| |
| |||||||
Log-Analyse und Auswertung: Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAMWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
18.09.2013, 15:21
| #1 |
| |  Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAM Hallo liebe Helfer! Ich habe versucht Kaspersky Internet Security Testversion auf meinem Notebook zu installieren. Anfangs lief die Installation normal ab, bis ich immer wieder in einer Endlosschleife aufgefordert wurde den PC neu zu starten. Daraufhin habe ich mir Malwarebytes Anti Malware heruntergeladen und einen Quick-Scan durchgeführt. Dabei waren 442 infizierte Objekte, die ich auch entfernt habe. Hier die üblichen logs: gmer Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-18 15:54:30
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 SAMSUNG_ rev.2AR1 698,64GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Mathieu\AppData\Local\Temp\uxldypow.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544 fffff800033a7000 45 bytes [00, 00, 15, 02, 46, 69, 6C, ...]
INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 591 fffff800033a702f 16 bytes [00, 00, 00, 00, 00, 00, 00, ...]
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe[1244] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000750f1465 2 bytes [0F, 75]
.text C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe[1244] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000750f14bb 2 bytes [0F, 75]
.text ... * 2
.text C:\windows\system32\hasplms.exe[2476] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000750f1465 2 bytes [0F, 75]
.text C:\windows\system32\hasplms.exe[2476] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000750f14bb 2 bytes [0F, 75]
.text ... * 2
.text C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe[3208] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000750f1465 2 bytes [0F, 75]
.text C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe[3208] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000750f14bb 2 bytes [0F, 75]
.text ... * 2
.text C:\windows\SysWOW64\RunDll32.exe[5756] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000750f1465 2 bytes [0F, 75]
.text C:\windows\SysWOW64\RunDll32.exe[5756] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000750f14bb 2 bytes [0F, 75]
.text ... * 2
---- Threads - GMER 2.1 ----
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:3064] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:3068] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:1404] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:1904] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:1080] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:1124] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2168] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:1056] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:1044] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2172] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2204] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2200] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2212] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2240] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2208] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2264] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2280] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2284] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2400] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2412] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2316] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:1836] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:1964] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2832] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2788] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2828] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2860] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:2984] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:3268] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:3272] 000000006fdc3810
Thread C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2848:3800] 000000006fdc3810
Thread C:\windows\System32\svchost.exe [4656:1304] 000007feec099688
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00006b0289b0
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\e0ca944450bd
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00006b0289b0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\e0ca944450bd (not active ControlSet)
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 03
Ran by Mathieu (administrator) on MATZE on 18-09-2013 15:34:03
Running from C:\Users\Mathieu\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Aladdin Knowledge Systems Ltd.) C:\windows\system32\hasplms.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.KNXETS4\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\windows\system32\hkcmd.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Spotify Ltd) C:\Users\Mathieu\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Intel Corporation) C:\windows\system32\igfxtray.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\windows\system32\igfxpers.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11895400 2011-06-25] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\RunOnce: [Kaspersky Setup] - "C:\Users\Mathieu\Downloads\kis14.0.0.4651aDE_4890.exe" /-reboot_restart_async_continue [261894976 2013-09-18] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Mathieu\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104424 2013-01-24] (Spotify Ltd)
HKCU\...\Run: [KSS] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
HKCU\...\RunOnce: [Kaspersky Setup] - "C:\Users\Mathieu\Downloads\kis14.0.0.4651aDE_4890.exe" /-restricted_service [261894976 2013-09-18] ()
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [routcnf] - C:\Program Files (x86)\Telekom\Eumex 504PC USB\routcnf.exe [x]
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [ZoneAlarm] - C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73832 2013-06-19] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
AppInit_DLLs: C:\windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.softonic.com/MOY00001/tb_v1?SearchSource=10&cc=&mi=382f92de000000000000e0ca94734ad6
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - No File
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=9242122531504507&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=9242122531504507&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=9242122531504507&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=9242122531504507&q={searchTerms}
SearchScopes: HKCU - DefaultScope {E49CB52C-79C7-47DC-84DE-CE84E0DE037B} URL = hxxp://search.softonic.com/MOY00001/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=382f92de000000000000e0ca94734ad6&r=859
SearchScopes: HKCU - {5DC95FF9-88A8-4A72-BAAD-D503186F9E4D} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1468A701-95A6-4CCC-A008-A15F8A095C92&apn_sauid=16B396DF-63B4-46FC-8609-B14F29071947
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=9242122531504507&q={searchTerms}
SearchScopes: HKCU - {E49CB52C-79C7-47DC-84DE-CE84E0DE037B} URL = hxxp://search.softonic.com/MOY00001/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=382f92de000000000000e0ca94734ad6&r=859
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files (x86)\Softonic\Softonic\1.8.19.3\bh\Softonic.dll (Softonic.com)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.8.19.3\SoftonicTlbr.dll (Softonic.com)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default
FF user.js: detected! => C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\user.js
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ask Toolbar - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\Extensions\toolbar@ask.com
FF Extension: Search-Results Toolbar - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\Extensions\{f34c9277-6577-4dff-b2d7-7d58092f272f}
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0
CHR HKLM-x32\...\Chrome\Extension: [elchiiiejkobdbblfejjkbphbddgmljf] - C:\Program Files (x86)\Softonic\Softonic\1.8.19.3\Softonic.crx
CHR HKLM-x32\...\Chrome\Extension: [mjdepfkicdcciagbigfcmdhknnoaaegf] - C:\Program Files (x86)\Deskperience\Word Capture\wcxChrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
R2 MSSQL$KNXETS4; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.KNXETS4\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()
S4 SQLAgent$KNXETS4; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.KNXETS4\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2445304 2013-06-19] (Check Point Software Technologies LTD)
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [54160 2013-06-18] (Check Point Software Technologies, Ltd.)
==================== Drivers (Whitelisted) ====================
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-11-15] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2013-02-21] (Kaspersky Lab)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-09-21] (Windows (R) 2003 DDK 3790 provider)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-09-21] (Windows (R) 2003 DDK 3790 provider)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [117080 2012-08-20] (Oracle Corporation)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [451096 2013-06-13] (Check Point Software Technologies LTD)
S2 DETEWECP; \SystemRoot\System32\drivers\detewecp.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-18 15:33 - 2013-09-18 15:33 - 00000000 ____D C:\FRST
2013-09-18 15:31 - 2013-09-18 15:32 - 01950524 _____ (Farbar) C:\Users\Mathieu\Downloads\FRST64.exe
2013-09-18 15:30 - 2013-09-18 15:30 - 00000476 _____ C:\Users\Mathieu\Downloads\defogger_disable.log
2013-09-18 15:30 - 2013-09-18 15:30 - 00000000 _____ C:\Users\Mathieu\defogger_reenable
2013-09-18 15:29 - 2013-09-18 15:29 - 00050477 _____ C:\Users\Mathieu\Downloads\Defogger.exe
2013-09-18 14:26 - 2013-09-18 14:26 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-18 14:26 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-09-18 14:24 - 2013-09-18 14:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Mathieu\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 14:24 - 2013-09-18 14:24 - 00017656 _____ C:\Users\Mathieu\Desktop\OoTglEpD.htm
2013-09-18 14:22 - 2013-09-18 14:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 12:26 - 2013-09-18 12:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2013-09-18 12:20 - 2013-09-18 12:24 - 261894976 _____ C:\Users\Mathieu\Downloads\kis14.0.0.4651aDE_4890.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 01095080 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll
2013-09-16 21:20 - 2013-09-16 21:19 - 00973736 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll
2013-09-16 21:20 - 2013-09-16 21:19 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2013-09-16 21:19 - 2013-09-16 21:19 - 00000000 ____D C:\Program Files\Java
2013-09-16 21:16 - 2013-09-16 21:17 - 30669224 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jre-7u40-windows-x64.exe
2013-09-16 21:15 - 2013-09-16 21:20 - 00000000 ____D C:\ProgramData\Oracle
2013-09-16 21:14 - 2013-09-16 21:13 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-16 21:14 - 2013-09-16 21:13 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-16 21:14 - 2013-09-16 21:13 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-16 21:14 - 2013-09-16 21:13 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-16 21:13 - 2013-09-16 21:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-16 21:07 - 2013-09-16 21:07 - 00913832 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jxpiinstall(1).exe
2013-09-16 18:05 - 2013-09-16 18:05 - 00052076 _____ C:\Users\Mathieu\Downloads\Geschwindigkeit.zip
2013-09-16 14:22 - 2013-09-16 17:00 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Temporary Projects
