| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Trojaner von Bundespolizei, Browser gesperrtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
13.09.2013, 21:26
| #1 |
| |  Trojaner von Bundespolizei, Browser gesperrt Hallo. Ich habe im Netz euer Forum entdeckt und möchte jetzt hier um Hilfe bitten. Wir haben uns heut den Bundespolizei-Trojaner eingefangen und möchten den natürlich so schnell wie möglich wieder los werden. Ich habe im Boot-Menü schon die frst64.exe durchlaufen lassen, weiss aber nicht wie ich jetzt weiter verfahren soll... Bitte, bitte hilf mir jemand  |
|
13.09.2013, 21:32
| #2 |
| Ruhe in Frieden † 2019     | Trojaner von Bundespolizei, Browser gesperrt Ich habe dein Thema in Arbeit und melde mich so schnell als möglich mit weiteren Anweisungen. Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst. Ich bedanke mich für deine Geduld  |
|
13.09.2013, 21:34
| #3 |
| | Trojaner von Bundespolizei, Browser gesperrt Ich Danke schon mal für die schnelle Reaktion
__________________ |
|
13.09.2013, 21:48
| #4 |
| Ruhe in Frieden † 2019 | Trojaner von Bundespolizei, Browser gesperrt Hallo. Bitte poste das Log von FRST hier in diesen Thread. Poste das Log bitte in Codetags. Hier findest Du eine Anleitung dazu: http://www.trojaner-board.de/137229-...code-tags.html Dankeschön |
|
13.09.2013, 21:53
| #5 |
| | Trojaner von Bundespolizei, Browser gesperrt Farbar Service Scanner Version: 13-09-2013 Ran by Papas Großer (administrator) on 13-09-2013 at 22:48:43 Running from "F:\" Microsoft Windows 7 Home Premium Service Pack 1 (X64) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== WinDefend Service is not running. Checking service configuration: The start type of WinDefend service is set to Demand. The default start type is Auto. The ImagePath of WinDefend service is OK. The ServiceDll of WinDefend service is OK. Windows Defender Disabled Policy: ========================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware"=DWORD:1 Other Services: ============== File Check: ======== C:\Windows\System32\nsisvc.dll => MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit C:\Windows\System32\dhcpcore.dll => MD5 is legit C:\Windows\System32\drivers\afd.sys => MD5 is legit C:\Windows\System32\drivers\tdx.sys => MD5 is legit C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit C:\Windows\System32\dnsrslvr.dll => MD5 is legit C:\Windows\System32\mpssvc.dll => MD5 is legit C:\Windows\System32\bfe.dll => MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit C:\Windows\System32\SDRSVC.dll => MD5 is legit C:\Windows\System32\vssvc.exe => MD5 is legit C:\Windows\System32\wscsvc.dll => MD5 is legit C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\System32\wuaueng.dll => MD5 is legit C:\Windows\System32\qmgr.dll => MD5 is legit C:\Windows\System32\es.dll => MD5 is legit C:\Windows\System32\cryptsvc.dll => MD5 is legit C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit C:\Windows\System32\ipnathlp.dll => MD5 is legit C:\Windows\System32\iphlpsvc.dll => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit **** End of log **** hier von frst: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-09-2013 02
Ran by SYSTEM on MININT-HPNLUUI on 13-09-2013 21:53:27
Running from G:\
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery
The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896 2010-09-15] ()
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] - c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2010-08-30] (EasyBits Software AS)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
HKU\Papas Großer\...\Run: [icq] - C:\Users\Papas Großer\AppData\Roaming\ICQM\icq.exe [28696936 2013-07-03] (ICQ)
HKU\Papas Großer\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\Papas Großer\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\Papas Großer\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
Startup: C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Services (Whitelisted) =================
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-03] (Avira Operations GmbH & Co. KG)
S2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
S2 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [681528 2010-08-05] (Hewlett-Packard)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc)
==================== Drivers (Whitelisted) ====================
S3 AVer7231_x64; C:\Windows\System32\DRIVERS\AVer7231_x64.sys [1757952 2010-04-08] (AVerMedia TECHNOLOGIES, Inc.)
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CXCIR; C:\Windows\system32\DRIVERS\AVer888RCIR_64.sys [39936 2009-11-13] (AVerMedia TECHNOLOGIES, Inc.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-13 21:53 - 2013-09-13 21:53 - 00000000 ____D C:\FRST
2013-09-13 04:00 - 2013-09-13 04:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 03:58 - 2013-09-13 03:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 03:58 - 2013-09-13 03:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 03:58 - 2013-09-13 03:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 03:56 - 2013-09-13 03:58 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 03:55 - 2013-09-13 03:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 03:54 - 2013-09-13 03:55 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 03:54 - 2013-09-13 03:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 03:50 - 2013-09-13 03:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 01:46 - 2013-09-13 01:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-12 23:20 - 2013-09-12 23:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-12 23:18 - 2013-09-12 23:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-12 08:08 - 2013-09-12 08:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-10 17:07 - 2013-08-09 21:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-09-10 17:07 - 2013-08-09 21:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-09-10 17:07 - 2013-08-09 21:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-09-10 17:07 - 2013-08-09 21:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-09-10 17:07 - 2013-08-09 21:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-09-10 17:07 - 2013-08-09 21:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-09-10 17:07 - 2013-08-09 21:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-09-10 17:07 - 2013-08-09 21:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-09-10 17:07 - 2013-08-09 21:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-09-10 17:07 - 2013-08-09 21:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-09-10 17:07 - 2013-08-09 21:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-09-10 17:07 - 2013-08-09 21:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-09-10 17:07 - 2013-08-09 21:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-09-10 17:07 - 2013-08-09 21:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-09-10 17:07 - 2013-08-09 19:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-10 17:07 - 2013-08-09 19:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-10 17:07 - 2013-08-09 19:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-10 17:07 - 2013-08-09 19:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-09-10 17:07 - 2013-08-09 19:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-10 17:07 - 2013-08-09 18:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-09-10 17:07 - 2013-08-09 18:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-10 11:03 - 2013-08-07 17:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-09-10 11:03 - 2013-08-04 18:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ataport.sys
2013-09-10 11:03 - 2013-08-01 18:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-09-10 11:03 - 2013-08-01 18:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-09-10 11:03 - 2013-08-01 18:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-09-10 11:03 - 2013-08-01 18:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-09-10 11:03 - 2013-08-01 18:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-09-10 11:03 - 2013-08-01 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-09-10 11:03 - 2013-08-01 18:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-09-10 11:03 - 2013-08-01 18:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-09-10 11:03 - 2013-08-01 18:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-10 11:03 - 2013-08-01 17:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-10 11:03 - 2013-08-01 17:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-10 11:03 - 2013-08-01 17:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-10 11:03 - 2013-08-01 17:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-10 11:03 - 2013-08-01 17:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 17:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-09-10 11:03 - 2013-08-01 16:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-09-10 11:03 - 2013-08-01 16:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-10 11:03 - 2013-08-01 16:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-10 11:03 - 2013-08-01 16:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-10 11:03 - 2013-08-01 16:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-10 11:03 - 2013-08-01 16:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 16:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 16:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 11:03 - 2013-08-01 16:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-10 11:03 - 2013-07-25 18:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-09-10 11:03 - 2013-07-25 18:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-09-10 11:03 - 2013-07-25 17:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-10 11:03 - 2013-07-25 17:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-09 11:07 - 2013-09-09 11:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 11:04 - 2013-09-09 11:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 11:02 - 2013-09-09 11:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 11:01 - 2013-09-09 11:04 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 11:01 - 2013-09-09 11:02 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 11:01 - 2012-03-23 09:59 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2013-09-09 11:01 - 2012-03-23 09:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-09-09 10:59 - 2013-09-09 11:01 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 10:48 - 2013-09-09 10:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 09:46 - 2013-09-09 09:46 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-09 06:41 - 2013-09-09 06:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-03 09:44 - 2013-09-10 15:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-08-27 21:33 - 2013-08-27 21:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-27 15:33 - 2013-09-03 03:45 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-08-27 15:29 - 2013-08-27 15:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-27 15:29 - 2013-08-27 15:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-27 15:22 - 2013-08-27 15:22 - 00000000 ____D C:\ProgramData\APN
2013-08-27 15:21 - 2013-09-03 03:45 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-08-27 15:21 - 2013-09-03 03:45 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-08-27 15:21 - 2013-08-27 15:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-27 15:21 - 2013-08-27 15:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-27 15:21 - 2013-03-06 06:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2013-08-27 14:17 - 2013-08-27 15:18 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 13:38 - 2013-08-06 18:22 - 00278800 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe
2013-08-25 07:03 - 2013-09-13 05:34 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-08-22 21:38 - 2013-09-08 14:41 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
2013-08-16 23:30 - 2013-08-16 23:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-14 17:02 - 2013-09-10 17:06 - 00000000 ____D C:\Windows\System32\MRT
2013-08-14 05:01 - 2013-07-08 21:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-08-14 05:01 - 2013-07-08 21:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-08-14 05:01 - 2013-07-08 21:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-08-14 05:01 - 2013-07-08 21:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-08-14 05:01 - 2013-07-08 20:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 05:01 - 2013-07-08 20:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 05:01 - 2013-07-08 20:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 05:01 - 2013-07-08 20:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 04:56 - 2013-07-18 17:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-08-14 04:56 - 2013-07-18 17:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 04:50 - 2013-07-25 01:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-08-14 04:50 - 2013-07-25 00:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 04:50 - 2013-07-08 21:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-08-14 04:50 - 2013-07-08 20:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 04:47 - 2013-07-05 22:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-08-14 04:47 - 2013-06-14 20:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tssecsrv.sys
==================== One Month Modified Files and Folders =======
2013-09-13 21:53 - 2013-09-13 21:53 - 00000000 ____D C:\FRST
2013-09-13 11:30 - 2013-07-16 07:38 - 00008964 _____ C:\Windows\setupact.log
2013-09-13 11:30 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-13 11:27 - 2013-07-11 02:47 - 00000360 _____ C:\Windows\Tasks\HPCeeScheduleForPapas Großer.job
2013-09-13 05:57 - 2012-11-22 10:32 - 01284247 _____ C:\Windows\WindowsUpdate.log
2013-09-13 05:54 - 2013-06-28 23:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-13 05:34 - 2013-08-25 07:03 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-09-13 04:00 - 2013-09-13 04:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 03:58 - 2013-09-13 03:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 03:58 - 2013-09-13 03:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 03:58 - 2013-09-13 03:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 03:58 - 2013-09-13 03:56 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 03:58 - 2013-06-28 13:06 - 00000000 ____D C:\users\Papas Großer
2013-09-13 03:55 - 2013-09-13 03:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 03:55 - 2013-09-13 03:54 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 03:54 - 2013-09-13 03:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 03:50 - 2013-09-13 03:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 01:46 - 2013-09-13 01:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 01:46 - 2012-11-22 10:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-13 01:45 - 2013-08-02 10:25 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-13 01:45 - 2013-08-02 10:22 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Downloaded Installations
2013-09-12 23:20 - 2013-09-12 23:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-12 23:18 - 2013-09-12 23:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-12 23:16 - 2013-08-02 10:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Samsung
2013-09-12 08:08 - 2013-09-12 08:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-12 02:18 - 2013-07-11 02:47 - 00003228 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPapas Großer
2013-09-12 02:17 - 2013-08-01 02:32 - 00000000 _____ C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-09-12 02:17 - 2013-07-04 02:12 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-12 02:16 - 2013-07-04 02:10 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HP Support Assistant
2013-09-12 02:16 - 2013-06-29 13:53 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HpUpdate
2013-09-11 14:18 - 2009-07-13 20:45 - 00009696 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-11 14:18 - 2009-07-13 20:45 - 00009696 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-11 14:06 - 2012-11-22 11:01 - 00654372 _____ C:\Windows\System32\perfh007.dat
2013-09-11 14:06 - 2012-11-22 11:01 - 00129986 _____ C:\Windows\System32\perfc007.dat
2013-09-11 14:06 - 2009-07-13 21:13 - 01520498 _____ C:\Windows\System32\PerfStringBackup.INI
2013-09-10 17:51 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2013-09-10 17:25 - 2013-07-16 07:38 - 00305296 _____ C:\Windows\System32\FNTCACHE.DAT
2013-09-10 17:24 - 2013-07-19 14:42 - 00347336 _____ C:\Windows\PFRO.log
2013-09-10 17:07 - 2013-08-04 23:30 - 01526060 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-10 17:07 - 2013-08-04 23:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-09-10 17:06 - 2013-08-14 17:02 - 00000000 ____D C:\Windows\System32\MRT
2013-09-10 17:05 - 2013-06-28 13:44 - 79143768 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-09-10 15:44 - 2013-09-03 09:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-09-10 10:54 - 2013-06-28 23:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-10 10:54 - 2013-06-28 23:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-10 10:54 - 2013-06-28 23:37 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-09 21:55 - 2013-06-29 12:14 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\CrashDumps
2013-09-09 11:07 - 2013-09-09 11:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 11:04 - 2013-09-09 11:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 11:04 - 2013-09-09 11:01 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 11:02 - 2013-09-09 11:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 11:02 - 2013-09-09 11:01 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 11:01 - 2013-09-09 10:59 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 10:48 - 2013-09-09 10:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 09:46 - 2013-09-09 09:46 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-09 06:41 - 2013-09-09 06:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-08 14:41 - 2013-08-22 21:38 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
2013-09-08 03:19 - 2013-08-13 08:10 - 00000000 ____D C:\Users\Papas Großer\Desktop\kskack
2013-09-08 03:19 - 2013-08-04 05:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\papahandy
2013-09-06 22:39 - 2012-11-22 10:46 - 00000000 ____D C:\ProgramData\PDFC
2013-09-03 03:45 - 2013-08-27 15:33 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-09-03 03:45 - 2013-08-27 15:21 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-09-03 03:45 - 2013-08-27 15:21 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-08-27 21:33 - 2013-08-27 21:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-27 15:29 - 2013-08-27 15:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-27 15:29 - 2013-08-27 15:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-27 15:22 - 2013-08-27 15:22 - 00000000 ____D C:\ProgramData\APN
2013-08-27 15:21 - 2013-08-27 15:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-27 15:21 - 2013-08-27 15:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-27 15:18 - 2013-08-27 14:17 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 13:53 - 2013-06-28 13:06 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Hewlett-Packard
2013-08-27 13:53 - 2012-11-22 10:40 - 00000000 ____D C:\ProgramData\CyberLink
2013-08-27 13:50 - 2012-11-22 10:53 - 00000000 ____D C:\ProgramData\Norton
2013-08-27 13:10 - 2013-06-28 13:10 - 00003734 _____ C:\Windows\System32\Tasks\Registration
2013-08-27 02:52 - 2013-08-09 14:32 - 00000000 ____D C:\Users\Papas Großer\Desktop\walli kay
2013-08-25 19:50 - 2009-07-13 21:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-08-25 13:12 - 2013-08-04 23:31 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\SoftGrid Client
2013-08-25 06:58 - 2013-08-04 12:13 - 00000000 ____D C:\Users\Papas Großer\Desktop\pic
2013-08-20 11:47 - 2009-07-13 19:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-08-18 10:43 - 2013-06-28 23:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-16 23:30 - 2013-08-16 23:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-14 17:25 - 2009-07-24 11:22 - 00000000 ____D C:\Windows\Panther
Some content of TEMP:
====================
C:\Users\Papas Großer\AppData\Local\Temp\1piz3xw0.dll
C:\Users\Papas Großer\AppData\Local\Temp\2bqzuqrm.dll
C:\Users\Papas Großer\AppData\Local\Temp\COMAP.EXE
C:\Users\Papas Großer\AppData\Local\Temp\qladxmat.dll
C:\Users\Papas Großer\AppData\Local\Temp\sp58915.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Papas Großer\AppData\Local\Temp\x01fbmja.dll
C:\Users\Papas Großer\AppData\Local\Temp\zsn75aa3.dll
==================== Known DLLs (Whitelisted) ================
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== EXE ASSOCIATION =====================
HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK
==================== Restore Points =========================
8
Restore point made on: 2013-08-28 13:26:40
Restore point made on: 2013-08-31 17:00:28
Restore point made on: 2013-09-01 09:00:08
Restore point made on: 2013-09-01 17:00:13
Restore point made on: 2013-09-09 14:26:54
Restore point made on: 2013-09-10 17:00:24
Restore point made on: 2013-09-11 14:04:19
Restore point made on: 2013-09-13 01:45:44
==================== Memory info ===========================
Percentage of memory in use: 15%
Total physical RAM: 6103.11 MB
Available physical RAM: 5142.93 MB
Total Pagefile: 6101.26 MB
Available Pagefile: 5123.74 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:1382.54 GB) (Free:1325.29 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_RECOVERY) (Fixed) (Total:14.63 GB) (Free:0.92 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (HITMANPRO) (Removable) (Total:3.75 GB) (Free:3.75 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 1397 GB) (Disk ID: 5FACA6B4)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-714537467392) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 7860FD81)
Partition 1: (Active) - (Size=4 GB) - (Type=0B)
LastRegBack: 2013-09-10 14:57
==================== End Of Log ============================
--- --- --- |
|
13.09.2013, 22:16
| #6 |
| Ruhe in Frieden † 2019 | Trojaner von Bundespolizei, Browser gesperrt Hallo und , mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.
Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist. Vista und Win7 User Alle Tools mit Rechtsklick "als Administrator ausführen" starten. Schritt 1 FRST lief in der Recovery, der Service Scanner jedoch im normalen Modus. Bitte lasse FRST im Normalmodus laufen und poste mir die beiden erstellten Logfiles. |
|
13.09.2013, 22:38
| #7 |
| | Trojaner von Bundespolizei, Browser gesperrtCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-09-2013 02
Ran by Papas Großer at 2013-09-13 23:27:54
Running from F:\
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe AIR (x32 Version: 1.5.3.9130)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.168)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Avira SearchFree Toolbar plus Web Protection (x32 Version: 12.2.2.663)
AVS Video Converter 8 (x32 Version: 8.4.1.540)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
Bing Bar (x32 Version: 7.1.361.0)
Bing Rewards Client Installer (x32 Version: 16.0.345.0)
BitGuard (x32)
Blasterball 3 (x32 Version: 2.2.0.95)
Bounce Symphony (x32 Version: 2.2.0.95)
Build-a-Lot - The Elizabethan Era (x32 Version: 2.2.0.95)
Cake Mania (x32 Version: 2.2.0.95)
CCleaner (Version: 4.03)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
CyberLink DVD Suite Deluxe (x32 Version: 7.0.3210)
D3DX10 (x32 Version: 15.4.2368.0902)
Delta Chrome Toolbar (x32)
Delta toolbar (x32 Version: 1.8.24.6)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95)
DVD Menu Pack for HP MediaSmart Video (x32 Version: 4.2.4412)
Farm Frenzy (x32 Version: 2.2.0.95)
FATE (x32 Version: 2.2.0.95)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000)
HP Auto (Version: 1.0.12494.3472)
HP Client Services (Version: 1.0.12656.3472)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7)
HP Game Console (x32)
HP Games (x32 Version: 1.0.1.5)
HP MediaSmart DVD (x32 Version: 4.2.4725)
HP MediaSmart Music (x32 Version: 4.2.4517)
HP MediaSmart Photo (x32 Version: 4.2.4513)
HP MediaSmart SmartMenu (Version: 3.1.2.4)
HP MediaSmart Video (x32 Version: 4.2.4522)
HP Odometer (x32 Version: 2.10.0000)
HP Remote Solution (x32 Version: 1.1.14.0)
HP Setup (x32 Version: 8.4.4400.3525)
HP Setup Manager (x32 Version: 1.0.12844.3519)
HP Support Assistant (x32 Version: 7.0.39.15)
HP Support Information (x32 Version: 10.1.1000)
HP Update (x32 Version: 5.002.003.003)
HP Vision Hardware Diagnostics (Version: 2.1.6.0)
ICQ 8.1 (build 6327) (HKCU Version: 8.1.6327.0)
Insaniquarium Deluxe (x32 Version: 2.2.0.95)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014)
Jewel Quest II (x32 Version: 2.2.0.95)
Jewel Quest Solitaire (x32 Version: 2.2.0.95)
John Deere Drive Green (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
LabelPrint (x32 Version: 2.5.3130)
LightScribe System Software (x32 Version: 1.18.20.1)
LyriXeeker-1 (x32 Version: 1.28.153.3)
Magic Desktop (x32 Version: 3.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Theme Pack for HP MediaSmart Video (x32 Version: 4.2.4412)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
mp3splt-gtk (x32)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MusicStation (x32 Version: 1.0.1.5)
MyFreeCodec (HKCU)
Norton Online Backup (x32 Version: 2.1.17869)
NVIDIA Display Control Panel (Version: 6.14.12.5936)
NVIDIA Drivers (Version: 1.10.62.40)
NVIDIA PhysX (x32 Version: 9.10.0224)
Open It! (x32 Version: 1.1.1)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
PDF Complete Special Edition (x32 Version: 4.0.9)
Penguins! (x32 Version: 2.2.0.95)
PhotoNow! (x32 Version: 1.1.7717)
PictureMover (x32 Version: 3.5.0.33)
Plants vs. Zombies (x32 Version: 2.2.0.95)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (x32 Version: 2.2.0.95)
Power2Go (x32 Version: 6.1.4329)
PowerDirector (x32 Version: 8.0.3129)
Ralink RT2860 Wireless LAN Card (x32)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6196)
Recovery Manager (x32 Version: 5.5.3219)
Samsung Kies (x32 Version: 2.6.0.13074_14)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)
Slingo Deluxe (x32 Version: 2.2.0.95)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Zip Opener (HKCU)
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95)
Wedding Dash (x32 Version: 2.2.0.95)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3502.0922)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3502.0922)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Zinio Reader 4 (x32 Version: 4.0.3184)
Zuma Deluxe (x32 Version: 2.2.0.95)
==================== Restore Points =========================
28-08-2013 21:26:28 Windows Update
01-09-2013 01:00:13 Windows Update
01-09-2013 17:00:04 Windows-Sicherung
02-09-2013 01:00:10 Windows Update
09-09-2013 22:26:38 Geplanter Prüfpunkt
11-09-2013 01:00:12 Windows Update
11-09-2013 22:04:14 Windows Update
13-09-2013 09:45:25 Installiert Samsung Story Album Viewer
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {0654F99F-9D94-481B-A847-BF68408C406E} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-09-27] ()
Task: {0D63F2CD-8ECB-420C-9C96-104339F4E450} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {27338C25-C50B-4ACD-8594-BAE5356E8955} - System32\Tasks\LyriXeeker-1-firefoxinstaller => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe [2013-09-13] (Lyrics)
Task: {38173724-705C-496B-8A42-0BD4C5E0DA47} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard)
Task: {38DC6A38-3652-4FD2-B642-3A70228D6CA7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {3C9DE081-FBA1-420B-9BF6-6A76BEAE1943} - System32\Tasks\EPUpdater => C:\Users\Papas Großer\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-08-04] ()
Task: {464D00CE-9849-4FE5-94BC-E610E55143CB} - System32\Tasks\LyriXeeker-1-codedownloader => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe [2013-09-13] (Lyrics)
Task: {48538838-638F-40E7-90F7-C6FE31F5C468} - System32\Tasks\HPCeeScheduleForPapas Großer => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {4D9991B9-7BC9-46AE-A6EF-8D6A1B281874} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {5B175497-5C21-471A-AE11-DB9EF75D855E} - System32\Tasks\RMCreator => C:\Program Files (x86)\Hewlett-Packard\Recovery\Reminder.exe [2010-08-20] (CyberLink)
Task: {5DE35FB0-CDEB-4520-B541-0C16A5E4F375} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd)
Task: {6613589E-F4C7-479B-AAC8-F5A76877C20F} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {6F8E7BD7-FE93-4550-882F-A8C91FBFDA2D} - System32\Tasks\DSite => C:\Users\Papas Großer\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-09-13] ()
Task: {7687F23B-80B8-427A-BC0F-4BD2356EBF47} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-09-27] ()
Task: {7853DF0C-9A7E-43C6-B00A-D38A2984A18C} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {88197109-92A2-40D1-933D-C93159551672} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard)
Task: {91E18483-BE3D-47CD-87FF-D3A982D2A4DC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-04-01] (Hewlett-Packard Company)
Task: {9E0DC196-5171-4A2B-8714-527749501D95} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {A5639879-E4CD-4CB6-9537-3AB62DB964B6} - System32\Tasks\LyriXeeker-1-updater => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe [2013-09-13] (Lyrics)
Task: {A9C4B37D-D088-4E20-84DD-F7BDC62A2CFB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2013-08-20] (Microsoft)
Task: {AB58A3DD-527C-49D0-8334-B9E9A19ABDCC} - System32\Tasks\LyriXeeker-1-enabler => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe [2013-09-13] (Lyrics)
Task: {BAAAF32A-7729-4DB7-B2D0-4E018B429D24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-10] (Adobe Systems Incorporated)
Task: {CF570C51-505D-4F92-A52A-A05C6417DBF9} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {D1677505-61FE-4AC0-A754-3DB2A0D949A3} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {F506D5C3-1C83-4D85-B61B-A066ADD516B0} - System32\Tasks\BitGuard => Sc.exe start BitGuard
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DSite.job => C:\Users\PAPASG~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\HPCeeScheduleForPapas Großer.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe
==================== Loaded Modules (whitelisted) =============
2013-06-30 15:11 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2009-07-14 02:18 - 2009-07-14 03:38 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\imaadp32.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\msg711.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\msgsm32.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\msadp32.acm
2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm
2009-07-14 01:37 - 2009-07-14 03:39 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\Dwm.exe
2012-11-22 20:52 - 2010-08-09 10:05 - 07003240 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-06-28 23:37 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\Explorer.EXE
2010-09-15 20:31 - 2010-09-15 20:31 - 00611896 _____ () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
2013-07-03 15:35 - 2013-07-03 15:35 - 28696936 _____ (ICQ) C:\Users\Papas Großer\AppData\Roaming\ICQM\icq.exe
2013-07-26 21:43 - 2013-09-04 12:16 - 01564528 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
2013-07-26 21:43 - 2013-09-04 12:16 - 00844656 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
2013-07-26 22:30 - 2013-07-26 22:30 - 01558480 _____ (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
2013-09-13 22:41 - 2013-09-10 16:35 - 02845152 _____ () C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
2013-09-10 20:54 - 2013-09-10 20:54 - 01862024 _____ (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
2013-09-13 23:26 - 2013-09-13 21:22 - 01949768 _____ (Farbar) F:\FRST64.exe
2009-07-14 01:59 - 2009-07-14 03:39 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\DllHost.exe
2013-07-03 15:35 - 2013-07-03 15:35 - 03189248 _____ (goober Networks, Inc.) C:\Users\Papas Großer\AppData\Roaming\ICQM\vivo.dll
2013-07-03 15:35 - 2013-07-03 15:35 - 01435648 _____ (TODO: <Company name>) C:\Users\Papas Großer\AppData\Roaming\ICQM\ICQ\dll\MRAInplaceViewer.dll
2013-07-03 15:35 - 2013-07-03 15:35 - 00851456 _____ () C:\Users\Papas Großer\AppData\Roaming\ICQM\ICQ\dll\YLUSBTEL.dll
2013-07-03 15:35 - 2013-07-03 15:35 - 00049152 _____ ( ) C:\Users\Papas Großer\AppData\Roaming\ICQM\ICQ\dll\MousePhone.dll
2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm
2013-09-10 19:54 - 2013-09-10 19:54 - 16242568 ____R (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_8_800_168.ocx
2013-07-18 14:34 - 2013-07-18 14:34 - 00307200 _____ ( MarkAny.) C:\Program Files (x86)\Samsung\Kies\External\MACSSDK.dll
2013-07-23 09:45 - 2013-08-22 11:58 - 00167312 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\AgentDialogs.dll
2013-07-23 09:45 - 2013-08-22 11:58 - 00053128 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\AgentModels.dll
2013-07-23 09:45 - 2013-08-22 11:58 - 00120712 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\GlobalUtil.dll
2013-07-23 09:45 - 2013-08-22 11:58 - 01040784 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\CommonModule.dll
2013-07-23 09:45 - 2013-08-22 11:58 - 01636232 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\AgentModule.dll
2013-07-23 09:45 - 2013-08-22 11:58 - 00106496 _____ (TODO: <Company name>) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\BaseUI.dll
2013-07-23 09:45 - 2013-08-22 11:58 - 03341208 _____ (Codejock Software) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\ToolkitPro1331vc90U.dll
2013-06-28 23:12 - 2010-09-28 21:59 - 12286008 _____ () C:\Users\Papas Großer\AppData\Roaming\PictureMover\Bin\Core.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2013-06-28 23:13 - 2010-09-28 22:09 - 01700920 _____ () C:\Users\Papas Großer\AppData\Roaming\PictureMover\DE-DE\Presentation.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-08-15 03:34 - 2013-08-15 03:34 - 00452608 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\0149e914e4cfbde7da65d4558af19ce0\IAStorUtil.ni.dll
2013-07-26 21:41 - 2013-09-04 12:08 - 00250368 _____ (Windows (R) Codename Longhorn DDK provider) C:\Program Files (x86)\Samsung\Kies\External\DeviceModules\UPNPDevice_Kies.dll
2012-11-22 20:46 - 2012-11-22 20:46 - 00052920 _____ (EasyBits Software Corp.) C:\Windows\SysWow64\EZUPBH~1.DLL
2013-09-13 22:41 - 2013-09-10 16:34 - 02700768 _____ () C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll
2013-08-17 09:30 - 2013-08-17 09:30 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-10 20:54 - 2013-09-10 20:54 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
==================== Alternate Data Streams (whitelisted) ==========
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/13/2013 10:22:44 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Samsung\Kies\Kies.exe . Error code = 0x800700d8
Error: (09/13/2013 10:22:44 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Samsung\Kies\Kies.exe . Error code = 0x800700d8
Error: (09/13/2013 00:30:32 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (09/12/2013 00:32:02 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (09/11/2013 00:31:12 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (09/10/2013 07:55:30 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TBNotifier.exe, Version: 31.1.0.0, Zeitstempel: 0x51bba32f
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xdbc
Startzeit der fehlerhaften Anwendung: 0xTBNotifier.exe0
Pfad der fehlerhaften Anwendung: TBNotifier.exe1
Pfad des fehlerhaften Moduls: TBNotifier.exe2
Berichtskennung: TBNotifier.exe3
Error: (09/10/2013 00:31:13 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (09/09/2013 04:39:30 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 23.0.1.4974, Zeitstempel: 0x520bc252
Name des fehlerhaften Moduls: xul.dll, Version: 23.0.1.4974, Zeitstempel: 0x520bc166
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017af08
ID des fehlerhaften Prozesses: 0x34a8
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (09/09/2013 01:36:47 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (09/08/2013 00:30:26 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
System errors:
=============
Error: (09/13/2013 10:04:47 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007041d
Error: (09/13/2013 10:04:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (09/13/2013 10:04:47 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Modules Installer erreicht.
