:07 - 2009-07-14 07:13 - 01538316 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-10 11:10 - 2013-09-10 11:02 - 00000000 ____D C:\Users\Lollo\Documents\Masterarbeit
2013-09-10 10:59 - 2009-12-13 21:47 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Adobe
2013-09-10 10:44 - 2013-03-28 15:45 - 00000000 ____D C:\ProgramData\MFAData
2013-09-09 20:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-09 20:11 - 2011-10-28 08:50 - 00241942 _____ C:\Windows\PFRO.log
2013-09-09 11:22 - 2012-12-02 11:36 - 00000000 ____D C:\Program Files (x86)\Glary Utilities
2013-09-09 11:22 - 2011-05-16 19:44 - 00000000 ____D C:\Program Files (x86)\Orbitdownloader
2013-09-09 11:02 - 2010-02-14 14:08 - 00000000 ____D C:\Program Files (x86)\eBay
2013-09-09 11:00 - 2010-02-14 14:09 - 00001550 _____ C:\InstallHelper.log
2013-09-09 10:55 - 2010-05-02 17:40 - 00000000 ____D C:\Program Files (x86)\SUPERAntiSpyware
2013-09-09 10:54 - 2013-09-09 10:54 - 00000000 ___HD C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2013-09-09 10:54 - 2009-12-13 17:33 - 00000000 ___RD C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-09 10:40 - 2010-01-24 11:05 - 00000000 ____D C:\Program Files (x86)\WinTV
2013-09-09 10:38 - 2010-01-24 11:04 - 00006422 _____ C:\Windows\HCWPNP.INI
2013-09-08 22:05 - 2013-04-30 08:17 - 00386152 _____ C:\Windows\IE10_main.log
2013-09-08 22:05 - 2012-04-23 20:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-08 22:02 - 2013-09-08 22:00 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-08 22:02 - 2013-09-08 21:59 - 00000000 ____D C:\Program Files (x86)\DVDStyler
2013-09-08 22:00 - 2013-09-08 22:00 - 00000000 ____D C:\Users\Lollo\.thumb
2013-09-08 22:00 - 2013-09-08 10:43 - 00000000 ____D C:\Program Files (x86)\ThreatFire
2013-09-08 22:00 - 2009-12-13 17:33 - 00000000 ____D C:\Users\Lollo
2013-09-08 21:59 - 2013-09-08 21:59 - 00001073 _____ C:\Users\Lollo\Desktop\DVDStyler.lnk
2013-09-08 21:50 - 2012-12-02 11:36 - 00000326 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-09-08 21:48 - 2012-05-02 19:15 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-08 21:48 - 2011-07-02 16:22 - 00000402 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2013-09-08 21:47 - 2012-02-16 10:14 - 00079672 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\AFD.SYS
2013-09-08 21:47 - 2009-07-14 02:10 - 00079672 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\WS2IFSL.SYS
2013-09-08 20:45 - 2012-11-30 17:27 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA.job
2013-09-08 20:37 - 2012-05-02 19:15 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-08 19:45 - 2012-11-30 17:27 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core.job
2013-09-08 19:39 - 2013-09-08 19:39 - 00000000 ____D C:\32788R22FWJFW
2013-09-08 18:32 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-09-08 18:17 - 2012-03-08 19:59 - 00001138 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA.job
2013-09-08 18:08 - 2013-09-08 18:07 - 00000000 ____D C:\Qoobox
2013-09-08 18:06 - 2013-09-08 18:06 - 00000000 ____D C:\Windows\erdnt
2013-09-08 17:48 - 2013-09-08 17:48 - 600194561 _____ C:\Windows\MEMORY.DMP
2013-09-08 17:48 - 2013-09-08 17:48 - 00498368 _____ C:\Windows\Minidump\090813-98998-01.dmp
2013-09-08 17:48 - 2009-12-27 01:19 - 00000000 ____D C:\Windows\Minidump
2013-09-08 17:33 - 2010-04-17 19:01 - 00000000 ____D C:\ProgramData\ICQ
2013-09-08 17:21 - 2013-09-08 17:21 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-08 17:20 - 2013-09-08 17:20 - 01110476 _____ C:\Users\Lollo\Downloads\7z920.exe
2013-09-08 16:55 - 2013-01-03 12:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0
2013-09-08 16:55 - 2010-04-18 15:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup.exe
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup (1).exe
2013-09-08 12:17 - 2012-03-08 19:59 - 00001116 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core.job
2013-09-08 11:51 - 2013-09-08 11:51 - 00000000 ____D C:\FRST
2013-09-08 11:44 - 2011-04-27 15:51 - 00000000 ___RD C:\Users\Lollo\Dropbox
2013-09-08 11:41 - 2013-09-08 11:11 - 00000582 _____ C:\Users\Lollo\Downloads\defogger_disable.log
2013-09-08 11:41 - 2013-09-08 11:11 - 00000060 _____ C:\Users\Lollo\defogger_reenable
2013-09-08 11:39 - 2009-12-13 17:42 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{12043DB5-19F5-4D55-9C79-A2A866428EBB}
2013-09-08 11:36 - 2013-09-08 11:36 - 00001979 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-09-08 11:35 - 2010-04-10 11:05 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-09-08 11:35 - 2009-12-13 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Local\Adobe
2013-09-08 11:28 - 2009-12-27 01:38 - 00000000 ____D C:\Program Files (x86)\Hotspot Shield
2013-09-08 11:13 - 2013-09-08 10:40 - 00000000 ____D C:\ProgramData\HitmanPro
2013-09-08 11:09 - 2013-09-08 11:09 - 00056006 _____ C:\Windows\system32\.crusader
2013-09-08 10:43 - 2013-09-08 10:43 - 09876312 _____ (PC Tools                                                    ) C:\Users\Lollo\Downloads\tfinstall.exe
2013-09-08 10:43 - 2013-09-08 10:43 - 00000898 _____ C:\Users\Public\Desktop\ThreatFire.lnk
2013-09-08 10:43 - 2013-09-08 10:43 - 00000000 ____D C:\ProgramData\PC Tools
2013-09-08 10:41 - 2013-09-08 10:41 - 00001909 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-09-08 10:41 - 2013-09-08 10:41 - 00000000 ____D C:\Program Files\HitmanPro
2013-09-08 10:40 - 2013-09-08 10:37 - 09879648 _____ (SurfRight B.V.) C:\Users\Lollo\Downloads\hitmanpro_x64.exe
2013-09-08 10:18 - 2012-11-30 17:28 - 00002368 _____ C:\Users\Lollo\Desktop\Google Chrome.lnk
2013-09-08 10:03 - 2012-06-24 11:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-02 12:42 - 2010-01-27 17:19 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-09-02 11:11 - 2012-09-17 20:57 - 00000000 ____D C:\ProgramData\REPORTS
2013-09-02 10:41 - 2013-09-02 10:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-28 19:20 - 2013-03-28 15:48 - 00000941 _____ C:\Users\Public\Desktop\AVG 2013.lnk
2013-08-20 21:06 - 2012-04-23 20:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-20 21:05 - 2012-04-23 20:44 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 21:05 - 2011-05-24 16:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-17 17:15 - 2009-12-13 21:08 - 00000000 ____D C:\Users\Lollo\AppData\Local\Mozilla
2013-08-17 15:24 - 2013-08-17 15:23 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-17 15:24 - 2013-08-17 15:23 - 00000000 ____D C:\Program Files\iTunes
2013-08-17 15:24 - 2012-09-14 14:38 - 00001743 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-17 15:23 - 2013-08-17 15:23 - 00000000 ____D C:\Program Files\iPod
2013-08-17 15:23 - 2009-12-13 21:21 - 00000000 ____D C:\Program Files (x86)\iTunes

Files to move or delete:
====================
C:\Users\Lollo\AppData\Local\Temp\Quarantine.exe
C:\Users\Lollo\AppData\Local\Temp\SSUPDATE.EXE

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-08 20:49

==================== End Of Log ============================

--- --- ---

Kann ich die alten FRST.txt Datein loeschen oder empfiehlt es sich diese aufzubewahren?

aharonov · 10.09.2013, 15:59

Die alten FRST.txt brauchst du nicht aufzubewahren.

Mach bitte Folgendes und teste danach wieder, ob sich eine Verbindung zum Internet herstellen lässt:

Downloade dir bitte Windows Repair (all in one) und entpacke das Archiv auf den Desktop.

Starte nun die darin enthaltene Repair_Windows.exe.
Wähle den Reiter Step 2 (optional) und drücke auf Do It. Der Rechner wird neu gestartet.
Öffne das Programm erneut und klicke im Reiter Step 3 (optional) ebenfalls auf Do It. Starte danach den Rechner neu.
Im Reiter Step 4 (optional) drücke dann unter System Restore auf Create.
Danach drücke im Reiter Start Repairs auf Start.
Klicke auf Select All, setze den Haken bei Restart/Shutdown System When Finished und wähle die Option Restart System.
Deaktiviere temporär dein Antivirenprogramm und drücke auf Start.

Lorenz_W · 10.09.2013, 17:48

Die Schritte sind jetzt alle erfolgreich beendet werden jedoch besteht nach wie vor keine Verbindung zum Internet :/

aharonov · 10.09.2013, 18:17

Ok, dann mach bitte nochmals ein Log mit FSS:

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Lorenz_W · 10.09.2013, 22:06

Hat alles funktioniert.
Hier der Inhalt der FSS.txt

Code:

ATTFilter

Farbar Service Scanner Version: 05-09-2013
Ran by Lollo (administrator) on 10-09-2013 at 19:33:24
Running from "C:\Users\Lollo\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

afd Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open afd registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open afd registry key. The service key does not exist.
Checking LEGACY_afd: ATTENTION!=====> Unable to open LEGACY_afd\0000 registry key. The key does not exist.


Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error. 
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo.com returned error: Other errors


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============

wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv: "C:\Windows\system32\wuaueng.dll".

BITS Service is not running. Checking service configuration:
The start type of BITS service is OK.
The ImagePath of BITS service is OK.
The ServiceDll of BITS service is OK.


Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

aharonov · 11.09.2013, 08:27

Ok, dann lade bitte die AFD.reg herunter und speichere sie auf den Desktop. Führe die Datei dann aus und bestätige das Hinzufügen zur Registrierungsdatenbank.
Starte anschliessend den Rechner neu und mach darauf einen neuen Scan mit FSS und poste das Log.

Lorenz_W · 11.09.2013, 21:29

Hier der Inhalt der neues FSS.txt:

Code:

ATTFilter

Farbar Service Scanner Version: 05-09-2013
Ran by Lollo (administrator) on 11-09-2013 at 22:20:42
Running from "C:\Users\Lollo\Desktop\trojaner-board"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

afd Service is not running. Checking service configuration:
The start type of afd service is OK.
The ImagePath of afd service is OK.
Checking LEGACY_afd: ATTENTION!=====> Unable to open LEGACY_afd\0000 registry key. The key does not exist.


Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error. 
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo.com returned error: Other errors


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv: "C:\Windows\system32\wuaueng.dll".

BITS Service is not running. Checking service configuration:
The start type of BITS service is OK.
The ImagePath of BITS service is OK.
The ServiceDll of BITS service is OK.


Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

aharonov · 11.09.2013, 21:32

Hast du den Rechner vor dem FSS-Scan neu gestartet?

Falls ja, dann bitte auch noch die LEGACY_AFD.reg herunterladen und zur Registrierungsdatenbank hinzufügen und danach erneut nach Neustart ein neues FSS-Log machen.

Lorenz_W · 12.09.2013, 06:49

Ja ich habe den Rechner jeweil wieder neu gestartet.
Hier der neue Inhalt der FSS.txt Datei:

Code:

ATTFilter

Farbar Service Scanner Version: 05-09-2013
Ran by Lollo (administrator) on 12-09-2013 at 07:43:10
Running from "C:\Users\Lollo\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

aharonov · 12.09.2013, 08:23

Laut diesem Log sollte deine Internetverbindung jetzt wieder funktionieren. Ist das korrekt?
(Das Log ist aber nicht ganz vollständig. Hast du es gekürzt oder bei FSS die Haken bei gewissen Optionen entfernt?)

Lorenz_W · 12.09.2013, 14:13

Das Internet geht jetzt nach einem erneuten Neustart wieder

Allerdings ist vor allem Firefox sehr langsam und hängt ab und zu. (liegt aber nicht an der Internetverbindung - Chrome läuft viel besser!)
Hier noch der Inhalt des kompletten FSS.txt (hat vergessen überall die Hacken zu setzen):

Code:

ATTFilter

Farbar Service Scanner Version: 05-09-2013
Ran by Lollo (administrator) on 12-09-2013 at 10:30:20
Running from "C:\Users\Lollo\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

aharonov · 12.09.2013, 14:18

Gut, dann wäre das wieder ausgebügelt und wir können uns wieder um die Hauptsache kümmern.
Bitte ein neues FRST-Log machen:

Starte noch einmal FRST.

Setze bei Optional Scan den Haken bei Addition.txt und drücke Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und Addition.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieser beiden Logfiles bitte hier in deinen Thread.

Lorenz_W · 12.09.2013, 15:33

Hier die beiden Inhalte der jeweiligen Datein:

FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-09-2013 02
Ran by Lollo (administrator) on LOLLO-PC on 12-09-2013 16:27:49
Running from C:\Users\Lollo\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~3\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7311\Monitor.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
() C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Dropbox, Inc.) C:\Users\Lollo\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hauppauge Inc.) C:\Program Files (x86)\WinTV\EPG Services\System\EPGClient.exe
(FileServe Limited) C:\Program Files (x86)\FileServe Manager\FSStarter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Andrea Electronics Corporation) C:\Windows\system32\AEADISRV.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
() C:\Program Files (x86)\Remote Mouse\server\server.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(PC Tools) C:\Program Files (x86)\ThreatFire\TFTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Hauppauge Computer Works) C:\PROGRA~3\WinTV\EPG Services\System\EPGService.exe
() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
() C:\Program Files (x86)\MySQL\MySQL Server 5.5\bin\mysqld.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
(PC Tools) C:\Program Files (x86)\ThreatFire\TFService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Facebook Inc.) C:\Users\Lollo\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dinotify.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\werfault.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Users\Lollo\Desktop\trojaner-board\FRST64.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [855608 2007-09-27] (Microsoft Corporation)
HKLM\...\Run: [Monitor] - C:\Windows\PixArt\PAC7311\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Remote Mouse] - C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [1020416 2012-03-19] ()
HKCU\...\Run: [WindowsLivePhone] - C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe [787816 2008-12-22] (Microsoft Corporation)
HKLM-x32\...\Run: [WindowsLivePhone] - C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe [787816 2008-12-22] (Microsoft Corporation)
HKLM-x32\...\Run: [EPGServiceTool] - C:\Program Files (x86)\WinTV\EPG Services\System\EPGClient.exe [688128 2008-05-15] (Hauppauge Inc.)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [FileServe Manager Task] - C:\Program Files (x86)\FileServe Manager\FSStarter.exe [954648 2011-09-21] (FileServe Limited)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252296 2011-09-30] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [SoundMAXPnP] - C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1310720 2009-06-05] (Analog Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [348664 2012-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296096 2012-10-24] (RealNetworks, Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411440 2013-07-01] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [ThreatFire] - C:\Program Files (x86)\ThreatFire\TFTray.exe [378128 2011-02-22] (PC Tools)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [151952 2012-11-29] (Apple Inc.)
HKU\Default\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\ooVoo.exe [18784952 2010-02-07] (ooVoo LLC)
HKU\Default User\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\ooVoo.exe [18784952 2010-02-07] (ooVoo LLC)
HKU\UpdatusUser\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\ooVoo.exe [18784952 2010-02-07] (ooVoo LLC)
Startup: C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lollo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * bootdelete

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.fcbayern.telekom.de/de/aktuell/news/index.php/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD09144D02F91CA01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: (No Name) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {43665783-1F33-49DF-A5E0-F6AB1EA26D13} URL = hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms}
SearchScopes: HKCU - {70F9B597-721C-42AF-90C2-8CCFE3EE2C91} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3279453&CUI=UN54875140188532717&UM=2
SearchScopes: HKCU - {D7DB45DB-0816-467d-879E-4BB791A10049} URL = hxxp://www.ask.com/web?&o=13795&l=dis&q={searchTerms}
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: FileServeManager - {00000001-AB3B-4334-9DA2-EC6B2A02AFC6} - C:\Program Files (x86)\FileServe Manager\FileServeBHO.dll (FileServe Limited)
BHO-x32: Octh Class - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File
Toolbar: HKLM-x32 -  No Name - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File
Toolbar: HKLM-x32 - Gutscheinmieze - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - C:\Users\Lollo\AppData\Roaming\Gutscheinmieze\toolbar.dll (Synatix GmbH)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU -  No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU -  No Name - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} -  No File
Toolbar: HKCU -  No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Toolbar: HKCU -  No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File
Toolbar: HKCU -  No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Lollo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Lollo\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Lollo\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Lollo\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\google-und-download-suche.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\foxsearch.src
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FoxyProxy Basic - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\foxyproxy@eric.h.jung
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\ich@maltegoetz.de
FF Extension: Move Media Player - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\moveplayer@movenetworks.com
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\staged
FF Extension: VideoGet FireFox extension - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{85E85FF9-E50C-42DE-8A3D-61485FD6C8DB}
FF Extension: WOT - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: Adobe DLM (powered by getPlus(R)) - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: radiobar - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\radiobar@toolbar.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: LoudMo Contextual Ad Assistant - C:\Program Files (x86)\Mozilla Firefox\extensions\{ec31c095-4846-647b-b006-7e33f0c57393}
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}] - C:\Program Files (x86)\FileServe Manager\FireFox_Extension\{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}
FF Extension: FileServe Manager - C:\Program Files (x86)\FileServe Manager\FireFox_Extension\{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchURL: (Linkury Smartbar Search) - hxxp://www.google.com
CHR DefaultSuggestURL: (Linkury Smartbar Search) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Injovo Extension Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.412_0\npbrowserext.dll No File
CHR Plugin: (FileServe Manager) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpgkjhpjldibdbbppfcabadmpfenkdfe\1.0.0.3466_0\FSChromeAddOn.dll No File
CHR Plugin: (Skype Toolbars) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll No File
CHR Plugin: (Conduit Chrome Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0\plugins/ConduitChromeApiPlugin.dll No File
CHR Plugin: (Conduit Radio Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0\plugins/np-cwmp.dll No File
CHR Plugin: (Conduit Chrome Approve TB Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0\plugins/ChromeApproveTBPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Gutscheinmieze-Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\npmieze.dll No File
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (getPlusPlus for Adobe 16263) - C:\Program Files (x86)\Mozilla Firefox\plugins\np_gp.dll (NOS Microsystems Ltd.)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U2) - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
CHR Plugin: (My Web Search Plugin Stub) - C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Facebook Desktop) - C:\Users\Lollo\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Lollo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Google Drive) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Gmail) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [fpgkjhpjldibdbbppfcabadmpfenkdfe] - C:\Program Files (x86)\FileServe Manager\FSChromeAddOn.crx
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM-x32\...\Chrome\Extension: [oolkekjjhnaeaahibbnfebmogackofpf] - C:\Users\Lollo\AppData\Local\CRE\oolkekjjhnaeaahibbnfebmogackofpf.crx

==================== Services (Whitelisted) =================

R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [111616 2009-06-05] (Andrea Electronics Corporation)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86224 2012-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110032 2012-09-03] (Avira Operations GmbH & Co. KG)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3128856 2012-02-28] (devolo AG)
R2 EPGService; C:\PROGRA~3\WinTV\EPG Services\System\EPGService.exe [437248 2008-05-30] (Hauppauge Computer Works)
S2 FSService; C:\Program Files (x86)\Folder Shield\FSService.exe [28672 2003-05-26] ()
S3 getPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll [68000 2010-03-29] (NOS Microsystems Ltd.)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [109352 2013-09-08] (SurfRight B.V.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 MySQL; C:\Program Files (x86)\MySQL\MySQL Server 5.5\my.ini [8924 2011-07-02] ()
R2 ThreatFire; C:\Program Files (x86)\ThreatFire\TFService.exe [70928 2011-02-22] (PC Tools)
S2 NovacomD; C:\Program Files (x86)\Palm\SDK\bin\novacom\amd64\novacomd.exe [x]
S2 Protector by IB Updater; C:\Program Files\Protector by IB\ExtensionUpdaterService.exe [x]

