| |
| |||||||
Log-Analyse und Auswertung: Ebenfalls (PopUps & ads im Browser von gqs.donedrive.net )Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
12.09.2013, 14:17
| #1 |
| |  Ebenfalls (PopUps & ads im Browser von gqs.donedrive.net ) Hallo ich habe ebenfalls das gleiche Problem wie viele andere. Ständige Einblendungen und PopUps von gqs.donedrive.net Ich habe bei den anderen Themen gefunden das mann Farbar's Recovery Scan Tool ausführen soll. Das habe ich schon mal getan. War das richtig? Wie weiter? FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-09-2013 02
Ran by M.Voigt (administrator) on MVOIGT-PC on 12-09-2013 15:08:38
Running from C:\Users\M.Voigt\Downloads
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
( ) C:\Windows\system32\dldocoms.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\Program Files\Danfoss Drives\VLT Motion Control Tool\MCT 10 Set-up Software\MCTServ.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
() C:\Windows\system32\PSIService.exe
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Users\M.Voigt\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Bandoo Media, inc) C:\Program Files\Searchqu Toolbar\Datamngr\datamngrUI.exe
(Corel, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\Corel Photo Downloader.exe
() C:\Program Files\Dell 968 AIO Printer\dldomon.exe
() C:\Program Files\Dell 968 AIO Printer\memcard.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Allway Sync\Bin\syncappw.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
() C:\mysql\bin\mysqld.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Huawei Technologies Co., Ltd.) C:\Users\M.Voigt\AppData\Roaming\Telekom Internet Manager\ouc.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidFind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apntex.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
(Microsoft Corporation) C:\Windows\system32\UI0Detect.exe
() C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
(Microsoft Corporation) C:\Windows\system32\schtasks.exe
(Microsoft Corporation) C:\Windows\system32\schtasks.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\system32\schtasks.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\schtasks.exe
() C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
(Microsoft Corporation) C:\Windows\system32\WerFault.exe
(PC Utilities Pro) C:\Program Files\Optimizer Pro\OptimizerPro.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [288040 2010-04-05] (Alps Electric Co., Ltd.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-06-20] (Microsoft Corporation)
HKLM\...\Run: [Zune Launcher] - C:\Program Files\Zune\ZuneLauncher.exe [159456 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [DATAMNGR] - C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE [1890744 2012-09-02] (Bandoo Media, inc)
HKLM\...\Run: [Standby] - c:\Program Files\Common Files\Corel\Standby\Standby.exe [105632 2010-01-07] (Corel)
HKLM\...\Run: [Ocs_SM] - C:\Users\M.Voigt\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [106496 2013-02-02] (OCS)
HKLM\...\Run: [Corel Photo Downloader] - C:\Program Files\Corel\Corel Snapfire Plus\Corel Photo Downloader.exe [478800 2007-03-21] (Corel, Inc.)
HKLM\...\Run: [dldomon.exe] - C:\Program Files\Dell 968 AIO Printer\dldomon.exe [455920 2007-10-05] ()
HKLM\...\Run: [MemoryCardManager] - C:\Program Files\Dell 968 AIO Printer\memcard.exe [410864 2007-10-05] ()
HKLM\...\Run: [Dell 968 AIO Printer Fax Server] - C:\Program Files\Dell 968 AIO Printer\fm3032.exe [312560 2007-10-05] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [DataCardMonitor] - C:\Program Files\Telekom\InternetManager_H\DataCardMonitor.exe [259424 2013-08-30] (Huawei Technologies Co., Ltd.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKCU\...\Run: [LaCie Ethernet Agent Startup] - C:\Program Files\LaCie\Ethernet Agent\LaCie Ethernet Agent.exe [4091904 2008-06-19] (LaCie SA)
HKCU\...\Run: [Allway Sync] - C:\Program Files\Allway Sync\Bin\syncappw.exe [79576 2009-11-30] ()
HKCU\...\Run: [msnmsgr] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe [3883840 2009-07-26] (Microsoft Corporation)
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-30] (Google Inc.)
HKCU\...\Run: [HW_OPENEYE_OUC_Telekom Internet Manager] - C:\Program Files\Telekom\InternetManager_H\UpdateDog\ouc.exe [116064 2010-12-28] (Huawei Technologies Co., Ltd.)
HKCU\...\Run: [Optimizer Pro] - C:\Program Files\Optimizer Pro\OptProLauncher.exe [135672 2013-06-07] (PC Utilities Pro)
MountPoints2: F - F:\AutoRun.exe
MountPoints2: G - G:\LaunchU3.exe -a
MountPoints2: {263e2aea-1efe-11e1-8251-001d09453805} - F:\AutoRun.exe
MountPoints2: {263e2af7-1efe-11e1-8251-001d09453805} - F:\AutoRun.exe
MountPoints2: {263e2b00-1efe-11e1-8251-001d09453805} - F:\AutoRun.exe
MountPoints2: {288e1b4c-b1fd-11df-bf41-001f3c132515} - F:\NokiaPCIA_Autorun.exe
MountPoints2: {31da8815-2326-11e1-a3f4-001d09453805} - F:\AutoRun.exe
MountPoints2: {31da8823-2326-11e1-a3f4-001d09453805} - F:\AutoRun.exe
MountPoints2: {4f277534-cebd-11de-8016-001d09453805} - H:\LaunchU3.exe -a
MountPoints2: {85019660-1150-11e3-a33d-001d09453805} - F:\AutoRun.exe
MountPoints2: {85019675-1150-11e3-a33d-001d09453805} - F:\AutoRun.exe
MountPoints2: {860a3259-30cd-11df-8953-001d09453805} - F:\AutoRun.exe
MountPoints2: {860a3274-30cd-11df-8953-001d09453805} - F:\AutoRun.exe
MountPoints2: {860a3292-30cd-11df-8953-001d09453805} - F:\AutoRun.exe
MountPoints2: {860a3293-30cd-11df-8953-001d09453805} - F:\AutoRun.exe
MountPoints2: {b3331a34-2328-11e1-89c0-001d09453805} - F:\AutoRun.exe
MountPoints2: {ba63cd3b-0432-11e1-8564-001d09453805} - F:\LaunchU3.exe -a
MountPoints2: {f8500d25-66ff-11e0-88f9-001d09453805} - F:\NokiaPCIA_Autorun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
Startup: C:\Users\M.Voigt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mysqld.exe.lnk
ShortcutTarget: mysqld.exe.lnk -> C:\mysql\bin\mysqld.exe ()
Startup: C:\Users\M.Voigt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=A61F001D09453805&affID=119357&tsp=5003
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=A61F001D09453805&affID=119357&tsp=5003
URLSearchHook: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
URLSearchHook: (No Name) - {213c8ed6-1d78-4d8f-8729-25006aa86a76} - No File
SearchScopes: HKLM - DefaultScope {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://de.search.yahoo.com/search/?p={searchTerms}&fr=vc_trans_de_8197