Error: (09/13/2013 10:04:47 PM) (Source: DCOM) (User: )
Description: 1053TrustedInstaller{752073A1-23F2-4396-85F0-8FDB879ED0ED}
Error: (09/13/2013 09:28:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023781.
Error: (09/13/2013 09:28:01 PM) (Source: Microsoft-Windows-Bits-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147943515.
Error: (09/13/2013 09:28:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet:
%%1747
Error: (09/12/2013 00:11:05 AM) (Source: DCOM) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}
Error: (09/12/2013 00:11:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (09/12/2013 00:11:04 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Microsoft Office Sessions:
=========================
Error: (09/13/2013 10:22:44 AM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Samsung\Kies\Kies.exe . Error code = 0x800700d8
C:\Program Files (x86)\Samsung\Kies\Kies.exe
Error: (09/13/2013 10:22:44 AM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Samsung\Kies\Kies.exe . Error code = 0x800700d8
C:\Program Files (x86)\Samsung\Kies\Kies.exe
Error: (09/13/2013 00:30:32 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (09/12/2013 00:32:02 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (09/11/2013 00:31:12 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (09/10/2013 07:55:30 AM) (Source: Application Error)(User: )
Description: TBNotifier.exe31.1.0.051bba32funknown0.0.0.000000000c000000500000000dbc01cea47a2b94eb91C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exeunknown98bc1955-19dd-11e3-bf27-78e3b59ccae9
Error: (09/10/2013 00:31:13 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (09/09/2013 04:39:30 PM) (Source: Application Error)(User: )
Description: firefox.exe23.0.1.4974520bc252xul.dll23.0.1.4974520bc166c00000050017af0834a801cead5a1973f97cC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dlla218ce70-195d-11e3-bf27-78e3b59ccae9
Error: (09/09/2013 01:36:47 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (09/08/2013 00:30:26 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
==================== Memory info ===========================
Percentage of memory in use: 36%
Total physical RAM: 6103.11 MB
Available physical RAM: 3900.23 MB
Total Pagefile: 12204.41 MB
Available Pagefile: 9788.64 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:1382.54 GB) (Free:1324.92 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (HP_RECOVERY) (Fixed) (Total:14.63 GB) (Free:0.92 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HITMANPRO) (Removable) (Total:3.75 GB) (Free:3.75 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 1397 GB) (Disk ID: 5FACA6B4)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-714537467392) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
========================================================
Disk: 6 (Size: 4 GB) (Disk ID: 7860FD81)
Partition 1: (Active) - (Size=4 GB) - (Type=0B)
==================== End Of Log ============================
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-09-2013 02
Ran by Papas Großer (administrator) on PAPASGROßER-HP on 13-09-2013 23:26:55
Running from F:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(ICQ) C:\Users\Papas Großer\AppData\Roaming\ICQM\icq.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Hewlett-Packard Company) C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe
() C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
() C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896 2010-09-15] ()
HKLM-x32\...\Runonce: [Del2336270] - cmd.exe /Q /D /c del "C:\Users\PAPASG~1\AppData\Local\Temp\0.del" [x]
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [icq] - C:\Users\Papas Großer\AppData\Roaming\ICQM\icq.exe [28696936 2013-07-03] (ICQ)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKCU\...\Runonce: [Del2336270] - cmd.exe /Q /D /c del "C:\Users\PAPASG~1\AppData\Local\Temp\0.del"
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] - c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2010-08-30] (EasyBits Software AS)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
AppInit_DLLs-x32: c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll [2700768 2013-09-10] ()
Startup: C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=9404944452D3D36A&affID=119357&tsp=5004
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK/4
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=9404944452D3D36A&affID=119357&tsp=5004
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
SearchScopes: HKLM-x32 - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
SearchScopes: HKCU - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=9404944452D3D36A&affID=119357&tsp=5004
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
BHO: LyriXeeker-1 - {11111111-1111-1111-1111-110411181156} - C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho64.dll (Lyrics)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: LyriXeeker-1 - {11111111-1111-1111-1111-110411181156} - C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho.dll (Lyrics)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2012-11-22] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default
FF user.js: detected! => C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\user.js
FF NewTab: hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=9404944452D3D36A&affID=119357&tsp=5004
FF Homepage: hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=9404944452D3D36A&affID=119357&tsp=5004
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com
FF Extension: Delta Toolbar - C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\Extensions\ffxtlbr@delta.com
FF Extension: toolbar_AVIRA-V7 - C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
R2 BitGuard; C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [2845152 2013-09-10] ()
R2 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [681528 2010-08-06] (Hewlett-Packard)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc)
==================== Drivers (Whitelisted) ====================
S3 AVer7231_x64; C:\Windows\System32\DRIVERS\AVer7231_x64.sys [1757952 2010-04-08] (AVerMedia TECHNOLOGIES, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CXCIR; C:\Windows\system32\DRIVERS\AVer888RCIR_64.sys [39936 2009-11-14] (AVerMedia TECHNOLOGIES, Inc.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-14 07:53 - 2013-09-14 07:53 - 00000000 ____D C:\FRST
2013-09-13 23:26 - 2013-09-13 23:26 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\AskPartnerNetwork
2013-09-13 22:42 - 2013-09-13 22:42 - 00000000 ____D C:\Program Files (x86)\Delta
2013-09-13 22:41 - 2013-09-13 22:45 - 00001116 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-09-13 22:41 - 2013-09-13 22:42 - 00003420 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-13 22:41 - 2013-09-13 22:41 - 00004340 _____ C:\Windows\System32\Tasks\LyriXeeker-1-updater
2013-09-13 22:41 - 2013-09-13 22:41 - 00004244 _____ C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader
2013-09-13 22:41 - 2013-09-13 22:41 - 00004144 _____ C:\Windows\System32\Tasks\LyriXeeker-1-enabler
2013-09-13 22:41 - 2013-09-13 22:41 - 00003432 _____ C:\Windows\System32\Tasks\BitGuard
2013-09-13 22:41 - 2013-09-13 22:41 - 00003272 _____ C:\Windows\System32\Tasks\DSite
2013-09-13 22:41 - 2013-09-13 22:41 - 00001858 _____ C:\Users\Papas Großer\Desktop\Search.lnk
2013-09-13 22:41 - 2013-09-13 22:41 - 00001848 _____ C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00001310 _____ C:\Windows\Tasks\LyriXeeker-1-updater.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00001214 _____ C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00001114 _____ C:\Windows\Tasks\LyriXeeker-1-enabler.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00000306 _____ C:\Windows\Tasks\DSite.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\DSite
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Babylon
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\BabSolution
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\ProgramData\Babylon
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Program Files (x86)\LyriXeeker-1
2013-09-13 14:00 - 2013-09-13 14:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 13:58 - 2013-09-13 13:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 13:56 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 13:55 - 2013-09-13 13:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 13:55 - 2013-09-13 13:55 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:55 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 13:50 - 2013-09-13 13:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 09:20 - 2013-09-13 09:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-13 09:18 - 2013-09-13 09:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-12 18:08 - 2013-09-12 18:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-11 03:07 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 03:07 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 03:07 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 03:07 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 03:07 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 03:07 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 03:07 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 03:07 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 03:07 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 03:07 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 03:07 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 03:07 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-10 21:03 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-10 21:03 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-10 21:03 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-10 21:03 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-10 21:03 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-10 21:03 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-10 21:03 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-10 21:03 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-10 21:03 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-10 21:03 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-10 21:03 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-10 21:03 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-10 21:03 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-10 21:03 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-10 21:03 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-10 21:03 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-10 21:03 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-09 21:07 - 2013-09-09 21:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 21:04 - 2013-09-09 21:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 21:02 - 2013-09-09 21:02 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-09-09 21:01 - 2013-09-09 21:04 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 21:01 - 2013-09-09 21:02 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 21:01 - 2012-03-23 19:59 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2013-09-09 21:01 - 2012-03-23 19:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-09-09 20:59 - 2013-09-09 21:01 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 20:48 - 2013-09-09 20:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 19:46 - 2013-09-09 19:46 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-09 16:41 - 2013-09-09 16:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-03 19:44 - 2013-09-11 01:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-08-28 07:33 - 2013-08-28 07:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-28 01:33 - 2013-09-03 13:45 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-28 01:22 - 2013-08-28 01:22 - 00000000 ____D C:\ProgramData\APN
2013-08-28 01:21 - 2013-09-03 13:45 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-28 01:21 - 2013-09-03 13:45 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-28 01:21 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-28 00:17 - 2013-08-28 01:18 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 23:38 - 2013-08-07 04:22 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-08-25 17:03 - 2013-09-13 15:34 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-08-23 07:38 - 2013-09-09 00:41 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
2013-08-17 09:30 - 2013-09-13 22:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 03:02 - 2013-09-11 03:06 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 15:01 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 15:01 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 15:01 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 15:01 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 15:01 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 15:01 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 15:01 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 15:01 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 14:56 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 14:56 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 14:50 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 14:50 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 14:50 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 14:50 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 14:47 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 14:47 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
==================== One Month Modified Files and Folders =======
2013-09-14 07:53 - 2013-09-14 07:53 - 00000000 ____D C:\FRST
2013-09-13 23:26 - 2013-09-13 23:26 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\AskPartnerNetwork
2013-09-13 22:54 - 2013-06-29 09:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-13 22:45 - 2013-09-13 22:41 - 00001116 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-09-13 22:42 - 2013-09-13 22:42 - 00000000 ____D C:\Program Files (x86)\Delta
2013-09-13 22:42 - 2013-09-13 22:41 - 00003420 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-13 22:42 - 2012-11-22 21:01 - 00654372 _____ C:\Windows\system32\perfh007.dat
2013-09-13 22:42 - 2012-11-22 21:01 - 00129986 _____ C:\Windows\system32\perfc007.dat
2013-09-13 22:42 - 2009-07-14 07:13 - 01500018 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-13 22:41 - 2013-09-13 22:41 - 00004340 _____ C:\Windows\System32\Tasks\LyriXeeker-1-updater
2013-09-13 22:41 - 2013-09-13 22:41 - 00004244 _____ C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader
2013-09-13 22:41 - 2013-09-13 22:41 - 00004144 _____ C:\Windows\System32\Tasks\LyriXeeker-1-enabler
2013-09-13 22:41 - 2013-09-13 22:41 - 00003432 _____ C:\Windows\System32\Tasks\BitGuard
2013-09-13 22:41 - 2013-09-13 22:41 - 00003272 _____ C:\Windows\System32\Tasks\DSite
2013-09-13 22:41 - 2013-09-13 22:41 - 00001858 _____ C:\Users\Papas Großer\Desktop\Search.lnk
2013-09-13 22:41 - 2013-09-13 22:41 - 00001848 _____ C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00001310 _____ C:\Windows\Tasks\LyriXeeker-1-updater.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00001214 _____ C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00001114 _____ C:\Windows\Tasks\LyriXeeker-1-enabler.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00000306 _____ C:\Windows\Tasks\DSite.job
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\DSite
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Babylon
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\BabSolution
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\ProgramData\Babylon
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\Program Files (x86)\LyriXeeker-1
2013-09-13 22:41 - 2013-08-17 09:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-13 22:11 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-13 22:11 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-13 22:07 - 2012-11-22 20:32 - 01293579 _____ C:\Windows\WindowsUpdate.log
2013-09-13 22:02 - 2013-07-16 17:38 - 00009020 _____ C:\Windows\setupact.log
2013-09-13 22:02 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-13 21:27 - 2013-07-11 12:47 - 00000360 _____ C:\Windows\Tasks\HPCeeScheduleForPapas Großer.job
2013-09-13 15:34 - 2013-08-25 17:03 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-09-13 14:00 - 2013-09-13 14:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 13:58 - 2013-09-13 13:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 13:58 - 2013-09-13 13:56 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 13:58 - 2013-06-28 23:06 - 00000000 ____D C:\Users\Papas Großer
2013-09-13 13:55 - 2013-09-13 13:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 13:55 - 2013-09-13 13:55 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3splt-gtk
2013-09-13 13:55 - 2013-09-13 13:54 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 13:50 - 2013-09-13 13:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2012-11-22 20:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-13 11:45 - 2013-08-02 20:25 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-13 11:45 - 2013-08-02 20:22 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Downloaded Installations
2013-09-13 09:20 - 2013-09-13 09:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-13 09:18 - 2013-09-13 09:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-13 09:16 - 2013-08-02 20:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Samsung
2013-09-12 18:08 - 2013-09-12 18:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-12 12:18 - 2013-07-11 12:47 - 00003228 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPapas Großer
2013-09-12 12:17 - 2013-08-01 12:32 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-09-12 12:17 - 2013-07-04 12:12 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-12 12:16 - 2013-07-04 12:10 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HP Support Assistant
2013-09-12 12:16 - 2013-06-29 23:53 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HpUpdate
2013-09-11 06:48 - 2013-06-28 23:11 - 00000000 ___RD C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-11 06:48 - 2013-06-28 23:11 - 00000000 ___RD C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-11 03:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-11 03:25 - 2013-07-16 17:38 - 00305296 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-11 03:24 - 2013-07-20 00:42 - 00347336 _____ C:\Windows\PFRO.log
2013-09-11 03:07 - 2013-08-05 09:30 - 01526060 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-11 03:07 - 2013-08-05 09:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-09-11 03:06 - 2013-08-15 03:02 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 03:05 - 2013-06-28 23:44 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 01:44 - 2013-09-03 19:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-09-10 20:54 - 2013-06-29 09:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-10 20:54 - 2013-06-29 09:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-10 20:54 - 2013-06-29 09:37 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-10 07:55 - 2013-06-29 22:14 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\CrashDumps
2013-09-09 21:07 - 2013-09-09 21:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 21:04 - 2013-09-09 21:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 21:04 - 2013-09-09 21:01 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 21:02 - 2013-09-09 21:02 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:01 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 21:01 - 2013-09-09 20:59 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 20:48 - 2013-09-09 20:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 19:46 - 2013-09-09 19:46 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-09 16:41 - 2013-09-09 16:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-09 00:41 - 2013-08-23 07:38 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
