| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Wirklich alle Trojaner vom PC entfernt?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
20.09.2013, 09:12
| #1 |
 |  Wirklich alle Trojaner vom PC entfernt? Hallo Trojaner-Board, Ich habe McAfee Sicherheitssoftware auf meinem PC welcher immer selbstständig jede Woche einmal eine Virussuche macht. Da nie eine Meldung kam, dass irgendwas gefährliches sprich Trojaner auf dem System gefunden wurde, glaubte ich dass alles in Ordnung sei. Alle Funde wurden immer selbstständig in die Quarantäne verschoben. Als ich nun aber mal in die Quarantäne sah, waren einige Trojaner darin. RDN/Generic Exploit!1n3 Ransom-FAC!bat JS/Exploit-Blacole.lz JS/Exploit-Blacole.eu JS/Exploit-Blacole.lv JS/Exploit-Stykit.l JS/Exploit!JNLP JS/Blacole-Redirect.ae Exploit-FIO!CVE2013-2423 JS/Ransom-ABJ Exploit-FDI!CVE2012-1723 JS/Ransom-ABJ Ich habe alle gelöscht. Daraufhin habe ich mit McAfee, Malwarebytes Anti-Malware und mit ESET Online Scanner alles durchsuchen lassen. Malwarebytes fand noch 1 Eintrag, welchen ich gelöscht habe. Da viele mit Java zu tun hatten, habe ich Java komplett gelöscht und neu im Offlinemodus installiert. Daraufhin habe ich mit dem PC wider normal gearbeitet seit 2 Wochen. Aber jetzt sind mir doch Zweifel gekommen ob der PC wirklich frei von Viren und Trojanern ist. Gestern habe ich McAfee, Malwarebytes Anti-Malware und mit ESET Online Scanner alles durchsuchen lassen welche nichts mehr fanden. Aber die Zweifel sind immer noch da. Ich wäre froh, wenn sich jemand ein Logfile anschauen könnte. Bitte um genaue Anweisungen, da ich nicht so ein PC-Profi bin. Besten Dank PS: Als ich gestern Divx aktualisiert habe, wurde eine DivX Browser Bar von Conduit angeboten, welche ich aber nicht installiert habe. Daraufhin habe ich mit Malwarebytes einen Suchlauf gemacht, welche mir den Fund von PUP.Optional.Conduit.A gemeldet hat. Den Fund habe ich gelöscht und er kam nicht wider. Geändert von Hitman 21 (20.09.2013 um 09:46 Uhr) |
|
20.09.2013, 09:35
| #2 |
| /// the machine /// TB-Ausbilder    |  Wirklich alle Trojaner vom PC entfernt? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
20.09.2013, 10:20
| #3 |
| | Wirklich alle Trojaner vom PC entfernt? Hallo schrauber,
__________________Besten Dank für deine Hilfe Unten die 2 txt-Dateien FRST.txt FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01
Ran by *** (administrator) on ***-PC on 20-09-2013 10:52:00
Running from C:\Users\***\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
( ) C:\Windows\system32\dleccoms.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe
() C:\Program Files (x86)\Dell P713w\dlecmon.exe
() C:\Program Files (x86)\Dell P713w\ezprint.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
() C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
(CyberLink Corp.) C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
() C:\Program Files (x86)\ZyXEL\NetUSB Share Center\Share Center.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackup.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Nero AG) C:\Program Files (x86)\Nero\SyncUP\SyncUP.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nero.AndroidServer.exe
(McAfee, Inc.) C:\Program Files\mcafee.com\agent\mcagent.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Core\mchost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingApp.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingBar.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingSurrogate.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingSurrogate.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingSurrogate.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingSurrogate.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe
(McAfee, Inc.) c:\PROGRA~2\mcafee\SITEAD~1\saui.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RunDLLEntry_THXCfg] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [RunDLLEntry_EptMon] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\EptMon64.dll,RunDLLEntry EptMon64
HKLM\...\Run: [Stage Remote] - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-27] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [DellStage] - C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj [207845 2011-04-29] ()
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Bluetooth Connection Assistant] - LBTWIZ.EXE -silent
HKLM\...\Run: [dlecmon.exe] - C:\Program Files (x86)\Dell P713w\dlecmon.exe [770728 2011-01-24] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Dell P713w\ezprint.exe [139944 2011-01-24] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKCU\...\Run: [OM_Monitor] - C:\Program Files (x86)\OLYMPUS\OLYMPUS Master\Monitor.exe [57344 2006-05-16] (OLYMPUS IMAGING CORP.)
HKCU\...\Run: [Google Update] - C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-04-07] (Google Inc.)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [237693 2009-02-03] (Creative Technology Ltd)
HKLM-x32\...\Run: [SPIRunE] - C:\Windows\\SysWOW64\SPIRunE.dll [18432 2009-07-27] (Creative Technology Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [ShwiconXP9106] - C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] - C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [75048 2011-08-12] (cyberlink)
HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-25] (Dell, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [RoxWatchTray] - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [NeroLauncher] - C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [67496 2012-08-21] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj [2825741 2011-04-29] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [ZyXEL USB Share Center] - C:\Program Files (x86)\ZyXEL\NetUSB Share Center\Share Center.exe [5623808 2010-07-22] ()
HKLM-x32\...\Run: [Memeo Backup] - C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2010-07-28] (Memeo Inc.)