==================== Drivers (Whitelisted) ====================

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206648 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-09-03] (Avira GmbH)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-07-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2013-03-21] (AVG Technologies CZ, s.r.o.)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-09-03] (Avira GmbH)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2012-09-03] (Avira GmbH)
S0 bxShield; C:\Windows\SysWow64\Drivers\bxShield.sys [45056 2003-05-26] (Alfa Corporation)
R3 HCW3x64; C:\Windows\System32\DRIVERS\HCW3x64.sys [1087872 2007-03-26] (Hauppauge Computer Works inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2012-11-20] (CACE Technologies)
S3 PAC7311; C:\Windows\System32\DRIVERS\PA707UCM.SYS [602112 2006-11-08] (PixArt Imaging Inc.)
S3 Ph3xIB64; C:\Windows\System32\DRIVERS\Ph3xIB64.sys [1627520 2009-06-10] (NXP Semiconductors)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2011-06-10] (Duplex Secure Ltd.)
R0 TfFsMon; C:\Windows\System32\drivers\TfFsMon.sys [65072 2011-02-22] (PC Tools)
R3 TfNetMon; C:\Windows\system32\drivers\TfNetMon.sys [41888 2011-02-22] (PC Tools)
R3 TfNetMon; C:\Windows\system32\drivers\TfNetMon.sys [41888 2011-02-22] (PC Tools)
R0 TfSysMon; C:\Windows\System32\drivers\TfSysMon.sys [74824 2011-02-22] (PC Tools)
S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [145936 2010-03-25] (Sun Microsystems, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S0 bxShield; System32\Drivers\bxShield.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
U5 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] (Microsoft Corporation)
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP3\WNt500x64\Sandra.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-12 16:26 - 2013-09-12 16:26 - 01949642 _____ (Farbar) C:\Users\Lollo\Downloads\FRST64.exe
2013-09-12 07:43 - 2013-09-12 10:30 - 00002481 _____ C:\Users\Lollo\Desktop\FSS.txt
2013-09-12 07:38 - 2013-09-12 07:38 - 00001136 _____ C:\Users\Lollo\Desktop\LEGACY_AFD.reg
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\Program Files\iTunes
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\Program Files\iPod
2013-09-10 23:31 - 2013-09-10 23:31 - 00001202 _____ C:\Users\Public\Desktop\PhoneClean.lnk
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\iMobie
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Local\iMobie_Inc
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Program Files (x86)\iMobie
2013-09-10 19:33 - 2013-09-10 19:23 - 00358609 _____ (Farbar) C:\Users\Lollo\Desktop\FSS.exe
2013-09-10 18:00 - 2013-07-18 17:01 - 01949696 _____ (Tweaking.com) C:\Users\Lollo\Desktop\Repair_Windows.exe
2013-09-10 17:22 - 2013-09-10 17:22 - 00003272 ____N C:\bootsqm.dat
2013-09-10 17:06 - 2013-09-10 18:36 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-09-10 11:02 - 2013-09-10 11:10 - 00000000 ____D C:\Users\Lollo\Documents\Masterarbeit
2013-09-09 10:54 - 2013-09-09 10:54 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2013-09-08 22:00 - 2013-09-08 22:02 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-08 22:00 - 2013-09-08 22:00 - 00000000 ____D C:\Users\Lollo\.thumb
2013-09-08 21:59 - 2013-09-08 22:02 - 00000000 ____D C:\Program Files (x86)\DVDStyler
2013-09-08 21:59 - 2013-09-08 21:59 - 00001073 _____ C:\Users\Lollo\Desktop\DVDStyler.lnk
2013-09-08 19:39 - 2013-09-08 19:39 - 00000000 ____D C:\32788R22FWJFW
2013-09-08 18:07 - 2013-09-08 18:08 - 00000000 ____D C:\Qoobox
2013-09-08 18:06 - 2013-09-08 18:06 - 00000000 ____D C:\Windows\erdnt
2013-09-08 17:48 - 2013-09-08 17:48 - 600194561 _____ C:\Windows\MEMORY.DMP
2013-09-08 17:48 - 2013-09-08 17:48 - 00498368 _____ C:\Windows\Minidump\090813-98998-01.dmp
2013-09-08 17:32 - 2013-09-10 16:47 - 00000000 ____D C:\AdwCleaner
2013-09-08 17:21 - 2013-09-08 17:21 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-08 17:20 - 2013-09-08 17:20 - 01110476 _____ C:\Users\Lollo\Downloads\7z920.exe
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup.exe
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup (1).exe
2013-09-08 11:51 - 2013-09-08 11:51 - 00000000 ____D C:\FRST
2013-09-08 11:50 - 2013-09-12 16:26 - 00000000 ____D C:\Users\Lollo\Desktop\trojaner-board
2013-09-08 11:36 - 2013-09-08 11:36 - 00001979 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-09-08 11:11 - 2013-09-08 11:41 - 00000582 _____ C:\Users\Lollo\Downloads\defogger_disable.log
2013-09-08 11:11 - 2013-09-08 11:41 - 00000060 _____ C:\Users\Lollo\defogger_reenable
2013-09-08 11:09 - 2013-09-08 11:09 - 00056006 _____ C:\Windows\system32\.crusader
2013-09-08 10:43 - 2013-09-12 14:31 - 00000000 ____D C:\Program Files (x86)\ThreatFire
2013-09-08 10:43 - 2013-09-08 10:43 - 09876312 _____ (PC Tools                                                    ) C:\Users\Lollo\Downloads\tfinstall.exe
2013-09-08 10:43 - 2013-09-08 10:43 - 00000898 _____ C:\Users\Public\Desktop\ThreatFire.lnk
2013-09-08 10:43 - 2013-09-08 10:43 - 00000000 ____D C:\ProgramData\PC Tools
2013-09-08 10:43 - 2011-02-22 13:57 - 00074824 _____ (PC Tools) C:\Windows\system32\Drivers\TfSysMon.sys
2013-09-08 10:43 - 2011-02-22 13:57 - 00065072 _____ (PC Tools) C:\Windows\system32\Drivers\TfFsMon.sys
2013-09-08 10:43 - 2011-02-22 13:57 - 00041888 _____ (PC Tools) C:\Windows\system32\Drivers\TfNetMon.sys
2013-09-08 10:41 - 2013-09-08 10:41 - 00001909 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-09-08 10:41 - 2013-09-08 10:41 - 00000000 ____D C:\Program Files\HitmanPro
2013-09-08 10:40 - 2013-09-08 11:13 - 00000000 ____D C:\ProgramData\HitmanPro
2013-09-08 10:37 - 2013-09-08 10:40 - 09879648 _____ (SurfRight B.V.) C:\Users\Lollo\Downloads\hitmanpro_x64.exe
2013-09-02 10:41 - 2013-09-12 16:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 19:55 - 2013-07-25 05:54 - 17830400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-17 19:55 - 2013-07-25 05:37 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-17 19:55 - 2013-07-25 05:35 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-17 19:55 - 2013-07-25 05:31 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-17 19:55 - 2013-07-25 05:30 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-17 19:55 - 2013-07-25 05:29 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-17 19:55 - 2013-07-25 05:29 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-17 19:55 - 2013-07-25 05:29 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-17 19:55 - 2013-07-25 05:27 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-17 19:55 - 2013-07-25 05:27 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-17 19:55 - 2013-07-25 05:26 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-17 19:55 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-17 19:55 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-17 19:55 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-17 19:55 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-17 19:55 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-17 19:55 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-08-17 19:55 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-17 19:55 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-08-17 19:55 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-17 19:55 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-17 19:55 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-17 14:06 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-17 14:06 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-17 14:06 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-17 14:06 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-17 14:06 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-17 14:06 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-17 14:06 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-17 14:06 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-17 14:06 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-17 14:06 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-17 14:06 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-17 14:06 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-17 14:05 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-17 14:05 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-17 14:05 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-17 14:05 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-12 16:27 - 2013-09-12 16:27 - 04363976 _____ (Systweak Inc                                                ) C:\Users\Lollo\Downloads\rcpafterdownloadcp.exe
2013-09-12 16:26 - 2013-09-12 16:26 - 01949642 _____ (Farbar) C:\Users\Lollo\Downloads\FRST64.exe
2013-09-12 16:26 - 2013-09-08 11:50 - 00000000 ____D C:\Users\Lollo\Desktop\trojaner-board
2013-09-12 16:25 - 2009-12-13 17:42 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{12043DB5-19F5-4D55-9C79-A2A866428EBB}
2013-09-12 16:24 - 2013-09-02 10:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-12 16:22 - 2011-07-02 16:22 - 00000402 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2013-09-12 16:05 - 2012-04-23 20:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-12 15:56 - 2009-12-13 16:25 - 02012654 _____ C:\Windows\WindowsUpdate.log
2013-09-12 15:45 - 2012-11-30 17:27 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA.job
2013-09-12 15:37 - 2012-05-02 19:15 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-12 15:17 - 2012-03-08 19:59 - 00001138 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA.job
2013-09-12 15:05 - 2012-04-23 20:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-12 15:05 - 2012-04-23 20:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-12 15:05 - 2011-05-24 16:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-12 15:04 - 2009-07-14 06:45 - 00013776 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-12 15:04 - 2009-07-14 06:45 - 00013776 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-12 14:31 - 2013-09-08 10:43 - 00000000 ____D C:\Program Files (x86)\ThreatFire
2013-09-12 14:26 - 2009-07-14 19:58 - 00673986 _____ C:\Windows\system32\perfh007.dat
2013-09-12 14:26 - 2009-07-14 19:58 - 00135448 _____ C:\Windows\system32\perfc007.dat
2013-09-12 14:26 - 2009-07-14 07:13 - 01538316 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-12 14:23 - 2012-12-02 11:36 - 00000326 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-09-12 14:20 - 2011-04-27 15:51 - 00000000 ___RD C:\Users\Lollo\Dropbox
2013-09-12 14:20 - 2011-04-27 12:13 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Dropbox
2013-09-12 14:19 - 2012-05-02 19:15 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-12 14:19 - 2011-10-28 08:50 - 00075299 _____ C:\Windows\setupact.log
2013-09-12 14:19 - 2010-12-17 15:29 - 00003340 _____ C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3059642530-3758366382-3311971186-1000
2013-09-12 14:19 - 2010-05-28 09:26 - 00003206 _____ C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3059642530-3758366382-3311971186-1000
2013-09-12 14:19 - 2009-12-15 20:03 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-12 14:19 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-12 12:17 - 2012-03-08 19:59 - 00001116 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core.job
2013-09-12 10:30 - 2013-09-12 07:43 - 00002481 _____ C:\Users\Lollo\Desktop\FSS.txt
2013-09-12 10:25 - 2013-03-28 15:45 - 00000000 ____D C:\ProgramData\MFAData
2013-09-12 07:38 - 2013-09-12 07:38 - 00001136 _____ C:\Users\Lollo\Desktop\LEGACY_AFD.reg
2013-09-12 07:29 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-10 23:38 - 2012-09-14 14:38 - 00001743 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\Program Files\iTunes
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\Program Files\iPod
2013-09-10 23:37 - 2009-12-13 21:21 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-10 23:31 - 2013-09-10 23:31 - 00001202 _____ C:\Users\Public\Desktop\PhoneClean.lnk
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\iMobie
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Local\iMobie_Inc
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Program Files (x86)\iMobie
2013-09-10 19:31 - 2013-03-28 15:45 - 00000000 ____D C:\Users\Lollo\AppData\Local\Avg2013
2013-09-10 19:23 - 2013-09-10 19:33 - 00358609 _____ (Farbar) C:\Users\Lollo\Desktop\FSS.exe
2013-09-10 18:44 - 2011-10-28 08:50 - 00242290 _____ C:\Windows\PFRO.log
2013-09-10 18:44 - 2009-12-13 17:42 - 00099896 _____ C:\Users\Lollo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-10 18:44 - 2009-07-14 06:45 - 00412792 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-10 18:36 - 2013-09-10 17:06 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-09-10 18:35 - 2009-07-14 04:34 - 00000481 _____ C:\Windows\win.ini
2013-09-10 17:22 - 2013-09-10 17:22 - 00003272 ____N C:\bootsqm.dat
2013-09-10 16:47 - 2013-09-08 17:32 - 00000000 ____D C:\AdwCleaner
2013-09-10 14:47 - 2009-12-13 23:31 - 00000000 ____D C:\ProgramData\Adobe
2013-09-10 11:10 - 2013-09-10 11:02 - 00000000 ____D C:\Users\Lollo\Documents\Masterarbeit
2013-09-10 10:59 - 2009-12-13 21:47 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Adobe
2013-09-09 20:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-09 11:22 - 2012-12-02 11:36 - 00000000 ____D C:\Program Files (x86)\Glary Utilities
2013-09-09 11:22 - 2011-05-16 19:44 - 00000000 ____D C:\Program Files (x86)\Orbitdownloader
2013-09-09 11:02 - 2010-02-14 14:08 - 00000000 ____D C:\Program Files (x86)\eBay
2013-09-09 11:00 - 2010-02-14 14:09 - 00001550 _____ C:\InstallHelper.log
2013-09-09 10:55 - 2010-05-02 17:40 - 00000000 ____D C:\Program Files (x86)\SUPERAntiSpyware
2013-09-09 10:54 - 2013-09-09 10:54 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2013-09-09 10:54 - 2009-12-13 17:33 - 00000000 ___RD C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-09 10:40 - 2010-01-24 11:05 - 00000000 ____D C:\Program Files (x86)\WinTV
2013-09-09 10:38 - 2010-01-24 11:04 - 00006422 _____ C:\Windows\HCWPNP.INI
2013-09-08 22:05 - 2013-04-30 08:17 - 00386152 _____ C:\Windows\IE10_main.log
2013-09-08 22:02 - 2013-09-08 22:00 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-08 22:02 - 2013-09-08 21:59 - 00000000 ____D C:\Program Files (x86)\DVDStyler
2013-09-08 22:00 - 2013-09-08 22:00 - 00000000 ____D C:\Users\Lollo\.thumb
2013-09-08 22:00 - 2009-12-13 17:33 - 00000000 ____D C:\Users\Lollo
2013-09-08 21:59 - 2013-09-08 21:59 - 00001073 _____ C:\Users\Lollo\Desktop\DVDStyler.lnk
2013-09-08 19:45 - 2012-11-30 17:27 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core.job
2013-09-08 19:39 - 2013-09-08 19:39 - 00000000 ____D C:\32788R22FWJFW
2013-09-08 18:32 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-09-08 18:08 - 2013-09-08 18:07 - 00000000 ____D C:\Qoobox
2013-09-08 18:06 - 2013-09-08 18:06 - 00000000 ____D C:\Windows\erdnt
2013-09-08 17:48 - 2013-09-08 17:48 - 600194561 _____ C:\Windows\MEMORY.DMP
2013-09-08 17:48 - 2013-09-08 17:48 - 00498368 _____ C:\Windows\Minidump\090813-98998-01.dmp
2013-09-08 17:48 - 2009-12-27 01:19 - 00000000 ____D C:\Windows\Minidump
2013-09-08 17:33 - 2010-04-17 19:01 - 00000000 ____D C:\ProgramData\ICQ
2013-09-08 17:21 - 2013-09-08 17:21 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-08 17:20 - 2013-09-08 17:20 - 01110476 _____ C:\Users\Lollo\Downloads\7z920.exe
2013-09-08 16:55 - 2013-01-03 12:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0
2013-09-08 16:55 - 2010-04-18 15:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup.exe
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup (1).exe
2013-09-08 11:51 - 2013-09-08 11:51 - 00000000 ____D C:\FRST
2013-09-08 11:41 - 2013-09-08 11:11 - 00000582 _____ C:\Users\Lollo\Downloads\defogger_disable.log
2013-09-08 11:41 - 2013-09-08 11:11 - 00000060 _____ C:\Users\Lollo\defogger_reenable
2013-09-08 11:36 - 2013-09-08 11:36 - 00001979 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-09-08 11:35 - 2010-04-10 11:05 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-09-08 11:35 - 2009-12-13 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Local\Adobe
2013-09-08 11:28 - 2009-12-27 01:38 - 00000000 ____D C:\Program Files (x86)\Hotspot Shield
2013-09-08 11:13 - 2013-09-08 10:40 - 00000000 ____D C:\ProgramData\HitmanPro
2013-09-08 11:09 - 2013-09-08 11:09 - 00056006 _____ C:\Windows\system32\.crusader
2013-09-08 10:43 - 2013-09-08 10:43 - 09876312 _____ (PC Tools                                                    ) C:\Users\Lollo\Downloads\tfinstall.exe
2013-09-08 10:43 - 2013-09-08 10:43 - 00000898 _____ C:\Users\Public\Desktop\ThreatFire.lnk
2013-09-08 10:43 - 2013-09-08 10:43 - 00000000 ____D C:\ProgramData\PC Tools
2013-09-08 10:41 - 2013-09-08 10:41 - 00001909 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-09-08 10:41 - 2013-09-08 10:41 - 00000000 ____D C:\Program Files\HitmanPro
2013-09-08 10:40 - 2013-09-08 10:37 - 09879648 _____ (SurfRight B.V.) C:\Users\Lollo\Downloads\hitmanpro_x64.exe
2013-09-08 10:18 - 2012-11-30 17:28 - 00002368 _____ C:\Users\Lollo\Desktop\Google Chrome.lnk
2013-09-08 10:03 - 2012-06-24 11:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-02 12:42 - 2010-01-27 17:19 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-09-02 11:11 - 2012-09-17 20:57 - 00000000 ____D C:\ProgramData\REPORTS
2013-08-28 19:20 - 2013-03-28 15:48 - 00000941 _____ C:\Users\Public\Desktop\AVG 2013.lnk
2013-08-17 17:15 - 2009-12-13 21:08 - 00000000 ____D C:\Users\Lollo\AppData\Local\Mozilla