2013-09-14 09:49 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-14 09:49 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-14 09:49 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-14 09:49 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-14 09:49 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-14 09:49 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-14 09:49 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-14 09:49 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-14 09:49 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-14 09:49 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-14 09:49 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-14 09:49 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-13 17:53 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-09-13 17:53 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-09-13 17:53 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-09-13 17:53 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-13 17:53 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-09-13 17:53 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-09-13 17:53 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-09-13 17:53 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-13 17:52 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-13 17:52 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2013-09-13 17:52 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2013-09-13 17:52 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-13 17:52 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2013-09-13 17:52 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-13 17:52 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-13 17:52 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-13 17:52 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-09-13 17:52 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-09-13 17:52 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-09-13 17:52 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-09-13 17:52 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-13 17:52 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-13 17:52 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-13 17:52 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-13 17:52 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-13 17:37 - 2013-09-13 17:37 - 04751752 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-08 11:46 - 2013-09-08 11:50 - 00000000 ____D C:\Users\Mathieu\Desktop\100DICAM
2013-08-23 12:51 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-08-23 12:51 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-08-23 12:51 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-08-23 12:51 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-08-23 12:51 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-08-23 12:51 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-08-23 12:51 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-08-23 12:51 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-08-23 12:51 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-08-23 12:51 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-08-23 12:51 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-08-23 12:51 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-08-23 12:50 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-08-23 12:50 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-08-23 12:50 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-08-23 12:48 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
==================== One Month Modified Files and Folders =======
2013-09-18 15:33 - 2013-09-18 15:33 - 00000000 ____D C:\FRST
2013-09-18 15:32 - 2013-09-18 15:31 - 01950524 _____ (Farbar) C:\Users\Mathieu\Downloads\FRST64.exe
2013-09-18 15:30 - 2013-09-18 15:30 - 00000476 _____ C:\Users\Mathieu\Downloads\defogger_disable.log
2013-09-18 15:30 - 2013-09-18 15:30 - 00000000 _____ C:\Users\Mathieu\defogger_reenable
2013-09-18 15:30 - 2012-05-09 20:49 - 00000000 ____D C:\Users\Mathieu
2013-09-18 15:29 - 2013-09-18 15:29 - 00050477 _____ C:\Users\Mathieu\Downloads\Defogger.exe
2013-09-18 15:19 - 2012-05-09 22:24 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Mozilla
2013-09-18 15:19 - 2012-05-09 22:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-18 15:15 - 2009-07-14 06:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-18 15:15 - 2009-07-14 06:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-18 15:12 - 2011-07-21 03:10 - 01347697 _____ C:\windows\WindowsUpdate.log
2013-09-18 15:05 - 2010-11-21 05:47 - 00584630 _____ C:\windows\PFRO.log
2013-09-18 15:05 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-18 15:05 - 2009-07-14 06:51 - 00094589 _____ C:\windows\setupact.log
2013-09-18 15:03 - 2012-11-10 17:52 - 00000000 ____D C:\Program Files (x86)\Search Results Toolbar
2013-09-18 14:51 - 2012-11-21 21:54 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-18 14:26 - 2013-09-18 14:26 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-18 14:24 - 2013-09-18 14:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Mathieu\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 14:24 - 2013-09-18 14:24 - 00017656 _____ C:\Users\Mathieu\Desktop\OoTglEpD.htm
2013-09-18 14:22 - 2013-09-18 14:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 12:33 - 2012-05-11 17:54 - 00000000 ____D C:\ProgramData\Avira
2013-09-18 12:26 - 2013-09-18 12:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2013-09-18 12:24 - 2013-09-18 12:20 - 261894976 _____ C:\Users\Mathieu\Downloads\kis14.0.0.4651aDE_4890.exe
2013-09-18 10:10 - 2011-07-21 02:47 - 00828566 _____ C:\windows\system32\perfh007.dat
2013-09-18 10:10 - 2011-07-21 02:47 - 00197770 _____ C:\windows\system32\perfc007.dat
2013-09-18 10:10 - 2009-07-14 07:13 - 01982844 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-17 22:19 - 2009-07-14 07:32 - 00000000 ____D C:\windows\system32\FxsTmp
2013-09-17 17:58 - 2012-06-28 18:49 - 00000000 ____D C:\Users\Mathieu\AppData\Local\CrashDumps
2013-09-16 21:20 - 2013-09-16 21:15 - 00000000 ____D C:\ProgramData\Oracle
2013-09-16 21:19 - 2013-09-16 21:20 - 01095080 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll
2013-09-16 21:19 - 2013-09-16 21:20 - 00973736 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll
2013-09-16 21:19 - 2013-09-16 21:20 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-09-16 21:19 - 2013-09-16 21:20 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-09-16 21:19 - 2013-09-16 21:20 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-09-16 21:19 - 2013-09-16 21:20 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2013-09-16 21:19 - 2013-09-16 21:19 - 00000000 ____D C:\Program Files\Java
2013-09-16 21:17 - 2013-09-16 21:16 - 30669224 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jre-7u40-windows-x64.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-16 21:13 - 2013-09-16 21:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-16 21:13 - 2012-10-18 12:44 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll
2013-09-16 21:13 - 2012-10-18 12:44 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-09-16 21:07 - 2013-09-16 21:07 - 00913832 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jxpiinstall(1).exe
2013-09-16 18:05 - 2013-09-16 18:05 - 00052076 _____ C:\Users\Mathieu\Downloads\Geschwindigkeit.zip
2013-09-16 17:24 - 2013-07-11 09:56 - 00000000 ____D C:\Users\Mathieu\Documents\Visual Studio 2010
2013-09-16 17:00 - 2013-09-16 14:22 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Temporary Projects
2013-09-15 18:19 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-09-14 10:14 - 2012-05-09 21:02 - 00000000 ___RD C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-14 10:14 - 2012-05-09 21:02 - 00000000 ___RD C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-14 10:09 - 2009-07-14 06:45 - 00423000 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-14 09:49 - 2013-07-21 21:34 - 00000000 ____D C:\windows\system32\MRT
2013-09-14 09:44 - 2012-10-25 13:34 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-14 09:44 - 2012-05-11 18:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-14 09:36 - 2013-07-16 18:51 - 00003929 ____H C:\windows\SysWOW64\BTImages.dat
2013-09-13 17:37 - 2013-09-13 17:37 - 04751752 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-13 17:37 - 2012-05-30 20:12 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-13 17:37 - 2012-05-30 20:12 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-11 13:52 - 2012-11-21 21:54 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-08 11:50 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Mathieu\Desktop\100DICAM
2013-08-26 22:00 - 2013-01-23 10:50 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\vlc
2013-08-26 21:02 - 2013-03-31 12:28 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\dvdcss
2013-08-23 12:28 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-08-23 11:50 - 2009-07-14 07:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT
Some content of TEMP:
====================
C:\Users\Mathieu\AppData\Local\Temp\APNStub.exe
C:\Users\Mathieu\AppData\Local\Temp\AskSLib.dll
C:\Users\Mathieu\AppData\Local\Temp\installhelper.dll
C:\Users\Mathieu\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Mathieu\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Mathieu\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Mathieu\AppData\Local\Temp\ose00000.exe
C:\Users\Mathieu\AppData\Local\Temp\SIntf16.dll
C:\Users\Mathieu\AppData\Local\Temp\SIntf32.dll
C:\Users\Mathieu\AppData\Local\Temp\SIntfNT.dll
C:\Users\Mathieu\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Mathieu\AppData\Local\Temp\Softonic_chr_1-8-19-3.exe
C:\Users\Mathieu\AppData\Local\Temp\SRAssetsHelper.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 10:24
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-09-2013 03 Ran by Mathieu at 2013-09-18 15:37:26 Running from C:\Users\Mathieu\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Update for Microsoft Office 2007 (KB2508958) (x32) „Windows Live Essentials“ (x32 Version: 15.4.3502.0922) „Windows Live Mail“ (x32 Version: 15.4.3502.0922) „Windows Live Messenger“ (x32 Version: 15.4.3502.0922) „Windows Live“ fotogalerija (x32 Version: 15.4.3502.0922) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Adobe AIR (x32 Version: 2.6.0.19140) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.174) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168) Adobe Reader XI (11.0.02) - Deutsch (x32 Version: 11.0.02) Agatha Christie - Death on the Nile (x32 Version: 2.2.0.82) Age of Empires III (x32 Version: 1.00.0000) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Ask Toolbar (x32 Version: 1.15.15.0) Ask Toolbar Updater (HKCU Version: 1.2.4.36191) BatteryLifeExtender (x32 Version: 1.0.11) Bejeweled 2 Deluxe (x32 Version: 2.2.0.95) Bonjour (Version: 3.0.0.10) Broadcom 802.11 Network Adapter (Version: 5.60.48.55) Build-a-lot (x32 Version: 2.2.0.82) ChargeableUSB (x32 Version: 1.0.0.0) Chuzzle Deluxe (x32 Version: 2.2.0.82) CyberLink Media Suite (x32 Version: 8.0.2227) CyberLink Media+ Player10 (x32 Version: 10.0.1110.00) CyberLink MediaShow (x32 Version: 5.0.1130a) CyberLink Power2Go (x32 Version: 6.1.3802) CyberLink PowerDirector (x32 Version: 8.0.3306) CyberLink YouCam (x32 Version: 3.1.3509) D3DX10 (x32 Version: 15.4.2368.0902) Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.82) Download Navigator (x32 Version: 2.1.0) Druckerdeinstallation für EPSON SX440 Series Easy Content Share (x32 Version: 1.0) Easy Display Manager (x32 Version: 3.2) Easy Migration (x32 Version: 1.0) Easy Network Manager (x32 Version: 4.4.7) Easy SpeedUp Manager (x32 Version: 2.1.1.1) EasyBatteryManager (x32 Version: 4.0.0.4) EasyFileShare (x32 Version: 1.0.13) ElcomPDF Elektronischer Magnetplaner (x32) ElsterFormular (x32 Version: 14.0.0.10960) Empire Earth II (x32 Version: 1.02) Epson Connect Printer Setup (x32 Version: 1.1.1) Epson E-Web Print (x32 Version: 1.12.0000) EPSON Printer Finder (x32 Version: 1.0.0) EPSON Scan (x32) ETDWare PS/2-X64 8.0.7.2_WHQL (Version: 8.0.7.2) Farm Frenzy (x32 Version: 2.2.0.82) Fast Start (x32 Version: 2.2.0.0) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922) Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922) Galerie de photos Windows Live (x32 Version: 15.4.3502.0922) Galerie foto Windows Live (x32 Version: 15.4.3502.0922) GIMP 2.8.4 (Version: 2.8.4) Hager - Tehalit 5.0 (x32) Hager - Tehalit 5.1 (x32) iCloud (Version: 2.1.2.8) iLivid (x32 Version: 4.0.0.2208) Insaniquarium Deluxe (x32 Version: 2.2.0.82) Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Management Engine Components (x32 Version: 7.0.0.1118) Intel(R) Processor Graphics (x32 Version: 8.15.10.2253) Intel(R) Rapid Storage Technology (x32 Version: 10.1.5.1001) iTunes (Version: 11.0.4.4) Java 7 Update 40 (64-bit) (Version: 7.0.400) Java 7 Update 40 (x32 Version: 7.0.400) Java Auto Updater (x32 Version: 2.1.9.8) John Deere Drive Green (x32 Version: 2.2.0.82) Junk Mail filter update (x32 Version: 15.4.3502.0922) Kaspersky Security Scan (x32 Version: 12.0.1.340) Keil µVision4 (x32) KNX eteC Falcon Runtime v2.0 (x32 Version: 2.0.5184.4346) KNX ETS4 (x32 Version: 4.0.2504.18788) KNX ETS4 Additional Runtime (x32 Version: 4.0.0.