HKLM-x32\...\Run: [QuickTime Task] - D:\Programme\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\Programme\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [DivXMediaServer] - D:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-18] (RealNetworks, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.sunrise.ch/
URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
SearchScopes: HKLM - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
SearchScopes: HKCU - {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120627195329.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Dell Symbolleiste - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120627195329.dll (McAfee, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Dell Symbolleiste - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 212.98.37.128 194.230.55.99
FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1%20%26%26%20url.indexOf('.png')%20%3D%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*'))%20%7B%20return%20'PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - D:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - D:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Просмотр HTTP заголовков - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{BAEBEF65-9289-47c5-8524-C345CC5D860D}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK
FF StartMenuInternet: FIREFOX.EXE - D:\Programme\Mozilla Firefox\firefox.exe
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\***\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\***\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\***\AppData\Local\Google\Chrome\Application\29.0.1547.66\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll ()
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (YouTube) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (SiteAdvisor) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_1
CHR Extension: (RealDownloader) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0
CHR Extension: (ProxTube) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkdbaehcjcomcnnjhlmnfddpgoafpcko\1.0.5_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\HANSUL~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
==================== Services (Whitelisted) =================
S2 0251491379611881mcinstcleanup; C:\Windows\TEMP\025149~1.EXE [834664 2013-07-30] (McAfee, Inc.)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [248304 2011-08-11] (CyberLink)
S2 dlecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dlecserv.exe [45224 2010-05-21] ()
R2 dlec_device; C:\Windows\system32\dleccoms.exe [1052328 2010-05-21] ( )
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [224704 2011-03-08] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [383608 2012-11-16] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
==================== Drivers (Whitelisted) ====================
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 ZyxelUDSMBus; C:\Windows\SysWow64\Drivers\ZyxelUDSMBus.sys [67168 2010-07-22] (Windows (R) Codename Longhorn DDK provider)
R3 ZyxelUDSTcpBus; C:\Windows\SysWow64\Drivers\ZyxelUDSTcpBus.sys [98912 2010-07-22] (Windows (R) Codename Longhorn DDK provider)
S3 catchme; \??\C:\cf\catchme.sys [x]
S1 cdrbsdrv; No ImagePath
U3 mfeavfk01; No ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-20 10:51 - 2013-09-20 10:51 - 00000000 ____D C:\FRST
2013-09-20 10:50 - 2013-09-20 10:50 - 01950622 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-18 21:04 - 2013-09-19 19:28 - 00000392 _____ C:\Windows\setupact.log
2013-09-18 21:04 - 2013-09-18 21:04 - 00000802 _____ C:\Windows\PFRO.log
2013-09-18 21:04 - 2013-09-18 21:04 - 00000000 _____ C:\Windows\setuperr.log
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Users\***\AppData\Roaming\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\ProgramData\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-09-18 14:19 - 2013-09-18 14:19 - 00000494 _____ C:\Users\***\Desktop\Curling Club Langenthal - clubmeisterschaft - Gruppe B.website
2013-09-18 14:05 - 2013-09-18 14:05 - 00000000 _____ C:\END
2013-09-12 11:48 - 2013-09-12 11:48 - 00186940 _____ C:\ProgramData\SPL764.tmp
2013-09-11 20:50 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 20:50 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 20:50 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 20:50 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 20:50 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 20:50 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 20:50 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 20:50 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 20:50 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 20:50 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 11:33 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 11:33 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 11:33 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 11:33 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 11:33 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 11:33 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 11:33 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 11:33 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 11:33 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 11:33 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 11:33 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 11:33 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 11:33 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:33 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 11:33 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 12:07 - 2013-09-10 12:07 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-10 11:49 - 2013-09-10 11:48 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-07 10:38 - 2013-09-07 10:38 - 00643504 _____ C:\ProgramData\SPLF680.tmp
2013-09-05 13:41 - 2013-09-05 13:41 - 00248650 _____ C:\ProgramData\SPL2A52.tmp
2013-08-26 15:56 - 2013-08-26 15:56 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-26 09:10 - 2013-04-30 17:24 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts.20130826-091004.backup
2013-08-26 08:28 - 2013-08-26 08:28 - 00000000 ____D C:\Users\***\AppData\Roaming\NVIDIA
2013-08-26 08:24 - 2013-08-26 08:24 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-26 08:20 - 2013-08-26 09:35 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-26 08:20 - 2013-08-26 08:31 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-26 08:20 - 2013-08-26 08:20 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-26 08:20 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-08-26 08:11 - 2013-08-26 08:11 - 00000000 ____D C:\Users\Hansulrich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Browser