SearchScopes: HKLM - {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://de.search.yahoo.com/search/?p={searchTerms}&fr=vc_trans_de_8197
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=484&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - DefaultScope {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://de.search.yahoo.com/search/?p={searchTerms}&fr=vc_trans_de_8197
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494538535243&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&k=0
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A61F001D09453805&affID=119357&tsp=5003
SearchScopes: HKCU - {14034AC0-4CF4-4C09-B991-821A904B022E} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {30AB037F-99BB-4D90-B433-23598681ADC7} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {4894E5A0-4143-4B10-839F-8347B97AC4E2} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E636F6D2F7365617263683F713D7B7365617263685465726D737D26726C733D636F6D2E6D6963726F736F66743A7B6C616E67756167657D3A7B72656665727265723A736F757263653F7D2669653D7B696E707574456E636F64696E677D266F653D7B6F7574707574456E636F64696E677D26736F7572636569643D696537&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&k=0
SearchScopes: HKCU - {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://de.search.yahoo.com/search/?p={searchTerms}&fr=vc_trans_de_8197
SearchScopes: HKCU - {7A9854CC-F00D-4996-A7BB-6A3C6063C313} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {8F33574A-B5D5-4E50-9B40-70DB3B282A8F} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com.anonymize-me.de/?anonymto=687474703A2F2F6474732E7365617263682D726573756C74732E636F6D2F73723F7372633D6965622661707069643D3438342673797374656D69643D3430362673723D3026713D7B7365617263685465726D737D&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&k=0
SearchScopes: HKCU - {A9BF69FD-D810-4427-9F39-CD461A668F0D} URL = hxxp://www.google.de.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E64652F7365617263683F713D7B7365617263685465726D737D26726C7A3D31493753554E435F64654445333733&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&k=0
SearchScopes: HKCU - {AED9ADDC-0718-44AC-B64A-D39C7AA2D4EA} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {DC17B47A-0FAF-48AF-9A3C-3A014831E0E8} URL = hxxp://search.conduit.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E636F6E647569742E636F6D2F526573756C74734578742E617370783F713D7B7365617263685465726D737D26536561726368536F757263653D3426637469643D435433323432333337&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&k=0
SearchScopes: HKCU - {E98F300E-0FD8-4984-AE98-91BA4DF40E30} URL = hxxp://websearch.ask.com.anonymize-me.de/?anonymto=687474703A2F2F7765627365617263682E61736B2E636F6D2F72656469726563743F636C69656E743D69652674623D4F524A266F3D267372633D6B7726713D7B7365617263685465726D737D266C6F63616C653D2661706E5F70746E72733D2661706E5F647469643D4F534A3030302661706E5F7569643D38303036414138322D303633332D343341372D423332302D3446373430383237303143452661706E5F73617569643D46463844433232332D453946352D343246462D383535302D313631353135384232374542&st={searchTerms}&clid=3726faaf-33d3-47ea-91ad-c104adf489d4&pid=freewarede&k=0
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lyrics Seeker - {14a771cd-f066-4d65-8e98-b0d5eb237c81} - C:\Program Files\LyricsSeeker\133.dll ()
BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll ()
BHO: DNS Error Helper - {9B6B03F1-16CF-4491-BBBB-E872802DD717} - C:\ProgramData\DNSErrorHelper\bho.dll ()
BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~1\SEARCH~1\Datamngr\BROWSE~1.DLL (Bandoo Media, inc)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SeeSimilar - {F225A2E3-8EE1-4204-B7A0-F4C551578A87} - C:\Program Files\SeeSimilar\ScriptHost.dll (SeeSimilar.com)
Toolbar: HKLM - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
Toolbar: HKLM - Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU -Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU -DVDVideoSoftTB Toolbar - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
Toolbar: HKCU - No Name - {213C8ED6-1D78-4D8F-8729-25006AA86A76} - No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR Extension: (Delta Toolbar) - C:\Users\M5F7C~1.VOI\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4_0
CHR Extension: (Lyrics Seeker) - C:\Users\M5F7C~1.VOI\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\M5F7C~1.VOI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (SeeSimilar) - C:\Users\M5F7C~1.VOI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pggagllhehfjjfgnfnfkjedjlmbchamf\1.0.0.5_0
CHR HKLM\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\M.Voigt\AppData\Roaming\BabSolution\CR\Delta.crx
CHR HKLM\...\Chrome\Extension: [lgoiojnjnacbjngolldkokokgpcjbgjj] - C:\Program Files\LyricsSeeker\133.crx
CHR HKLM\...\Chrome\Extension: [pggagllhehfjjfgnfnfkjedjlmbchamf] - C:\Users\M.Voigt\AppData\Roaming\SeeSimilar\SeeSimilar.crx
========================== Services (Whitelisted) =================
R2 BitGuard; C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [2845152 2013-09-10] ()
S2 dldoCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\dldoserv.exe [99568 2007-10-05] ()
R2 dldo_device; C:\Windows\system32\dldocoms.exe [595184 2007-10-05] ( )
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [270176 2011-01-28] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 MCT10 Service; C:\Program Files\Danfoss Drives\VLT Motion Control Tool\MCT 10 Set-up Software\MCTServ.exe [192512 2009-10-06] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-06-20] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-06-20] (Microsoft Corporation)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] ()
R2 SearchAnonymizer; C:\Users\M.Voigt\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [40960 2013-02-02] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-28] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [101248 2012-10-05] (AVM Berlin)
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
S3 EverestDriver; D:\Service\everestultimate_build_1653\kerneld.wnt [26224 2008-12-24] ()
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [60104 2010-07-12] (FTDI Ltd.)
S1 gewqgsrx; C:\Windows\system32\drivers\gewqgsrx.sys [43600 2013-09-12] (Microsoft Corporation)
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [90112 2011-01-30] (Huawei Technologies Co., Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation)
S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [134144 2013-02-22] (Prolific Technology Inc.)