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000) Microsoft Help Viewer 1.0 (Version: 1.0.30319) Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 9.0.21022) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft SQL Server 2008 (64-bit) Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22) Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0) Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0) Microsoft SQL Server 2008 R2 (64-bit) Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.50.1447.4) Microsoft SQL Server 2008 R2 Native Client (Version: 10.50.1600.1) Microsoft SQL Server 2008 R2 RsFx Driver (Version: 10.50.1600.1) Microsoft SQL Server 2008 R2 Setup (English) (Version: 10.50.1600.1) Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0) Microsoft SQL Server Browser (x32 Version: 10.50.1600.1) Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0) Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0) Microsoft SQL Server Native Client (Version: 9.00.2047.00) Microsoft SQL Server System CLR Types (x32 Version: 10.50.1447.4) Microsoft SQL Server VSS Writer (Version: 10.50.1600.1) Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319) Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.30319) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (x32 Version: 10.0.30319) Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.30319) Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0) Movie Color Enhancer (x32 Version: 1.0) Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0) Mozilla Maintenance Service (x32 Version: 24.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Multimedia POP (x32 Version: 1.1) Netzmanager (Version: 1.071) Netzmanager (x32 Version: 1.071) NVIDIA Grafiktreiber 306.97 (Version: 306.97) NVIDIA Install Application (Version: 2.1002.85.551) NVIDIA Optimus 1.10.8 (Version: 1.10.8) NVIDIA Systemsteuerung 306.97 (Version: 306.97) NVIDIA Update 1.10.8 (Version: 1.10.8) NVIDIA Update Components (Version: 1.10.8) Oracle VM VirtualBox 4.1.20 (Version: 4.1.20) Peggle (x32 Version: 2.2.0.82) Penguins! (x32 Version: 2.2.0.82) PhoneShare (x32 Version: 9.1.4) Plants vs. Zombies (x32 Version: 2.2.0.82) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922) Polar Golfer (x32 Version: 2.2.0.82) Pošta Windows Live (x32 Version: 15.4.3502.0922) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922) Realtek Ethernet Controller Driver (x32 Version: 7.45.516.2011) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6400) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0) Samsung AnyWeb Print (x32 Version: 2.0.67.1) Samsung Printer Live Update (x32) Samsung Recovery Solution 5 (x32 Version: 5.0.0.9) Samsung Support Center 1.0 (x32 Version: 1.1.38) Samsung Universal Print Driver (x32 Version: 2.02.05.00:27) Samsung Universal Scan Driver (x32 Version: 1.2.5.0) Samsung Update Plus (x32 Version: 3.0.0.17) ScicosLab 4.4.1 (x32 Version: 4.4.1) scilab-5.4.0 (64-bit) Security Task Manager 1.8g (x32 Version: 1.8g) Semiolog (x32) Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (Version: 10.1.2531.0) Skype™ 5.10 (x32 Version: 5.10.116) Softonic toolbar on IE and Chrome (x32 Version: 1.8.19.3) Spotify (HKCU Version: 0.8.8.295.g628348ad) SQL Server 2008 R2 Common Files (Version: 10.50.1600.1) SQL Server 2008 R2 Database Engine Services (Version: 10.50.1600.1) SQL Server 2008 R2 Database Engine Shared (Version: 10.50.1600.1) Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1) TDM-GCC (x32 Version: 1.1006.0) Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.0.82.0) Unterstützungsdateien für Microsoft SQL Server 2008-Setup (Version: 10.1.2731.0) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825641) 32-Bit Edition (x32) User Guide (x32 Version: 1.5) Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (x32 Version: 4.0.8080.0) VLC media player 2.0.5 (Version: 2.0.5) WIDCOMM Bluetooth Software (Version: 6.3.0.7000) WildTangent Games (x32 Version: 1.0.1.5) WildTangent ORB Game Console (x32) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live fotoattēlu galerija (x32 Version: 15.4.3502.0922) Windows Live Fotogaléria (x32 Version: 15.4.3502.0922) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live Foto-galerija (x32 Version: 15.4.3502.0922) Windows Live Fotogalleri (x32 Version: 15.4.3502.0922) Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922) Windows Live Fotótár (x32 Version: 15.4.3502.0922) Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922) Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Pošta (x32 Version: 15.4.3502.0922) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Live 메일 (x32 Version: 15.4.3502.0922) Windows Live 사진 갤러리 (x32 Version: 15.4.3502.0922) Windows Live 필수 패키지 (x32 Version: 15.4.3502.0922) Windows Live 影像中心 (x32 Version: 15.4.3502.0922) Windows Live 照片库 (x32 Version: 15.4.3502.0922) Windows Live 程式集 (x32 Version: 15.4.3502.0922) Windows Live 程式集 (x32 Version: 15.4.3508.1109) Windows Live 软件包 (x32 Version: 15.4.3502.0922) Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922) Windows Liven sähköposti (x32 Version: 15.4.3502.0922) Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922) Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8) WordCaptureX Pro (x32 Version: 4.0.0) wxDev-C++ (x32) ZoneAlarm Antivirus (x32 Version: 11.0.768.000) ZoneAlarm Firewall (x32 Version: 11.0.768.000) ZoneAlarm Free Antivirus + Firewall (x32 Version: 11.0.768.000) ZoneAlarm Security (x32 Version: 11.0.768.000) Zuma Deluxe (x32 Version: 2.2.0.95) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922) Основные компоненты Windows Live (x32 Version: 15.4.3502.0922) Почта Windows Live (x32 Version: 15.4.3502.0922) Фотоальбом Windows Live (x32 Version: 15.4.3502.0922) Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922) גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922) بريد Windows Live (x32 Version: 15.4.3502.0922) معرض صور Windows Live (x32 Version: 15.4.3502.0922) ==================== Restore Points ========================= 30-07-2013 07:21:35 Geplanter Prüfpunkt 23-08-2013 13:01:47 Windows Update 11-09-2013 08:32:35 Geplanter Prüfpunkt 14-09-2013 07:34:45 Windows Update 16-09-2013 19:10:51 Installed Java 7 Update 40 16-09-2013 19:19:08 Installed Java 7 Update 40 (64-bit) 18-09-2013 12:33:54 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {15126BBD-589B-4D7B-9F07-23FAB4F4DB32} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {1776ABEF-8236-492D-98A9-D38F0C5CD25F} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {1810FF88-FD80-4D40-8842-11E24A73BE7B} - System32\Tasks\SUPBackground => C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe [2011-01-12] (Samsung Electronics) Task: {1A4E1A5A-9817-49DE-AC70-7D150605D99E} - System32\Tasks\EasyPartitionManager => C:\Windows\MSetup\BA46-12225A02\EPM.exe Task: {1BB7C560-4C51-48B2-94E9-681844D41975} - System32\Tasks\WifiManager => C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe [2010-12-06] (Samsung Electronics Co., Ltd.) Task: {1E4815D1-08B3-4533-B0CC-DE8FA071E7C8} - System32\Tasks\MovieColorEnhancer => C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe [2010-11-29] (Samsung Electronics Co., Ltd.) Task: {2D3F575D-3DEB-4A52-97A8-22D7E8E9C4FD} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation) Task: {34944D0C-CC97-4CA8-BA76-72F7EDA0D3C2} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2774599765-3218687334-1828580283-1002 => C:\Windows\System32\portabledeviceapi.dll [2010-11-21] (Microsoft Corporation) Task: {4695C861-AB36-49A9-8A5B-B24750C54353} - System32\Tasks\EasyBatteryManager => C:\Program Files (x86)\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.) Task: {597B8727-BD15-4A03-9678-C1CC34A199B8} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe [2010-12-06] (Samsung Electronics Co., Ltd.) Task: {8C5A506B-AE43-496A-935F-3F56686A8593} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated) Task: {98F5B3FB-E7F1-44B8-AF63-C8F6EAB20412} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe [2010-08-05] (Samsung Electronics Co., Ltd.) Task: {AAC84AE5-FEFC-432D-A863-05686C2EF603} - System32\Tasks\advSRS5 => C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2010-11-17] (SEC) Task: {AD91E02E-9360-4F36-86A1-BD41CA0AFEE2} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation) Task: {B2D0FEF8-FB0E-4941-9518-E6D7DBB45068} - System32\Tasks\SamsungSupportCenter => C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe [2011-09-04] (SAMSUNG Electronics) Task: {BF631DAB-75DD-4476-A44F-F4C288218F74} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-02-08] () Task: {E4A0C0E8-65E2-481F-945F-298C5B0399CA} - System32\Tasks\BatteryLifeExtender => C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-12-18] (Samsung Electronics. Co. Ltd.) Task: {FB0F0801-420B-4834-9C71-CC7540244F75} - System32\Tasks\EasySpeedUpManager => C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2011-01-11] (Samsung Electronics Co., Ltd.) Task: {FDEF02A7-880E-46B2-A6D7-65241DE08424} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2010-11-10] (CyberLink) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2011-07-20 11:16 - 2012-10-08 11:42 - 00247144 _____ (NVIDIA Corporation) C:\windows\system32\nvinitx.dll 2011-07-20 11:17 - 2010-11-04 04:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCfg64.dll 2011-07-20 11:17 - 2011-06-24 00:37 - 03115112 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkAPO64.dll 2011-07-21 02:27 - 2010-11-29 06:46 - 00286720 _____ (Intel Corporation) C:\windows\system32\igfxrDEU.lrc 2011-07-21 02:27 - 2010-11-29 06:34 - 00094208 _____ () C:\windows\system32\IccLibDll_x64.dll 2011-07-20 12:32 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files (x86)\Samsung\Easy Display Manager\HookDllPS2.dll 2011-07-20 11:16 - 2012-10-08 11:42 - 00202600 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvinit.dll 2011-07-20 11:47 - 2010-05-07 16:22 - 01636864 _____ () C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Resdll.dll 2009-11-02 07:20 - 2009-11-02 07:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2009-11-02 07:23 - 2009-11-02 07:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2011-07-20 11:31 - 2010-07-05 12:42 - 00203776 _____ () C:\Program Files (x86)\Samsung\Movie Color Enhancer\WinCRT.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00102840 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\ushata.dll 2012-12-07 15:14 - 2012-12-07 15:14 - 00012728 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\avpinit.dll 2013-05-28 12:30 - 2013-05-28 12:30 - 00430520 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\avpmain.