2013-08-26 07:48 - 2013-08-26 07:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 06:46 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\SoftThinks
2013-08-26 07:48 - 2012-02-11 11:22 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-08-26 07:48 - 2012-01-17 13:03 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2013-08-26 07:48 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-08-26 07:48 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-08-26 07:47 - 2013-08-09 03:05 - 03310693 _____ C:\Windows\system32\nvcoproc.bin
2013-08-26 07:46 - 2013-08-26 07:48 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-08-24 21:53 - 2013-09-19 19:28 - 00003258 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-08-24 15:31 - 2013-08-24 15:31 - 01178921 _____ C:\ProgramData\SPLC200.tmp
==================== One Month Modified Files and Folders =======
2013-09-20 10:51 - 2013-09-20 10:51 - 00000000 ____D C:\FRST
2013-09-20 10:50 - 2013-09-20 10:50 - 01950622 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-20 10:18 - 2013-05-22 15:45 - 00003440 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2013-09-20 10:18 - 2012-05-09 13:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 09:53 - 2013-04-07 18:36 - 00001140 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA.job
2013-09-20 08:56 - 2012-02-14 22:14 - 00000000 ____D C:\Users\***\Documents\Outlook-Dateien
2013-09-20 08:54 - 2012-01-17 12:21 - 01364176 _____ C:\Windows\WindowsUpdate.log
2013-09-20 08:26 - 2012-02-09 14:29 - 00000000 ____D C:\Users\Hansulrich\AppData\Local\Nero
2013-09-19 19:35 - 2009-07-14 06:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-19 19:35 - 2009-07-14 06:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-19 19:33 - 2012-02-10 19:31 - 00000000 ____D C:\Program Files\Recuva
2013-09-19 19:31 - 2012-01-17 13:00 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-09-19 19:29 - 2012-02-16 18:08 - 00139426 _____ C:\ProgramData\dlecscan.log
2013-09-19 19:28 - 2013-09-18 21:04 - 00000392 _____ C:\Windows\setupact.log
2013-09-19 19:28 - 2013-08-24 21:53 - 00003258 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-19 19:28 - 2012-01-17 13:07 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2013-09-19 19:28 - 2012-01-17 13:07 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2013-09-19 19:28 - 2012-01-17 12:42 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-09-19 19:28 - 2012-01-17 11:17 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-19 19:28 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-19 19:27 - 2012-02-10 09:59 - 00000000 ____D C:\Users\***\Geschäft
2013-09-19 18:55 - 2013-05-16 17:37 - 00003970 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C2FB5E82-8A0D-4224-BEE1-D9B54F21E70E}
2013-09-19 18:52 - 2012-01-17 12:59 - 00000000 ____D C:\ProgramData\Sonic
2013-09-19 18:47 - 2012-05-31 20:21 - 00000000 ____D C:\Users\***\AppData\Roaming\DVDVideoSoft
2013-09-19 16:54 - 2013-04-07 18:36 - 00001088 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core.job
2013-09-19 09:51 - 2012-02-16 18:26 - 01709990 _____ C:\ProgramData\dlecJSW.log
2013-09-19 09:51 - 2012-02-16 18:25 - 00000000 ____D C:\ProgramData\Dl_cats
2013-09-19 08:06 - 2012-03-07 10:41 - 00000656 _____ C:\Users\***\Desktop\meteo.ch – Swiss Weather Portal.website
2013-09-18 21:04 - 2013-09-18 21:04 - 00000802 _____ C:\Windows\PFRO.log
2013-09-18 21:04 - 2013-09-18 21:04 - 00000000 _____ C:\Windows\setuperr.log
2013-09-18 21:04 - 2009-07-14 06:45 - 00480048 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-18 19:09 - 2012-07-31 21:48 - 00000000 ____D C:\Users\***\AppData\Roaming\FileZilla
2013-09-18 17:53 - 2012-03-07 10:45 - 00000987 _____ C:\Users\***\Desktop\***********************.website
2013-09-18 15:28 - 2012-02-13 14:08 - 00000000 ___RD C:\Users\***\Desktop\Homepage
2013-09-18 14:37 - 2013-04-30 20:33 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Multimedia
2013-09-18 14:34 - 2012-02-10 19:53 - 00017408 _____ C:\Users\***\AppData\Local\WebpageIcons.db
2013-09-18 14:33 - 2013-06-13 21:00 - 00003360 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-18 14:33 - 2013-06-13 21:00 - 00003236 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Users\***\AppData\Roaming\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\ProgramData\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-09-18 14:32 - 2013-06-13 21:00 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-09-18 14:32 - 2012-02-10 21:42 - 00000000 ____D C:\ProgramData\Real
2013-09-18 14:32 - 2012-02-10 21:42 - 00000000 ____D C:\Program Files (x86)\Real
2013-09-18 14:31 - 2013-06-13 20:59 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-09-18 14:19 - 2013-09-18 14:19 - 00000494 _____ C:\Users\***\Desktop\Curling Club Langenthal - clubmeisterschaft - Gruppe B.website
2013-09-18 14:15 - 2012-02-10 21:21 - 00000000 ____D C:\Users\***\AppData\Local\Mozilla
2013-09-18 14:14 - 2012-02-10 21:21 - 00000864 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-09-18 14:11 - 2012-02-09 14:18 - 00127384 _____ C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-18 14:09 - 2012-02-10 22:29 - 00000000 ____D C:\Program Files (x86)\DivX
2013-09-18 14:09 - 2012-02-10 22:25 - 00000000 ____D C:\ProgramData\DivX
2013-09-18 14:08 - 2012-02-10 22:29 - 00000000 ____D C:\Program Files\DivX
2013-09-18 14:05 - 2013-09-18 14:05 - 00000000 _____ C:\END
2013-09-18 14:01 - 2012-02-10 19:36 - 00000000 ____D C:\Users\***\Desktop\Sicherheitsprogramme
2013-09-18 14:00 - 2012-02-10 19:34 - 00000000 ____D C:\Program Files\Speccy
2013-09-18 12:44 - 2010-11-21 08:50 - 00696620 _____ C:\Windows\system32\perfh007.dat
2013-09-18 12:44 - 2010-11-21 08:50 - 00147916 _____ C:\Windows\system32\perfc007.dat
2013-09-18 12:44 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-18 06:53 - 2013-06-13 21:02 - 00003382 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-17 09:17 - 2013-05-22 15:45 - 00000000 ____D C:\Program Files\My Dell
2013-09-17 09:17 - 2012-02-09 15:13 - 00000000 ____D C:\ProgramData\PCDr
2013-09-15 16:05 - 2011-02-11 19:57 - 00000000 ____D C:\Windows\panther
2013-09-13 17:18 - 2012-05-09 13:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-13 17:18 - 2012-05-09 13:02 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 17:18 - 2012-01-17 12:23 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-12 11:48 - 2013-09-12 11:48 - 00186940 _____ C:\ProgramData\SPL764.tmp