S3 silabenm; C:\Windows\System32\DRIVERS\silabenm.sys [47176 2010-11-16] (Silicon Laboratories)
S3 silabser; C:\Windows\System32\DRIVERS\silabser.sys [59136 2010-11-16] (Silicon Laboratories)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S2 DETEWECP; \SystemRoot\System32\drivers\detewecp.sys [x]
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [235392 2010-12-24] (Huawei Technologies Co., Ltd.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-12 15:08 - 2013-09-12 15:08 - 00000000 ____D C:\FRST
2013-09-12 15:07 - 2013-09-12 15:07 - 01082587 _____ (Farbar) C:\Users\M.Voigt\Downloads\FRST.exe
2013-09-12 15:06 - 2013-09-12 15:06 - 00043600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\gewqgsrx.sys
2013-09-12 15:03 - 2013-09-12 15:03 - 00000868 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-09-12 15:03 - 2013-09-12 15:03 - 00000824 _____ C:\Users\M.Voigt\Desktop\Optimizer Pro.lnk
2013-09-12 15:03 - 2013-09-12 15:03 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-12 15:03 - 2013-09-12 15:03 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-12 15:03 - 2013-09-12 15:03 - 00000000 ____D C:\Program Files\Optimizer Pro
2013-09-12 15:02 - 2013-09-12 15:02 - 00000432 _____ C:\Windows\Tasks\At2.job
2013-09-12 15:02 - 2013-09-12 15:02 - 00000000 ____D C:\Program Files\OpenIt
2013-09-12 15:01 - 2013-09-12 15:01 - 00745328 _____ C:\Users\M.Voigt\Downloads\ZipOpenerSetup (1).exe
2013-09-12 06:13 - 2013-09-12 06:13 - 00000000 ____D C:\Program Files\LyricsSeeker
2013-09-12 03:09 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-12 03:09 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-12 03:09 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-12 03:09 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-12 03:09 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-12 03:09 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-12 03:09 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-12 03:09 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-12 03:09 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-12 03:09 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-12 03:09 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-12 03:09 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-12 03:09 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-12 03:09 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-12 03:09 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-12 03:09 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 19:07 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 19:07 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2013-09-10 06:29 - 2013-09-10 06:29 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\Apple Computer
2013-09-07 08:20 - 2013-09-07 08:20 - 00089600 _____ C:\Users\M.Voigt\Downloads\kamelidenfutteechnungneu.xls
2013-09-05 15:11 - 2013-09-05 15:11 - 04144847 _____ C:\Users\M.Voigt\Downloads\clip3 (13).wmv
2013-09-05 15:11 - 2013-09-05 15:11 - 04061647 _____ C:\Users\M.Voigt\Downloads\clip4 (19).wmv
2013-09-05 15:10 - 2013-09-05 15:11 - 04097575 _____ C:\Users\M.Voigt\Downloads\clip4 (18).wmv
2013-09-05 15:10 - 2013-09-05 15:11 - 04062375 _____ C:\Users\M.Voigt\Downloads\clip3 (12).wmv
2013-09-05 15:08 - 2013-09-05 15:09 - 04132269 _____ C:\Users\M.Voigt\Downloads\clip4 (17).wmv
2013-09-05 15:08 - 2013-09-05 15:09 - 04084269 _____ C:\Users\M.Voigt\Downloads\clip3 (11).wmv
2013-09-05 15:05 - 2013-09-05 15:06 - 04180183 _____ C:\Users\M.Voigt\Downloads\clip4 (16).wmv
2013-09-05 15:05 - 2013-09-05 15:06 - 04144983 _____ C:\Users\M.Voigt\Downloads\clip3 (10).wmv
2013-09-04 15:05 - 2013-09-04 15:05 - 04180265 _____ C:\Users\M.Voigt\Downloads\clip4 (15).wmv
2013-09-04 15:05 - 2013-09-04 15:05 - 04100265 _____ C:\Users\M.Voigt\Downloads\clip3 (9).wmv
2013-09-04 15:03 - 2013-09-04 15:03 - 04116265 _____ C:\Users\M.Voigt\Downloads\clip3 (8).wmv
2013-09-04 15:03 - 2013-09-04 15:03 - 04052265 _____ C:\Users\M.Voigt\Downloads\clip4 (14).wmv
2013-09-04 15:01 - 2013-09-04 15:01 - 04094015 _____ C:\Users\M.Voigt\Downloads\clip2 (6).wmv
2013-09-04 15:00 - 2013-09-04 15:01 - 04132415 _____ C:\Users\M.Voigt\Downloads\clip3 (7).wmv
2013-09-04 15:00 - 2013-09-04 15:01 - 04094015 _____ C:\Users\M.Voigt\Downloads\clip2 (5).wmv
2013-09-04 15:00 - 2013-09-04 15:01 - 04081215 _____ C:\Users\M.Voigt\Downloads\clip4 (13).wmv
2013-09-04 15:00 - 2013-09-04 15:00 - 02817119 _____ C:\Users\M.Voigt\Downloads\clip4 (12).wmv
2013-09-04 14:59 - 2013-09-04 15:00 - 02836319 _____ C:\Users\M.Voigt\Downloads\clip2 (4).wmv
2013-09-04 14:59 - 2013-09-04 15:00 - 02817119 _____ C:\Users\M.Voigt\Downloads\clip4 (11).wmv
2013-09-04 14:56 - 2013-09-04 14:56 - 04103387 _____ C:\Users\M.Voigt\Downloads\clip4 (10).wmv
2013-09-04 14:56 - 2013-09-04 14:56 - 04080987 _____ C:\Users\M.Voigt\Downloads\clip3 (6).wmv
2013-09-03 13:39 - 2013-09-03 13:40 - 01533897 _____ C:\Users\M.Voigt\Downloads\clip2 (3).wmv
2013-09-03 13:39 - 2013-09-03 13:40 - 01434697 _____ C:\Users\M.Voigt\Downloads\clip4 (9).wmv
2013-09-03 13:39 - 2013-09-03 13:40 - 01409097 _____ C:\Users\M.Voigt\Downloads\clip3 (5).wmv
2013-09-03 13:37 - 2013-09-03 13:38 - 02436065 _____ C:\Users\M.Voigt\Downloads\clip4 (8).wmv
2013-09-03 13:37 - 2013-09-03 13:38 - 02378465 _____ C:\Users\M.Voigt\Downloads\clip3 (4).wmv
2013-09-03 13:33 - 2013-09-03 13:34 - 04052189 _____ C:\Users\M.Voigt\Downloads\clip3 (3).wmv
2013-09-03 13:33 - 2013-09-03 13:34 - 03472989 _____ C:\Users\M.Voigt\Downloads\clip4 (7).wmv
2013-09-03 09:14 - 2013-09-03 09:14 - 00001691 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2013-09-03 09:13 - 2013-09-03 09:14 - 00000000 ____D C:\Program Files\QuickTime
2013-09-03 09:13 - 2013-09-03 09:13 - 00000000 ____D C:\ProgramData\Apple Computer
2013-09-03 09:10 - 2013-09-03 09:10 - 00000000 ____D C:\Users\M.Voigt\AppData\Local\Apple
2013-09-03 09:10 - 2013-09-03 09:10 - 00000000 ____D C:\ProgramData\Apple
2013-09-03 09:10 - 2013-09-03 09:10 - 00000000 ____D C:\Program Files\Apple Software Update
2013-09-03 09:05 - 2013-09-03 09:09 - 39401336 _____ (Apple Inc.) C:\Users\M.Voigt\Downloads\QuickTimeInstaller.exe