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00160184 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\prremote.dll 2012-12-07 15:14 - 2012-12-07 15:14 - 00123320 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\DumpWriter.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00262584 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\prloader.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00115128 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\nfio.ppl 2012-12-07 15:15 - 2012-12-07 15:15 - 00021432 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\fsdrvplg.ppl 2012-12-07 15:15 - 2012-12-07 15:15 - 00098744 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\fssync.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00038328 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\winreg.ppl 2012-12-07 15:15 - 2012-12-07 15:15 - 00377272 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\service.dll 2012-12-07 15:14 - 2012-12-07 15:14 - 01053112 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\eka_meta.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00324024 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\esmgr.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00046520 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\pxstub.ppl 2013-05-28 12:30 - 2013-05-28 12:30 - 01135032 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\params.ppl 2013-05-28 12:30 - 2013-05-28 12:30 - 02765240 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\avpgui.ppl 2012-12-07 15:15 - 2012-12-07 15:15 - 02126264 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtCore4.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 07422392 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtGui4.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 02453944 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtDeclarative4.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 01270200 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtScript4.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00192952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtSql4.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00795064 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtNetwork4.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00213432 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\metainfo.dll 2013-05-28 12:30 - 2013-05-28 12:30 - 02478520 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\basegui.ppl 2012-12-07 15:15 - 2012-12-07 15:15 - 00041912 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\thpimpl.ppl 2012-12-07 15:15 - 2012-12-07 15:15 - 00074168 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\memmon.dll 2012-12-07 15:15 - 2012-12-07 15:15 - 00594360 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\localization_manager.dll 2012-02-20 21:28 - 2012-02-20 21:28 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll 2012-02-20 21:29 - 2012-02-20 21:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-02-20 21:28 - 2012-02-20 21:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2011-08-30 23:05 - 2011-08-30 23:05 - 00085864 _____ (Apple Inc.) C:\windows\system32\dnssd.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 01239144 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zpeng25.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00300136 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\VSINIT.dll 2013-06-19 23:09 - 2013-06-19 23:09 - 00316008 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\lib\pyd\zpui.pyd 2010-12-30 09:38 - 2010-12-30 09:38 - 02035712 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zhtml.dll 2013-06-19 23:09 - 2013-06-19 23:09 - 00082024 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\lib\pyd\_ctypes.pyd 2013-06-19 23:09 - 2013-06-19 23:09 - 00037992 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\lib\pyd\zpdx.pyd 2013-06-19 23:08 - 2013-06-19 23:08 - 00135784 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\lib\pyd\pyexpat.pyd 2013-06-19 23:09 - 2013-06-19 23:09 - 00039528 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\lib\pyd\_socket.pyd 2013-06-19 23:09 - 2013-06-19 23:09 - 00317544 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\lib\pyd\zptv.pyd 2013-06-19 22:41 - 2013-06-19 22:41 - 00242792 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\VSPUBAPI.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00647784 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\VSUTIL.dll 2013-06-19 22:45 - 2013-06-19 22:45 - 00047208 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\VSUTIL_Loc0407.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00107112 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\fbl.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00129640 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsdata.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00110696 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsxml.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00122472 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZDx.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00120424 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmonapi.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00082024 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zlcomm.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00116328 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zlcommdb.dll 2013-06-19 22:41 - 2013-06-19 22:41 - 00435304 _____ (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\SSLeay32_cp.dll 2013-09-18 14:22 - 2013-09-18 14:22 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-09-11 13:52 - 2013-09-11 13:52 - 16177544 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= Name: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device Description: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Broadcom Service: BTHUSB Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: VirtualBox Host-Only Ethernet Adapter Description: VirtualBox Host-Only Ethernet Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Oracle Corporation Service: VBoxNetAdp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/18/2013 03:07:33 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 02:04:21 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 01:58:29 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 01:51:35 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 01:45:31 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 01:39:10 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 01:32:37 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 01:25:41 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 01:16:39 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2013 01:10:02 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (09/18/2013 03:08:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (09/18/2013 03:08:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (09/18/2013 02:05:36 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (09/18/2013 02:05:36 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (09/18/2013 02:00:08 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (09/18/2013 02:00:08 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (09/18/2013 01:53:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (09/18/2013 01:53:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (09/18/2013 01:47:15 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (09/18/2013 01:47:15 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 51% Total physical RAM: 4008.29 MB Available physical RAM: 1957.46 MB Total Pagefile: 8014.76 MB Available Pagefile: 5432.65 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:271 GB) (Free:150.32 GB) NTFS Drive d: () (Fixed) (Total:404.62 GB) (Free:404.51 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 699 GB) (Disk ID: CD54DF59) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=271 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=405 GB) - (Type=OF Extended) Partition 4: (Not Active) - (Size=23 GB) - (Type=27) ==================== End Of Log ============================ |
|
18.09.2013, 15:56
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAM hi,
__________________Funde von MBAM löschen lassen. Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
19.09.2013, 16:37
| #3 |
| | Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAM Adw Cleaner
__________________AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.004 - Bericht erstellt am 18/09/2013 um 17:16:23
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Mathieu - MATZE
# Gestartet von : C:\Users\Mathieu\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\Program Files (x86)\Ask.com
Ordner Gelöscht : C:\Program Files (x86)\Search Results Toolbar
Ordner Gelöscht : C:\Program Files (x86)\Softonic
Ordner Gelöscht : C:\Users\Mathieu\AppData\Local\apn
Ordner Gelöscht : C:\Users\Mathieu\AppData\Local\Ilivid
Ordner Gelöscht : C:\Users\Mathieu\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Mathieu\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Mathieu\AppData\LocalLow\ilividtoolbarguid
Ordner Gelöscht : C:\Users\Mathieu\AppData\LocalLow\Softonic
Ordner Gelöscht : C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\ilividtoolbarguid
Ordner Gelöscht : C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\Extensions\{F34C9277-6577-4DFF-B2D7-7D58092F272F}
Ordner Gelöscht : C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\Extensions\toolbar@ask.com
Ordner Gelöscht : C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf
Datei Gelöscht : C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
Datei Gelöscht : C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
Datei Gelöscht : C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\searchplugins\Askcom.xml
Datei Gelöscht : C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\searchplugins\Search_Results.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Search_Results.xml
Datei Gelöscht : C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\searchplugins\softonic.xml
Datei Gelöscht : C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\user.js
Datei Gelöscht : C:\windows\System32\Tasks\Scheduled Update for Ask Toolbar
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\elchiiiejkobdbblfejjkbphbddgmljf
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\S
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Softonic.dskBnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Softonic.dskBnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Softonic.SoftonicHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Softonic.SoftonicHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SoftonicApp.appCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SoftonicApp.appCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_visualboyadvance_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_visualboyadvance_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B15F118E-AF21-45E8-A809-29FDD7362565}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{44B50C01-4993-48E2-ADEE-D812BAE2E9A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A3E2F089-DDBB-4CBF-B06C-5D44DA316ED3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A5679AB0-C59E-49E7-83C4-5289F844A6E0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CA0167C2-6295-41B8-9BDA-704B2F5E4CD9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11D9E165-B8C1-4734-A56C-BC4FCACA966B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B15F118E-AF21-45E8-A809-29FDD7362565}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF034EA-7B46-48D3-8895-8A14B32AE445}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{5018CFD2-804D-4C99-9F81-25EAEA2769DE}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Wert Gelöscht : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Schlüssel Gelöscht : HKCU\Software\APN DTX