Files to move or delete:
====================
C:\Users\Lollo\AppData\Local\Temp\AskSLib.dll
C:\Users\Lollo\AppData\Local\Temp\UpdateDM.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-08 20:49

==================== End Of Log ============================

--- --- ---

Addition:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-09-2013 02
Ran by Lollo (administrator) on LOLLO-PC on 12-09-2013 16:27:49
Running from C:\Users\Lollo\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~3\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7311\Monitor.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
() C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Dropbox, Inc.) C:\Users\Lollo\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hauppauge Inc.) C:\Program Files (x86)\WinTV\EPG Services\System\EPGClient.exe
(FileServe Limited) C:\Program Files (x86)\FileServe Manager\FSStarter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Andrea Electronics Corporation) C:\Windows\system32\AEADISRV.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
() C:\Program Files (x86)\Remote Mouse\server\server.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(PC Tools) C:\Program Files (x86)\ThreatFire\TFTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Hauppauge Computer Works) C:\PROGRA~3\WinTV\EPG Services\System\EPGService.exe
() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
() C:\Program Files (x86)\MySQL\MySQL Server 5.5\bin\mysqld.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
(PC Tools) C:\Program Files (x86)\ThreatFire\TFService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Facebook Inc.) C:\Users\Lollo\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dinotify.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\werfault.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Users\Lollo\Desktop\trojaner-board\FRST64.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [855608 2007-09-27] (Microsoft Corporation)
HKLM\...\Run: [Monitor] - C:\Windows\PixArt\PAC7311\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Remote Mouse] - C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [1020416 2012-03-19] ()
HKCU\...\Run: [WindowsLivePhone] - C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe [787816 2008-12-22] (Microsoft Corporation)
HKLM-x32\...\Run: [WindowsLivePhone] - C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe [787816 2008-12-22] (Microsoft Corporation)
HKLM-x32\...\Run: [EPGServiceTool] - C:\Program Files (x86)\WinTV\EPG Services\System\EPGClient.exe [688128 2008-05-15] (Hauppauge Inc.)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [FileServe Manager Task] - C:\Program Files (x86)\FileServe Manager\FSStarter.exe [954648 2011-09-21] (FileServe Limited)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252296 2011-09-30] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [SoundMAXPnP] - C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1310720 2009-06-05] (Analog Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [348664 2012-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296096 2012-10-24] (RealNetworks, Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411440 2013-07-01] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [ThreatFire] - C:\Program Files (x86)\ThreatFire\TFTray.exe [378128 2011-02-22] (PC Tools)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [151952 2012-11-29] (Apple Inc.)
HKU\Default\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\ooVoo.exe [18784952 2010-02-07] (ooVoo LLC)
HKU\Default User\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\ooVoo.exe [18784952 2010-02-07] (ooVoo LLC)
HKU\UpdatusUser\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\ooVoo.exe [18784952 2010-02-07] (ooVoo LLC)
Startup: C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lollo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * bootdelete

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.fcbayern.telekom.de/de/aktuell/news/index.php/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD09144D02F91CA01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: (No Name) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {43665783-1F33-49DF-A5E0-F6AB1EA26D13} URL = hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms}
SearchScopes: HKCU - {70F9B597-721C-42AF-90C2-8CCFE3EE2C91} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3279453&CUI=UN54875140188532717&UM=2
SearchScopes: HKCU - {D7DB45DB-0816-467d-879E-4BB791A10049} URL = hxxp://www.ask.com/web?&o=13795&l=dis&q={searchTerms}
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: FileServeManager - {00000001-AB3B-4334-9DA2-EC6B2A02AFC6} - C:\Program Files (x86)\FileServe Manager\FileServeBHO.dll (FileServe Limited)
BHO-x32: Octh Class - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File
Toolbar: HKLM-x32 -  No Name - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File
Toolbar: HKLM-x32 - Gutscheinmieze - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - C:\Users\Lollo\AppData\Roaming\Gutscheinmieze\toolbar.dll (Synatix GmbH)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU -  No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU -  No Name - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} -  No File
Toolbar: HKCU -  No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Toolbar: HKCU -  No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File
Toolbar: HKCU -  No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Lollo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Lollo\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Lollo\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Lollo\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\google-und-download-suche.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\foxsearch.src
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FoxyProxy Basic - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\foxyproxy@eric.h.jung
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\ich@maltegoetz.de
FF Extension: Move Media Player - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\moveplayer@movenetworks.com
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\staged
FF Extension: VideoGet FireFox extension - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{85E85FF9-E50C-42DE-8A3D-61485FD6C8DB}
FF Extension: WOT - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: Adobe DLM (powered by getPlus(R)) - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: radiobar - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\radiobar@toolbar.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Lollo\AppData\Roaming\Mozilla\Firefox\Profiles\utn6w5tt.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: LoudMo Contextual Ad Assistant - C:\Program Files (x86)\Mozilla Firefox\extensions\{ec31c095-4846-647b-b006-7e33f0c57393}
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}] - C:\Program Files (x86)\FileServe Manager\FireFox_Extension\{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}
FF Extension: FileServe Manager - C:\Program Files (x86)\FileServe Manager\FireFox_Extension\{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchURL: (Linkury Smartbar Search) - hxxp://www.google.com
CHR DefaultSuggestURL: (Linkury Smartbar Search) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Injovo Extension Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.412_0\npbrowserext.dll No File
CHR Plugin: (FileServe Manager) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpgkjhpjldibdbbppfcabadmpfenkdfe\1.0.0.3466_0\FSChromeAddOn.dll No File
CHR Plugin: (Skype Toolbars) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll No File
CHR Plugin: (Conduit Chrome Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0\plugins/ConduitChromeApiPlugin.dll No File
CHR Plugin: (Conduit Radio Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0\plugins/np-cwmp.dll No File
CHR Plugin: (Conduit Chrome Approve TB Plugin) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0\plugins/ChromeApproveTBPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Gutscheinmieze-Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\npmieze.dll No File
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (getPlusPlus for Adobe 16263) - C:\Program Files (x86)\Mozilla Firefox\plugins\np_gp.dll (NOS Microsystems Ltd.)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U2) - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
CHR Plugin: (My Web Search Plugin Stub) - C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Facebook Desktop) - C:\Users\Lollo\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Lollo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Google Drive) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Gmail) - C:\Users\Lollo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [fpgkjhpjldibdbbppfcabadmpfenkdfe] - C:\Program Files (x86)\FileServe Manager\FSChromeAddOn.crx
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM-x32\...\Chrome\Extension: [oolkekjjhnaeaahibbnfebmogackofpf] - C:\Users\Lollo\AppData\Local\CRE\oolkekjjhnaeaahibbnfebmogackofpf.crx