2013-08-30 15:09 - 2013-08-30 15:09 - 00000000 ____D C:\Program Files\Telit Wireless Solutions
2013-08-30 15:08 - 2013-08-30 15:08 - 05308211 _____ C:\Users\M.Voigt\Downloads\H24-Drivers-Installers.zip
2013-08-30 14:50 - 2013-08-30 14:50 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\Delta
2013-08-30 14:50 - 2013-08-30 14:50 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2013-08-30 14:50 - 2013-08-30 14:50 - 00000000 ____D C:\Program Files\Delta
2013-08-30 14:49 - 2013-09-12 06:13 - 00000368 _____ C:\Windows\Tasks\Lyrics Seeker Update.job
2013-08-30 14:48 - 2013-08-31 14:48 - 00000432 _____ C:\Windows\Tasks\At1.job
2013-08-30 14:48 - 2013-08-30 14:48 - 00714816 _____ C:\Users\M.Voigt\Downloads\ZipOpenerSetup.exe
2013-08-30 14:48 - 2013-08-30 14:48 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\DSite
2013-08-30 14:47 - 2013-08-30 14:47 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\driveridentifier
2013-08-30 14:46 - 2013-08-30 14:46 - 00407168 _____ (DriverIdentifier) C:\Users\M.Voigt\Downloads\DriverIdentifier.exe
2013-08-30 14:31 - 2013-08-30 14:31 - 00001030 _____ C:\Users\Public\Desktop\Telekom Internet Manager.lnk
2013-08-30 14:31 - 2009-12-15 10:46 - 00724608 _____ (Microsoft Corporation) C:\Windows\system32\bmutil.dll
2013-08-30 14:31 - 2009-12-15 10:46 - 00480384 _____ (Bytemobile, Inc.) C:\Windows\system32\bmnet.dll
2013-08-30 14:31 - 2009-12-15 10:46 - 00308352 _____ (Bytemobile, Inc.) C:\Windows\system32\bminstall.dll
2013-08-30 14:31 - 2009-12-15 10:46 - 00132224 _____ (Bytemobile, Inc.) C:\Windows\system32\bmdumpd.bin
2013-08-30 14:31 - 2009-12-15 10:46 - 00024192 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\tcpipBM.sys
2013-08-30 14:31 - 2009-12-15 10:46 - 00013712 _____ (Microsoft Corporation) C:\Windows\system32\sporder.dll
2013-08-30 14:31 - 2009-12-15 10:46 - 00013184 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\BMLoad.sys
2013-08-30 14:24 - 2011-01-30 18:19 - 00090112 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2013-08-30 14:24 - 2011-01-30 18:19 - 00073216 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2013-08-30 14:24 - 2011-01-30 18:19 - 00064384 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2013-08-30 14:24 - 2011-01-30 18:19 - 00026624 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2013-08-30 14:24 - 2010-12-24 11:55 - 00235392 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbnet.sys
2013-08-30 14:24 - 2010-12-24 11:48 - 00193792 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2013-08-30 14:24 - 2010-10-08 16:55 - 00025856 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2013-08-30 14:24 - 2010-09-26 18:09 - 00019200 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2013-08-30 14:24 - 2010-08-06 07:42 - 00861696 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2013-08-30 14:24 - 2010-07-27 09:52 - 00102784 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2013-08-30 14:24 - 2010-03-20 12:06 - 00011136 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2013-08-30 14:23 - 2013-08-30 14:23 - 00000000 ____D C:\Program Files\Telekom
2013-08-30 13:28 - 2013-08-30 13:28 - 00000000 ____D C:\Users\M.Voigt\Desktop\Hochwasser Elbe 2013
2013-08-30 12:25 - 2013-08-30 12:25 - 00000000 ____D C:\Users\M.Voigt\AppData\Local\avgchrome
2013-08-30 12:24 - 2013-08-30 12:24 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\BabSolution
2013-08-30 12:24 - 2013-08-30 12:24 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\SeeSimilar
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\Babylon
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\ProgramData\IBUpdaterService
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\ProgramData\Babylon
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\Program Files\SeeSimilar
2013-08-30 12:22 - 2013-08-30 12:22 - 00000000 ____D C:\Users\M.Voigt\AppData\Local\ABF software
2013-08-30 12:22 - 2013-08-30 12:22 - 00000000 ____D C:\Program Files\ABF software
2013-08-30 12:21 - 2013-08-30 12:21 - 00392040 _____ (Softonic ) C:\Users\M.Voigt\Downloads\SoftonicDownloader_fuer_clock-screen-saver.exe
2013-08-30 12:19 - 2013-08-30 12:19 - 00000000 ____D C:\Users\M.Voigt\Downloads\clock
2013-08-30 12:18 - 2013-08-30 12:18 - 00548940 _____ C:\Users\M.Voigt\Downloads\clock.zip
2013-08-30 11:16 - 2013-08-30 11:17 - 00001428 _____ C:\Users\M.Voigt\Desktop\Bilder.lnk
2013-08-28 13:48 - 2013-08-28 13:48 - 00000720 _____ C:\Users\M.Voigt\Downloads\map_webstart.php
2013-08-28 06:13 - 2013-08-02 04:48 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-27 14:37 - 2013-08-27 14:38 - 04122447 _____ C:\Users\M.Voigt\Downloads\clip1 (6).wmv
2013-08-27 14:37 - 2013-08-27 14:38 - 04074447 _____ C:\Users\M.Voigt\Downloads\clip4 (6).wmv
2013-08-27 14:37 - 2013-08-27 14:38 - 04074447 _____ C:\Users\M.Voigt\Downloads\clip3 (2).wmv
2013-08-27 14:37 - 2013-08-27 14:38 - 04048847 _____ C:\Users\M.Voigt\Downloads\clip2 (2).wmv
2013-08-27 14:34 - 2013-08-27 14:35 - 04093647 _____ C:\Users\M.Voigt\Downloads\clip4 (5).wmv
2013-08-27 14:34 - 2013-08-27 14:35 - 04074447 _____ C:\Users\M.Voigt\Downloads\clip2 (1).wmv
2013-08-27 14:34 - 2013-08-27 14:35 - 04071247 _____ C:\Users\M.Voigt\Downloads\clip3 (1).wmv
2013-08-27 14:31 - 2013-08-27 14:32 - 04141647 _____ C:\Users\M.Voigt\Downloads\clip2.wmv
2013-08-27 14:31 - 2013-08-27 14:32 - 04128847 _____ C:\Users\M.Voigt\Downloads\clip1 (5).wmv
2013-08-27 14:31 - 2013-08-27 14:32 - 04055247 _____ C:\Users\M.Voigt\Downloads\clip4 (4).wmv
2013-08-27 14:29 - 2013-08-27 14:29 - 02762727 _____ C:\Users\M.Voigt\Downloads\clip3.wmv
2013-08-27 14:28 - 2013-08-27 14:29 - 02753127 _____ C:\Users\M.Voigt\Downloads\clip4 (3).wmv
2013-08-15 03:02 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 03:02 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 03:02 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 03:02 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 03:02 - 2013-07-05 05:20 - 00914880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-15 03:02 - 2013-07-05 03:43 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-08-15 03:02 - 2013-06-15 15:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-08-15 03:02 - 2013-06-15 13:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-15 03:01 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 03:01 - 2013-07-10 11:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 03:01 - 2013-07-09 14:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-15 03:01 - 2013-07-08 06:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-15 03:01 - 2013-07-08 06:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