Schlüssel Gelöscht : HKCU\Software\APN
Schlüssel Gelöscht : HKCU\Software\Ask.com
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\ilividtoolbarguid
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gelöscht : HKLM\Software\APN
Schlüssel Gelöscht : HKLM\Software\AskToolbar
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\iLividSRTB
Schlüssel Gelöscht : HKLM\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Results Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16686
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
-\\ Mozilla Firefox v24.0 (de)
[ Datei : C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default\prefs.js ]
Zeile gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Zeile gelöscht : user_pref("browser.search.order.1", "Ask.com");
Zeile gelöscht : user_pref("extensions.Softonic.admin", false);
Zeile gelöscht : user_pref("extensions.Softonic.aflt", "SD");
Zeile gelöscht : user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");
Zeile gelöscht : user_pref("extensions.Softonic.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.Softonic.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.Softonic.dfltSrch", true);
Zeile gelöscht : user_pref("extensions.Softonic.dnsErr", true);
Zeile gelöscht : user_pref("extensions.Softonic.excTlbr", false);
Zeile gelöscht : user_pref("extensions.Softonic.ffxUnstlRst", false);
Zeile gelöscht : user_pref("extensions.Softonic.hmpg", true);
Zeile gelöscht : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00001/tb_v1?SearchSource=13&cc=&mi=382f92de000000000000e0ca94734ad6");
Zeile gelöscht : user_pref("extensions.Softonic.hpOld0", "hxxp://www.google.de");
Zeile gelöscht : user_pref("extensions.Softonic.id", "382f92de000000000000e0ca94734ad6");
Zeile gelöscht : user_pref("extensions.Softonic.instlDay", "15868");
Zeile gelöscht : user_pref("extensions.Softonic.instlRef", "MOY00001");
Zeile gelöscht : user_pref("extensions.Softonic.kw_url", "hxxp://search.softonic.com/MOY00001/tb_v1?SearchSource=2&cc=&mi=382f92de000000000000e0ca94734ad6&q=");
Zeile gelöscht : user_pref("extensions.Softonic.newTab", true);
Zeile gelöscht : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00001/tb_v1/?SearchSource=15&cc=&mi=382f92de000000000000e0ca94734ad6");
Zeile gelöscht : user_pref("extensions.Softonic.prdct", "Softonic");
Zeile gelöscht : user_pref("extensions.Softonic.prtnrId", "softonic");
Zeile gelöscht : user_pref("extensions.Softonic.rvrt", "false");
Zeile gelöscht : user_pref("extensions.Softonic.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
Zeile gelöscht : user_pref("extensions.Softonic.tlbrId", "BASEirobinhoodActive");
Zeile gelöscht : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00001/tb_v1?SearchSource=1&cc=&mi=382f92de000000000000e0ca94734ad6&q=");
Zeile gelöscht : user_pref("extensions.Softonic.vrsn", "1.8.19.3");
Zeile gelöscht : user_pref("extensions.Softonic.vrsnTs", "1.8.19.312:01:38");
Zeile gelöscht : user_pref("extensions.Softonic.vrsni", "1.8.19.3");
Zeile gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://dts.search-results.com/sr?src=ffb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&apn_uid=9242122531504507&o=APN10645&q=");
*************************
AdwCleaner[R0].txt - [15271 octets] - [18/09/2013 17:13:14]
AdwCleaner[S0].txt - [14600 octets] - [18/09/2013 17:16:23]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14661 octets] ##########
Das JRT Scan hat nicht funktioniert. Hab es über nacht laufen gelassen dabei hat sich aber nichts mehr getan und eben ist er dann bei einem erneuten Scanvorgang abgestürzt. Hier ein aktuelles FRST FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013
Ran by Mathieu (administrator) on MATZE on 19-09-2013 17:30:06
Running from C:\Users\Mathieu\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Aladdin Knowledge Systems Ltd.) C:\windows\system32\hasplms.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.KNXETS4\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Spotify Ltd) C:\Users\Mathieu\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Intel Corporation) C:\windows\system32\hkcmd.exe
(Intel Corporation) C:\windows\system32\igfxtray.exe
(Intel Corporation) C:\windows\system32\igfxpers.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\windows\SysWOW64\cmd.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11895400 2011-06-25] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Mathieu\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104424 2013-01-24] (Spotify Ltd)
HKCU\...\Run: [KSS] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [routcnf] - C:\Program Files (x86)\Telekom\Eumex 504PC USB\routcnf.exe [x]
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [ZoneAlarm] - C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73832 2013-06-19] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
AppInit_DLLs: C:\windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [mjdepfkicdcciagbigfcmdhknnoaaegf] - C:\Program Files (x86)\Deskperience\Word Capture\wcxChrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
R2 MSSQL$KNXETS4; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.KNXETS4\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()
S4 SQLAgent$KNXETS4; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.KNXETS4\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2445304 2013-06-19] (Check Point Software Technologies LTD)
S2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [54160 2013-06-18] (Check Point Software Technologies, Ltd.)
==================== Drivers (Whitelisted) ====================
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-11-15] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2013-02-21] (Kaspersky Lab)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-09-21] (Windows (R) 2003 DDK 3790 provider)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-09-21] (Windows (R) 2003 DDK 3790 provider)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [117080 2012-08-20] (Oracle Corporation)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [451096 2013-06-13] (Check Point Software Technologies LTD)
S2 DETEWECP; \SystemRoot\System32\drivers\detewecp.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-19 17:28 - 2013-09-19 17:28 - 01950594 _____ (Farbar) C:\Users\Mathieu\Downloads\FRST64.exe
2013-09-18 17:29 - 2013-09-18 17:29 - 00000000 ____D C:\windows\ERUNT
2013-09-18 17:25 - 2013-09-18 17:25 - 01029675 _____ (Thisisu) C:\Users\Mathieu\Downloads\JRT.exe
2013-09-18 17:22 - 2013-09-18 17:22 - 00014746 _____ C:\Users\Mathieu\Desktop\AdwCleaner[S0].txt
2013-09-18 17:12 - 2013-09-18 17:17 - 00000000 ____D C:\AdwCleaner
2013-09-18 17:12 - 2013-09-18 17:12 - 01039554 _____ C:\Users\Mathieu\Downloads\adwcleaner.exe
2013-09-18 16:22 - 2013-09-18 16:22 - 00000248 _____ C:\Users\Mathieu\Downloads\defogger_enable.log
2013-09-18 15:54 - 2013-09-18 15:54 - 00008622 _____ C:\Users\Mathieu\Desktop\gmer.txt
2013-09-18 15:41 - 2013-09-18 15:41 - 00377856 _____ C:\Users\Mathieu\Downloads\gmer_2.1.19163.exe
2013-09-18 15:40 - 2013-09-18 15:40 - 00045219 _____ C:\Users\Mathieu\Desktop\FRST.txt
2013-09-18 15:40 - 2013-09-18 15:40 - 00036156 _____ C:\Users\Mathieu\Desktop\Addition.txt
2013-09-18 15:37 - 2013-09-18 15:38 - 00036156 _____ C:\Users\Mathieu\Downloads\Addition.txt
2013-09-18 15:33 - 2013-09-18 15:33 - 00000000 ____D C:\FRST
2013-09-18 15:30 - 2013-09-18 15:30 - 00000476 _____ C:\Users\Mathieu\Downloads\defogger_disable.log
2013-09-18 15:29 - 2013-09-18 15:29 - 00050477 _____ C:\Users\Mathieu\Downloads\Defogger.exe
2013-09-18 14:26 - 2013-09-18 14:26 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-18 14:26 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-09-18 14:24 - 2013-09-18 14:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Mathieu\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 14:22 - 2013-09-18 14:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 12:26 - 2013-09-18 12:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2013-09-18 12:20 - 2013-09-18 12:24 - 261894976 _____ C:\Users\Mathieu\Downloads\kis14.0.0.4651aDE_4890.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 01095080 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll
2013-09-16 21:20 - 2013-09-16 21:19 - 00973736 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll
2013-09-16 21:20 - 2013-09-16 21:19 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2013-09-16 21:19 - 2013-09-16 21:19 - 00000000 ____D C:\Program Files\Java
2013-09-16 21:16 - 2013-09-16 21:17 - 30669224 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jre-7u40-windows-x64.exe
2013-09-16 21:15 - 2013-09-16 21:20 - 00000000 ____D C:\ProgramData\Oracle
2013-09-16 21:14 - 2013-09-16 21:13 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-16 21:14 - 2013-09-16 21:13 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-16 21:14 - 2013-09-16 21:13 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-16 21:14 - 2013-09-16 21:13 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-16 21:13 - 2013-09-16 21:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-16 21:07 - 2013-09-16 21:07 - 00913832 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jxpiinstall(1).exe
2013-09-16 18:05 - 2013-09-16 18:05 - 00052076 _____ C:\Users\Mathieu\Downloads\Geschwindigkeit.zip
2013-09-16 14:22 - 2013-09-16 17:00 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Temporary Projects
2013-09-14 09:49 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-14 09:49 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-14 09:49 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-14 09:49 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-14 09:49 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-14 09:49 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-14 09:49 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-14 09:49 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-14 09:49 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-14 09:49 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-14 09:49 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-14 09:49 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-13 17:53 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-09-13 17:53 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-09-13 17:53 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-09-13 17:53 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-13 17:53 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-09-13 17:53 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-09-13 17:53 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-09-13 17:53 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-13 17:52 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-13 17:52 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2013-09-13 17:52 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2013-09-13 17:52 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-13 17:52 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2013-09-13 17:52 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-13 17:52 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-13 17:52 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-13 17:52 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-09-13 17:52 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-09-13 17:52 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-09-13 17:52 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-09-13 17:52 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-13 17:52 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-13 17:52 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-13 17:52 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-13 17:52 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-13 17:37 - 2013-09-13 17:37 - 04751752 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-08 11:46 - 2013-09-08 11:50 - 00000000 ____D C:\Users\Mathieu\Desktop\100DICAM