2013-09-12 11:48 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-12 09:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-12 07:12 - 2012-02-09 14:19 - 00000000 ___RD C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-12 07:12 - 2012-02-09 14:19 - 00000000 ___RD C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-11 20:51 - 2012-02-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-11 20:50 - 2013-08-06 11:56 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 20:49 - 2012-02-09 18:54 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 07:40 - 2012-02-10 13:25 - 00000000 ____D C:\Users\***\Verschiedenes
2013-09-10 19:11 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130915-160739.backup
2013-09-10 12:07 - 2013-09-10 12:07 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-10 11:48 - 2013-09-10 11:49 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-10 11:48 - 2012-06-15 21:56 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-09-10 11:48 - 2012-01-17 12:35 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-10 11:18 - 2012-01-17 12:35 - 00000000 ____D C:\Program Files\Java
2013-09-09 15:52 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130910-191130.backup
2013-09-09 11:44 - 2012-02-10 19:29 - 00000000 ____D C:\Program Files\CCleaner
2013-09-09 06:52 - 2012-01-17 13:00 - 00000000 ____D C:\Program Files\mcafee
2013-09-07 10:38 - 2013-09-07 10:38 - 00643504 _____ C:\ProgramData\SPLF680.tmp
2013-09-05 13:41 - 2013-09-05 13:41 - 00248650 _____ C:\ProgramData\SPL2A52.tmp
2013-09-04 13:47 - 2012-02-10 21:33 - 00002402 _____ C:\Users\Hansulrich\Desktop\Google Chrome.lnk
2013-09-02 19:40 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130909-155239.backup
2013-08-26 19:47 - 2013-06-10 10:29 - 00000000 __SHD C:\Users\***\AppData\Roaming\.#
2013-08-26 18:39 - 2012-02-13 21:09 - 00000000 ____D C:\Users\***\Documents\Incomedia WebSite X5
2013-08-26 15:56 - 2013-08-26 15:56 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-26 09:35 - 2013-08-26 08:20 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-26 09:10 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130902-194014.backup
2013-08-26 08:31 - 2013-08-26 08:20 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-26 08:28 - 2013-08-26 08:28 - 00000000 ____D C:\Users\***\AppData\Roaming\NVIDIA
2013-08-26 08:24 - 2013-08-26 08:24 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-26 08:20 - 2013-08-26 08:20 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-26 08:11 - 2013-08-26 08:11 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Browser
2013-08-26 08:09 - 2013-04-30 20:32 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tools
2013-08-26 07:55 - 2012-02-10 10:13 - 00000000 ____D C:\Users\***\Desktop\Verschiedenes
2013-08-26 07:50 - 2009-07-14 04:34 - 00000510 _____ C:\Windows\win.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-08-26 07:48 - 2012-01-17 11:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 07:42 - 2012-09-30 17:50 - 00000000 ____D C:\Windows\Minidump
2013-08-26 06:46 - 2013-08-26 07:48 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\SoftThinks
2013-08-24 15:31 - 2013-08-24 15:31 - 01178921 _____ C:\ProgramData\SPLC200.tmp
Files to move or delete:
====================
C:\ProgramData\dzofae.reg
Some content of TEMP:
====================
C:\Users\Hansulrich\AppData\Local\Temp\DivXSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 08:14
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- --- --- --- Geändert von Hitman 21 (20.09.2013 um 10:28 Uhr) |
|
20.09.2013, 10:21
| #4 |
| | Wirklich alle Trojaner vom PC entfernt? Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-09-2013 01 Ran by *** at 2013-09-20 10:52:59 Running from C:\Users\***\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621) Adobe AIR (x32 Version: 3.1.0.4880) Adobe Community Help (x32 Version: 3.2.1) Adobe Community Help (x32 Version: 3.2.1.650) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.174) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168) Adobe Photoshop Elements 9 (x32 Version: 9.0.3.0) Adobe Premiere Elements 9 (x32 Version: 9.0) Adobe Premiere Elements 9 (x32 Version: 9.0.1) Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Bing Bar (x32 Version: 7.2.241.0) Bonjour (Version: 3.0.0.10) CCleaner (Version: 4.05) CDDRV_Installer (Version: 4.60) Creative Audio Control Panel (x32 Version: 3.00) Creative Software AutoUpdate (x32 Version: 1.40) Creative Sound Blaster Properties x64 Edition (x32) CyberLink PowerDVD 9.5 (x32 Version: 9.5.1.4418) D3DX10 (x32 Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition Dell DataSafe Local Backup - Support Software (x32 Version: 9.4.61) Dell DataSafe Local Backup (x32 Version: 9.4.61) Dell DataSafe Online (x32 Version: 2.1.19634) Dell Edoc Viewer (Version: 1.0.0) Dell Getting Started Guide (x32 Version: 1.00.0000) Dell MusicStage (x32 Version: 1.6.225.0) Dell P713w Dell PhotoStage (x32 Version: 1.5.0.65) Dell Stage (x32 Version: 1.5.201.0) Dell Stage Remote (x32 Version: 2.0.0.43) Dell Symbolleiste (x32 Version: 1.8.12.0) Dell VideoStage (x32 Version: 1.2.0.1719) Der Übersetzungsprofi 7.0 Europa Edition (x32) DesignPro 5 (x32 Version: 5.5.708) DirectX 9 Runtime (x32 Version: 1.00.0000) DivX-Setup (x32 Version: 2.6.1.84) DW WLAN Card (Version: 5.60.48.35) eBay (x32 Version: 1.4.0) Elements 9 Organizer (x32 Version: 9.0) Elements STI Installer (x32 Version: 1.0) erLT (x32 Version: 1.20.0137) ESET Online Scanner v3 (x32) FastStone Capture 5.3 (x32 Version: 5.3) FileZilla Client 3.7.3 (x32 Version: 3.7.3) FLV Player 2.0 (build 25) (x32 Version: 2.0 (build 25)) Google Chrome (HKCU Version: 29.0.1547.66) Google Earth (x32 Version: 6.2.0.5905) Host OpenAL (x32 Version: 1.00) iCloud (Version: 2.1.2.8) ImageMixer VCD/DVD2 for OLYMPUS (x32 Version: 2.01.050.1) Incomedia WebSite X5 Evolution (x32) Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002) IrfanView (remove only) (x32 Version: 4.32) iTunes (Version: 11.0.5.5) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Junk Mail filter update (x32 Version: 15.4.3502.0922) JURA IMPRESSA Z5 G2 (x32 Version: 1.0) KhalInstallWrapper (Version: 2.00.0000) Logitech SetPoint (x32 Version: 4.80) Logitech Unifying-Software 2.10 (Version: 2.10.37) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) McAfee SecurityCenter (x32 Version: 11.6.511) Memeo Backup (x32) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) Mozilla Firefox 10.0 (x86 de) (x32 Version: 10.0) Mozilla Firefox 24.0 (x86 de) (HKCU Version: 24.