==================== One Month Modified Files and Folders =======
2013-09-12 15:08 - 2013-09-12 15:08 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\Optimizer Pro
2013-09-12 15:08 - 2013-09-12 15:08 - 00000000 ____D C:\FRST
2013-09-12 15:07 - 2013-09-12 15:07 - 01082587 _____ (Farbar) C:\Users\M.Voigt\Downloads\FRST.exe
2013-09-12 15:06 - 2013-09-12 15:06 - 00043600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\gewqgsrx.sys
2013-09-12 15:04 - 2006-11-02 14:52 - 01476170 _____ C:\Windows\WindowsUpdate.log
2013-09-12 15:03 - 2013-09-12 15:03 - 00000868 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-09-12 15:03 - 2013-09-12 15:03 - 00000824 _____ C:\Users\M.Voigt\Desktop\Optimizer Pro.lnk
2013-09-12 15:03 - 2013-09-12 15:03 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-12 15:03 - 2013-09-12 15:03 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-12 15:03 - 2013-09-12 15:03 - 00000000 ____D C:\Program Files\Optimizer Pro
2013-09-12 15:02 - 2013-09-12 15:02 - 00000432 _____ C:\Windows\Tasks\At2.job
2013-09-12 15:02 - 2013-09-12 15:02 - 00000000 ____D C:\Program Files\OpenIt
2013-09-12 15:02 - 2010-05-11 07:36 - 662578176 _____ C:\Users\M.Voigt\archive.pst
2013-09-12 15:02 - 2009-11-10 23:43 - 00000000 ____D C:\Users\M.Voigt
2013-09-12 15:01 - 2013-09-12 15:01 - 00745328 _____ C:\Users\M.Voigt\Downloads\ZipOpenerSetup (1).exe
2013-09-12 14:51 - 2010-03-30 22:11 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-12 14:38 - 2012-04-11 16:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-12 14:11 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-12 14:11 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-12 09:10 - 2010-03-30 22:11 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-12 06:14 - 2009-11-27 16:26 - 00000000 ____D C:\Users\M.Voigt\Tracing
2013-09-12 06:13 - 2013-09-12 06:13 - 00000000 ____D C:\Program Files\LyricsSeeker
2013-09-12 06:13 - 2013-08-30 14:49 - 00000368 _____ C:\Windows\Tasks\Lyrics Seeker Update.job
2013-09-12 03:30 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-12 03:30 - 2006-11-02 14:47 - 00417512 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 03:27 - 2006-11-02 15:01 - 00032532 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-12 03:12 - 2009-11-11 17:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-12 03:05 - 2013-07-19 22:25 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 03:01 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-09-11 19:38 - 2012-04-11 16:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-11 19:38 - 2011-06-28 17:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-10 06:29 - 2013-09-10 06:29 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\Apple Computer
2013-09-07 08:20 - 2013-09-07 08:20 - 00089600 _____ C:\Users\M.Voigt\Downloads\kamelidenfutteechnungneu.xls
2013-09-05 15:11 - 2013-09-05 15:11 - 04144847 _____ C:\Users\M.Voigt\Downloads\clip3 (13).wmv
2013-09-05 15:11 - 2013-09-05 15:11 - 04061647 _____ C:\Users\M.Voigt\Downloads\clip4 (19).wmv
2013-09-05 15:11 - 2013-09-05 15:10 - 04097575 _____ C:\Users\M.Voigt\Downloads\clip4 (18).wmv
2013-09-05 15:11 - 2013-09-05 15:10 - 04062375 _____ C:\Users\M.Voigt\Downloads\clip3 (12).wmv
2013-09-05 15:09 - 2013-09-05 15:08 - 04132269 _____ C:\Users\M.Voigt\Downloads\clip4 (17).wmv
2013-09-05 15:09 - 2013-09-05 15:08 - 04084269 _____ C:\Users\M.Voigt\Downloads\clip3 (11).wmv
2013-09-05 15:06 - 2013-09-05 15:05 - 04180183 _____ C:\Users\M.Voigt\Downloads\clip4 (16).wmv
2013-09-05 15:06 - 2013-09-05 15:05 - 04144983 _____ C:\Users\M.Voigt\Downloads\clip3 (10).wmv
2013-09-04 15:05 - 2013-09-04 15:05 - 04180265 _____ C:\Users\M.Voigt\Downloads\clip4 (15).wmv
2013-09-04 15:05 - 2013-09-04 15:05 - 04100265 _____ C:\Users\M.Voigt\Downloads\clip3 (9).wmv
2013-09-04 15:03 - 2013-09-04 15:03 - 04116265 _____ C:\Users\M.Voigt\Downloads\clip3 (8).wmv
2013-09-04 15:03 - 2013-09-04 15:03 - 04052265 _____ C:\Users\M.Voigt\Downloads\clip4 (14).wmv
2013-09-04 15:01 - 2013-09-04 15:01 - 04094015 _____ C:\Users\M.Voigt\Downloads\clip2 (6).wmv
2013-09-04 15:01 - 2013-09-04 15:00 - 04132415 _____ C:\Users\M.Voigt\Downloads\clip3 (7).wmv
2013-09-04 15:01 - 2013-09-04 15:00 - 04094015 _____ C:\Users\M.Voigt\Downloads\clip2 (5).wmv
2013-09-04 15:01 - 2013-09-04 15:00 - 04081215 _____ C:\Users\M.Voigt\Downloads\clip4 (13).wmv
2013-09-04 15:00 - 2013-09-04 15:00 - 02817119 _____ C:\Users\M.Voigt\Downloads\clip4 (12).wmv
2013-09-04 15:00 - 2013-09-04 14:59 - 02836319 _____ C:\Users\M.Voigt\Downloads\clip2 (4).wmv
2013-09-04 15:00 - 2013-09-04 14:59 - 02817119 _____ C:\Users\M.Voigt\Downloads\clip4 (11).wmv
2013-09-04 14:56 - 2013-09-04 14:56 - 04103387 _____ C:\Users\M.Voigt\Downloads\clip4 (10).wmv
2013-09-04 14:56 - 2013-09-04 14:56 - 04080987 _____ C:\Users\M.Voigt\Downloads\clip3 (6).wmv
2013-09-04 08:48 - 2010-03-30 22:11 - 00000000 ____D C:\Users\M.Voigt\AppData\Local\Google
2013-09-03 13:40 - 2013-09-03 13:39 - 01533897 _____ C:\Users\M.Voigt\Downloads\clip2 (3).wmv
2013-09-03 13:40 - 2013-09-03 13:39 - 01434697 _____ C:\Users\M.Voigt\Downloads\clip4 (9).wmv
2013-09-03 13:40 - 2013-09-03 13:39 - 01409097 _____ C:\Users\M.Voigt\Downloads\clip3 (5).wmv
2013-09-03 13:38 - 2013-09-03 13:37 - 02436065 _____ C:\Users\M.Voigt\Downloads\clip4 (8).wmv
2013-09-03 13:38 - 2013-09-03 13:37 - 02378465 _____ C:\Users\M.Voigt\Downloads\clip3 (4).wmv
2013-09-03 13:34 - 2013-09-03 13:33 - 04052189 _____ C:\Users\M.Voigt\Downloads\clip3 (3).wmv
2013-09-03 13:34 - 2013-09-03 13:33 - 03472989 _____ C:\Users\M.Voigt\Downloads\clip4 (7).wmv
2013-09-03 09:14 - 2013-09-03 09:14 - 00001691 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2013-09-03 09:14 - 2013-09-03 09:13 - 00000000 ____D C:\Program Files\QuickTime