2013-08-23 12:51 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-08-23 12:51 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-08-23 12:51 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-08-23 12:51 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-08-23 12:51 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-08-23 12:51 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-08-23 12:51 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-08-23 12:51 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-08-23 12:51 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-08-23 12:51 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-08-23 12:51 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-08-23 12:51 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-08-23 12:50 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-08-23 12:50 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-08-23 12:50 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-08-23 12:48 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
==================== One Month Modified Files and Folders =======
2013-09-19 17:28 - 2013-09-19 17:28 - 01950594 _____ (Farbar) C:\Users\Mathieu\Downloads\FRST64.exe
2013-09-19 17:24 - 2009-07-14 06:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-19 17:24 - 2009-07-14 06:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-19 17:15 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-19 17:15 - 2009-07-14 06:51 - 00094757 _____ C:\windows\setupact.log
2013-09-19 16:51 - 2012-11-21 21:54 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-19 16:48 - 2011-07-21 03:10 - 01625969 _____ C:\windows\WindowsUpdate.log
2013-09-18 17:29 - 2013-09-18 17:29 - 00000000 ____D C:\windows\ERUNT
2013-09-18 17:25 - 2013-09-18 17:25 - 01029675 _____ (Thisisu) C:\Users\Mathieu\Downloads\JRT.exe
2013-09-18 17:22 - 2013-09-18 17:22 - 00014746 _____ C:\Users\Mathieu\Desktop\AdwCleaner[S0].txt
2013-09-18 17:17 - 2013-09-18 17:12 - 00000000 ____D C:\AdwCleaner
2013-09-18 17:12 - 2013-09-18 17:12 - 01039554 _____ C:\Users\Mathieu\Downloads\adwcleaner.exe
2013-09-18 16:55 - 2012-05-09 22:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-18 16:22 - 2013-09-18 16:22 - 00000248 _____ C:\Users\Mathieu\Downloads\defogger_enable.log
2013-09-18 16:22 - 2012-05-09 20:49 - 00000000 ____D C:\Users\Mathieu
2013-09-18 15:54 - 2013-09-18 15:54 - 00008622 _____ C:\Users\Mathieu\Desktop\gmer.txt
2013-09-18 15:41 - 2013-09-18 15:41 - 00377856 _____ C:\Users\Mathieu\Downloads\gmer_2.1.19163.exe
2013-09-18 15:40 - 2013-09-18 15:40 - 00045219 _____ C:\Users\Mathieu\Desktop\FRST.txt
2013-09-18 15:40 - 2013-09-18 15:40 - 00036156 _____ C:\Users\Mathieu\Desktop\Addition.txt
2013-09-18 15:38 - 2013-09-18 15:37 - 00036156 _____ C:\Users\Mathieu\Downloads\Addition.txt
2013-09-18 15:33 - 2013-09-18 15:33 - 00000000 ____D C:\FRST
2013-09-18 15:30 - 2013-09-18 15:30 - 00000476 _____ C:\Users\Mathieu\Downloads\defogger_disable.log
2013-09-18 15:29 - 2013-09-18 15:29 - 00050477 _____ C:\Users\Mathieu\Downloads\Defogger.exe
2013-09-18 15:19 - 2012-05-09 22:24 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Mozilla
2013-09-18 15:05 - 2010-11-21 05:47 - 00584630 _____ C:\windows\PFRO.log
2013-09-18 14:26 - 2013-09-18 14:26 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-18 14:24 - 2013-09-18 14:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Mathieu\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 14:22 - 2013-09-18 14:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 12:33 - 2012-05-11 17:54 - 00000000 ____D C:\ProgramData\Avira
2013-09-18 12:26 - 2013-09-18 12:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2013-09-18 12:24 - 2013-09-18 12:20 - 261894976 _____ C:\Users\Mathieu\Downloads\kis14.0.0.4651aDE_4890.exe
2013-09-18 10:10 - 2011-07-21 02:47 - 00828566 _____ C:\windows\system32\perfh007.dat
2013-09-18 10:10 - 2011-07-21 02:47 - 00197770 _____ C:\windows\system32\perfc007.dat
2013-09-18 10:10 - 2009-07-14 07:13 - 01982844 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-17 22:19 - 2009-07-14 07:32 - 00000000 ____D C:\windows\system32\FxsTmp
2013-09-17 17:58 - 2012-06-28 18:49 - 00000000 ____D C:\Users\Mathieu\AppData\Local\CrashDumps
2013-09-16 21:20 - 2013-09-16 21:15 - 00000000 ____D C:\ProgramData\Oracle
2013-09-16 21:19 - 2013-09-16 21:20 - 01095080 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll
2013-09-16 21:19 - 2013-09-16 21:20 - 00973736 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll
2013-09-16 21:19 - 2013-09-16 21:20 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-09-16 21:19 - 2013-09-16 21:20 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-09-16 21:19 - 2013-09-16 21:20 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-09-16 21:19 - 2013-09-16 21:20 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2013-09-16 21:19 - 2013-09-16 21:19 - 00000000 ____D C:\Program Files\Java
2013-09-16 21:17 - 2013-09-16 21:16 - 30669224 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jre-7u40-windows-x64.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-16 21:13 - 2013-09-16 21:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-16 21:13 - 2012-10-18 12:44 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll
2013-09-16 21:13 - 2012-10-18 12:44 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-09-16 21:07 - 2013-09-16 21:07 - 00913832 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jxpiinstall(1).exe
2013-09-16 18:05 - 2013-09-16 18:05 - 00052076 _____ C:\Users\Mathieu\Downloads\Geschwindigkeit.zip
2013-09-16 17:24 - 2013-07-11 09:56 - 00000000 ____D C:\Users\Mathieu\Documents\Visual Studio 2010
2013-09-16 17:00 - 2013-09-16 14:22 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Temporary Projects
2013-09-15 18:19 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-09-14 10:14 - 2012-05-09 21:02 - 00000000 ___RD C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-14 10:14 - 2012-05-09 21:02 - 00000000 ___RD C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-14 10:09 - 2009-07-14 06:45 - 00423000 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-14 09:49 - 2013-07-21 21:34 - 00000000 ____D C:\windows\system32\MRT
2013-09-14 09:44 - 2012-10-25 13:34 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-14 09:44 - 2012-05-11 18:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-14 09:36 - 2013-07-16 18:51 - 00003929 ____H C:\windows\SysWOW64\BTImages.dat
2013-09-13 17:37 - 2013-09-13 17:37 - 04751752 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-13 17:37 - 2012-05-30 20:12 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-13 17:37 - 2012-05-30 20:12 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-11 13:52 - 2012-11-21 21:54 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-08 11:50 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Mathieu\Desktop\100DICAM
2013-08-26 22:00 - 2013-01-23 10:50 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\vlc
2013-08-26 21:02 - 2013-03-31 12:28 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\dvdcss
2013-08-23 12:28 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-08-23 11:50 - 2009-07-14 07:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT
Some content of TEMP:
====================
C:\Users\Mathieu\AppData\Local\Temp\APNStub.exe
C:\Users\Mathieu\AppData\Local\Temp\AskSLib.dll
C:\Users\Mathieu\AppData\Local\Temp\installhelper.dll
C:\Users\Mathieu\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Mathieu\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Mathieu\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Mathieu\AppData\Local\Temp\ose00000.exe
C:\Users\Mathieu\AppData\Local\Temp\Quarantine.exe
C:\Users\Mathieu\AppData\Local\Temp\SIntf16.dll
C:\Users\Mathieu\AppData\Local\Temp\SIntf32.dll
C:\Users\Mathieu\AppData\Local\Temp\SIntfNT.dll
C:\Users\Mathieu\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Mathieu\AppData\Local\Temp\Softonic_chr_1-8-19-3.exe
C:\Users\Mathieu\AppData\Local\Temp\SRAssetsHelper.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 10:24
==================== End Of Log ============================
|
|
19.09.2013, 17:59
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAMESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.09.2013, 09:19
| #5 |
| | Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAM Eset Code:
ATTFilter ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internet# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=fb101a802a86dd4381f8d30138f9af33
# engine=15204
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-20 09:12:56
# local_time=2013-09-20 11:12:56 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 21055 131341426 0 0
# compatibility_mode=9217 16776893 100 13 6151915 8037082 0 0
# scanned=317845
# found=0
# cleaned=0
# scan_time=9887
checkup Code:
ATTFilter Results of screen317's Security Check version 0.99.73 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` ZoneAlarm Antivirus Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 40 Java version out of Date! Adobe Flash Player 11.8.800.168 Adobe Reader XI Mozilla Firefox (24.0) ````````Process Check: objlist.exe by Laurent```````` Kaspersky Lab Kaspersky Security Scan 2.0 kss.exe CheckPoint ZoneAlarm ZAPrivacyService.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013
Ran by Mathieu (administrator) on MATZE on 21-09-2013 09:39:26
Running from C:\Users\Mathieu\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Aladdin Knowledge Systems Ltd.) C:\windows\system32\hasplms.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Spotify Ltd) C:\Users\Mathieu\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Intel Corporation) C:\windows\system32\hkcmd.exe
(Intel Corporation) C:\windows\system32\igfxtray.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Intel Corporation) C:\windows\system32\igfxpers.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunes.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
() C:\Program Files\WIDCOMM\Bluetooth Software\BtITunesPlugIn.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
() C:\Elcom\5.1\Apps\Elcom.exe
(iAnywhere Solutions, Inc.) C:\Elcom\5.1\Apps\rteng9.exe
(© Hager Vertriebsgesellschaft mbH & Co. KG, Deutschland 2010) c:\Elcom\5.1\Apps\Umw.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11895400 2011-06-25] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Mathieu\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104424 2013-01-24] (Spotify Ltd)
HKCU\...\Run: [KSS] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [routcnf] - C:\Program Files (x86)\Telekom\Eumex 504PC USB\routcnf.exe [x]
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [ZoneAlarm] - C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73832 2013-06-19] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
AppInit_DLLs: C:\windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\rhivi23f.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [mjdepfkicdcciagbigfcmdhknnoaaegf] - C:\Program Files (x86)\Deskperience\Word Capture\wcxChrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
S2 MSSQL$KNXETS4; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.KNXETS4\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()
S4 SQLAgent$KNXETS4; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.KNXETS4\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2445304 2013-06-19] (Check Point Software Technologies LTD)
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [54160 2013-06-18] (Check Point Software Technologies, Ltd.)