==================== Services (Whitelisted) =================

R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [111616 2009-06-05] (Andrea Electronics Corporation)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86224 2012-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110032 2012-09-03] (Avira Operations GmbH & Co. KG)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3128856 2012-02-28] (devolo AG)
R2 EPGService; C:\PROGRA~3\WinTV\EPG Services\System\EPGService.exe [437248 2008-05-30] (Hauppauge Computer Works)
S2 FSService; C:\Program Files (x86)\Folder Shield\FSService.exe [28672 2003-05-26] ()
S3 getPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll [68000 2010-03-29] (NOS Microsystems Ltd.)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [109352 2013-09-08] (SurfRight B.V.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 MySQL; C:\Program Files (x86)\MySQL\MySQL Server 5.5\my.ini [8924 2011-07-02] ()
R2 ThreatFire; C:\Program Files (x86)\ThreatFire\TFService.exe [70928 2011-02-22] (PC Tools)
S2 NovacomD; C:\Program Files (x86)\Palm\SDK\bin\novacom\amd64\novacomd.exe [x]
S2 Protector by IB Updater; C:\Program Files\Protector by IB\ExtensionUpdaterService.exe [x]

==================== Drivers (Whitelisted) ====================

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206648 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-09-03] (Avira GmbH)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-07-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2013-03-21] (AVG Technologies CZ, s.r.o.)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-09-03] (Avira GmbH)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2012-09-03] (Avira GmbH)
S0 bxShield; C:\Windows\SysWow64\Drivers\bxShield.sys [45056 2003-05-26] (Alfa Corporation)
R3 HCW3x64; C:\Windows\System32\DRIVERS\HCW3x64.sys [1087872 2007-03-26] (Hauppauge Computer Works inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2012-11-20] (CACE Technologies)
S3 PAC7311; C:\Windows\System32\DRIVERS\PA707UCM.SYS [602112 2006-11-08] (PixArt Imaging Inc.)
S3 Ph3xIB64; C:\Windows\System32\DRIVERS\Ph3xIB64.sys [1627520 2009-06-10] (NXP Semiconductors)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2011-06-10] (Duplex Secure Ltd.)
R0 TfFsMon; C:\Windows\System32\drivers\TfFsMon.sys [65072 2011-02-22] (PC Tools)
R3 TfNetMon; C:\Windows\system32\drivers\TfNetMon.sys [41888 2011-02-22] (PC Tools)
R3 TfNetMon; C:\Windows\system32\drivers\TfNetMon.sys [41888 2011-02-22] (PC Tools)
R0 TfSysMon; C:\Windows\System32\drivers\TfSysMon.sys [74824 2011-02-22] (PC Tools)
S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [145936 2010-03-25] (Sun Microsystems, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S0 bxShield; System32\Drivers\bxShield.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
U5 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] (Microsoft Corporation)
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP3\WNt500x64\Sandra.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-12 16:26 - 2013-09-12 16:26 - 01949642 _____ (Farbar) C:\Users\Lollo\Downloads\FRST64.exe
2013-09-12 07:43 - 2013-09-12 10:30 - 00002481 _____ C:\Users\Lollo\Desktop\FSS.txt
2013-09-12 07:38 - 2013-09-12 07:38 - 00001136 _____ C:\Users\Lollo\Desktop\LEGACY_AFD.reg
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\Program Files\iTunes
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\Program Files\iPod
2013-09-10 23:31 - 2013-09-10 23:31 - 00001202 _____ C:\Users\Public\Desktop\PhoneClean.lnk
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\iMobie
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Local\iMobie_Inc
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Program Files (x86)\iMobie
2013-09-10 19:33 - 2013-09-10 19:23 - 00358609 _____ (Farbar) C:\Users\Lollo\Desktop\FSS.exe
2013-09-10 18:00 - 2013-07-18 17:01 - 01949696 _____ (Tweaking.com) C:\Users\Lollo\Desktop\Repair_Windows.exe
2013-09-10 17:22 - 2013-09-10 17:22 - 00003272 ____N C:\bootsqm.dat
2013-09-10 17:06 - 2013-09-10 18:36 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-09-10 11:02 - 2013-09-10 11:10 - 00000000 ____D C:\Users\Lollo\Documents\Masterarbeit
2013-09-09 10:54 - 2013-09-09 10:54 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2013-09-08 22:00 - 2013-09-08 22:02 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-08 22:00 - 2013-09-08 22:00 - 00000000 ____D C:\Users\Lollo\.thumb
2013-09-08 21:59 - 2013-09-08 22:02 - 00000000 ____D C:\Program Files (x86)\DVDStyler
2013-09-08 21:59 - 2013-09-08 21:59 - 00001073 _____ C:\Users\Lollo\Desktop\DVDStyler.lnk
2013-09-08 19:39 - 2013-09-08 19:39 - 00000000 ____D C:\32788R22FWJFW
2013-09-08 18:07 - 2013-09-08 18:08 - 00000000 ____D C:\Qoobox
2013-09-08 18:06 - 2013-09-08 18:06 - 00000000 ____D C:\Windows\erdnt
2013-09-08 17:48 - 2013-09-08 17:48 - 600194561 _____ C:\Windows\MEMORY.DMP
2013-09-08 17:48 - 2013-09-08 17:48 - 00498368 _____ C:\Windows\Minidump\090813-98998-01.dmp
2013-09-08 17:32 - 2013-09-10 16:47 - 00000000 ____D C:\AdwCleaner
2013-09-08 17:21 - 2013-09-08 17:21 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-08 17:20 - 2013-09-08 17:20 - 01110476 _____ C:\Users\Lollo\Downloads\7z920.exe
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup.exe
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup (1).exe
2013-09-08 11:51 - 2013-09-08 11:51 - 00000000 ____D C:\FRST
2013-09-08 11:50 - 2013-09-12 16:26 - 00000000 ____D C:\Users\Lollo\Desktop\trojaner-board
2013-09-08 11:36 - 2013-09-08 11:36 - 00001979 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-09-08 11:11 - 2013-09-08 11:41 - 00000582 _____ C:\Users\Lollo\Downloads\defogger_disable.log
2013-09-08 11:11 - 2013-09-08 11:41 - 00000060 _____ C:\Users\Lollo\defogger_reenable
2013-09-08 11:09 - 2013-09-08 11:09 - 00056006 _____ C:\Windows\system32\.crusader
2013-09-08 10:43 - 2013-09-12 14:31 - 00000000 ____D C:\Program Files (x86)\ThreatFire
2013-09-08 10:43 - 2013-09-08 10:43 - 09876312 _____ (PC Tools                                                    ) C:\Users\Lollo\Downloads\tfinstall.exe
2013-09-08 10:43 - 2013-09-08 10:43 - 00000898 _____ C:\Users\Public\Desktop\ThreatFire.lnk
2013-09-08 10:43 - 2013-09-08 10:43 - 00000000 ____D C:\ProgramData\PC Tools
2013-09-08 10:43 - 2011-02-22 13:57 - 00074824 _____ (PC Tools) C:\Windows\system32\Drivers\TfSysMon.sys
2013-09-08 10:43 - 2011-02-22 13:57 - 00065072 _____ (PC Tools) C:\Windows\system32\Drivers\TfFsMon.sys
2013-09-08 10:43 - 2011-02-22 13:57 - 00041888 _____ (PC Tools) C:\Windows\system32\Drivers\TfNetMon.sys
2013-09-08 10:41 - 2013-09-08 10:41 - 00001909 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-09-08 10:41 - 2013-09-08 10:41 - 00000000 ____D C:\Program Files\HitmanPro
2013-09-08 10:40 - 2013-09-08 11:13 - 00000000 ____D C:\ProgramData\HitmanPro
2013-09-08 10:37 - 2013-09-08 10:40 - 09879648 _____ (SurfRight B.V.) C:\Users\Lollo\Downloads\hitmanpro_x64.exe
2013-09-02 10:41 - 2013-09-12 16:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 19:55 - 2013-07-25 05:54 - 17830400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-17 19:55 - 2013-07-25 05:37 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-17 19:55 - 2013-07-25 05:35 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-17 19:55 - 2013-07-25 05:31 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-17 19:55 - 2013-07-25 05:30 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-17 19:55 - 2013-07-25 05:29 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-17 19:55 - 2013-07-25 05:29 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-17 19:55 - 2013-07-25 05:29 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-17 19:55 - 2013-07-25 05:28 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-17 19:55 - 2013-07-25 05:27 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-17 19:55 - 2013-07-25 05:27 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-17 19:55 - 2013-07-25 05:26 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-17 19:55 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-17 19:55 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-17 19:55 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-17 19:55 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-17 19:55 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-17 19:55 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-08-17 19:55 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-17 19:55 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-08-17 19:55 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-08-17 19:55 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-17 19:55 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-17 19:55 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-17 14:06 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-17 14:06 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-17 14:06 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-17 14:06 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-17 14:06 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-17 14:06 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-17 14:06 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-17 14:06 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-17 14:06 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-17 14:06 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-17 14:06 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-17 14:06 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-17 14:05 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-17 14:05 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-17 14:05 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-17 14:05 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-12 16:27 - 2013-09-12 16:27 - 04363976 _____ (Systweak Inc                                                ) C:\Users\Lollo\Downloads\rcpafterdownloadcp.exe