2013-09-03 09:13 - 2013-09-03 09:13 - 00000000 ____D C:\ProgramData\Apple Computer
2013-09-03 09:13 - 2012-11-14 18:51 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-09-03 09:10 - 2013-09-03 09:10 - 00000000 ____D C:\Users\M.Voigt\AppData\Local\Apple
2013-09-03 09:10 - 2013-09-03 09:10 - 00000000 ____D C:\ProgramData\Apple
2013-09-03 09:10 - 2013-09-03 09:10 - 00000000 ____D C:\Program Files\Apple Software Update
2013-09-03 09:09 - 2013-09-03 09:05 - 39401336 _____ (Apple Inc.) C:\Users\M.Voigt\Downloads\QuickTimeInstaller.exe
2013-09-01 11:27 - 2006-11-02 12:33 - 01474832 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-31 14:48 - 2013-08-30 14:48 - 00000432 _____ C:\Windows\Tasks\At1.job
2013-08-30 15:21 - 2009-11-11 11:37 - 00179286 _____ C:\Windows\PFRO.log
2013-08-30 15:09 - 2013-08-30 15:09 - 00000000 ____D C:\Program Files\Telit Wireless Solutions
2013-08-30 15:08 - 2013-08-30 15:08 - 05308211 _____ C:\Users\M.Voigt\Downloads\H24-Drivers-Installers.zip
2013-08-30 15:04 - 2012-04-20 16:25 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\vlc
2013-08-30 14:50 - 2013-08-30 14:50 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\Delta
2013-08-30 14:50 - 2013-08-30 14:50 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2013-08-30 14:50 - 2013-08-30 14:50 - 00000000 ____D C:\Program Files\Delta
2013-08-30 14:48 - 2013-08-30 14:48 - 00714816 _____ C:\Users\M.Voigt\Downloads\ZipOpenerSetup.exe
2013-08-30 14:48 - 2013-08-30 14:48 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\DSite
2013-08-30 14:47 - 2013-08-30 14:47 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\driveridentifier
2013-08-30 14:46 - 2013-08-30 14:46 - 00407168 _____ (DriverIdentifier) C:\Users\M.Voigt\Downloads\DriverIdentifier.exe
2013-08-30 14:35 - 2012-11-14 17:45 - 00022403 _____ C:\Windows\setupact.log
2013-08-30 14:32 - 2011-12-10 12:59 - 00000000 ____D C:\ProgramData\DatacardService
2013-08-30 14:31 - 2013-08-30 14:31 - 00001030 _____ C:\Users\Public\Desktop\Telekom Internet Manager.lnk
2013-08-30 14:23 - 2013-08-30 14:23 - 00000000 ____D C:\Program Files\Telekom
2013-08-30 13:33 - 2009-12-14 17:54 - 00037501 _____ C:\ProgramData\dldo
2013-08-30 13:28 - 2013-08-30 13:28 - 00000000 ____D C:\Users\M.Voigt\Desktop\Hochwasser Elbe 2013
2013-08-30 12:25 - 2013-08-30 12:25 - 00000000 ____D C:\Users\M.Voigt\AppData\Local\avgchrome
2013-08-30 12:24 - 2013-08-30 12:24 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\BabSolution
2013-08-30 12:24 - 2013-08-30 12:24 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\SeeSimilar
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\Users\M.Voigt\AppData\Roaming\Babylon
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\ProgramData\IBUpdaterService
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\ProgramData\Babylon
2013-08-30 12:23 - 2013-08-30 12:23 - 00000000 ____D C:\Program Files\SeeSimilar
2013-08-30 12:22 - 2013-08-30 12:22 - 00000000 ____D C:\Users\M.Voigt\AppData\Local\ABF software
2013-08-30 12:22 - 2013-08-30 12:22 - 00000000 ____D C:\Program Files\ABF software
2013-08-30 12:21 - 2013-08-30 12:21 - 00392040 _____ (Softonic ) C:\Users\M.Voigt\Downloads\SoftonicDownloader_fuer_clock-screen-saver.exe
2013-08-30 12:21 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-08-30 12:19 - 2013-08-30 12:19 - 00000000 ____D C:\Users\M.Voigt\Downloads\clock
2013-08-30 12:18 - 2013-08-30 12:18 - 00548940 _____ C:\Users\M.Voigt\Downloads\clock.zip
2013-08-30 11:42 - 2009-11-11 16:24 - 00203264 _____ C:\Users\M.Voigt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-30 11:17 - 2013-08-30 11:16 - 00001428 _____ C:\Users\M.Voigt\Desktop\Bilder.lnk
2013-08-28 13:48 - 2013-08-28 13:48 - 00000720 _____ C:\Users\M.Voigt\Downloads\map_webstart.php
2013-08-27 14:38 - 2013-08-27 14:37 - 04122447 _____ C:\Users\M.Voigt\Downloads\clip1 (6).wmv
2013-08-27 14:38 - 2013-08-27 14:37 - 04074447 _____ C:\Users\M.Voigt\Downloads\clip4 (6).wmv
2013-08-27 14:38 - 2013-08-27 14:37 - 04074447 _____ C:\Users\M.Voigt\Downloads\clip3 (2).wmv
2013-08-27 14:38 - 2013-08-27 14:37 - 04048847 _____ C:\Users\M.Voigt\Downloads\clip2 (2).wmv
2013-08-27 14:35 - 2013-08-27 14:34 - 04093647 _____ C:\Users\M.Voigt\Downloads\clip4 (5).wmv
2013-08-27 14:35 - 2013-08-27 14:34 - 04074447 _____ C:\Users\M.Voigt\Downloads\clip2 (1).wmv
2013-08-27 14:35 - 2013-08-27 14:34 - 04071247 _____ C:\Users\M.Voigt\Downloads\clip3 (1).wmv
2013-08-27 14:32 - 2013-08-27 14:31 - 04141647 _____ C:\Users\M.Voigt\Downloads\clip2.wmv
2013-08-27 14:32 - 2013-08-27 14:31 - 04128847 _____ C:\Users\M.Voigt\Downloads\clip1 (5).wmv
2013-08-27 14:32 - 2013-08-27 14:31 - 04055247 _____ C:\Users\M.Voigt\Downloads\clip4 (4).wmv
2013-08-27 14:29 - 2013-08-27 14:29 - 02762727 _____ C:\Users\M.Voigt\Downloads\clip3.wmv
2013-08-27 14:29 - 2013-08-27 14:28 - 02753127 _____ C:\Users\M.Voigt\Downloads\clip4 (3).wmv
2013-08-16 16:06 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-16 15:50 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-08-16 06:24 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
Files to move or delete:
====================
C:\Users\M5F7C~1.VOI\AppData\Local\Temp\APNSetup.exe
C:\Users\M5F7C~1.VOI\AppData\Local\Temp\IminentSetup-1-.exe
C:\Users\M5F7C~1.VOI\AppData\Local\Temp\install_flashplayer11x32au_mssd_aih.exe
C:\Users\M5F7C~1.VOI\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\M5F7C~1.VOI\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\M5F7C~1.VOI\AppData\Local\Temp\Lyrupmp.exe
C:\Users\M5F7C~1.VOI\AppData\Local\Temp\SeeSimilarSetup-16-.exe
C:\Users\M5F7C~1.VOI\AppData\Local\Temp\uninst1.exe
C:\Windows\Tasks\At1.job
C:\Windows\Tasks\At2.job
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-12 03:35
==================== End Of Log ============================
Addition Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 09-09-2013 02
Ran by M.Voigt at 2013-09-12 15:13:33
Running from C:\Users\M.Voigt\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Update for Microsoft Office 2007 (KB2508958)
A9CAD (Version: 2.2.0)
A9Converter (Version: 1.0.3)
ABBYY FineReader 6.0 Sprint (Version: 6.00.1990.41618)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.168)