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Multimedia Card Reader (x32 Version: 1.7.915.93) My Dell (Version: 3.4.6308.28) Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0) Nero Blu-ray Player (x32 Version: 12.0.20014) Nero Control Center 10 (x32 Version: 10.6.13000.0.11) Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800) Nero Core Components 10 (x32 Version: 2.0.20000.9.12) Nero Update (x32 Version: 11.0.11800.31.0) NVIDIA 3D Vision Treiber 320.78 (Version: 320.78) NVIDIA Grafiktreiber 320.78 (Version: 320.78) NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0) NVIDIA Install Application (Version: 2.1002.124.810) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2078) NVIDIA Systemsteuerung 320.78 (Version: 320.78) NVIDIA Update 1.14.17 (Version: 1.14.17) NVIDIA Update Components (Version: 1.14.17) OLYMPUS Master (x32 Version: 1.00.8000) OLYMPUS Master addin (x32 Version: 1.00.0000) PhotoShowExpress (x32 Version: 2.0.063) PVX Plus WindX Standalone V10 (build 9300.2) (x32 Version: 10.0.9300.2) QuickTime (x32 Version: 7.74.80.86) RBVirtualFolder64Inst (Version: 1.00.0000) RealDownloader (x32 Version: 1.3.3) RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0) RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0) RealPlayer (x32 Version: 16.0.3) RealUpgrade 1.1 (x32 Version: 1.1.0) Recuva (Version: 1.48) Roxio Activation Module (x32 Version: 1.0) Roxio BackOnTrack (x32 Version: 1.3.3) Roxio Burn (x32 Version: 1.8) Roxio Creator Starter (x32 Version: 1.0.439) Roxio Creator Starter (x32 Version: 12.1.77.0) Roxio Creator Starter (x32 Version: 5.0.0) Roxio Express Labeler 3 (x32 Version: 3.2.2) Roxio File Backup (Version: 1.3.2) SafeGuard® PrivateCrypto 2.31.1 (x32 Version: 2.31.1.2) SereneScreen Marine Aquarium 3 (x32 Version: 3.0) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition Shared C Run-time for x64 (Version: 10.0.0) Skype™ 5.10 (x32 Version: 5.10.116) SmartSound Quicktracks for Premiere Elements 9.0 (x32 Version: 3.12.3090) Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0) Sound Blaster X-Fi (x32 Version: 1.0) Speccy (Version: 1.23) Spybot - Search & Destroy (x32 Version: 2.1.21) SWFBanner (x32) SyncUP (x32 Version: 1.12.12400.17.102) SyncUP (x32 Version: 10.2.15400) THX TruStudio PC (x32 Version: 1.0) Translators (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition Update for Microsoft Office 2010 (KB2553092) Update for Microsoft Office 2010 (KB2553157) 64-Bit Edition Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition Update for Microsoft Office 2010 (KB2589370) 64-Bit Edition Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition Update for Microsoft Office 2010 (KB2760758) 64-Bit Edition Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) White Christmas 3D Screensaver and Animated Wallpaper 1.0 (x32 Version: 1.0) WIDCOMM Bluetooth Software (Version: 6.3.0.6200) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3508.1109) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) WinRAR 4.20 (64-Bit) (Version: 4.20.0) World of Tanks (x32) Zattoo4 4.0.5 (x32 Version: 4.0.5) Zinio Reader 4 (x32 Version: 4.2.4164) ZyXEL NAS Starter Utility (x32 Version: 2.00.18) ZyXEL NetUSB Share Center (x32 Version: 1.0.1.c) ==================== Restore Points ========================= 11-09-2013 18:45:56 Windows Update 19-09-2013 13:31:27 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-09-15 16:07 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com There are 1000 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {0C1F02CE-7F0C-4CAB-9E38-B3FAC1A6CBD6} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {0E9C04BF-B99A-4155-96B3-BE4F30F4F371} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA => C:\Users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07] (Google Inc.) Task: {12444129-DF73-4B3B-AF80-70D4C4372E95} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-09-06] (PC-Doctor, Inc.) Task: {12BCD626-B866-4EED-8648-84E413F59079} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {1F8B5F37-2C7B-403B-AF71-ADDA4D6AF1E8} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {3B82F3E0-1BCE-4C76-BB25-B7ECC370D2D3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd) Task: {40F48374-FF80-48D6-98D2-2F9B77B1E57D} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3354904592-2679355235-2660027724-1000 Task: {5C3A1CF3-713D-4861-A683-5D27D54D6387} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {5C548308-66C5-4EF2-9922-895B6D4617E6} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {6730EC82-92E9-4B52-97CE-2C22A64E64E8} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {7416F852-5512-45B3-BF93-8BF19DE6E6D7} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {7C62FD5E-009A-47FE-94F4-55788F50E832} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {7D6CE335-8BAE-4153-B9F2-67DC352466E7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {8E287E0D-63E7-4BC2-BBE1-E2B190CE1C0D} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-09-06] (PC-Doctor, Inc.) Task: {971D683D-1C76-4582-BBF1-8FCA33658373} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {9FF8F513-47D7-411D-A2F7-303AE40950E5} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.) Task: {A4B8D584-FFF0-4BEC-BC06-3FAEF4F3C82F} - System32\Tasks\User_Feed_Synchronization-{C2FB5E82-8A0D-4224-BEE1-D9B54F21E70E} => C:\Windows\system32\msfeedssync.exe [2013-06-04] (Microsoft Corporation) Task: {A98B46B1-D86A-407A-9FF1-FD1CCF0D0E26} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated) Task: {B605FC93-E9AD-4F46-9EFC-121157B8A1FE} - System32\Tasks\SystemToolsDailyTest => C:\Windows\System32\uaclauncher.exe Task: {CFE92416-BC4A-46C3-8262-C36B90136161} - System32\Tasks\AdobeAAMUpdater-1.0-Hansulrich-PC-Hansulrich => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29] (Adobe Systems Incorporated) Task: {D02CCBE4-45A8-491F-8DC8-C9D6CE4A5304} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {DBCF0047-961E-4F86-9725-1FE23F9ADE05} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {DCAC94A2-7DE5-4E12-BB3A-3C01EF10AFF2} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {DEF5A94B-3788-448E-BCFB-079631B791D5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core => C:\Users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core.job => C:\Users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA.job => C:\Users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () D:\Programme\FileZilla FTP Client\fzshellext_64.dll 2010-07-21 15:46 - 2010-07-21 15:46 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll 2013-06-19 12:59 - 2012-06-09 19:20 - 00196096 _____ (Alexander Roshal) D:\Programme\WinRAR\rarext.dll 2013-08-06 15:08 - 2013-08-13 15:20 - 00472344 _____ (Piriform Ltd) C:\Program Files\Recuva\RecuvaShell64.dll 2012-02-10 22:54 - 2009-07-20 