2013-09-12 16:26 - 2013-09-12 16:26 - 01949642 _____ (Farbar) C:\Users\Lollo\Downloads\FRST64.exe
2013-09-12 16:26 - 2013-09-08 11:50 - 00000000 ____D C:\Users\Lollo\Desktop\trojaner-board
2013-09-12 16:25 - 2009-12-13 17:42 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{12043DB5-19F5-4D55-9C79-A2A866428EBB}
2013-09-12 16:24 - 2013-09-02 10:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-12 16:22 - 2011-07-02 16:22 - 00000402 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2013-09-12 16:05 - 2012-04-23 20:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-12 15:56 - 2009-12-13 16:25 - 02012654 _____ C:\Windows\WindowsUpdate.log
2013-09-12 15:45 - 2012-11-30 17:27 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA.job
2013-09-12 15:37 - 2012-05-02 19:15 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-12 15:17 - 2012-03-08 19:59 - 00001138 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA.job
2013-09-12 15:05 - 2012-04-23 20:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-12 15:05 - 2012-04-23 20:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-12 15:05 - 2011-05-24 16:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-12 15:04 - 2009-07-14 06:45 - 00013776 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-12 15:04 - 2009-07-14 06:45 - 00013776 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-12 14:31 - 2013-09-08 10:43 - 00000000 ____D C:\Program Files (x86)\ThreatFire
2013-09-12 14:26 - 2009-07-14 19:58 - 00673986 _____ C:\Windows\system32\perfh007.dat
2013-09-12 14:26 - 2009-07-14 19:58 - 00135448 _____ C:\Windows\system32\perfc007.dat
2013-09-12 14:26 - 2009-07-14 07:13 - 01538316 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-12 14:23 - 2012-12-02 11:36 - 00000326 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-09-12 14:20 - 2011-04-27 15:51 - 00000000 ___RD C:\Users\Lollo\Dropbox
2013-09-12 14:20 - 2011-04-27 12:13 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Dropbox
2013-09-12 14:19 - 2012-05-02 19:15 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-12 14:19 - 2011-10-28 08:50 - 00075299 _____ C:\Windows\setupact.log
2013-09-12 14:19 - 2010-12-17 15:29 - 00003340 _____ C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3059642530-3758366382-3311971186-1000
2013-09-12 14:19 - 2010-05-28 09:26 - 00003206 _____ C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3059642530-3758366382-3311971186-1000
2013-09-12 14:19 - 2009-12-15 20:03 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-12 14:19 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-12 12:17 - 2012-03-08 19:59 - 00001116 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core.job
2013-09-12 10:30 - 2013-09-12 07:43 - 00002481 _____ C:\Users\Lollo\Desktop\FSS.txt
2013-09-12 10:25 - 2013-03-28 15:45 - 00000000 ____D C:\ProgramData\MFAData
2013-09-12 07:38 - 2013-09-12 07:38 - 00001136 _____ C:\Users\Lollo\Desktop\LEGACY_AFD.reg
2013-09-12 07:29 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-10 23:38 - 2012-09-14 14:38 - 00001743 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\Program Files\iTunes
2013-09-10 23:37 - 2013-09-10 23:37 - 00000000 ____D C:\Program Files\iPod
2013-09-10 23:37 - 2009-12-13 21:21 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-10 23:31 - 2013-09-10 23:31 - 00001202 _____ C:\Users\Public\Desktop\PhoneClean.lnk
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\iMobie
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Local\iMobie_Inc
2013-09-10 23:31 - 2013-09-10 23:31 - 00000000 ____D C:\Program Files (x86)\iMobie
2013-09-10 19:31 - 2013-03-28 15:45 - 00000000 ____D C:\Users\Lollo\AppData\Local\Avg2013
2013-09-10 19:23 - 2013-09-10 19:33 - 00358609 _____ (Farbar) C:\Users\Lollo\Desktop\FSS.exe
2013-09-10 18:44 - 2011-10-28 08:50 - 00242290 _____ C:\Windows\PFRO.log
2013-09-10 18:44 - 2009-12-13 17:42 - 00099896 _____ C:\Users\Lollo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-10 18:44 - 2009-07-14 06:45 - 00412792 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-10 18:36 - 2013-09-10 17:06 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-09-10 18:35 - 2009-07-14 04:34 - 00000481 _____ C:\Windows\win.ini
2013-09-10 17:22 - 2013-09-10 17:22 - 00003272 ____N C:\bootsqm.dat
2013-09-10 16:47 - 2013-09-08 17:32 - 00000000 ____D C:\AdwCleaner
2013-09-10 14:47 - 2009-12-13 23:31 - 00000000 ____D C:\ProgramData\Adobe
2013-09-10 11:10 - 2013-09-10 11:02 - 00000000 ____D C:\Users\Lollo\Documents\Masterarbeit
2013-09-10 10:59 - 2009-12-13 21:47 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Adobe
2013-09-09 20:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-09 11:22 - 2012-12-02 11:36 - 00000000 ____D C:\Program Files (x86)\Glary Utilities
2013-09-09 11:22 - 2011-05-16 19:44 - 00000000 ____D C:\Program Files (x86)\Orbitdownloader
2013-09-09 11:02 - 2010-02-14 14:08 - 00000000 ____D C:\Program Files (x86)\eBay
2013-09-09 11:00 - 2010-02-14 14:09 - 00001550 _____ C:\InstallHelper.log
2013-09-09 10:55 - 2010-05-02 17:40 - 00000000 ____D C:\Program Files (x86)\SUPERAntiSpyware
2013-09-09 10:54 - 2013-09-09 10:54 - 00000000 ____D C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2013-09-09 10:54 - 2009-12-13 17:33 - 00000000 ___RD C:\Users\Lollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-09 10:40 - 2010-01-24 11:05 - 00000000 ____D C:\Program Files (x86)\WinTV
2013-09-09 10:38 - 2010-01-24 11:04 - 00006422 _____ C:\Windows\HCWPNP.INI
2013-09-08 22:05 - 2013-04-30 08:17 - 00386152 _____ C:\Windows\IE10_main.log
2013-09-08 22:02 - 2013-09-08 22:00 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-08 22:02 - 2013-09-08 21:59 - 00000000 ____D C:\Program Files (x86)\DVDStyler
2013-09-08 22:00 - 2013-09-08 22:00 - 00000000 ____D C:\Users\Lollo\.thumb
2013-09-08 22:00 - 2009-12-13 17:33 - 00000000 ____D C:\Users\Lollo
2013-09-08 21:59 - 2013-09-08 21:59 - 00001073 _____ C:\Users\Lollo\Desktop\DVDStyler.lnk
2013-09-08 19:45 - 2012-11-30 17:27 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core.job
2013-09-08 19:39 - 2013-09-08 19:39 - 00000000 ____D C:\32788R22FWJFW
2013-09-08 18:32 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-09-08 18:08 - 2013-09-08 18:07 - 00000000 ____D C:\Qoobox
2013-09-08 18:06 - 2013-09-08 18:06 - 00000000 ____D C:\Windows\erdnt
2013-09-08 17:48 - 2013-09-08 17:48 - 600194561 _____ C:\Windows\MEMORY.DMP
2013-09-08 17:48 - 2013-09-08 17:48 - 00498368 _____ C:\Windows\Minidump\090813-98998-01.dmp
2013-09-08 17:48 - 2009-12-27 01:19 - 00000000 ____D C:\Windows\Minidump
2013-09-08 17:33 - 2010-04-17 19:01 - 00000000 ____D C:\ProgramData\ICQ
2013-09-08 17:21 - 2013-09-08 17:21 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-08 17:20 - 2013-09-08 17:20 - 01110476 _____ C:\Users\Lollo\Downloads\7z920.exe
2013-09-08 16:55 - 2013-01-03 12:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0
2013-09-08 16:55 - 2010-04-18 15:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup.exe
2013-09-08 16:49 - 2013-09-08 16:49 - 04049136 _____ (iMobie Inc.                                                 ) C:\Users\Lollo\Downloads\phoneclean-setup (1).exe
2013-09-08 11:51 - 2013-09-08 11:51 - 00000000 ____D C:\FRST
2013-09-08 11:41 - 2013-09-08 11:11 - 00000582 _____ C:\Users\Lollo\Downloads\defogger_disable.log
2013-09-08 11:41 - 2013-09-08 11:11 - 00000060 _____ C:\Users\Lollo\defogger_reenable
2013-09-08 11:36 - 2013-09-08 11:36 - 00001979 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-09-08 11:35 - 2010-04-10 11:05 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-09-08 11:35 - 2009-12-13 23:31 - 00000000 ____D C:\Users\Lollo\AppData\Local\Adobe
2013-09-08 11:28 - 2009-12-27 01:38 - 00000000 ____D C:\Program Files (x86)\Hotspot Shield
2013-09-08 11:13 - 2013-09-08 10:40 - 00000000 ____D C:\ProgramData\HitmanPro
2013-09-08 11:09 - 2013-09-08 11:09 - 00056006 _____ C:\Windows\system32\.crusader
2013-09-08 10:43 - 2013-09-08 10:43 - 09876312 _____ (PC Tools                                                    ) C:\Users\Lollo\Downloads\tfinstall.exe
2013-09-08 10:43 - 2013-09-08 10:43 - 00000898 _____ C:\Users\Public\Desktop\ThreatFire.lnk
2013-09-08 10:43 - 2013-09-08 10:43 - 00000000 ____D C:\ProgramData\PC Tools
2013-09-08 10:41 - 2013-09-08 10:41 - 00001909 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-09-08 10:41 - 2013-09-08 10:41 - 00000000 ____D C:\Program Files\HitmanPro
2013-09-08 10:40 - 2013-09-08 10:37 - 09879648 _____ (SurfRight B.V.) C:\Users\Lollo\Downloads\hitmanpro_x64.exe
2013-09-08 10:18 - 2012-11-30 17:28 - 00002368 _____ C:\Users\Lollo\Desktop\Google Chrome.lnk
2013-09-08 10:03 - 2012-06-24 11:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-02 12:42 - 2010-01-27 17:19 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-09-02 11:11 - 2012-09-17 20:57 - 00000000 ____D C:\ProgramData\REPORTS
2013-08-28 19:20 - 2013-03-28 15:48 - 00000941 _____ C:\Users\Public\Desktop\AVG 2013.lnk
2013-08-17 17:15 - 2009-12-13 21:08 - 00000000 ____D C:\Users\Lollo\AppData\Local\Mozilla