2013-09-08 13:19 - 2013-08-13 18:10 - 00000000 ____D C:\Users\Papas Großer\Desktop\kskack
2013-09-08 13:19 - 2013-08-04 15:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\papahandy
2013-09-07 08:39 - 2012-11-22 20:46 - 00000000 ____D C:\ProgramData\PDFC
2013-09-03 13:45 - 2013-08-28 01:33 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-03 13:45 - 2013-08-28 01:21 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-03 13:45 - 2013-08-28 01:21 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-28 07:33 - 2013-08-28 07:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-28 01:22 - 2013-08-28 01:22 - 00000000 ____D C:\ProgramData\APN
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-28 01:18 - 2013-08-28 00:17 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 23:53 - 2013-06-28 23:06 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Hewlett-Packard
2013-08-27 23:53 - 2012-11-22 20:40 - 00000000 ____D C:\ProgramData\CyberLink
2013-08-27 23:50 - 2012-11-22 20:53 - 00000000 ____D C:\ProgramData\Norton
2013-08-27 23:10 - 2013-06-28 23:10 - 00003734 _____ C:\Windows\System32\Tasks\Registration
2013-08-27 12:52 - 2013-08-10 00:32 - 00000000 ____D C:\Users\Papas Großer\Desktop\walli kay
2013-08-26 05:50 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-08-25 23:12 - 2013-08-05 09:31 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\SoftGrid Client
2013-08-25 16:58 - 2013-08-04 22:13 - 00000000 ____D C:\Users\Papas Großer\Desktop\pic
2013-08-20 21:47 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-08-18 20:43 - 2013-06-29 09:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-15 03:25 - 2009-07-24 21:22 - 00000000 ____D C:\Windows\Panther
Some content of TEMP:
====================
C:\Users\Papas Großer\AppData\Local\Temp\1piz3xw0.dll
C:\Users\Papas Großer\AppData\Local\Temp\2bqzuqrm.dll
C:\Users\Papas Großer\AppData\Local\Temp\COMAP.EXE
C:\Users\Papas Großer\AppData\Local\Temp\qladxmat.dll
C:\Users\Papas Großer\AppData\Local\Temp\sp58915.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Papas Großer\AppData\Local\Temp\x01fbmja.dll
C:\Users\Papas Großer\AppData\Local\Temp\zsn75aa3.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 00:57
==================== End Of Log ============================
--- --- --- --- --- --- ich muss dir jetzt dazu sagen das unser avira eine schädliche datei "ADWARE/installCore.Gen" gefunden und in Quarantäne gestellt hat. seitdem ist der browser wieder frei und ich kann alle seiten öffnen |
|
13.09.2013, 23:40
| #8 |
| Ruhe in Frieden † 2019 | Trojaner von Bundespolizei, Browser gesperrt Hallo gluehender.s Schritt 1 Bitte deinstalliere folgende Programme: BitGuard Delta Chrome Toolbar Delta toolbar LyriXeeker-1 Open It! Update for Zip Opener Dazu gehe auf: den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Programm auswählen --> entfernen Schritt 2 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 3 Starte noch einmal FRST.
|
|
14.09.2013, 10:31
| #9 |
| | Trojaner von Bundespolizei, Browser gesperrtCode:
ATTFilter # AdwCleaner v3.003 - Bericht erstellt am 14/09/2013 um 11:13:54
# Updated 07/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Papas Großer - PAPASGROßER-HP
# Gestartet von : C:\Users\Papas Großer\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Users\Papas Großer\AppData\LocalLow\delta
Ordner Gelöscht : C:\Users\Papas Großer\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Papas Großer\AppData\Roaming\DSite
Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
Datei Gelöscht : C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\user.js
Datei Gelöscht : C:\Windows\Tasks\DSite.job
Datei Gelöscht : C:\Windows\System32\Tasks\DSite
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Papas Großer\Desktop\Search.lnk
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\522deddbd34ed15
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\DataMngr
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Delta
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16686
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\prefs.js ]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "141190f72acd8930f751eb5eb1fbd557");
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "9404981d000000000000944452d3d36a");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15961");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.622:42:04");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=5004");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
*************************
AdwCleaner[R0].txt - [7216 octets] - [14/09/2013 10:47:38]
AdwCleaner[S0].txt - [5929 octets] - [14/09/2013 11:13:54]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5989 octets] ##########
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-09-2013 02
Ran by Papas Großer (administrator) on PAPASGROßER-HP on 14-09-2013 11:30:01
Running from F:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Hewlett-Packard Company) C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896 2010-09-15] ()
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [icq] - C:\Users\Papas Großer\AppData\Roaming\ICQM\icq.exe [28696936 2013-07-03] (ICQ)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] - c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2010-08-30] (EasyBits Software AS)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
Startup: C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK/4
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
SearchScopes: HKLM-x32 - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2012-11-22] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: toolbar_AVIRA-V7 - C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
R2 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [681528 2010-08-06] (Hewlett-Packard)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc)
==================== Drivers (Whitelisted) ====================
S3 AVer7231_x64; C:\Windows\System32\DRIVERS\AVer7231_x64.sys [1757952 2010-04-08] (AVerMedia TECHNOLOGIES, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CXCIR; C:\Windows\system32\DRIVERS\AVer888RCIR_64.sys [39936 2009-11-14] (AVerMedia TECHNOLOGIES, Inc.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-14 10:46 - 2013-09-14 11:13 - 00000000 ____D C:\AdwCleaner
2013-09-14 10:46 - 2013-09-14 10:45 - 01037278 _____ C:\Users\Papas Großer\Desktop\adwcleaner.exe
2013-09-14 07:53 - 2013-09-14 07:53 - 00000000 ____D C:\FRST
2013-09-13 23:41 - 2013-09-13 23:41 - 00000091 _____ C:\Users\Papas Großer\AppData\Roaming\WB.CFG
2013-09-13 23:41 - 2013-09-13 23:41 - 00000005 _____ C:\Users\Papas Großer\AppData\Roaming\WBPU-TTL.DAT
2013-09-13 23:26 - 2013-09-13 23:26 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\AskPartnerNetwork
2013-09-13 22:41 - 2013-09-14 11:13 - 00000782 _____ C:\Users\Papas Großer\Desktop\Search.lnk
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-13 14:00 - 2013-09-13 14:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 13:58 - 2013-09-13 13:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 13:56 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 13:55 - 2013-09-13 13:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 13:55 - 2013-09-13 13:55 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:55 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 13:50 - 2013-09-13 13:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 09:20 - 2013-09-13 09:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-13 09:18 - 2013-09-13 09:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-12 18:08 - 2013-09-12 18:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-11 03:07 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 03:07 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 03:07 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 03:07 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 03:07 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 03:07 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 03:07 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 03:07 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 03:07 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 03:07 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 03:07 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 03:07 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-10 21:03 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-10 21:03 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-10 21:03 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-10 21:03 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-10 21:03 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-10 21:03 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-10 21:03 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-10 21:03 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-10 21:03 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-10 21:03 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-10 21:03 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-10 21:03 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-10 21:03 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-10 21:03 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-10 21:03 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-10 21:03 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-10 21:03 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-09 21:07 - 2013-09-09 21:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 21:04 - 2013-09-09 21:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 21:02 - 2013-09-09 21:02 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-09-09 21:01 - 2013-09-09 21:04 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 21:01 - 2013-09-09 21:02 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 21:01 - 2012-03-23 19:59 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2013-09-09 21:01 - 2012-03-23 19:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-09-09 20:59 - 2013-09-09 21:01 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 20:48 - 2013-09-09 20:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 19:46 - 2013-09-09 19:46 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-09 16:41 - 2013-09-09 16:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-03 19:44 - 2013-09-11 01:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-08-28 07:33 - 2013-08-28 07:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-28 01:33 - 2013-09-03 13:45 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-28 01:22 - 2013-08-28 01:22 - 00000000 ____D C:\ProgramData\APN
2013-08-28 01:21 - 2013-09-03 13:45 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-28 01:21 - 2013-09-03 13:45 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-28 01:21 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-28 00:17 - 2013-08-28 01:18 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 23:38 - 2013-08-07 04:22 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-08-25 17:03 - 2013-09-13 15:34 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-08-23 07:38 - 2013-09-09 00:41 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
2013-08-17 09:30 - 2013-09-13 22:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 03:02 - 2013-09-11 03:06 - 00000000 ____D C:\Windows\system32\MRT
==================== One Month Modified Files and Folders =======
2013-09-14 11:22 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-14 11:22 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-14 11:19 - 2012-11-22 20:32 - 01315049 _____ C:\Windows\WindowsUpdate.log
2013-09-14 11:15 - 2013-07-20 00:42 - 00350720 _____ C:\Windows\PFRO.log
2013-09-14 11:15 - 2013-07-16 17:38 - 00009076 _____ C:\Windows\setupact.log
2013-09-14 11:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-14 11:13 - 2013-09-14 10:46 - 00000000 ____D C:\AdwCleaner
2013-09-14 11:13 - 2013-09-13 22:41 - 00000782 _____ C:\Users\Papas Großer\Desktop\Search.lnk
2013-09-14 10:54 - 2013-06-29 09:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-14 10:45 - 2013-09-14 10:46 - 01037278 _____ C:\Users\Papas Großer\Desktop\adwcleaner.exe
2013-09-14 07:53 - 2013-09-14 07:53 - 00000000 ____D C:\FRST
2013-09-14 00:54 - 2013-06-29 09:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 00:54 - 2013-06-29 09:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-14 00:54 - 2013-06-29 09:37 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 23:41 - 2013-09-13 23:41 - 00000091 _____ C:\Users\Papas Großer\AppData\Roaming\WB.CFG
2013-09-13 23:41 - 2013-09-13 23:41 - 00000005 _____ C:\Users\Papas Großer\AppData\Roaming\WBPU-TTL.DAT
2013-09-13 23:26 - 2013-09-13 23:26 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\AskPartnerNetwork
2013-09-13 22:42 - 2012-11-22 21:01 - 00654372 _____ C:\Windows\system32\perfh007.dat
2013-09-13 22:42 - 2012-11-22 21:01 - 00129986 _____ C:\Windows\system32\perfc007.dat
2013-09-13 22:42 - 2009-07-14 07:13 - 01500018 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-13 22:41 - 2013-09-13 22:41 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-13 22:41 - 2013-08-17 09:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-13 21:27 - 2013-07-11 12:47 - 00000360 _____ C:\Windows\Tasks\HPCeeScheduleForPapas Großer.job
2013-09-13 15:34 - 2013-08-25 17:03 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-09-13 14:00 - 2013-09-13 14:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 13:58 - 2013-09-13 13:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 13:58 - 2013-09-13 13:56 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 13:58 - 2013-06-28 23:06 - 00000000 ____D C:\Users\Papas Großer
2013-09-13 13:55 - 2013-09-13 13:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 13:55 - 2013-09-13 13:55 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3splt-gtk
2013-09-13 13:55 - 2013-09-13 13:54 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 13:50 - 2013-09-13 13:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2012-11-22 20:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-13 11:45 - 2013-08-02 20:25 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-13 11:45 - 2013-08-02 20:22 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Downloaded Installations
2013-09-13 09:20 - 2013-09-13 09:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-13 09:18 - 2013-09-13 09:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-13 09:16 - 2013-08-02 20:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Samsung
2013-09-12 18:08 - 2013-09-12 18:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-12 12:18 - 2013-07-11 12:47 - 00003228 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPapas Großer
2013-09-12 12:17 - 2013-08-01 12:32 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-09-12 12:17 - 2013-07-04 12:12 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-12 12:16 - 2013-07-04 12:10 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HP Support Assistant
2013-09-12 12:16 - 2013-06-29 23:53 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HpUpdate
2013-09-11 06:48 - 2013-06-28 23:11 - 00000000 ___RD C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-11 06:48 - 2013-06-28 23:11 - 00000000 ___RD C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-11 03:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-11 03:25 - 2013-07-16 17:38 - 00305296 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-11 03:07 - 2013-08-05 09:30 - 01526060 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-11 03:07 - 2013-08-05 09:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-09-11 03:06 - 2013-08-15 03:02 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 03:05 - 2013-06-28 23:44 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 01:44 - 2013-09-03 19:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-09-10 07:55 - 2013-06-29 22:14 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\CrashDumps
2013-09-09 21:07 - 2013-09-09 21:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 21:04 - 2013-09-09 21:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 21:04 - 2013-09-09 21:01 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 21:02 - 2013-09-09 21:02 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:01 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 21:01 - 2013-09-09 20:59 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 20:48 - 2013-09-09 20:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 19:46 - 2013-09-09 19:46 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-09 16:41 - 2013-09-09 16:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-09 00:41 - 2013-08-23 07:38 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
2013-09-08 13:19 - 2013-08-13 18:10 - 00000000 ____D C:\Users\Papas Großer\Desktop\kskack
2013-09-08 13:19 - 2013-08-04 15:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\papahandy
2013-09-07 08:39 - 2012-11-22 20:46 - 00000000 ____D C:\ProgramData\PDFC
2013-09-03 13:45 - 2013-08-28 01:33 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-03 13:45 - 2013-08-28 01:21 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-03 13:45 - 2013-08-28 01:21 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-28 07:33 - 2013-08-28 07:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-28 01:22 - 2013-08-28 01:22 - 00000000 ____D C:\ProgramData\APN
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-28 01:18 - 2013-08-28 00:17 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 23:53 - 2013-06-28 23:06 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Hewlett-Packard
2013-08-27 23:53 - 2012-11-22 20:40 - 00000000 ____D C:\ProgramData\CyberLink
2013-08-27 23:50 - 2012-11-22 20:53 - 00000000 ____D C:\ProgramData\Norton
2013-08-27 23:10 - 2013-06-28 23:10 - 00003734 _____ C:\Windows\System32\Tasks\Registration
2013-08-27 12:52 - 2013-08-10 00:32 - 00000000 ____D C:\Users\Papas Großer\Desktop\walli kay
2013-08-26 05:50 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-08-25 23:12 - 2013-08-05 09:31 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\SoftGrid Client
2013-08-25 16:58 - 2013-08-04 22:13 - 00000000 ____D C:\Users\Papas Großer\Desktop\pic
2013-08-20 21:47 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-08-18 20:43 - 2013-06-29 09:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-15 03:25 - 2009-07-24 21:22 - 00000000 ____D C:\Windows\Panther
Some content of TEMP:
====================
C:\Users\Papas Großer\AppData\Local\Temp\1piz3xw0.dll
C:\Users\Papas Großer\AppData\Local\Temp\2bqzuqrm.dll
C:\Users\Papas Großer\AppData\Local\Temp\COMAP.EXE
C:\Users\Papas Großer\AppData\Local\Temp\qladxmat.dll
C:\Users\Papas Großer\AppData\Local\Temp\Quarantine.exe
C:\Users\Papas Großer\AppData\Local\Temp\sp58915.exe
C:\Users\Papas Großer\AppData\Local\Temp\uninst1.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Papas Großer\AppData\Local\Temp\x01fbmja.dll
C:\Users\Papas Großer\AppData\Local\Temp\zsn75aa3.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 00:57
==================== End Of Log ============================
--- --- --- |
|
14.09.2013, 17:18
| #10 |
| Ruhe in Frieden † 2019 | Trojaner von Bundespolizei, Browser gesperrt Hallo gluehender.s, du schriebst in Deinem Eröffnungspost, dass Dein Browser gesperrt sei, wie machte sich das konkret bemerkbar? Waren beide Browser davon betroffen oder nur einer? Ist jetzt alles wieder in Ordnung mit dem Rechner? Die Logs sehen gut aus. Schritt 1 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 2 Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern  ESET Online Scanner
Schritt 3 Starte noch einmal FRST.