Adobe Flash Player 11 Plugin (Version: 11.8.800.168)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
Allway Sync version 9.4.11
Apple Application Support (Version: 2.1.5)
Apple Software Update (Version: 2.1.3.127)
AVM FRITZ!Box USB-Fernanschluss (HKCU Version: 2.2.1.0)
BitGuard
CAO-Faktura 1.4 (Version: 1.4.1.16)
CAP 6.0 (Version: 1.00.000)
Clock Screen Saver (Version: 1.70)
Communication Module Runtime Alpha 6.6 (0.8.909.0701)
Contents (Version: 1.6.1.109)
Corel PaintShop Photo Pro X3 (Version: 1.00.0000)
Corel PaintShop Photo Pro X3 (Version: 1.6.1.109)
Corel Snapfire Plus (Version: 1.30.0000)
Creo Elements/Direct Modeling Personal Edition 3.0 (Version: 30.0.3014)
Cumulus 1.9.2
Dell 968 AIO Printer
Dell Touchpad (Version: 7.1007.115.102)
Delta Chrome Toolbar
Delta toolbar (Version: 1.8.24.6)
DeviceIO (Version: 1.6.1.109)
DHTML Editing Component (Version: 6.02.0001)
DVDVideoSoftTB Toolbar (Version: 6.3.2.17)
EasyWeather
Fluke DMS 1.5 (Version: 1.05.0007)
Free YouTube Download version 2.10.31
Google Chrome (Version: 29.0.1547.66)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4413.1752)
Google Update Helper (Version: 1.3.21.153)
H24 Drivers (Version: 1.00.0000)
H24 Drivers (Version: 2.00.0000)
ICA (Version: 1.6.1.109)
iLivid (Version: 1.92)
INSTROM 5.2
INSTROM5
Intel(R) Graphics Media Accelerator Driver
IPM_PSP_Pro (Version: 1.00.0000)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
LaCie Ethernet Agent 1.1.0.6 (Version: 1.1.0.6)
LOGO!Soft Comfort V7.0 (Version: 7.0.0.0)
Lyrics Seeker
McAfee Security Scan Plus (Version: 3.0.318.3)
MCT 10 Set-up Software (Version: 3.13.808)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook Connector (Version: 14.0.6123.5001)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.3.215.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
MLE (Version: 1.0.0.23)
Modem-Diagnose-Tool (Version: 1.0.20.0)
MSVC80_x86 (Version: 1.0.1.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x86 (Version: 1.0.1.2)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MySQL Servers and Clients 4.0.26
Nokia PC Suite (Version: 7.1.62.1)
Open It! (Version: 1.1.1)
Opera 12.16 (Version: 12.16.1860)
Optimizer Pro v3.1 (Version: 3.1)
Ovi Desktop Sync Engine (Version: 1.5.161.0)
PDFCreator (Version: 0.9.8)
Pixie 1.4.1 (Version: 1.4.1)
PSPH10Pro (Version: 1.00.0000)
PSPPContent (Version: 1.00.0000)
PSPPRO_DCRAW (Version: 13.0.0)
PureHD (Version: 1.6.1.109)
QuickTime (Version: 7.71.80.42)
RarZilla Free Unrar (Version: 2.55)
REV Plus 1.2
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01 (Version: 3.51.01)
Rossmann Fotowelt Software 4.12.1 (Version: 4.12.1)
SearchAnonymizer (Version: 1.0.1 (de))
Searchqu Toolbar (Version: 4.1.0.3114)
SeeSimilar (Version: 1.0.0.5)
Setup (Version: 1.6.1.109)
Share (Version: 1.6.1.109)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal)
Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista (Version: 5.30)
Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7 (Version: 6.2.00)
Telekom Internet Manager (Version: 11.301.05.09.748)
TinyCAD 2.60.01 (Version: 2.60.01)
Top50 Viewer basierend auf Geogrid®-Viewer Version 2.1
TuneUp Utilities 2013 (Version: 13.0.3020.2)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2)
Turbo Lister 2 (Version: 2.00.0000)
Uninstall 1.0.0.1
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825641) 32-Bit Edition
Update for Zip Opener
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
VIO (Version: 1.6.1.109)
Vista Codec Package (Version: 5.2.9)
VizadooCAD 2.3 start
VLC media player 2.0.1 (Version: 2.0.1)
Wegertseder Katalog 2010 lite (Version: 1.1.3)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8098.930)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series (Version: 9.00.3374)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
Windows-Treiberpaket - Nokia Modem (02/25/2011 4.7) (Version: 02/25/2011 4.7)
Windows-Treiberpaket - Nokia Modem (02/25/2011 7.01.0.9) (Version: 02/25/2011 7.01.0.9)
Zip Opener Packages
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)
==================== Restore Points =========================
27-08-2013 04:51:56 Windows Update
28-08-2013 10:18:51 Windows Update
29-08-2013 06:28:35 Geplanter Prüfpunkt
30-08-2013 06:25:43 Geplanter Prüfpunkt
30-08-2013 13:09:23 Installed H24 Drivers.
30-08-2013 13:14:46 Installed H24 Drivers.
30-08-2013 13:16:43 Konfiguriert DataSync Outlook
31-08-2013 08:06:04 Geplanter Prüfpunkt
31-08-2013 22:00:01 Geplanter Prüfpunkt
31-08-2013 23:40:10 Windows Update
03-09-2013 07:11:28 Installed QuickTime
04-09-2013 08:18:03 Geplanter Prüfpunkt
04-09-2013 19:24:30 Windows Update
05-09-2013 09:21:39 Geplanter Prüfpunkt
06-09-2013 05:37:06 Geplanter Prüfpunkt
07-09-2013 07:54:56 Geplanter Prüfpunkt
08-09-2013 20:01:06 Windows Update
12-09-2013 01:00:48 Windows Update
==================== Hosts content: ==========================
2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3BE6B744-E45D-47D5-9014-94CCABCB94B4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-30] (Google Inc.)
Task: {3DD70D6A-0794-4E04-800B-D69D420BD11E} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {42BAA4CD-C78C-44D0-9CC4-D493A054297E} - System32\Tasks\At1 => C:\Users\M5F7C~1.VOI\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE [2013-09-12] ()
Task: {43FF6EBA-9915-486C-99ED-A9ACAAFCE134} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)
Task: {4D48E327-6677-42EB-BA92-2C0D1C9881F2} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-19] (Microsoft Corporation)
Task: {572C5EBF-B16D-47B3-BB91-3E46FC1D1E23} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-11] (Adobe Systems Incorporated)
Task: {63103916-BA2D-4DDB-A4C2-B3FD9C7ED73D} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-06-20] (Microsoft Corporation)
Task: {65F80564-453A-4C34-AD8D-5111E532F8AB} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-19] (Microsoft Corporation)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\pla.dll [2008-01-19] (Microsoft Corporation)
Task: {A82E6DE2-3EEF-42B1-871D-C16A4243A9CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-30] (Google Inc.)