Files to move or delete:
====================
C:\Users\Lollo\AppData\Local\Temp\AskSLib.dll
C:\Users\Lollo\AppData\Local\Temp\UpdateDM.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-08 20:49

==================== End Of Log ============================

--- --- ---

aharonov · 12.09.2013, 15:39

Du hast zweimal die FRST.txt gepostet. Kannst du bitte auch noch die Addition.txt einfügen?

Lorenz_W · 12.09.2013, 17:37

Oh das tut mir leid.
Das dürfte jetzt die Addition.txt sein:
FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-09-2013 02
Ran by Lollo at 2013-09-12 16:29:07
Running from C:\Users\Lollo\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 Update for Microsoft Office 2007 (KB2508958) (x32)
7-Zip 9.20 (x32)
Adobe AIR (x32 Version: 3.4.0.2710)
Adobe Download Manager (x32 Version: 1.6.2.63)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Flash Player ActiveX (x32 Version: 9.0.124.0)
Adobe Reader X (10.1.4) - Deutsch (x32 Version: 10.1.4)
Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ArcSoft VideoImpression 1.6 (x32)
AVG 2013 (Version: 13.0.3222)
AVG 2013 (Version: 13.0.3392)
AVG 2013 (Version: 2013.0.3392)
Biet-O-Matic v2.12.6 (x32 Version: Biet-O-Matic v2.12.6)
Bing Bar (x32 Version: 7.0.850.0)
Bonjour (Version: 3.0.0.10)
Bully Scholarship Edition (x32 Version: 1.00.0154)
CameraHelperMsi (x32 Version: 13.51.815.0)
Canon MP Navigator EX 2.0 (x32)
Canon MP630 series Benutzerregistrierung (x32)
Canon MP630 series MP Drivers
Canon Utilities Easy-PhotoPrint EX (x32)
Canon Utilities My Printer (x32)
Canon Utilities Solution Menu (x32)
CCleaner (Version: 3.12)
CD-LabelPrint (x32)
Cryptext (Remove Only) (x32)
Deutsch-Unicode - 0.8.14 (Version: 1.0.3.40)
devolo dLAN AVpro manager (x32 Version: 6.1.3.0)
devolo dLAN Cockpit (x32 Version: 3.2.0.0)
DHTML Editing Component (x32 Version: 6.02.0001)
DivX-Setup (x32 Version: 2.6.1.8)
dLAN Cockpit (x32 Version: 3.2.28)
Dropbox (HKCU Version: 2.0.22)
DVDFab 8.0.6.8 (05/01/2011) (x32)
EA Download Manager (x32 Version: 4.0.0.462)
EasyBits GO (HKCU)
eM Client (x32 Version: 5.0.17595.0)
EPSON SX210 Series Printer Uninstall
erLT (x32 Version: 1.20.138.34)
Facebook Messenger 2.1.4814.0 (x32 Version: 2.1.4814.0)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
Far Cry 2 (x32 Version: 1.03.00)
FIFA 09 (x32 Version: 1.0.1.1)
FIFA 11 Demo (x32 Version: 1.0.0.0)
File Type Assistant (x32)
FileServe Manager 1.0.0.3466 (x32)
Folder Shield 1.3 (x32 Version: 1.3)
FormatFactory 2.96 (x32 Version: 2.96)
Formelrechner (x32 Version: 1.00.0000)
Free Audio Converter version 5.0.24.422 (x32 Version: 5.0.24.422)
Free AVI Video Converter version 5.0.24.430 (x32 Version: 5.0.24.430)
Free File Viewer 2011 (x32)
Free M4a to MP3 Converter 7.0 (x32)
Free MP4 Video Converter version 5.0.22.128 (x32 Version: 5.0.22.128)
Free Video Dub version 2.0.18.430 (x32 Version: 2.0.18.430)
Free Video Joiner 1.1 (x32)
Free Video to MP3 Converter version 5.0.22.128 (x32 Version: 5.0.22.128)
Free YouTube Download version 3.2.2.430 (x32 Version: 3.2.2.430)
Free YouTube to MP3 Converter version 3.12.3.610 (x32 Version: 3.12.3.610)
GIMP 2.6.8 (x32)
Glary Utilities Pro 2.50.0.1632 (x32 Version: 2.50.0.1632)
Google Chrome (HKCU Version: 29.0.1547.66)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
Gutscheinmieze - Toolbar (x32)
Hauppauge German Help Files and Resources (x32)
Hauppauge MCE XP/Vista Software Encoder (2.0.26057) (x32 Version: 2.0.26057)
Hauppauge WinTV (x32)
Hauppauge WinTV DVB-T EPG Service (x32)
Hauppauge WinTV Infrared Remote (x32)
Hauppauge WinTV IR Blaster (x32)
Hauppauge WinTV Radio (x32)
Hauppauge WinTV Scheduler (x32)
Hauppauge WinTV Soft PVR (x32)
HitmanPro 3.7 (Version: 3.7.7.205)
Host OpenAL (ADI) (x32)
Hotspot Shield 1.37 (x32 Version: 1.37)
ICQ7.2 (x32 Version: 7.2)
Inkjet Printer/Scanner Extended Survey Program (x32)
InterVideo FilterSDK for Hauppauge (x32)
IrfanView (remove only) (x32 Version: 4.36)
iTunes (Version: 11.0.0.163)
Java Auto Updater (x32 Version: 2.1.5.3)
Java(TM) 6 Update 24 (x32 Version: 6.0.240)
Java(TM) 7 Update 2 (x32 Version: 7.0.20)
Java(TM) SE Development Kit 7 Update 2 (x32 Version: 1.7.0.20)
JDownloader (x32)
Junk Mail filter update (x32 Version: 14.0.8117.416)
K-Lite Mega Codec Pack 3.5.3 (x32 Version: 3.5.3)
Listing Factory 2011 v3.8 (x32 Version: 3.8)
Logitech Webcam-Software (x32 Version: 2.51)
LoudMo Contextual Ad Assistant (x32)
LWS Facebook (x32 Version: 13.50.854.0)
LWS Gallery (x32 Version: 13.51.827.0)
LWS Help_main (x32 Version: 13.51.828.0)
LWS Launcher (x32 Version: 13.51.828.0)
LWS Motion Detection (x32 Version: 13.51.815.0)
LWS Pictures And Video (x32 Version: 13.51.815.0)
LWS Twitter (x32 Version: 13.30.1346.0)
LWS Webcam Software (x32 Version: 13.51.815.0)
LWS WLM Plugin (x32 Version: 1.30.1201.0)
LWS YouTube Plugin (x32 Version: 13.31.1038.0)
MatheGrafix Version 8 (build 03) (x32)
Max Payne 2 (x32 Version: 1.01.102)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
mediAvatar iPhone Klingelton Converter (x32 Version: 2.1.1.0120)
Messenger Plus! Live (x32 Version: 4.85.0.386)
MFC RunTime files (x32 Version: 1.0.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (x32 Version: 9.0.21022.218)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual J# 2.0 Redistributable Package (x32 Version: 2.0.50727)
Microsoft Visual J# 2.0 Redistributable Package (x32)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft Xbox 360 Accessories 1.1 (Version: 1.10.123.0)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MySQL Server 5.5 (x32 Version: 5.5.9)
NewFreeScreensaver nfsWorldTime03 (x32)
Novacomd (Version: 1.0.0.51)
Nur Deinstallierung der CopyTrans Suite möglich. (HKCU Version: 2.15)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Display Control Panel (Version: 6.14.12.5896)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (x32 Version: 9.10.0224)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OpenOffice.org 3.2 (x32 Version: 3.2.9483)
Palm webOS SDK (Version: 1.4.1.427)
PC VGA Camera  (x32 Version: 1.0.2.7)
Phase 5 HTML-Editor (x32 Version: 5.6.2.3)
phase6_19 (x32 Version: 1.90.0000)
PhoneClean 2.2.2 (x32 Version: 2.2.2)
PhotoFiltre 7 (HKCU)
PhotoScape (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
PQ iPod Video Converter (remove only) (x32)
Printer Pro Desktop (x32)
QuickTime (x32 Version: 7.74.80.86)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealPlayer (x32 Version: 15.0.6)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Registry Repair 4.1.0.388 (x32 Version: 4.1.0.388)
Remote Mouse version 1.50 (x32 Version: 1.50)
Safari (x32 Version: 5.34.57.2)
Skype Click to Call (x32 Version: 5.9.9216)
Skype™ 6.1 (x32 Version: 6.1.129)
SopCast 3.5.0 (x32 Version: 3.5.0)
SoundMAX (x32 Version: 6.10.2.6585)
Speisekarten DruckShop (x32)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
Steam (x32 Version: 1.0.0.0)
Supreme Auction (x32)
TeamViewer 5 (x32 Version: 5.0.7687 )
ThreatFire (x32)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Update Service (x32 Version: 2.9.12.29)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Veetle TV (x32 Version: 0.9.19)
Videora iPod touch Converter 6 (x32 Version: 6)
VirtualCloneDrive (x32)
VirtualDJ Home FREE (x32 Version: 7.0.3)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
VLC media player 1.1.7 (x32 Version: 1.1.7)
VoiceOver Kit (x32 Version: 1.42.128.0)
Windows Driver Package - Palm (WinUSB) Palm Devices  (11/30/2008 1.0.0) (Version: 11/30/2008 1.0.0)
Windows Live Call (x32 Version: 14.0.8117.0416)
Windows Live Communications Platform (x32 Version: 14.0.8117.416)
Windows Live Essentials (x32 Version: 14.0.8117.0416)
Windows Live Essentials (x32 Version: 14.0.8117.416)
Windows Live Family Safety (Version: 14.0.8118.427)
Windows Live Fotogalerie (x32 Version: 14.0.8117.416)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Live Mail (x32 Version: 14.0.8117.0416)
Windows Live Messenger (x32 Version: 14.0.8117.0416)
Windows Live Movie Maker (x32 Version: 14.0.8117.0416)
Windows Live Sync (x32 Version: 14.0.8117.416)
Windows Live Writer (x32 Version: 14.0.8117.0416)
Windows Live-Geräte-Manager (x32 Version: 1.5.7754.0)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinRAR
wunderlist (x32 Version: 1.1.1)
Xilisoft HD Video Converter 6 (x32 Version: 6.7.0.0913)
YouTube Downloader App 3.00 (x32 Version: 3.00)