==================== Drivers (Whitelisted) ====================
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-11-15] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2013-02-21] (Kaspersky Lab)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-09-21] (Windows (R) 2003 DDK 3790 provider)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-09-21] (Windows (R) 2003 DDK 3790 provider)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [117080 2012-08-20] (Oracle Corporation)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [451096 2013-06-13] (Check Point Software Technologies LTD)
S2 DETEWECP; \SystemRoot\System32\drivers\detewecp.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-21 09:38 - 2013-09-21 09:38 - 00000915 _____ C:\Users\Mathieu\Desktop\checkup.txt
2013-09-21 09:31 - 2013-09-21 09:31 - 00891144 _____ C:\Users\Mathieu\Desktop\SecurityCheck.exe
2013-09-20 20:16 - 2013-09-20 20:16 - 00000000 ____D C:\Users\Mathieu\AppData\Local\E42630EC-9925-4D60-9E2B-244F691FEF46.aplzod
2013-09-20 19:58 - 2013-09-20 19:58 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-20 19:56 - 2013-09-20 19:57 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-20 19:56 - 2013-09-20 19:57 - 00000000 ____D C:\Program Files\iTunes
2013-09-20 19:56 - 2013-09-20 19:57 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-20 19:56 - 2013-09-20 19:56 - 00000000 ____D C:\Program Files\iPod
2013-09-20 19:46 - 2013-09-20 19:46 - 02347384 _____ (ESET) C:\Users\Mathieu\Downloads\esetsmartinstaller_enu.exe
2013-09-19 17:34 - 2013-09-19 17:34 - 00042540 _____ C:\Users\Mathieu\Desktop\FRST2.txt
2013-09-19 17:28 - 2013-09-19 17:28 - 01950594 _____ (Farbar) C:\Users\Mathieu\Downloads\FRST64.exe
2013-09-18 17:29 - 2013-09-18 17:29 - 00000000 ____D C:\windows\ERUNT
2013-09-18 17:25 - 2013-09-18 17:25 - 01029675 _____ (Thisisu) C:\Users\Mathieu\Downloads\JRT.exe
2013-09-18 17:22 - 2013-09-18 17:22 - 00014746 _____ C:\Users\Mathieu\Desktop\AdwCleaner[S0].txt
2013-09-18 17:12 - 2013-09-18 17:17 - 00000000 ____D C:\AdwCleaner
2013-09-18 17:12 - 2013-09-18 17:12 - 01039554 _____ C:\Users\Mathieu\Downloads\adwcleaner.exe
2013-09-18 16:22 - 2013-09-18 16:22 - 00000248 _____ C:\Users\Mathieu\Downloads\defogger_enable.log
2013-09-18 15:54 - 2013-09-18 15:54 - 00008622 _____ C:\Users\Mathieu\Desktop\gmer.txt
2013-09-18 15:41 - 2013-09-18 15:41 - 00377856 _____ C:\Users\Mathieu\Downloads\gmer_2.1.19163.exe
2013-09-18 15:40 - 2013-09-18 15:40 - 00045219 _____ C:\Users\Mathieu\Desktop\FRST.txt
2013-09-18 15:40 - 2013-09-18 15:40 - 00036156 _____ C:\Users\Mathieu\Desktop\Addition.txt
2013-09-18 15:37 - 2013-09-18 15:38 - 00036156 _____ C:\Users\Mathieu\Downloads\Addition.txt
2013-09-18 15:33 - 2013-09-18 15:33 - 00000000 ____D C:\FRST
2013-09-18 15:30 - 2013-09-18 15:30 - 00000476 _____ C:\Users\Mathieu\Downloads\defogger_disable.log
2013-09-18 15:29 - 2013-09-18 15:29 - 00050477 _____ C:\Users\Mathieu\Downloads\Defogger.exe
2013-09-18 14:26 - 2013-09-18 14:26 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-18 14:26 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-09-18 14:24 - 2013-09-18 14:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Mathieu\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 14:22 - 2013-09-18 14:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 12:26 - 2013-09-18 12:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2013-09-18 12:20 - 2013-09-18 12:24 - 261894976 _____ C:\Users\Mathieu\Downloads\kis14.0.0.4651aDE_4890.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 01095080 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll
2013-09-16 21:20 - 2013-09-16 21:19 - 00973736 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll
2013-09-16 21:20 - 2013-09-16 21:19 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-09-16 21:20 - 2013-09-16 21:19 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2013-09-16 21:19 - 2013-09-16 21:19 - 00000000 ____D C:\Program Files\Java
2013-09-16 21:16 - 2013-09-16 21:17 - 30669224 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jre-7u40-windows-x64.exe
2013-09-16 21:15 - 2013-09-16 21:20 - 00000000 ____D C:\ProgramData\Oracle
2013-09-16 21:14 - 2013-09-16 21:13 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-16 21:14 - 2013-09-16 21:13 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-16 21:14 - 2013-09-16 21:13 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-16 21:14 - 2013-09-16 21:13 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-16 21:13 - 2013-09-16 21:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-16 21:07 - 2013-09-16 21:07 - 00913832 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jxpiinstall(1).exe
2013-09-16 18:05 - 2013-09-16 18:05 - 00052076 _____ C:\Users\Mathieu\Downloads\Geschwindigkeit.zip
2013-09-16 14:22 - 2013-09-16 17:00 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Temporary Projects
2013-09-14 09:49 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-14 09:49 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-14 09:49 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-14 09:49 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-14 09:49 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-14 09:49 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-14 09:49 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-14 09:49 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-14 09:49 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-14 09:49 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-14 09:49 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-14 09:49 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-14 09:49 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-14 09:49 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-13 17:53 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-09-13 17:53 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-09-13 17:53 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-09-13 17:53 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-13 17:53 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-09-13 17:53 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-09-13 17:53 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-09-13 17:53 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-13 17:52 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-13 17:52 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2013-09-13 17:52 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2013-09-13 17:52 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-13 17:52 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2013-09-13 17:52 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-13 17:52 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-13 17:52 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-13 17:52 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-09-13 17:52 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-09-13 17:52 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-09-13 17:52 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-09-13 17:52 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-13 17:52 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-13 17:52 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-13 17:52 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-13 17:52 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-13 17:52 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-08 11:46 - 2013-09-08 11:50 - 00000000 ____D C:\Users\Mathieu\Desktop\100DICAM
2013-08-23 12:51 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-08-23 12:51 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-08-23 12:51 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-08-23 12:51 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-08-23 12:51 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-08-23 12:51 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-08-23 12:51 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-08-23 12:51 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-08-23 12:51 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-08-23 12:51 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-08-23 12:51 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-08-23 12:51 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-08-23 12:50 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-08-23 12:50 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-08-23 12:50 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-08-23 12:48 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
==================== One Month Modified Files and Folders =======
2013-09-21 09:38 - 2013-09-21 09:38 - 00000915 _____ C:\Users\Mathieu\Desktop\checkup.txt
2013-09-21 09:31 - 2013-09-21 09:31 - 00891144 _____ C:\Users\Mathieu\Desktop\SecurityCheck.exe
2013-09-21 09:24 - 2011-07-21 03:10 - 01939983 _____ C:\windows\WindowsUpdate.log
2013-09-21 08:54 - 2012-11-21 21:54 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 20:16 - 2013-09-20 20:16 - 00000000 ____D C:\Users\Mathieu\AppData\Local\E42630EC-9925-4D60-9E2B-244F691FEF46.aplzod