|
|
16.09.2013, 19:08
| #11 |
| | Trojaner von Bundespolizei, Browser gesperrt also, da wir nur den firefox nutzen haben wir auch den explorer nicht probiert. beim firefox kam immer gleich "daten wurden gespeichert und gesperrt, wir hätten soundsoviel stunden zeit das geld zu bezahlen da sonst der rechner gesperrt und die polizei eingeschaltet wird" soweit sieht es jetzt wieder gut aus, wir können den browser ungehindert nutzen, es lassen sich alle seiten problemlos öffnen. allerdings ist er jetzt furchtbar langsam geworden. keine ahnung ob das jetzt an der verbindung oder an dem pc liegt Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.16.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16686 Papas Großer :: PAPASGROßER-HP [Administrator] Schutz: Aktiviert 16.09.2013 16:49:51 mbam-log-2013-09-16 (16-49-51).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 227772 Laufzeit: 4 Minute(n), 39 Sekunde(n) Infizierte Speicherprozesse: 2 C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> 2024 -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> 4032 -> Löschen bei Neustart. Infizierte Speichermodule: 1 C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll (PUP.Optional.PerformerSoft.A) -> Löschen bei Neustart. Infizierte Registrierungsschlüssel: 34 HKLM\SYSTEM\CurrentControlSet\Services\BitGuard (PUP.Optional.PerformerSoft.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\escort.escortIEPane.1 (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\escort.escortIEPane (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\delta.deltaHlpr.1 (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\delta.deltaHlpr (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\esrv.deltaESrvc.1 (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\esrv.deltaESrvc (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\delta.deltadskBnd.1 (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\delta.deltadskBnd (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Typelib\{4599D05A-D545-4069-BB42-5895B4EAE05B} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{1231839B-064E-4788-B865-465A1B5266FD} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DELTA\DELTA (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\delta.deltaappCore.1 (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\delta.deltaappCore (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\d (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} (PUP.Optional.BitGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 6 HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten: Delta Toolbar -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten: -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Delta\Delta|tlbrSrchUrl (PUP.Optional.Delta.A) -> Daten: -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Daten: hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=9404944452D3D36A&affID=121565&tsp=5006 -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|bProtectorDefaultScope (PUP.BProtector) -> Daten: {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} -> Löschen bei Neustart. HKLM\SYSTEM\CurrentControlSet\Services\BitGuard|ImagePath (PUP.Optional.BitGuard.A) -> Daten: C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 2 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.PerformerSoft.A) -> Bösartig: (c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll) Gut: () -> Löschen bei Neustart. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage) -> Bösartig: (hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=9404944452D3D36A&affID=121565&tsp=5006) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 15 C:\Users\Papas Großer\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\CR (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\Shared (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6 (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\bh (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\OpenCandy\3FF06E9F45EF4AE3B17C310C1DF14F7A (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\mt_ffx\Delta (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\mt_ffx\Delta\delta (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.24.6 (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BitGuard\2.6.1673.238 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8} (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension (PUP.Optional.BitGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. Infizierte Dateien: 55 C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll (PUP.Optional.PerformerSoft.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> Löschen bei Neustart. C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\deltasrv.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\DSearchLink\DSearchLink.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\Shared\BabMaint.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\OpenCandy\3FF06E9F45EF4AE3B17C310C1DF14F7A\Deltabar_p1v6.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\OpenCandy\3FF06E9F45EF4AE3B17C310C1DF14F7A\DeltaTB.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\OpenCandy\3FF06E9F45EF4AE3B17C310C1DF14F7A\LatestDLMgr.exe (PUP.Optional.OpenCandy.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\5A8A2881-BAB0-7891-8385-152C8083F52B\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\5A8A2881-BAB0-7891-8385-152C8083F52B\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\5A8A2881-BAB0-7891-8385-152C8083F52B\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\5A8A2881-BAB0-7891-8385-152C8083F52B\Latest\DSearchLink.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\5A8A2881-BAB0-7891-8385-152C8083F52B\Latest\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\5A8A2881-BAB0-7891-8385-152C8083F52B\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\5A8A2881-BAB0-7891-8385-152C8083F52B\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\CCFB52F1-BAB0-7891-995B-FF7999AC9FA4\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\CCFB52F1-BAB0-7891-995B-FF7999AC9FA4\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\CCFB52F1-BAB0-7891-995B-FF7999AC9FA4\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\CCFB52F1-BAB0-7891-995B-FF7999AC9FA4\Latest\DSearchLink.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\CCFB52F1-BAB0-7891-995B-FF7999AC9FA4\Latest\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\CCFB52F1-BAB0-7891-995B-FF7999AC9FA4\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\CCFB52F1-BAB0-7891-995B-FF7999AC9FA4\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\is-5QEIF.tmp\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\is357113909\2321533_stp.EXE (Heuristics.Shuriken) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Local\Temp\is357113909\2321470_stp\DeltaTB.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\CR\Delta.crx (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\Shared\BUSolution.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\Shared\chu.js (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\Shared\Delta.ico (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\Shared\GUninstaller.exe (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\Shared\SetupParams.ini (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Papas Großer\AppData\Roaming\BabSolution\Shared\sqlite3.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaApp.dll (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaEng.dll (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\GUninstaller.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\uninstall.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.settings (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bl (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\dm (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\00 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\01 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\02 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\03 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\10 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\11 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\12 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\13 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\20 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\21 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\22 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\23 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. (Ende) habe aber keinen logfile gefunden....weiss nicht ob des sowas nicht gibt wenn er nichts gefunden hat hier noch der letzte scan: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-09-2013 02
Ran by Papas Großer (administrator) on PAPASGROßER-HP on 16-09-2013 20:06:52
Running from F:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896 2010-09-15] ()
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [icq] - C:\Users\Papas Großer\AppData\Roaming\ICQM\icq.exe [28696936 2013-07-03] (ICQ)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] - c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2010-08-30] (EasyBits Software AS)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
Startup: C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK/4
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
SearchScopes: HKLM-x32 - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
SearchScopes: HKCU - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=9404944452D3D36A&affID=121565&tsp=5006
SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2012-11-22] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default
FF user.js: detected! => C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\user.js
FF NewTab: hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=9404944452D3D36A&affID=121565&tsp=5006
FF Homepage: hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=9404944452D3D36A&affID=121565&tsp=5006
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Delta Toolbar - C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\Extensions\ffxtlbr@delta.com
FF Extension: toolbar_AVIRA-V7 - C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
R2 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [681528 2010-08-06] (Hewlett-Packard)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc)
==================== Drivers (Whitelisted) ====================
S3 AVer7231_x64; C:\Windows\System32\DRIVERS\AVer7231_x64.sys [1757952 2010-04-08] (AVerMedia TECHNOLOGIES, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CXCIR; C:\Windows\system32\DRIVERS\AVer888RCIR_64.sys [39936 2009-11-14] (AVerMedia TECHNOLOGIES, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-16 17:25 - 2013-09-16 17:25 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-16 17:22 - 2013-09-16 17:22 - 02347384 _____ (ESET) C:\Users\Papas Großer\Downloads\esetsmartinstaller_enu.exe
2013-09-16 16:47 - 2013-09-16 16:47 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Malwarebytes
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-16 16:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-15 18:52 - 2013-09-15 18:52 - 04555657 _____ C:\Users\Papas Großer\Desktop\gmq.wmv
2013-09-15 17:56 - 2013-09-15 17:56 - 04667657 _____ C:\Users\Papas Großer\Desktop\GMQ2.wmv
2013-09-15 17:14 - 2013-09-16 17:17 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-15 17:14 - 2013-09-16 17:15 - 00003420 _____ C:\Windows\System32\Tasks\BitGuard
2013-09-15 17:14 - 2013-09-15 17:14 - 00003420 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-15 17:14 - 2013-09-15 17:14 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-15 17:14 - 2013-09-15 17:14 - 00000000 ____D C:\ProgramData\Babylon
2013-09-15 17:14 - 2013-09-15 17:14 - 00000000 ____D C:\Program Files (x86)\Delta
2013-09-15 17:13 - 2013-09-15 17:14 - 00000000 ____D C:\Users\Papas Großer\Documents\DVDVideoSoft
2013-09-15 17:13 - 2013-09-15 17:13 - 00001245 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-09-15 17:13 - 2013-09-15 17:13 - 00001234 _____ C:\Users\Public\Desktop\Free Audio Dub.lnk
2013-09-15 17:13 - 2013-09-15 17:13 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\DVDVideoSoft
2013-09-15 17:13 - 2013-09-15 17:13 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-09-15 17:12 - 2013-09-15 17:13 - 16877344 _____ (DVDVideoSoft Ltd. ) C:\Users\Papas Großer\Downloads\FreeAudioDub1.7.9.908.exe
2013-09-15 17:09 - 2013-09-15 17:09 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219(2).exe
2013-09-15 17:09 - 2013-09-15 17:09 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219(1).exe
2013-09-15 16:49 - 2013-09-15 16:49 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\DownloadGuide
2013-09-14 10:46 - 2013-09-14 11:13 - 00000000 ____D C:\AdwCleaner
2013-09-14 10:46 - 2013-09-14 10:45 - 01037278 _____ C:\Users\Papas Großer\Desktop\adwcleaner.exe
2013-09-14 07:53 - 2013-09-14 07:53 - 00000000 ____D C:\FRST
2013-09-13 23:41 - 2013-09-13 23:41 - 00000091 _____ C:\Users\Papas Großer\AppData\Roaming\WB.CFG
2013-09-13 23:41 - 2013-09-13 23:41 - 00000005 _____ C:\Users\Papas Großer\AppData\Roaming\WBPU-TTL.DAT
2013-09-13 23:26 - 2013-09-13 23:26 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\AskPartnerNetwork
2013-09-13 22:41 - 2013-09-16 17:14 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-13 22:41 - 2013-09-15 17:14 - 00001858 _____ C:\Users\Papas Großer\Desktop\Search.lnk
2013-09-13 14:00 - 2013-09-13 14:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 13:58 - 2013-09-13 13:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 13:56 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 13:55 - 2013-09-13 13:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 13:55 - 2013-09-13 13:55 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:55 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 13:50 - 2013-09-13 13:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 09:20 - 2013-09-13 09:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-13 09:18 - 2013-09-13 09:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-12 18:08 - 2013-09-12 18:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-11 03:07 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 03:07 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 03:07 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 03:07 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 03:07 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 03:07 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 03:07 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 03:07 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 03:07 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 03:07 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 03:07 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 03:07 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-10 21:03 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-10 21:03 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-10 21:03 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-10 21:03 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-10 21:03 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-10 21:03 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-10 21:03 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-10 21:03 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-10 21:03 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-10 21:03 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-10 21:03 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-10 21:03 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-10 21:03 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-10 21:03 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-10 21:03 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-10 21:03 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-10 21:03 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-09 21:07 - 2013-09-09 21:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 21:04 - 2013-09-09 21:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 21:02 - 2013-09-09 21:02 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-09-09 21:01 - 2013-09-09 21:04 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 21:01 - 2013-09-09 21:02 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 21:01 - 2012-03-23 19:59 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2013-09-09 21:01 - 2012-03-23 19:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-09-09 20:59 - 2013-09-09 21:01 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 20:48 - 2013-09-09 20:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 19:46 - 2013-09-15 17:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-09 16:41 - 2013-09-09 16:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-03 19:44 - 2013-09-11 01:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-08-28 07:33 - 2013-08-28 07:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-28 01:33 - 2013-09-03 13:45 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-28 01:22 - 2013-08-28 01:22 - 00000000 ____D C:\ProgramData\APN