Task: {B6DB9302-0F5B-43F5-90CC-1964B0EA9609} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {C2F55CE8-292C-4CB3-B160-1297E9A0382F} - System32\Tasks\At2 => C:\Users\M5F7C~1.VOI\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE [2013-09-12] ()
Task: {CF1C9690-F7C1-4A08-9835-E4B91B2BD4C7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D61D0031-54DE-4249-A16B-12EAAFDA61D9} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software)
Task: {D6EE3BA5-6EF0-436C-9246-418CAAB4AC91} - System32\Tasks\EPUpdater => C:\Users\M5F7C~1.VOI\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-08-04] ()
Task: {DF475D5A-92A1-4227-85BD-5BF9441E05DB} - System32\Tasks\Lyrics Seeker Update => C:\Program Files\LyricsSeeker\Lupdate.exe [2013-09-11] ()
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2009-11-11] ()
Task: {FD1A30DD-B4B7-4F33-B749-DDDD6863743B} - System32\Tasks\User_Feed_Synchronization-{954EFFBA-2222-4184-9638-6AE668CE82F7} => C:\Windows\system32\msfeedssync.exe [2011-05-15] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\At1.job => C:\Users\M5F7C~1.VOI\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\At2.job => C:\Users\M5F7C~1.VOI\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Lyrics Seeker Update.job => C:\Program Files\LyricsSeeker\Lupdate.exe
==================== Loaded Modules (whitelisted) =============
2013-01-28 15:19 - 2013-01-28 15:19 - 00030496 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\SDShelEx-win32.dll
2009-12-30 19:48 - 2009-12-30 19:48 - 00102032 _____ () c:\Program Files\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\PSPContextMenu.dll
2008-02-11 19:52 - 2008-12-23 11:00 - 00278528 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2011-12-10 17:03 - 2010-02-26 22:32 - 00109122 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\Vxdif.dll
2007-03-21 02:29 - 2007-03-21 02:29 - 00098896 _____ (Corel, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\PhotoDownloaderRC.dll
2007-03-21 02:35 - 2007-03-21 02:35 - 02329680 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreCmd.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 00759376 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreFileUtil.dll
2007-03-21 02:35 - 2007-03-21 02:35 - 01005136 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreControls.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 01583696 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreGUI.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 00043088 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreLanguage.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 01526352 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreGDI.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 00066640 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreMemory.dll
2007-03-21 02:35 - 2007-03-21 02:35 - 00029776 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreErrorCodes.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 00296528 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreFileFormats.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 01873488 _____ (Python Software Foundation) C:\Program Files\Corel\Corel Snapfire Plus\CorePython24.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 01022032 _____ (Corel Corporation) C:\Program Files\Corel\Corel Snapfire Plus\CoreOrganizer.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 00027728 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreSingletonMgr.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 00226384 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreMultimedia.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 01810000 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreImageFormats.dll
2007-02-17 12:54 - 2007-02-17 12:54 - 02180968 _____ (AccuSoft Corporation) C:\Program Files\Corel\Corel Snapfire Plus\igcore15d.dll
2007-03-21 02:36 - 2007-03-21 02:36 - 00125520 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CorePreferences.dll
2007-03-21 02:35 - 2007-03-21 02:35 - 00150608 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreColorMgr.dll
2007-03-21 02:35 - 2007-03-21 02:35 - 00254544 _____ (Corel Software, Inc.) C:\Program Files\Corel\Corel Snapfire Plus\CoreEnums.dll
2013-03-14 17:32 - 2007-09-06 22:38 - 00278528 _____ () C:\Program Files\Dell 968 AIO Printer\dldoscw.dll
2013-03-14 17:32 - 2007-08-01 10:15 - 00077906 _____ () C:\Program Files\Dell 968 AIO Printer\dldocfg.dll
2013-03-14 17:32 - 2007-05-03 17:39 - 00589824 _____ () C:\Program Files\Dell 968 AIO Printer\dldodatr.dll
2013-03-14 17:32 - 2007-08-31 20:47 - 00286720 _____ (Dell R&D Corp.) C:\Program Files\Dell 968 AIO Printer\dldomonr.dll
2013-03-14 17:32 - 2007-09-10 20:40 - 00851968 _____ ( ) C:\Program Files\Dell 968 AIO Printer\dldocomc.dll
2013-03-14 17:32 - 2006-10-03 16:16 - 00024576 _____ ( ) C:\Program Files\Dell 968 AIO Printer\mcmoem.dll
2013-03-14 17:32 - 2007-09-05 03:40 - 00147456 _____ () C:\Program Files\Dell 968 AIO Printer\memcard.dll
2013-03-14 17:32 - 2007-04-09 15:16 - 00147456 _____ () C:\Program Files\Dell 968 AIO Printer\DLDOptp.dll
2009-11-12 12:21 - 2009-11-30 12:24 - 04833792 _____ () C:\Program Files\Allway Sync\Bin\syncapp.dll
2011-12-10 17:03 - 2010-02-26 22:32 - 00109122 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\VXDIF.DLL
2009-02-26 14:46 - 2009-02-26 14:46 - 00064344 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 12:46 - 2011-06-22 12:46 - 00434016 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2007-06-22 06:17 - 2007-06-22 05:17 - 00811008 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\dldoptpc.dll
2007-07-18 08:42 - 2007-07-18 07:42 - 00151552 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\dldodrui.dll
2007-09-19 00:14 - 2007-09-18 23:14 - 00155648 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\dldoPRPR.DLL
2007-08-01 06:15 - 2007-08-01 09:15 - 00077906 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\dldoCFG.dll
2009-11-11 23:40 - 2009-04-11 08:28 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\spool\DRIVERS\W32X86\3\PSCRIPT5.DLL
2009-11-11 23:40 - 2009-04-11 08:28 - 00731648 _____ (Microsoft Corporation) C:\Windows\system32\spool\DRIVERS\W32X86\3\PS5UI.DLL
2013-09-12 15:03 - 2013-09-10 16:34 - 02700768 _____ () C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll
2013-09-04 21:56 - 2013-09-02 22:35 - 04053456 _____ () C:\Program Files\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-04 21:56 - 2013-09-02 22:35 - 00410576 _____ () C:\Program Files\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-04 21:56 - 2013-09-02 22:35 - 01604560 _____ () C:\Program Files\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2013-09-04 21:56 - 2013-09-02 22:35 - 13599184 _____ () C:\Program Files\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) ==========
AlternateDataStreams: C:\Windows\system32\Drivers\gewqgsrx.sys:changelist
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/12/2013 03:08:08 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0x890, Anwendungsstartzeit BitGuard.exe0.
Error: (09/12/2013 03:08:05 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0x14b8, Anwendungsstartzeit BitGuard.exe0.
Error: (09/12/2013 03:04:48 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0x122c, Anwendungsstartzeit BitGuard.exe0.
Error: (09/12/2013 03:04:46 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0x1240, Anwendungsstartzeit BitGuard.exe0.
Error: (09/12/2013 03:04:44 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0x15e0, Anwendungsstartzeit BitGuard.exe0.
Error: (09/12/2013 03:04:28 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0xd60, Anwendungsstartzeit BitGuard.exe0.
Error: (09/12/2013 03:04:25 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0x10d0, Anwendungsstartzeit BitGuard.exe0.
Error: (09/12/2013 03:04:18 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0xaac, Anwendungsstartzeit BitGuard.exe0.
Error: (09/12/2013 03:04:16 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0xa64, Anwendungsstartzeit BitGuard.exe0.
Error: (09/12/2013 03:04:14 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung BitGuard.exe, Version 2.6.1673.238, Zeitstempel 0x522f2e27, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x0000e084,
Prozess-ID 0x3c0, Anwendungsstartzeit BitGuard.exe0.
System errors:
=============
Error: (09/12/2013 03:09:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/12/2013 02:59:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/12/2013 02:49:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/12/2013 02:39:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/12/2013 02:29:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/12/2013 02:19:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/12/2013 02:09:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/12/2013 01:59:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/12/2013 01:49:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/12/2013 01:39:56 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (01/03/2011 01:10:14 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 107 seconds with 60 seconds of active time. This session ended with a crash.
Error: (12/01/2010 07:22:25 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2013-09-03 13:38:39.571
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\msiltcfg.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-19 22:24:10.688
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-19 22:24:10.423
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-19 22:24:10.158
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-19 22:24:09.784
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-19 22:24:07.163
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-19 22:24:06.898
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-19 22:24:06.586
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-19 22:24:06.320
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-19 22:23:54.386
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 52%
Total physical RAM: 3061.31 MB
Available physical RAM: 1445.75 MB
Total Pagefile: 6340.88 MB
Available Pagefile: 4496.39 MB
Total Virtual: 2047.88 MB
Available Virtual: 1920.27 MB
==================== Drives ================================
Drive c: (Vista) (Fixed) (Total:80.24 GB) (Free:9.6 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:68.81 GB) (Free:51.33 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: DA0B983E)
Partition 1: (Active) - (Size=80 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=69 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
Baum-Darstellung