13:35 - 00096272 _____ (Logitech, Inc.) C:\Windows\system32\KemXML.dll 2012-02-10 22:54 - 2009-07-20 13:34 - 00235536 _____ (Logitech, Inc.) C:\Windows\system32\kemutb.dll 2012-02-10 22:54 - 2009-07-20 13:34 - 00235536 _____ (Logitech, Inc.) C:\Windows\system32\KemUtil.dll 2012-02-10 22:54 - 2009-07-20 13:34 - 00159248 _____ (Logitech, Inc.) C:\Windows\system32\KemWnd.dll 2012-02-10 22:54 - 2009-07-20 13:35 - 00018960 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll 2010-03-16 22:28 - 2010-03-16 22:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll 2010-03-22 17:52 - 2010-03-22 17:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll 2010-03-16 22:28 - 2010-03-16 22:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll 2010-03-16 22:28 - 2010-03-16 22:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll 2011-06-29 10:52 - 2011-06-29 10:52 - 00077376 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\DMSAdapter.dll 2011-06-27 21:25 - 2011-06-27 21:25 - 00491968 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\DHServerAgent.dll 2011-06-27 21:26 - 2011-06-27 21:26 - 00715400 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\UMediaManager.dll 2011-06-25 01:19 - 2011-06-25 01:19 - 00043584 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\ASDBTool.dll 2011-06-25 01:20 - 2011-06-25 01:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll 2011-06-27 21:25 - 2011-06-27 21:25 - 00051264 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\ASTransMgr.dll 2011-06-25 01:19 - 2011-06-25 01:19 - 00043584 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\ASXmlTool.dll 2011-06-27 21:25 - 2011-06-27 21:25 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll 2011-06-25 01:32 - 2011-06-25 01:32 - 00323136 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll 2010-03-11 21:52 - 2010-03-11 21:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll 2010-03-05 17:07 - 2010-03-05 17:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll 2010-03-05 17:07 - 2010-03-05 17:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll 2010-03-11 21:52 - 2010-03-11 21:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll 2012-02-16 18:05 - 2009-11-26 10:53 - 00086180 _____ () C:\Program Files (x86)\Dell P713w\dleccfg.dll 2012-02-16 18:06 - 2010-04-01 19:23 - 00389120 _____ () C:\Program Files (x86)\Dell P713w\dlecscw.dll 2012-02-16 18:06 - 2009-03-25 17:10 - 00192512 _____ () C:\Program Files (x86)\Dell P713w\dlecdatr.dll 2012-02-16 18:06 - 2010-04-01 19:24 - 01159168 _____ () C:\Program Files (x86)\Dell P713w\dlecDRS.dll 2012-02-16 18:06 - 2009-03-10 07:43 - 00155648 _____ () C:\Program Files (x86)\Dell P713w\dleccaps.dll 2012-02-16 18:06 - 2009-03-05 19:55 - 00059904 _____ () C:\Program Files (x86)\Dell P713w\dleccnv4.dll 2012-02-16 18:06 - 2009-03-10 07:41 - 00966656 _____ (Corp.) C:\Program Files (x86)\Dell P713w\dlecmonr.dll 2012-02-16 18:06 - 2009-12-09 21:35 - 00802816 _____ ( ) C:\Program Files (x86)\Dell P713w\dleccomc.dll 2012-02-16 17:59 - 2009-02-12 13:33 - 00381952 _____ () C:\Windows\system32\dlecsm.dll 2012-02-16 17:59 - 2009-04-28 09:57 - 00032768 _____ () C:\Windows\system32\dlecsmr.dll 2012-02-16 18:06 - 2009-06-22 15:08 - 00708608 _____ () C:\Program Files (x86)\Dell P713w\Epwizard.DLL 2012-02-16 18:06 - 2009-06-22 15:06 - 00159744 _____ () C:\Program Files (x86)\Dell P713w\customui.dll 2012-02-16 18:06 - 2009-06-22 15:06 - 00114688 _____ () C:\Program Files (x86)\Dell P713w\Eputil.DLL 2012-02-16 18:06 - 2009-06-22 15:05 - 00139264 _____ () C:\Program Files (x86)\Dell P713w\Imagutil.DLL 2012-02-16 18:06 - 2009-06-22 15:06 - 00061440 _____ () C:\Program Files (x86)\Dell P713w\Epfunct.DLL 2012-02-16 18:06 - 2009-06-23 13:11 - 02203648 _____ () C:\Program Files (x86)\Dell P713w\EPWizRes.dll 2012-02-16 18:06 - 2009-06-23 13:13 - 00045056 _____ () C:\Program Files (x86)\Dell P713w\epstring.dll 2012-02-16 18:06 - 2009-06-23 13:13 - 00221184 _____ () C:\Program Files (x86)\Dell P713w\EPOEMDll.dll 2012-02-16 18:06 - 2009-04-07 21:25 - 00409600 _____ () C:\Program Files (x86)\Dell P713w\iptk.dll 2012-02-16 18:06 - 2010-04-01 19:18 - 00548864 _____ (PDFlib GmbH) C:\Program Files (x86)\Dell P713w\PdfLib.dll 2012-02-16 18:06 - 2009-03-02 16:25 - 00151552 _____ () C:\Program Files (x86)\Dell P713w\dlecptp.dll 2012-01-17 12:36 - 2009-12-29 18:50 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL 2012-01-17 12:36 - 2010-01-12 17:36 - 00177664 _____ () C:\Windows\SysWOW64\APOMngr.DLL 2009-08-26 06:29 - 2009-08-26 06:29 - 00150016 _____ () C:\Windows\SysWOW64\OemSpiE.dll 2013-08-15 07:38 - 2013-08-15 07:38 - 00492032 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\97ce162bb354fcf9c8d9eae8252ee216\IAStorUtil.ni.dll 2013-07-12 06:56 - 2013-07-12 06:56 - 00014336 _____ (Intel Corp.) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\22d36f517c7545fdb65ccddae680a3eb\IAStorCommon.ni.dll 2010-11-22 15:27 - 2010-11-22 15:27 - 00190960 _____ (Roxio, Inc.) c:\program files (x86)\common files\roxio shared\dllshared\rsl.dll 2010-11-25 00:44 - 2010-11-25 00:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll 2011-04-29 20:13 - 2011-04-29 20:13 - 18908672 _____ (Unlimited Realities) C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\libumajin.dll 2011-04-29 20:13 - 2011-04-29 20:13 - 07938048 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll 2011-04-29 20:13 - 2011-04-29 20:13 - 02225664 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll 2013-04-04 01:09 - 2013-04-04 01:09 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-11-21 05:25 - 2010-11-21 05:25 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2011-11-02 00:26 - 2011-11-02 00:26 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll 2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2011-08-31 00:05 - 2011-08-31 00:05 - 00085864 _____ (Apple Inc.) C:\Windows\system32\dnssd.dll 2013-08-26 08:20 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-08-26 08:20 - 2013-05-16 10:55 - 03643800 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl 2013-08-26 08:20 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2010-01-06 22:43 - 2010-01-06 22:43 - 00017408 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\EndPointCtrl.dll 2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 01660128 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Utility.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00020704 _____ (Stan Schultes, VBNetExpert.com) C:\Program Files (x86)\Memeo\AutoBackup\XMLSettings.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00054496 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Interop.