2013-08-28 01:21 - 2013-09-03 13:45 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-28 01:21 - 2013-09-03 13:45 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-28 01:21 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-28 00:17 - 2013-08-28 01:18 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 23:38 - 2013-08-07 04:22 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-08-25 17:03 - 2013-09-13 15:34 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-08-23 07:38 - 2013-09-09 00:41 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
2013-08-17 09:30 - 2013-09-13 22:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2013-09-16 19:54 - 2013-06-29 09:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-16 18:18 - 2013-07-11 12:47 - 00000360 _____ C:\Windows\Tasks\HPCeeScheduleForPapas Großer.job
2013-09-16 17:25 - 2013-09-16 17:25 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-16 17:24 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-16 17:24 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-16 17:22 - 2013-09-16 17:22 - 02347384 _____ (ESET) C:\Users\Papas Großer\Downloads\esetsmartinstaller_enu.exe
2013-09-16 17:20 - 2012-11-22 20:32 - 01359338 _____ C:\Windows\WindowsUpdate.log
2013-09-16 17:17 - 2013-09-15 17:14 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-16 17:16 - 2013-07-20 00:42 - 00366970 _____ C:\Windows\PFRO.log
2013-09-16 17:16 - 2013-07-16 17:38 - 00009132 _____ C:\Windows\setupact.log
2013-09-16 17:16 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-16 17:15 - 2013-09-15 17:14 - 00003420 _____ C:\Windows\System32\Tasks\BitGuard
2013-09-16 17:14 - 2013-09-13 22:41 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-16 16:47 - 2013-09-16 16:47 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Malwarebytes
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-15 18:52 - 2013-09-15 18:52 - 04555657 _____ C:\Users\Papas Großer\Desktop\gmq.wmv
2013-09-15 17:56 - 2013-09-15 17:56 - 04667657 _____ C:\Users\Papas Großer\Desktop\GMQ2.wmv
2013-09-15 17:33 - 2013-09-09 19:46 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-15 17:14 - 2013-09-15 17:14 - 00003420 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-15 17:14 - 2013-09-15 17:14 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-15 17:14 - 2013-09-15 17:14 - 00000000 ____D C:\ProgramData\Babylon
2013-09-15 17:14 - 2013-09-15 17:14 - 00000000 ____D C:\Program Files (x86)\Delta
2013-09-15 17:14 - 2013-09-15 17:13 - 00000000 ____D C:\Users\Papas Großer\Documents\DVDVideoSoft
2013-09-15 17:14 - 2013-09-13 22:41 - 00001858 _____ C:\Users\Papas Großer\Desktop\Search.lnk
2013-09-15 17:13 - 2013-09-15 17:13 - 00001245 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-09-15 17:13 - 2013-09-15 17:13 - 00001234 _____ C:\Users\Public\Desktop\Free Audio Dub.lnk
2013-09-15 17:13 - 2013-09-15 17:13 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\DVDVideoSoft
2013-09-15 17:13 - 2013-09-15 17:13 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-09-15 17:13 - 2013-09-15 17:12 - 16877344 _____ (DVDVideoSoft Ltd. ) C:\Users\Papas Großer\Downloads\FreeAudioDub1.7.9.908.exe
2013-09-15 17:09 - 2013-09-15 17:09 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219(2).exe
2013-09-15 17:09 - 2013-09-15 17:09 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219(1).exe
2013-09-15 16:49 - 2013-09-15 16:49 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\DownloadGuide
2013-09-14 12:15 - 2012-11-22 20:46 - 00000000 ____D C:\ProgramData\PDFC
2013-09-14 11:13 - 2013-09-14 10:46 - 00000000 ____D C:\AdwCleaner
2013-09-14 10:45 - 2013-09-14 10:46 - 01037278 _____ C:\Users\Papas Großer\Desktop\adwcleaner.exe
2013-09-14 07:53 - 2013-09-14 07:53 - 00000000 ____D C:\FRST
2013-09-14 00:54 - 2013-06-29 09:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 00:54 - 2013-06-29 09:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-14 00:54 - 2013-06-29 09:37 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 23:41 - 2013-09-13 23:41 - 00000091 _____ C:\Users\Papas Großer\AppData\Roaming\WB.CFG
2013-09-13 23:41 - 2013-09-13 23:41 - 00000005 _____ C:\Users\Papas Großer\AppData\Roaming\WBPU-TTL.DAT
2013-09-13 23:26 - 2013-09-13 23:26 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\AskPartnerNetwork
2013-09-13 22:42 - 2012-11-22 21:01 - 00654372 _____ C:\Windows\system32\perfh007.dat
2013-09-13 22:42 - 2012-11-22 21:01 - 00129986 _____ C:\Windows\system32\perfc007.dat
2013-09-13 22:42 - 2009-07-14 07:13 - 01500018 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-13 22:41 - 2013-08-17 09:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-13 15:34 - 2013-08-25 17:03 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-09-13 14:00 - 2013-09-13 14:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 13:58 - 2013-09-13 13:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 13:58 - 2013-09-13 13:56 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 13:58 - 2013-06-28 23:06 - 00000000 ____D C:\Users\Papas Großer
2013-09-13 13:55 - 2013-09-13 13:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 13:55 - 2013-09-13 13:55 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3splt-gtk
2013-09-13 13:55 - 2013-09-13 13:54 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 13:50 - 2013-09-13 13:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2012-11-22 20:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-13 11:45 - 2013-08-02 20:25 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-13 11:45 - 2013-08-02 20:22 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Downloaded Installations
2013-09-13 09:20 - 2013-09-13 09:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-13 09:18 - 2013-09-13 09:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-13 09:16 - 2013-08-02 20:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Samsung
2013-09-12 18:08 - 2013-09-12 18:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-12 12:18 - 2013-07-11 12:47 - 00003228 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPapas Großer
2013-09-12 12:17 - 2013-08-01 12:32 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-09-12 12:17 - 2013-07-04 12:12 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-12 12:16 - 2013-07-04 12:10 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HP Support Assistant
2013-09-12 12:16 - 2013-06-29 23:53 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HpUpdate
2013-09-11 06:48 - 2013-06-28 23:11 - 00000000 ___RD C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-11 06:48 - 2013-06-28 23:11 - 00000000 ___RD C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-11 03:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-11 03:25 - 2013-07-16 17:38 - 00305296 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-11 03:07 - 2013-08-05 09:30 - 01526060 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-11 03:07 - 2013-08-05 09:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-09-11 03:06 - 2013-08-15 03:02 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 03:05 - 2013-06-28 23:44 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 01:44 - 2013-09-03 19:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-09-10 07:55 - 2013-06-29 22:14 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\CrashDumps
2013-09-09 21:07 - 2013-09-09 21:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 21:04 - 2013-09-09 21:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 21:04 - 2013-09-09 21:01 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 21:02 - 2013-09-09 21:02 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:01 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 21:01 - 2013-09-09 20:59 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 20:48 - 2013-09-09 20:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 16:41 - 2013-09-09 16:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-09 00:41 - 2013-08-23 07:38 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
2013-09-08 13:19 - 2013-08-13 18:10 - 00000000 ____D C:\Users\Papas Großer\Desktop\kskack
2013-09-08 13:19 - 2013-08-04 15:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\papahandy
2013-09-03 13:45 - 2013-08-28 01:33 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-03 13:45 - 2013-08-28 01:21 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-03 13:45 - 2013-08-28 01:21 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-28 07:33 - 2013-08-28 07:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-28 01:22 - 2013-08-28 01:22 - 00000000 ____D C:\ProgramData\APN
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-28 01:18 - 2013-08-28 00:17 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 23:53 - 2013-06-28 23:06 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Hewlett-Packard
2013-08-27 23:53 - 2012-11-22 20:40 - 00000000 ____D C:\ProgramData\CyberLink
2013-08-27 23:50 - 2012-11-22 20:53 - 00000000 ____D C:\ProgramData\Norton
2013-08-27 23:10 - 2013-06-28 23:10 - 00003734 _____ C:\Windows\System32\Tasks\Registration
2013-08-27 12:52 - 2013-08-10 00:32 - 00000000 ____D C:\Users\Papas Großer\Desktop\walli kay
2013-08-26 05:50 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-08-25 23:12 - 2013-08-05 09:31 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\SoftGrid Client
2013-08-25 16:58 - 2013-08-04 22:13 - 00000000 ____D C:\Users\Papas Großer\Desktop\pic
2013-08-20 21:47 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-08-18 20:43 - 2013-06-29 09:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
Some content of TEMP:
====================
C:\Users\Papas Großer\AppData\Local\Temp\1piz3xw0.dll
C:\Users\Papas Großer\AppData\Local\Temp\2bqzuqrm.dll
C:\Users\Papas Großer\AppData\Local\Temp\COMAP.EXE
C:\Users\Papas Großer\AppData\Local\Temp\qladxmat.dll
C:\Users\Papas Großer\AppData\Local\Temp\Quarantine.exe
C:\Users\Papas Großer\AppData\Local\Temp\sp58915.exe
C:\Users\Papas Großer\AppData\Local\Temp\uninst1.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Papas Großer\AppData\Local\Temp\x01fbmja.dll
C:\Users\Papas Großer\AppData\Local\Temp\zsn75aa3.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 00:57
==================== End Of Log ============================
--- --- --- |
|
16.09.2013, 20:19
| #12 |
| Ruhe in Frieden † 2019 | Trojaner von Bundespolizei, Browser gesperrt Hallo gluehender.s Dein Rechner ist wieder infiziert, bitte gucke auch in Zukunft, dass Du Downloads nur aus seriösen Quellen (am besten vom Hersteller selbst) tätigst, Dir genau durchliest, was Du Dir herunterlädst, was Du gegebenenfalls mitinstallierst und Filesharing-Seiten meidest. Schritt 1 Starte nochmals den AdwCleaner dazu:
Schritt 2 Starte noch einmal FRST.
|
|
17.09.2013, 01:23
| #13 |
| | Trojaner von Bundespolizei, Browser gesperrtCode:
ATTFilter # AdwCleaner v3.004 - Bericht erstellt am 17/09/2013 um 02:12:45
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Papas Großer - PAPASGROßER-HP
# Gestartet von : C:\Users\Papas Großer\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\BitGuard
Ordner Gelöscht : C:\ProgramData\DSearchLink
Ordner Gelöscht : C:\Program Files (x86)\delta
Ordner Gelöscht : C:\Users\Papas Großer\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Ordner Gelöscht : C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\Extensions\ffxtlbr@delta.com
Datei Gelöscht : C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\\invalidprefs.js
Datei Gelöscht : C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\EPUpdater
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Papas Großer\Desktop\Search.lnk
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKCU\Software\522deddbd34ed15
Schlüssel Gelöscht : HKLM\SOFTWARE\522deddbd34ed15
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Delta
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16686
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\prefs.js ]
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=9404944452D3D36A&affID=121565&tsp=5006");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=9404944452D3D36A&affID=121565&tsp=5006");
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "9404981d000000000000944452d3d36a");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15963");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.617:14:11");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=121565&tsp=5006");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
*************************
AdwCleaner[R0].txt - [7216 octets] - [14/09/2013 10:47:38]
AdwCleaner[R1].txt - [6522 octets] - [17/09/2013 02:11:45]
AdwCleaner[S0].txt - [6081 octets] - [14/09/2013 11:13:54]
AdwCleaner[S1].txt - [6130 octets] - [17/09/2013 02:12:45]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6190 octets] ##########