==================== Restore Points  =========================

10-09-2013 21:34:06 Removed iTunes
10-09-2013 21:37:06 Installed iTunes
12-09-2013 08:28:30 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-09-10 18:35 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {03DDE0CB-8367-4C40-B796-8D641AC69452} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-02] (Google Inc.)
Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {05C9B0DB-8468-40E8-AB9F-6303581EA455} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2012-10-22] (Glarysoft Ltd)
Task: {06369E99-FF3A-4CD6-8BE9-A4F2A2BC5F0C} - System32\Tasks\Divx-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-07-29] ()
Task: {0B7990F0-E69B-4B34-BC95-B17A7BF9FDA4} - \EPUpdater No Task File
Task: {1B85D8F3-E2F2-40F8-B10F-BD1391A897ED} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => c:\program files (x86)\real\realplayer\Update\realsched.exe [2012-10-24] (RealNetworks, Inc.)
Task: {1C3982BF-4D29-4330-8580-D3F384820B93} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA => C:\Users\Lollo\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-21] (Facebook Inc.)
Task: {25FDCB56-751B-4D57-B670-BEEF039E83C6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-12] (Adobe Systems Incorporated)
Task: {3C74570D-4587-4576-8A9F-8D1C53BED866} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA => C:\Users\Lollo\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-30] (Google Inc.)
Task: {3CB42D5C-254D-4995-9059-1045A8E6DF25} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {401ED42D-B3D2-46A0-99F8-DC0DB653C9A0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {640EC463-13DF-41AA-B8A2-834A9C3192E0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-02] (Google Inc.)
Task: {6F58E06E-DBBE-4726-80BB-D780B178FB74} - System32\Tasks\{5C2AF447-559C-4E5F-8284-AA5BB0AC871F} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=4.2.0.169.259&amp;LastError=404
Task: {73C6E537-87BD-4A02-BA6A-937A4BEDAC6E} - System32\Tasks\{C447A2C3-FE64-4E85-8108-002C698ED35A} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-01-08] (Skype Technologies S.A.)
Task: {82A60380-3F02-4843-9102-F70DAC41BB67} - System32\Tasks\FreeFileViewerUpdateChecker => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe [2011-03-11] (Bitberry Software)
Task: {9413BBB4-A147-4CE0-A761-3B3C21BE49B4} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3059642530-3758366382-3311971186-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: {A2464E50-BC3B-43A4-9E08-A6FB5D3A766D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {B13A1F12-9C24-4876-981B-14F51767D934} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core => C:\Users\Lollo\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-30] (Google Inc.)
Task: {B5FE6502-897B-4DAC-9B5A-1377306E6BF6} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {BA7D02AD-61FB-4F01-8C5E-42AEAE55C473} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {D60DA3DE-5951-469A-81B5-91044BD95254} - System32\Tasks\User_Feed_Synchronization-{12043DB5-19F5-4D55-9C79-A2A866428EBB} => C:\Windows\system32\msfeedssync.exe [2012-04-03] (Microsoft Corporation)
Task: {E1B394B2-B826-461B-92CF-A20AEE6FA90A} - System32\Tasks\{84B89F47-3A28-4F6D-9B6A-25C30A994723} => C:\Program Files (x86)\Activision\Modern Warfare 2\iw4mp.exe
Task: {E3901758-4E90-4108-8A98-5E6AA0C74A29} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-09-30] (Sun Microsystems, Inc.)
Task: {E6ABCA8F-E458-49EE-83CD-B5D139D7F031} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core => C:\Users\Lollo\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-21] (Facebook Inc.)
Task: {F22EBF22-1B85-4F85-86C4-9A2DD4C5F528} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3059642530-3758366382-3311971186-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: {FF399F25-2B26-4E44-A5A7-AC3AE266BB06} - System32\Tasks\{458AB860-19CA-4106-85CA-AE33BF1211AC} => C:\Program Files (x86)\Activision\Modern Warfare 2\iw4mp.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core.job => C:\Users\Lollo\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA.job => C:\Users\Lollo\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000Core.job => C:\Users\Lollo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059642530-3758366382-3311971186-1000UA.job => C:\Users\Lollo\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-02-26 00:32 - 2013-02-26 00:32 - 15053264 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-05-25 02:36 - 2013-05-25 02:36 - 00164016 _____ (Dropbox, Inc.) C:\Users\Lollo\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm
2010-01-27 17:15 - 2008-03-17 18:06 - 00104448 _____ (CANON INC.) C:\Program Files\Canon\MyPrinter\cnmpu.dll
2010-01-27 17:15 - 2008-04-08 18:06 - 00095232 _____ (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMyRes.dll
2013-09-08 10:43 - 2011-02-22 13:57 - 00406800 _____ (PC Tools) C:\Program Files (x86)\ThreatFire\TFWAH.dll
2011-06-24 22:56 - 2011-06-24 22:56 - 00053024 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll
2011-06-24 22:56 - 2011-06-24 22:56 - 00087328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-06-24 22:56 - 2011-06-24 22:56 - 01241888 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-10-24 15:17 - 2012-10-24 15:17 - 00028160 _____ (RealNetworks, Inc.) C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchrome150browserrecordhelper.dll
2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\Lollo\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Lollo\AppData\Roaming\Dropbox\bin\libcef.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\Lollo\AppData\Roaming\Dropbox\bin\icudt.dll
2011-10-28 14:56 - 2011-09-21 19:04 - 00213272 _____ () C:\Program Files (x86)\FileServe Manager\FFChromeExtHelper.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2012-06-26 22:33 - 2010-08-24 18:47 - 02148864 _____ (Python Software Foundation) C:\Program Files (x86)\Remote Mouse\server\python26.dll
2012-06-26 22:33 - 2012-02-08 00:11 - 00098816 _____ () C:\Program Files (x86)\Remote Mouse\server\win32api.pyd
2012-06-26 22:33 - 2012-02-08 00:09 - 00110080 _____ () C:\Program Files (x86)\Remote Mouse\server\pywintypes26.dll
2012-06-26 22:33 - 2010-08-24 18:47 - 00040448 _____ () C:\Program Files (x86)\Remote Mouse\server\_socket.pyd
2012-06-26 22:33 - 2010-08-24 18:48 - 00720896 _____ () C:\Program Files (x86)\Remote Mouse\server\_ssl.pyd
2012-06-26 22:33 - 2010-01-13 07:35 - 00011776 _____ () C:\Program Files (x86)\Remote Mouse\server\autopy.key.pyd
2012-06-26 22:33 - 2010-01-13 07:36 - 00010752 _____ () C:\Program Files (x86)\Remote Mouse\server\autopy.mouse.pyd
2012-06-26 22:33 - 2010-08-24 18:48 - 00073728 _____ () C:\Program Files (x86)\Remote Mouse\server\_ctypes.pyd
2012-06-26 22:33 - 2012-02-08 00:11 - 00167424 _____ () C:\Program Files (x86)\Remote Mouse\server\win32gui.pyd
2012-09-13 01:39 - 2012-09-13 01:39 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
2013-09-08 10:43 - 2011-02-22 13:56 - 00044816 _____ (PC Tools) C:\Program Files (x86)\ThreatFire\TFAPI.dll
2011-07-29 01:09 - 2011-07-29 01:09 - 00096112 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2011-08-30 23:05 - 2011-08-30 23:05 - 00085864 _____ (Apple Inc.) C:\Windows\system32\dnssd.dll
2013-09-08 10:43 - 2011-02-22 13:57 - 00406800 _____ (PC Tools) C:\Program Files (x86)\ThreatFire\TfWah.dll
2012-07-21 12:12 - 2012-07-21 12:12 - 00686960 ____T (Facebook Inc.) C:\Users\Lollo\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll
2009-07-14 01:26 - 2009-07-14 03:14 - 00211968 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcXtrnal.DLL
2013-09-02 10:41 - 2013-09-02 10:41 - 03271576 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-08 10:18 - 2013-09-02 22:34 - 47074256 _____ (Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\chrome.dll
2013-09-08 10:18 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\icudt.dll
2013-05-25 02:36 - 2013-05-25 02:36 - 00130736 _____ (Dropbox, Inc.) C:\Users\Lollo\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
2013-09-08 10:18 - 2013-09-02 20:46 - 03231688 _____ (Microsoft Corporation) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\D3DCompiler_46.dll
2013-09-08 10:18 - 2013-09-02 22:35 - 00709584 _____ () C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
2013-09-08 10:18 - 2013-09-02 22:35 - 00099792 _____ () C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\libegl.dll
2013-09-08 10:18 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-08 10:18 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-08 10:18 - 2013-09-02 22:35 - 02110928 _____ (Google Inc.) C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\libpeerconnection.dll
2013-09-08 10:18 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2012-10-24 15:17 - 2012-10-24 15:17 - 00399064 _____ (RealPlayer) C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Common\rpcommon150browserrecordplugin.dll
2012-10-24 15:17 - 2012-10-24 15:17 - 00095744 _____ (RealNetworks, Inc.) C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
2013-09-08 10:18 - 2013-09-02 22:35 - 13599184 _____ () C:\Users\Lollo\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\ProgramData\TEMP:24905485
AlternateDataStreams: C:\ProgramData\TEMP:3B71D0B4
AlternateDataStreams: C:\ProgramData\TEMP:CD060F93
AlternateDataStreams: C:\ProgramData\TEMP:D74B6CF5
AlternateDataStreams: C:\ProgramData\TEMP:FB1B13D8


==================== Faulty Device Manager Devices =============

Name: WAN-Miniport (L2TP)
Description: WAN-Miniport (L2TP)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: Rasl2tp
Problem: : A driver (service) for this device has been disabled. An alternate driver may be providing this functionality (Code 32)
Resolution: The start type for this driver is set to disabled in the registry.
Uninstall the driver from Device Manager, and then scan for new hardware to install the driver again. If this does not work, you might have to change the device start type parameter in the registry.

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/12/2013 04:29:30 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/12/2013 04:29:28 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/12/2013 04:29:26 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/12/2013 04:29:24 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/12/2013 07:29:58 AM) (Source: MySQL) (User: )
Description: Aborting


For more information, see Help and Support Center at hxxp://www.mysql.com.

Error: (09/12/2013 07:29:58 AM) (Source: MySQL) (User: )
Description: Can't create IP socket: No such file or directory

For more information, see Help and Support Center at hxxp://www.mysql.com.

Error: (09/12/2013 07:29:38 AM) (Source: Schedule) (User: )
Description: Schedule error: 10050Initialize call failed, bailing out

Error: (09/11/2013 10:14:40 PM) (Source: MySQL) (User: )
Description: Aborting


For more information, see Help and Support Center at hxxp://www.mysql.com.

Error: (09/11/2013 10:14:40 PM) (Source: MySQL) (User: )
Description: Can't create IP socket: No such file or directory

For more information, see Help and Support Center at hxxp://www.mysql.com.

Error: (09/11/2013 10:14:11 PM) (Source: Schedule) (User: )
Description: Schedule error: 10050Initialize call failed, bailing out


System errors:
=============
Error: (09/12/2013 02:23:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/12/2013 02:23:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/12/2013 02:21:26 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Avira Planer" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (09/12/2013 02:21:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Planer" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/12/2013 02:21:16 PM) (Source: WMPNetworkSvc) (User: )
Description: Dienst "WMPNetworkSvc" konnte nicht ordnungsgemäß gestartet werden, da ein Fehler "0x80004005" in "CoCreateInstance(CLSID_UPnPDeviceFinder)" aufgetreten ist. Überprüfen Sie, ob der Dienst "UPnPHost" ausgeführt wird und ob die Windows-Komponente "UPnPHost" richtig installiert ist.

Error: (09/12/2013 02:21:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Planer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/12/2013 02:20:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Palm Novacom" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/12/2013 02:20:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "FSService" wurde mit folgendem Fehler beendet: 
%%87

Error: (09/12/2013 10:37:41 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/12/2013 10:24:56 AM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: 490@01010004


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-09-09 10:55:05.638
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-09 10:55:05.513
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-09 09:49:53.142
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-09 09:49:52.814
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-09 09:49:36.076
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-09 09:49:35.951
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-09 09:46:13.847
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-09 09:46:13.691
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-09 08:48:28.516
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-09 08:48:28.345
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 67%
Total physical RAM: 4095.05 MB
Available physical RAM: 1314.36 MB
Total Pagefile: 8188.29 MB
Available Pagefile: 4947.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.75 GB) (Free:55.09 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 2AD42AD3)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================

--- --- ---

11.09.2013, 08:27	#21
aharonov /// TB-Ausbilder	ZBot / ZeuS Trojaner Telekombrief; VISA-card Hack Ok, dann lade bitte die AFD.reg herunter und speichere sie auf den Desktop. Führe die Datei dann aus und bestätige das Hinzufügen zur Registrierungsdatenbank. Starte anschliessend den Rechner neu und mach darauf einen neuen Scan mit FSS und poste das Log. __________________ --> ZBot / ZeuS Trojaner Telekombrief; VISA-card Hack

11.09.2013, 21:32	#23
aharonov /// TB-Ausbilder	ZBot / ZeuS Trojaner Telekombrief; VISA-card Hack Hast du den Rechner vor dem FSS-Scan neu gestartet? Falls ja, dann bitte auch noch die LEGACY_AFD.reg herunterladen und zur Registrierungsdatenbank hinzufügen und danach erneut nach Neustart ein neues FSS-Log machen. __________________ cheers, Leo

12.09.2013, 08:23	#25
aharonov /// TB-Ausbilder	ZBot / ZeuS Trojaner Telekombrief; VISA-card Hack Laut diesem Log sollte deine Internetverbindung jetzt wieder funktionieren. Ist das korrekt? (Das Log ist aber nicht ganz vollständig. Hast du es gekürzt oder bei FSS die Haken bei gewissen Optionen entfernt?) __________________ cheers, Leo

12.09.2013, 15:39	#29
aharonov /// TB-Ausbilder	ZBot / ZeuS Trojaner Telekombrief; VISA-card Hack Du hast zweimal die FRST.txt gepostet. Kannst du bitte auch noch die Addition.txt einfügen? __________________ cheers, Leo

ZBot / ZeuS Trojaner Telekombrief; VISA-card Hack

Log-Analyse und Auswertung: ZBot / ZeuS Trojaner Telekombrief; VISA-card Hack