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 01553632 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00057344 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.DataClad.resources.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 02887904 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.UI.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00025824 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.DriveDetection.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00094208 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\MemeoBackup.resources.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00296160 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.DataAccess.dll 2010-07-28 19:57 - 2010-07-28 19:57 - 02798816 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.BMU.dll 2010-04-05 20:52 - 2010-04-05 20:52 - 00013824 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.eWebControl.dll 2009-08-19 20:56 - 2009-08-19 20:56 - 00143360 _____ (Digital River, Inc.) C:\Program Files (x86)\Common Files\Memeo\eWebControl365.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00025824 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Third-party.Security.dll 2010-07-28 19:57 - 2010-07-28 19:57 - 00067808 _____ (Newtonsoft) C:\Program Files (x86)\Memeo\AutoBackup\Newtonsoft.Json.dll 2010-07-28 19:57 - 2010-07-28 19:57 - 00074976 _____ (Finisar Corporation) C:\Program Files (x86)\Memeo\AutoBackup\SQLite.NET.dll 2010-04-05 20:52 - 2010-04-05 20:52 - 00504293 _____ () C:\Program Files (x86)\Memeo\AutoBackup\sqlite3.DLL 2010-07-28 19:58 - 2010-07-28 19:58 - 00087264 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\providers\Tanagra.BMU.Providers.FileCopyBackupProvider.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00036864 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.Utility.resources.dll 2010-04-05 20:14 - 2010-04-05 20:14 - 00397312 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.Outlook.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00114688 _____ () C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Memeo.Client.UI.resources.dll 2010-07-30 14:59 - 2010-07-30 14:59 - 01975592 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SplashScreen.dll 2010-07-30 14:52 - 2010-07-30 14:52 - 00034600 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DotNetAppLauncher.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00135464 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.Wpf.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00200088 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeroLibrary.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00103720 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.Foundation.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00349480 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\AdvrCntrProxy.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00071576 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MainAppCommunicator.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00040232 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.License.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00983448 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaHub.Sdk.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00283544 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaLibrary.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00391576 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaHub.DataLibrary.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00081816 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaHub.DataModel.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00014744 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaLibraryInterfaces.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00111000 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceManager.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00018328 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\TaskScheduler.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00428328 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.UXLibrary.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00251688 _____ () C:\Program Files (x86)\Nero\SyncUP\System.ComponentModel.Composition.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00141208 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\StartPage.dll 2011-07-07 19:14 - 2011-07-07 19:14 - 00095528 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeAE.Interop.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00046376 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\BurnAPI.Interop.dll 2011-09-19 16:54 - 2011-09-19 16:54 - 00148776 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NOSWebCommunity.Export.dll 2012-02-06 18:24 - 2012-02-06 18:24 - 00058664 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NOSMetaData.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00160664 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\PlaybackLibrary.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00038184 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NeroUpdate.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00042904 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\ImageProcessLib.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00075672 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMCoFoundation.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00096152 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMTTranscoder.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00016280 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeTargetSettings.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00115096 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceOperations.dll 2012-08-21 14:19 - 2012-08-21 14:19 - 00194496 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\de-DE\MediaHub.Main.resources.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00051136 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\de-DE\MediaHub.Sdk.resources.