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-09-2013 02 Ran by Papas Großer at 2013-09-17 02:19:22 Running from F:\ Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Adobe AIR (x32 Version: 1.5.3.9130) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.174) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168) Agatha Christie - Peril at End House (x32 Version: 2.2.0.95) Avira Free Antivirus (x32 Version: 13.0.0.4052) Avira SearchFree Toolbar plus Web Protection (x32 Version: 12.2.2.663) AVS Video Converter 8 (x32 Version: 8.4.1.540) Bejeweled 2 Deluxe (x32 Version: 2.2.0.95) Bing Bar (x32 Version: 7.1.361.0) Bing Rewards Client Installer (x32 Version: 16.0.345.0) Blasterball 3 (x32 Version: 2.2.0.95) Bounce Symphony (x32 Version: 2.2.0.95) Build-a-Lot - The Elizabethan Era (x32 Version: 2.2.0.95) Cake Mania (x32 Version: 2.2.0.95) CCleaner (Version: 4.03) Chuzzle Deluxe (x32 Version: 2.2.0.95) CyberLink DVD Suite Deluxe (x32 Version: 7.0.3210) D3DX10 (x32 Version: 15.4.2368.0902) Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95) DVD Menu Pack for HP MediaSmart Video (x32 Version: 4.2.4412) Farm Frenzy (x32 Version: 2.2.0.95) FATE (x32 Version: 2.2.0.95) Free Audio Dub version 1.7.9.908 (x32 Version: 1.7.9.908) Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000) HP Auto (Version: 1.0.12494.3472) HP Client Services (Version: 1.0.12656.3472) HP Customer Experience Enhancements (x32 Version: 6.0.1.7) HP Game Console (x32) HP Games (x32 Version: 1.0.1.5) HP MediaSmart DVD (x32 Version: 4.2.4725) HP MediaSmart Music (x32 Version: 4.2.4517) HP MediaSmart Photo (x32 Version: 4.2.4513) HP MediaSmart SmartMenu (Version: 3.1.2.4) HP MediaSmart Video (x32 Version: 4.2.4522) HP Odometer (x32 Version: 2.10.0000) HP Remote Solution (x32 Version: 1.1.14.0) HP Setup (x32 Version: 8.4.4400.3525) HP Setup Manager (x32 Version: 1.0.12844.3519) HP Support Assistant (x32 Version: 7.0.39.15) HP Support Information (x32 Version: 10.1.1000) HP Update (x32 Version: 5.002.003.003) HP Vision Hardware Diagnostics (Version: 2.1.6.0) ICQ 8.1 (build 6327) (HKCU Version: 8.1.6327.0) Insaniquarium Deluxe (x32 Version: 2.2.0.95) Intel(R) Management Engine Components (x32 Version: 6.0.0.1179) Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014) Jewel Quest II (x32 Version: 2.2.0.95) Jewel Quest Solitaire (x32 Version: 2.2.0.95) John Deere Drive Green (x32 Version: 2.2.0.95) Junk Mail filter update (x32 Version: 15.4.3502.0922) LabelPrint (x32 Version: 2.5.3130) LightScribe System Software (x32 Version: 1.18.20.1) Magic Desktop (x32 Version: 3.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Movie Theme Pack for HP MediaSmart Video (x32 Version: 4.2.4412) Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1) Mozilla Maintenance Service (x32 Version: 23.0.1) mp3splt-gtk (x32) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MusicStation (x32 Version: 1.0.1.5) MyFreeCodec (HKCU) Norton Online Backup (x32 Version: 2.1.17869) NVIDIA Display Control Panel (Version: 6.14.12.5936) NVIDIA Drivers (Version: 1.10.62.40) NVIDIA PhysX (x32 Version: 9.10.0224) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) PDF Complete Special Edition (x32 Version: 4.0.9) Penguins! (x32 Version: 2.2.0.95) PhotoNow! (x32 Version: 1.1.7717) PictureMover (x32 Version: 3.5.0.33) Plants vs. Zombies (x32 Version: 2.2.0.95) PlayReady PC Runtime amd64 (Version: 1.3.0) Polar Bowler (x32 Version: 2.2.0.95) Power2Go (x32 Version: 6.1.4329) PowerDirector (x32 Version: 8.0.3129) Ralink RT2860 Wireless LAN Card (x32) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6196) Recovery Manager (x32 Version: 5.5.3219) Samsung Kies (x32 Version: 2.6.0.13074_14) Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0) Slingo Deluxe (x32 Version: 2.2.0.95) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Virtual Villagers - The Secret City (x32 Version: 2.2.0.95) Wedding Dash (x32 Version: 2.2.0.95) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3502.0922) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3502.0922) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) WinRAR 4.20 (64-Bit) (Version: 4.20.0) Zinio Reader 4 (x32 Version: 4.0.3184) Zuma Deluxe (x32 Version: 2.2.0.95) ==================== Restore Points ========================= 01-09-2013 01:00:13 Windows Update 01-09-2013 17:00:04 Windows-Sicherung 02-09-2013 01:00:10 Windows Update 09-09-2013 22:26:38 Geplanter Prüfpunkt 11-09-2013 01:00:12 Windows Update 11-09-2013 22:04:14 Windows Update 13-09-2013 09:45:25 Installiert Samsung Story Album Viewer 15-09-2013 17:00:06 Windows-Sicherung ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {0654F99F-9D94-481B-A847-BF68408C406E} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-09-27] () Task: {0D63F2CD-8ECB-420C-9C96-104339F4E450} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {38173724-705C-496B-8A42-0BD4C5E0DA47} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard) Task: {38DC6A38-3652-4FD2-B642-3A70228D6CA7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {48538838-638F-40E7-90F7-C6FE31F5C468} - System32\Tasks\HPCeeScheduleForPapas Großer => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard) Task: {4D9991B9-7BC9-46AE-A6EF-8D6A1B281874} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {5B175497-5C21-471A-AE11-DB9EF75D855E} - System32\Tasks\RMCreator => C:\Program Files (x86)\Hewlett-Packard\Recovery\Reminder.exe [2010-08-20] (CyberLink) Task: {5DE35FB0-CDEB-4520-B541-0C16A5E4F375} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd) Task: {6613589E-F4C7-479B-AAC8-F5A76877C20F} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation) Task: {6F8E7BD7-FE93-4550-882F-A8C91FBFDA2D} - \DSite No Task File Task: {7687F23B-80B8-427A-BC0F-4BD2356EBF47} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-09-27] () Task: {7853DF0C-9A7E-43C6-B00A-D38A2984A18C} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation) Task: {87DDF3E4-6D9D-48CE-9341-8D59E5D844B4} - \EPUpdater No Task File Task: {88197109-92A2-40D1-933D-C93159551672} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard) Task: {91E18483-BE3D-47CD-87FF-D3A982D2A4DC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-04-01] (Hewlett-Packard Company) Task: {9BBA718E-5136-45E0-9314-AB7E9D6D1622} - System32\Tasks\BitGuard => Sc.exe start BitGuard Task: {9E0DC196-5171-4A2B-8714-527749501D95} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {A9C4B37D-D088-4E20-84DD-F7BDC62A2CFB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2013-08-20] (Microsoft) Task: {BAAAF32A-7729-4DB7-B2D0-4E018B429D24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-14] (Adobe Systems Incorporated) Task: {CF570C51-505D-4F92-A52A-A05C6417DBF9} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {D1677505-61FE-4AC0-A754-3DB2A0D949A3} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\HPCeeScheduleForPapas Großer.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Loaded Modules (whitelisted) ============= 2013-06-30 15:11 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2009-07-14 02:18 - 2009-07-14 03:38 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\imaadp32.acm 2009-07-14 02:18 - 2009-07-14 03:38 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\msg711.acm 2009-07-14 02:18 - 2009-07-14 03:38 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\msgsm32.acm 2009-07-14 02:18 - 2009-07-14 03:38 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\msadp32.acm 2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm 2009-07-14 01:37 - 2009-07-14 03:39 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\Dwm.exe 2012-11-22 20:52 - 2010-08-09 10:05 - 07003240 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-06-28 23:37 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\Explorer.EXE 2010-09-15 20:31 - 2010-09-15 20:31 - 00611896 _____ () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe 2013-07-26 21:43 - 2013-09-04 12:16 - 01564528 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe 2013-07-26 21:43 - 2013-09-04 12:16 - 00844656 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe 2013-07-26 22:30 - 2013-07-26 22:30 - 01558480 _____ (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe 2013-06-28 23:38 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2013-06-28 23:38 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2013-09-10 20:54 - 2013-09-10 20:54 - 01862024 _____ (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe 2013-09-13 23:26 - 2013-09-13 21:22 - 01949768 _____ (Farbar) F:\FRST64.exe 2013-07-18 14:34 - 2013-07-18 14:34 - 00307200 _____ ( MarkAny.) C:\Program Files (x86)\Samsung\Kies\External\MACSSDK.dll 2013-07-23 09:45 - 2013-08-22 11:58 - 00167312 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\AgentDialogs.dll 2013-07-23 09:45 - 2013-08-22 11:58 - 00053128 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\AgentModels.dll 2013-07-23 09:45 - 2013-08-22 11:58 - 00120712 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\GlobalUtil.dll 2013-07-23 09:45 - 2013-08-22 11:58 - 01040784 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\CommonModule.dll 2013-07-23 09:45 - 2013-08-22 11:58 - 01636232 _____ (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\AgentModule.dll 2013-07-23 09:45 - 2013-08-22 11:58 - 00106496 _____ (TODO: <Company name>) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\BaseUI.dll 2013-07-23 09:45 - 2013-08-22 11:58 - 03341208 _____ (Codejock Software) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\ToolkitPro1331vc90U.dll 2013-06-28 23:12 - 2010-09-28 21:59 - 12286008 _____ () C:\Users\Papas Großer\AppData\Roaming\PictureMover\Bin\Core.dll 2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll 2013-06-28 23:13 - 2010-09-28 22:09 - 01700920 _____ () C:\Users\Papas Großer\AppData\Roaming\PictureMover\DE-DE\Presentation.dll 2013-08-15 03:34 - 2013-08-15 03:34 - 00452608 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\0149e914e4cfbde7da65d4558af19ce0\IAStorUtil.ni.dll 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2013-07-26 21:41 - 2013-09-04 12:08 - 00250368 _____ (Windows (R) Codename Longhorn DDK provider) C:\Program Files (x86)\Samsung\Kies\External\DeviceModules\UPNPDevice_Kies.dll 2012-11-22 20:46 - 2012-11-22 20:46 - 00052920 _____ (EasyBits Software Corp.) C:\Windows\SysWow64\EZUPBH~1.DLL 2013-08-17 09:30 - 2013-08-17 09:30 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/17/2013 00:31:24 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (09/16/2013 05:25:30 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/16/2013 05:25:24 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/16/2013 05:25:24 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/16/2013 05:25:19 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/16/2013 01:11:51 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (09/15/2013 06:16:51 PM) (Source: Application Hang) (User: ) Description: Programm FreeAudioDub.exe, Version 1.7.9.908 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 17b8 Startzeit: 01ceb2263288f6af Endzeit: 4 Anwendungspfad: C:\Program Files (x86)\DVDVideoSoft\Free Audio Dub\FreeAudioDub.exe Berichts-ID: 34892ba6-1e22-11e3-84cb-78e3b59ccae9 Error: (09/15/2013 00:31:22 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (09/14/2013 01:51:02 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (09/13/2013 10:22:44 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Samsung\Kies\Kies.exe . Error code = 0x800700d8 System errors: ============= Error: (09/13/2013 10:04:47 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007041d Error: (09/13/2013 10:04:47 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Modules Installer" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/13/2013 10:04:47 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Modules Installer erreicht. Error: (09/13/2013 10:04:47 PM) (Source: DCOM) (User: ) Description: 1053TrustedInstaller{752073A1-23F2-4396-85F0-8FDB879ED0ED} Error: (09/13/2013 09:28:01 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023781. Error: (09/13/2013 09:28:01 PM) (Source: Microsoft-Windows-Bits-Client) (User: NT-AUTORITÄT) Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147943515. Error: (09/13/2013 09:28:00 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: %%1747 Error: (09/12/2013 00:11:05 AM) (Source: DCOM) (User: ) Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030} Error: (09/12/2013 00:11:05 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/12/2013 00:11:04 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. Microsoft Office Sessions: ========================= Error: (09/17/2013 00:31:24 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (09/16/2013 05:25:30 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Papas Großer\Downloads\esetsmartinstaller_enu.exe Error: (09/16/2013 05:25:24 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Papas Großer\Downloads\esetsmartinstaller_enu.exe Error: (09/16/2013 05:25:24 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Papas Großer\Downloads\esetsmartinstaller_enu.exe Error: (09/16/2013 05:25:19 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Papas Großer\Downloads\esetsmartinstaller_enu.exe Error: (09/16/2013 01:11:51 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (09/15/2013 06:16:51 PM) (Source: Application Hang)(User: ) Description: FreeAudioDub.exe1.7.9.90817b801ceb2263288f6af4C:\Program Files (x86)\DVDVideoSoft\Free Audio Dub\FreeAudioDub.exe34892ba6-1e22-11e3-84cb-78e3b59ccae9 Error: (09/15/2013 00:31:22 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (09/14/2013 01:51:02 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (09/13/2013 10:22:44 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Samsung\Kies\Kies.exe . Error code = 0x800700d8 C:\Program Files (x86)\Samsung\Kies\Kies.exe ==================== Memory info =========================== Percentage of memory in use: 33% Total physical RAM: 6103.11 MB Available physical RAM: 4029.55 MB Total Pagefile: 12204.41 MB Available Pagefile: 9965.65 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:1382.54 GB) (Free:1324.32 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (HP_RECOVERY) (Fixed) (Total:14.63 GB) (Free:0.92 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive f: (HITMANPRO) (Removable) (Total:3.75 GB) (Free:3.74 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 1397 GB) (Disk ID: 5FACA6B4) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=-714537467392) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 4 GB) (Disk ID: 7860FD81) Partition 1: (Active) - (Size=4 GB) - (Type=0B) ==================== End Of Log ============================ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-09-2013 02
Ran by Papas Großer (administrator) on PAPASGROßER-HP on 17-09-2013 02:17:36
Running from F:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Hewlett-Packard Company) C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896 2010-09-15] ()
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [icq] - C:\Users\Papas Großer\AppData\Roaming\ICQM\icq.exe [28696936 2013-07-03] (ICQ)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] - c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2010-08-30] (EasyBits Software AS)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
Startup: C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK/4
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
SearchScopes: HKLM-x32 - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2012-11-22] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: toolbar_AVIRA-V7 - C:\Users\Papas Großer\AppData\Roaming\Mozilla\Firefox\Profiles\f55bxo19.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
R2 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [681528 2010-08-06] (Hewlett-Packard)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc)
==================== Drivers (Whitelisted) ====================
S3 AVer7231_x64; C:\Windows\System32\DRIVERS\AVer7231_x64.sys [1757952 2010-04-08] (AVerMedia TECHNOLOGIES, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CXCIR; C:\Windows\system32\DRIVERS\AVer888RCIR_64.sys [39936 2009-11-14] (AVerMedia TECHNOLOGIES, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-17 02:11 - 2013-09-17 02:11 - 01039554 _____ C:\Users\Papas Großer\Downloads\adwcleaner.exe
2013-09-16 17:22 - 2013-09-16 17:22 - 02347384 _____ (ESET) C:\Users\Papas Großer\Downloads\esetsmartinstaller_enu.exe
2013-09-16 16:47 - 2013-09-16 16:47 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Malwarebytes
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-16 16:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-15 18:52 - 2013-09-15 18:52 - 04555657 _____ C:\Users\Papas Großer\Desktop\gmq.wmv
2013-09-15 17:56 - 2013-09-15 17:56 - 04667657 _____ C:\Users\Papas Großer\Desktop\GMQ2.wmv
2013-09-15 17:14 - 2013-09-16 17:15 - 00003420 _____ C:\Windows\System32\Tasks\BitGuard
2013-09-15 17:13 - 2013-09-15 17:14 - 00000000 ____D C:\Users\Papas Großer\Documents\DVDVideoSoft
2013-09-15 17:13 - 2013-09-15 17:13 - 00001245 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-09-15 17:13 - 2013-09-15 17:13 - 00001234 _____ C:\Users\Public\Desktop\Free Audio Dub.lnk
2013-09-15 17:13 - 2013-09-15 17:13 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\DVDVideoSoft
2013-09-15 17:13 - 2013-09-15 17:13 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-09-15 17:12 - 2013-09-15 17:13 - 16877344 _____ (DVDVideoSoft Ltd. ) C:\Users\Papas Großer\Downloads\FreeAudioDub1.7.9.908.exe
2013-09-15 17:09 - 2013-09-15 17:09 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219(2).exe
2013-09-15 17:09 - 2013-09-15 17:09 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219(1).exe
2013-09-14 10:46 - 2013-09-17 02:12 - 00000000 ____D C:\AdwCleaner
2013-09-14 10:46 - 2013-09-14 10:45 - 01037278 _____ C:\Users\Papas Großer\Desktop\adwcleaner.exe
2013-09-14 07:53 - 2013-09-14 07:53 - 00000000 ____D C:\FRST
2013-09-13 23:41 - 2013-09-13 23:41 - 00000091 _____ C:\Users\Papas Großer\AppData\Roaming\WB.CFG
2013-09-13 23:41 - 2013-09-13 23:41 - 00000005 _____ C:\Users\Papas Großer\AppData\Roaming\WBPU-TTL.DAT