2013-09-20 20:13 - 2012-05-11 19:53 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\Apple Computer
2013-09-20 20:13 - 2009-07-14 06:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-20 20:13 - 2009-07-14 06:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-20 20:12 - 2011-07-21 02:47 - 00828566 _____ C:\windows\system32\perfh007.dat
2013-09-20 20:12 - 2011-07-21 02:47 - 00197770 _____ C:\windows\system32\perfc007.dat
2013-09-20 20:12 - 2009-07-14 07:13 - 01982844 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-20 20:06 - 2012-05-11 19:53 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Apple Computer
2013-09-20 20:04 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-20 20:04 - 2009-07-14 06:51 - 00094925 _____ C:\windows\setupact.log
2013-09-20 19:58 - 2013-09-20 19:58 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-20 19:57 - 2013-09-20 19:56 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-20 19:57 - 2013-09-20 19:56 - 00000000 ____D C:\Program Files\iTunes
2013-09-20 19:57 - 2013-09-20 19:56 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-20 19:56 - 2013-09-20 19:56 - 00000000 ____D C:\Program Files\iPod
2013-09-20 19:46 - 2013-09-20 19:46 - 02347384 _____ (ESET) C:\Users\Mathieu\Downloads\esetsmartinstaller_enu.exe
2013-09-20 19:40 - 2012-05-11 19:59 - 00000000 ____D C:\Users\Mathieu\Desktop\Matze
2013-09-20 17:52 - 2012-11-21 21:54 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 17:51 - 2012-05-30 20:12 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 17:51 - 2012-05-30 20:12 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-19 17:34 - 2013-09-19 17:34 - 00042540 _____ C:\Users\Mathieu\Desktop\FRST2.txt
2013-09-19 17:28 - 2013-09-19 17:28 - 01950594 _____ (Farbar) C:\Users\Mathieu\Downloads\FRST64.exe
2013-09-18 17:29 - 2013-09-18 17:29 - 00000000 ____D C:\windows\ERUNT
2013-09-18 17:25 - 2013-09-18 17:25 - 01029675 _____ (Thisisu) C:\Users\Mathieu\Downloads\JRT.exe
2013-09-18 17:22 - 2013-09-18 17:22 - 00014746 _____ C:\Users\Mathieu\Desktop\AdwCleaner[S0].txt
2013-09-18 17:17 - 2013-09-18 17:12 - 00000000 ____D C:\AdwCleaner
2013-09-18 17:12 - 2013-09-18 17:12 - 01039554 _____ C:\Users\Mathieu\Downloads\adwcleaner.exe
2013-09-18 16:55 - 2012-05-09 22:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-18 16:22 - 2013-09-18 16:22 - 00000248 _____ C:\Users\Mathieu\Downloads\defogger_enable.log
2013-09-18 16:22 - 2012-05-09 20:49 - 00000000 ____D C:\Users\Mathieu
2013-09-18 15:54 - 2013-09-18 15:54 - 00008622 _____ C:\Users\Mathieu\Desktop\gmer.txt
2013-09-18 15:41 - 2013-09-18 15:41 - 00377856 _____ C:\Users\Mathieu\Downloads\gmer_2.1.19163.exe
2013-09-18 15:40 - 2013-09-18 15:40 - 00045219 _____ C:\Users\Mathieu\Desktop\FRST.txt
2013-09-18 15:40 - 2013-09-18 15:40 - 00036156 _____ C:\Users\Mathieu\Desktop\Addition.txt
2013-09-18 15:38 - 2013-09-18 15:37 - 00036156 _____ C:\Users\Mathieu\Downloads\Addition.txt
2013-09-18 15:33 - 2013-09-18 15:33 - 00000000 ____D C:\FRST
2013-09-18 15:30 - 2013-09-18 15:30 - 00000476 _____ C:\Users\Mathieu\Downloads\defogger_disable.log
2013-09-18 15:29 - 2013-09-18 15:29 - 00050477 _____ C:\Users\Mathieu\Downloads\Defogger.exe
2013-09-18 15:19 - 2012-05-09 22:24 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Mozilla
2013-09-18 15:05 - 2010-11-21 05:47 - 00584630 _____ C:\windows\PFRO.log
2013-09-18 14:26 - 2013-09-18 14:26 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-18 14:26 - 2013-09-18 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-18 14:24 - 2013-09-18 14:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Mathieu\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 14:22 - 2013-09-18 14:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 12:33 - 2012-05-11 17:54 - 00000000 ____D C:\ProgramData\Avira
2013-09-18 12:26 - 2013-09-18 12:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2013-09-18 12:24 - 2013-09-18 12:20 - 261894976 _____ C:\Users\Mathieu\Downloads\kis14.0.0.4651aDE_4890.exe
2013-09-17 22:19 - 2009-07-14 07:32 - 00000000 ____D C:\windows\system32\FxsTmp
2013-09-17 17:58 - 2012-06-28 18:49 - 00000000 ____D C:\Users\Mathieu\AppData\Local\CrashDumps
2013-09-16 21:20 - 2013-09-16 21:15 - 00000000 ____D C:\ProgramData\Oracle
2013-09-16 21:19 - 2013-09-16 21:20 - 01095080 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll
2013-09-16 21:19 - 2013-09-16 21:20 - 00973736 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll
2013-09-16 21:19 - 2013-09-16 21:20 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-09-16 21:19 - 2013-09-16 21:20 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-09-16 21:19 - 2013-09-16 21:20 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-09-16 21:19 - 2013-09-16 21:20 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2013-09-16 21:19 - 2013-09-16 21:19 - 00000000 ____D C:\Program Files\Java
2013-09-16 21:17 - 2013-09-16 21:16 - 30669224 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jre-7u40-windows-x64.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-16 21:13 - 2013-09-16 21:14 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-16 21:13 - 2013-09-16 21:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-16 21:13 - 2012-10-18 12:44 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll
2013-09-16 21:13 - 2012-10-18 12:44 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-09-16 21:07 - 2013-09-16 21:07 - 00913832 _____ (Oracle Corporation) C:\Users\Mathieu\Downloads\jxpiinstall(1).exe
2013-09-16 18:05 - 2013-09-16 18:05 - 00052076 _____ C:\Users\Mathieu\Downloads\Geschwindigkeit.zip
2013-09-16 17:24 - 2013-07-11 09:56 - 00000000 ____D C:\Users\Mathieu\Documents\Visual Studio 2010
2013-09-16 17:00 - 2013-09-16 14:22 - 00000000 ____D C:\Users\Mathieu\AppData\Local\Temporary Projects
2013-09-15 18:19 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-09-14 10:14 - 2012-05-09 21:02 - 00000000 ___RD C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-14 10:14 - 2012-05-09 21:02 - 00000000 ___RD C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-14 10:09 - 2009-07-14 06:45 - 00423000 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-14 09:49 - 2013-07-21 21:34 - 00000000 ____D C:\windows\system32\MRT
2013-09-14 09:44 - 2012-10-25 13:34 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-14 09:44 - 2012-05-11 18:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-14 09:36 - 2013-07-16 18:51 - 00003929 ____H C:\windows\SysWOW64\BTImages.dat
2013-09-08 11:50 - 2013-09-08 11:46 - 00000000 ____D C:\Users\Mathieu\Desktop\100DICAM
2013-08-26 22:00 - 2013-01-23 10:50 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\vlc
2013-08-26 21:02 - 2013-03-31 12:28 - 00000000 ____D C:\Users\Mathieu\AppData\Roaming\dvdcss
2013-08-23 12:28 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-08-23 11:50 - 2009-07-14 07:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT
Some content of TEMP:
====================
C:\Users\Mathieu\AppData\Local\Temp\APNStub.exe
C:\Users\Mathieu\AppData\Local\Temp\AskSLib.dll
C:\Users\Mathieu\AppData\Local\Temp\installhelper.dll
C:\Users\Mathieu\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Mathieu\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Mathieu\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Mathieu\AppData\Local\Temp\ose00000.exe
C:\Users\Mathieu\AppData\Local\Temp\Quarantine.exe
C:\Users\Mathieu\AppData\Local\Temp\SIntf16.dll
C:\Users\Mathieu\AppData\Local\Temp\SIntf32.dll
C:\Users\Mathieu\AppData\Local\Temp\SIntfNT.dll
C:\Users\Mathieu\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Mathieu\AppData\Local\Temp\Softonic_chr_1-8-19-3.exe
C:\Users\Mathieu\AppData\Local\Temp\SRAssetsHelper.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-21 00:10
==================== End Of Log ============================
--- --- --- Welches Antivirenprogramm ist denn wohl am empfehlenswertesten? |
|
21.09.2013, 16:21
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAM Emsisoft Java bitte updaten. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAM |
|
23.09.2013, 14:17
| #7 |
| | Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAM Es scheint als wären alle Probleme behoben Der Laptop läuft wieder viel schneller. Vielen Dank auch für die Tipps. Die entsprechenden Add Ons wurden installiert. Super Hilfestellungen hier! DANKE |
|
23.09.2013, 18:00
| #8 |
| /// the machine /// TB-Ausbilder | Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAM Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7 64 Bit: Neustartschleife bei Kaspersky-Installation,442 infizierte Dateien laut MBAM |
| 4d36e972-e325-11ce-bfc1-08002be10318, antivirus, bonjour, browser, continue, desktop, email, excel, farbar, farbar recovery scan tool, firefox, flash player, home, homepage, installation, installation normal, internet, kaspersky, kis, mozilla, object, plug-in, realtek, registry, security, server, software, spotify web helper, svchost.exe, system, usb, virtualbox, windows |
Hybrid-Darstellung