2013-09-13 23:26 - 2013-09-13 23:26 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\AskPartnerNetwork
2013-09-13 22:41 - 2013-09-17 02:12 - 00000601 _____ C:\Users\Papas Großer\Desktop\Search.lnk
2013-09-13 14:00 - 2013-09-13 14:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 13:58 - 2013-09-13 13:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 13:56 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 13:55 - 2013-09-13 13:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 13:55 - 2013-09-13 13:55 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:55 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 13:50 - 2013-09-13 13:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 09:20 - 2013-09-13 09:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-13 09:18 - 2013-09-13 09:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-12 18:08 - 2013-09-12 18:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-11 03:07 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 03:07 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 03:07 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 03:07 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 03:07 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 03:07 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 03:07 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 03:07 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 03:07 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 03:07 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 03:07 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 03:07 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 03:07 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 03:07 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-10 21:03 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-10 21:03 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-10 21:03 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-10 21:03 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-10 21:03 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-10 21:03 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-10 21:03 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-10 21:03 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-10 21:03 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-10 21:03 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-10 21:03 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-10 21:03 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-10 21:03 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-10 21:03 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-10 21:03 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-10 21:03 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-10 21:03 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-10 21:03 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-10 21:03 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-10 21:03 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-10 21:03 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-09 21:07 - 2013-09-09 21:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 21:04 - 2013-09-09 21:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 21:02 - 2013-09-09 21:02 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-09-09 21:01 - 2013-09-09 21:04 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 21:01 - 2013-09-09 21:02 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 21:01 - 2012-03-23 19:59 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2013-09-09 21:01 - 2012-03-23 19:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-09-09 20:59 - 2013-09-09 21:01 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 20:48 - 2013-09-09 20:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 19:46 - 2013-09-16 21:29 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-09 16:41 - 2013-09-09 16:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-03 19:44 - 2013-09-11 01:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-08-28 07:33 - 2013-08-28 07:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-28 01:33 - 2013-09-03 13:45 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-28 01:22 - 2013-08-28 01:22 - 00000000 ____D C:\ProgramData\APN
2013-08-28 01:21 - 2013-09-03 13:45 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-28 01:21 - 2013-09-03 13:45 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-28 01:21 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-28 00:17 - 2013-08-28 01:18 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 23:38 - 2013-08-07 04:22 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-08-25 17:03 - 2013-09-13 15:34 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-08-23 07:38 - 2013-09-09 00:41 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
==================== One Month Modified Files and Folders =======
2013-09-17 02:18 - 2012-11-22 20:32 - 01369320 _____ C:\Windows\WindowsUpdate.log
2013-09-17 02:13 - 2013-07-16 17:38 - 00009188 _____ C:\Windows\setupact.log
2013-09-17 02:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-17 02:12 - 2013-09-14 10:46 - 00000000 ____D C:\AdwCleaner
2013-09-17 02:12 - 2013-09-13 22:41 - 00000601 _____ C:\Users\Papas Großer\Desktop\Search.lnk
2013-09-17 02:11 - 2013-09-17 02:11 - 01039554 _____ C:\Users\Papas Großer\Downloads\adwcleaner.exe
2013-09-17 01:54 - 2013-06-29 09:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-17 00:18 - 2013-07-11 12:47 - 00000360 _____ C:\Windows\Tasks\HPCeeScheduleForPapas Großer.job
2013-09-16 21:29 - 2013-09-09 19:46 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Windows Live
2013-09-16 17:24 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-16 17:24 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-16 17:22 - 2013-09-16 17:22 - 02347384 _____ (ESET) C:\Users\Papas Großer\Downloads\esetsmartinstaller_enu.exe
2013-09-16 17:16 - 2013-07-20 00:42 - 00366970 _____ C:\Windows\PFRO.log
2013-09-16 17:15 - 2013-09-15 17:14 - 00003420 _____ C:\Windows\System32\Tasks\BitGuard
2013-09-16 16:47 - 2013-09-16 16:47 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Malwarebytes
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-16 16:47 - 2013-09-16 16:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-15 18:52 - 2013-09-15 18:52 - 04555657 _____ C:\Users\Papas Großer\Desktop\gmq.wmv
2013-09-15 17:56 - 2013-09-15 17:56 - 04667657 _____ C:\Users\Papas Großer\Desktop\GMQ2.wmv
2013-09-15 17:14 - 2013-09-15 17:13 - 00000000 ____D C:\Users\Papas Großer\Documents\DVDVideoSoft
2013-09-15 17:13 - 2013-09-15 17:13 - 00001245 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-09-15 17:13 - 2013-09-15 17:13 - 00001234 _____ C:\Users\Public\Desktop\Free Audio Dub.lnk
2013-09-15 17:13 - 2013-09-15 17:13 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\DVDVideoSoft
2013-09-15 17:13 - 2013-09-15 17:13 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-09-15 17:13 - 2013-09-15 17:12 - 16877344 _____ (DVDVideoSoft Ltd. ) C:\Users\Papas Großer\Downloads\FreeAudioDub1.7.9.908.exe
2013-09-15 17:09 - 2013-09-15 17:09 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219(2).exe
2013-09-15 17:09 - 2013-09-15 17:09 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219(1).exe
2013-09-14 12:15 - 2012-11-22 20:46 - 00000000 ____D C:\ProgramData\PDFC
2013-09-14 10:45 - 2013-09-14 10:46 - 01037278 _____ C:\Users\Papas Großer\Desktop\adwcleaner.exe
2013-09-14 07:53 - 2013-09-14 07:53 - 00000000 ____D C:\FRST
2013-09-14 00:54 - 2013-06-29 09:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 00:54 - 2013-06-29 09:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-14 00:54 - 2013-06-29 09:37 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 23:41 - 2013-09-13 23:41 - 00000091 _____ C:\Users\Papas Großer\AppData\Roaming\WB.CFG
2013-09-13 23:41 - 2013-09-13 23:41 - 00000005 _____ C:\Users\Papas Großer\AppData\Roaming\WBPU-TTL.DAT
2013-09-13 23:26 - 2013-09-13 23:26 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\AskPartnerNetwork
2013-09-13 22:42 - 2012-11-22 21:01 - 00654372 _____ C:\Windows\system32\perfh007.dat
2013-09-13 22:42 - 2012-11-22 21:01 - 00129986 _____ C:\Windows\system32\perfc007.dat
2013-09-13 22:42 - 2009-07-14 07:13 - 01500018 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-13 22:41 - 2013-08-17 09:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-13 15:34 - 2013-08-25 17:03 - 00000000 ____D C:\Users\Papas Großer\Desktop\neue auflösung
2013-09-13 14:00 - 2013-09-13 14:00 - 00478552 _____ C:\Users\Papas Großer\Downloads\ocenaudio64-Downloader.exe
2013-09-13 13:58 - 2013-09-13 13:58 - 00000218 _____ C:\Users\Papas Großer\.recently-used.xbel
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\gtk-2.0
2013-09-13 13:58 - 2013-09-13 13:58 - 00000000 ____D C:\Users\Papas Großer\.gstreamer-0.10
2013-09-13 13:58 - 2013-09-13 13:56 - 00000000 ____D C:\Users\Papas Großer\.mp3splt-gtk
2013-09-13 13:58 - 2013-06-28 23:06 - 00000000 ____D C:\Users\Papas Großer
2013-09-13 13:55 - 2013-09-13 13:55 - 00002001 _____ C:\Users\Papas Großer\Desktop\mp3splt-gtk.lnk
2013-09-13 13:55 - 2013-09-13 13:55 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3splt-gtk
2013-09-13 13:55 - 2013-09-13 13:54 - 00000000 ____D C:\Program Files (x86)\mp3splt-gtk
2013-09-13 13:54 - 2013-09-13 13:54 - 12229305 _____ C:\Users\Papas Großer\Downloads\mp3splt-gtk_0.9_i386.exe
2013-09-13 13:50 - 2013-09-13 13:50 - 00300850 _____ C:\Users\Papas Großer\Downloads\mp3DC219.exe
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2013-09-13 11:46 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-13 11:46 - 2012-11-22 20:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-13 11:45 - 2013-08-02 20:25 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-13 11:45 - 2013-08-02 20:22 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Downloaded Installations
2013-09-13 09:20 - 2013-09-13 09:20 - 00002008 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-09-13 09:18 - 2013-09-13 09:18 - 00000000 ____D C:\Program Files (x86)\MarkAny
2013-09-13 09:16 - 2013-08-02 20:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Samsung
2013-09-12 18:08 - 2013-09-12 18:08 - 00403945 _____ C:\Users\Papas Großer\Desktop\wallpaper-2153121.jpeg
2013-09-12 12:18 - 2013-07-11 12:47 - 00003228 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPapas Großer
2013-09-12 12:17 - 2013-08-01 12:32 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-09-12 12:17 - 2013-07-04 12:12 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-12 12:16 - 2013-07-04 12:10 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HP Support Assistant
2013-09-12 12:16 - 2013-06-29 23:53 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\HpUpdate
2013-09-11 06:48 - 2013-06-28 23:11 - 00000000 ___RD C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-11 06:48 - 2013-06-28 23:11 - 00000000 ___RD C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-11 03:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-11 03:25 - 2013-07-16 17:38 - 00305296 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-11 03:07 - 2013-08-05 09:30 - 01526060 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-11 03:07 - 2013-08-05 09:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-09-11 03:06 - 2013-08-15 03:02 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 03:05 - 2013-06-28 23:44 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 01:44 - 2013-09-03 19:44 - 97021647 _____ C:\Windows\SysWOW64\슍ᥭ轜š
2013-09-10 07:55 - 2013-06-29 22:14 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\CrashDumps
2013-09-09 21:07 - 2013-09-09 21:07 - 18772866 _____ C:\Users\Papas Großer\Desktop\Mein Film2.wmv
2013-09-09 21:04 - 2013-09-09 21:04 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\AVS4YOU
2013-09-09 21:04 - 2013-09-09 21:01 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:02 - 00001243 _____ C:\Users\Papas Großer\Desktop\AVS Video Converter.lnk
2013-09-09 21:02 - 2013-09-09 21:02 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-09-09 21:02 - 2013-09-09 21:01 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-09-09 21:01 - 2013-09-09 20:59 - 63024600 _____ (Online Media Technologies Ltd. ) C:\Users\Papas Großer\Downloads\AVSVideoConverter.exe
2013-09-09 20:48 - 2013-09-09 20:48 - 00014656 _____ C:\Users\Papas Großer\Desktop\Mein Film.wlmp
2013-09-09 16:41 - 2013-09-09 16:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\selfpic
2013-09-09 00:41 - 2013-08-23 07:38 - 00027644 _____ C:\Users\Papas Großer\Desktop\Spielplan.ods
2013-09-08 13:19 - 2013-08-13 18:10 - 00000000 ____D C:\Users\Papas Großer\Desktop\kskack
2013-09-08 13:19 - 2013-08-04 15:41 - 00000000 ____D C:\Users\Papas Großer\Desktop\papahandy
2013-09-03 13:45 - 2013-08-28 01:33 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-03 13:45 - 2013-08-28 01:21 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-03 13:45 - 2013-08-28 01:21 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-28 07:33 - 2013-08-28 07:33 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\Avira
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-28 01:29 - 2013-08-28 01:29 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-28 01:22 - 2013-08-28 01:22 - 00000000 ____D C:\ProgramData\APN
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\ProgramData\Avira
2013-08-28 01:21 - 2013-08-28 01:21 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-28 01:18 - 2013-08-28 00:17 - 110344048 _____ C:\Users\Papas Großer\Downloads\avira_free_antivirus_de.exe
2013-08-27 23:53 - 2013-06-28 23:06 - 00000000 ____D C:\Users\Papas Großer\AppData\Local\Hewlett-Packard
2013-08-27 23:53 - 2012-11-22 20:40 - 00000000 ____D C:\ProgramData\CyberLink
2013-08-27 23:50 - 2012-11-22 20:53 - 00000000 ____D C:\ProgramData\Norton
2013-08-27 23:10 - 2013-06-28 23:10 - 00003734 _____ C:\Windows\System32\Tasks\Registration
2013-08-27 12:52 - 2013-08-10 00:32 - 00000000 ____D C:\Users\Papas Großer\Desktop\walli kay
2013-08-26 05:50 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-08-25 23:12 - 2013-08-05 09:31 - 00000000 ____D C:\Users\Papas Großer\AppData\Roaming\SoftGrid Client
2013-08-25 16:58 - 2013-08-04 22:13 - 00000000 ____D C:\Users\Papas Großer\Desktop\pic
2013-08-20 21:47 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-08-18 20:43 - 2013-06-29 09:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
Some content of TEMP:
====================
C:\Users\Papas Großer\AppData\Local\Temp\1piz3xw0.dll
C:\Users\Papas Großer\AppData\Local\Temp\2bqzuqrm.dll
C:\Users\Papas Großer\AppData\Local\Temp\COMAP.EXE
C:\Users\Papas Großer\AppData\Local\Temp\qladxmat.dll
C:\Users\Papas Großer\AppData\Local\Temp\Quarantine.exe
C:\Users\Papas Großer\AppData\Local\Temp\sp58915.exe
C:\Users\Papas Großer\AppData\Local\Temp\uninst1.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Papas Großer\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Papas Großer\AppData\Local\Temp\x01fbmja.dll
C:\Users\Papas Großer\AppData\Local\Temp\zsn75aa3.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 00:57
==================== End Of Log ============================
--- --- --- |
|
17.09.2013, 19:43
| #14 | |
| Ruhe in Frieden † 2019 | Trojaner von Bundespolizei, Browser gesperrt Hallo gluehender.s, das Log sieht nun wieder gut aus. Ich benötige zu einer Datei noch weitere Informationen und möchte, dass Du sie bei VirusTotal analysieren lässt. Dazu: Schritt 1 Bitte lasse die Datei aus der Code-Box bei Virustotal überprüfen.
|
|
19.09.2013, 18:35
| #15 |
| | Trojaner von Bundespolizei, Browser gesperrtCode:
ATTFilter https://www.virustotal.com/de/file/5e219c5fa7cca875e92a614aa2ca2d3bedf0e8fb00d2dfcd6583ba61b739bf86/analysis/1379612051/
|
|
| Themen zu Trojaner von Bundespolizei, Browser gesperrt |
| .exe, browser, browser gesperrt, bundespolizei, bundespolizei-trojaner, eingefangen, entdeck, entdeckt, forum, frst64.exe, gefangen, gen, gesperrt, hilfe, natürlich, schnell, troja, trojaner |
Linear-Darstellung