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00011560 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\de-DE\Nfx.UXLibrary.resources.dll 2010-10-28 16:42 - 2010-10-28 16:42 - 00068424 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SolutionExplorerCLI.dll 2011-05-31 19:19 - 2011-05-31 19:19 - 05076264 _____ (Nero AG) C:\Program Files (x86)\Common Files\Nero\AdvrCntr5\AdvrCntr5.dll 2010-10-28 16:42 - 2010-10-28 16:42 - 00031040 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SolutionExplorer.dll 2012-02-06 18:23 - 2012-02-06 18:23 - 00010536 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NOSProductRegistration.Interop.dll 2011-09-19 16:49 - 2011-09-19 16:49 - 03740968 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\OnlineServices\NOSProductRegistration.dll 2012-02-06 18:21 - 2012-02-06 18:21 - 00010536 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NOSUsageStatistics.Interop.dll 2011-09-19 16:52 - 2011-09-19 16:52 - 01078568 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\OnlineServices\NOSUsageStatistics.dll 2012-02-06 18:23 - 2012-02-06 18:23 - 00740648 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NCCoreInterop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00022936 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceMonitor.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00021400 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceConnector.interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00157592 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMDataServices.Interop.dll 2011-09-19 16:47 - 2011-09-19 16:47 - 00255272 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NOSMetaDataWPF.dll 2011-09-19 16:44 - 2011-09-19 16:44 - 00033064 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NOSUtils.Client.dll 2011-09-19 16:46 - 2011-09-19 16:46 - 04695336 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\OnlineServices\NOSMetaData.dll 2011-08-19 04:31 - 2011-08-19 04:31 - 02864424 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NScCoreComponents\NMDataServices.dll 2011-08-19 04:31 - 2011-08-19 04:31 - 00771368 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NScCoreComponents\NMCoFoundation.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00381848 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceSync.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00040344 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SyncLibrary.dll 2011-07-07 19:14 - 2011-07-07 19:14 - 00891688 _____ () C:\Program Files (x86)\Nero\SyncUP\System.Data.SQLite.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00179496 _____ (hxxp://sqlite.phxsoftware.com) C:\Program Files (x86)\Nero\SyncUP\System.Data.SQLite.Linq.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00026008 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\LibraryBrowserStub.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00087336 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\Interop.iTunesLib.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00075048 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeEE.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00029592 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MovieWizardLibrary.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00047000 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\IndexingManager.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00013608 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\AppFormatCOM.Interop.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00013096 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MovieWizard.Interop.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00060712 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.Burn.ViewModel.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00011160 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeAudioPCM.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00053144 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\FileScanner.dll 2011-07-07 19:14 - 2011-07-07 19:14 - 00345384 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\Interop.WMPLib.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00100648 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.Picker.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00021912 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\ImageEffects.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00030616 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMCdRip.Interop.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00505128 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\ActiveSyncConnector.dll 2011-07-07 19:14 - 2011-07-07 19:14 - 00537896 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\DCIMConnector.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00841000 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\USBConnector.dll 2011-10-13 14:50 - 2011-10-13 14:50 - 00873768 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\PTT\NMThumbnailIconsGen.dll 2011-10-13 14:47 - 2011-10-13 14:47 - 01647912 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\PTT\ImageProcessLib.dll 2011-10-13 14:24 - 2011-10-13 14:24 - 02716968 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SMC\NeMetadata.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00320808 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\UsbBasedDeviceMonitor.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00562472 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\PSPConnector.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00019864 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\FileSystemWatcher.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00505128 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\PCSuiteConnector.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00566568 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\SEConnector.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00570664 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\WiFiConnector.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00783656 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\NCConnector.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00640936 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\WPDConnector.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00079776 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\wpdenc.DLL 2012-02-06 18:20 - 2012-02-06 18:20 - 00408872 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\desktopclientlib.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00018216 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\Interop.UPNPLib.dll 2012-07-13 17:27 - 2012-07-13 17:27 - 00048024 _____ (Nero AG) C:\Program Files (x86)\Nero\Update\NASvcPS.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00017832 _____ (Nero AG) C:\PROGRAM FILES (X86)\NERO\SYNCUP\PLUGINS\SYNC.PLUGIN.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00911768 _____ (Nero AG) C:\PROGRAM FILES (X86)\NERO\SYNCUP\PLUGINS\Sync.dll 2012-08-21 14:22 - 2012-08-21 14:22 - 00075696 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\de-DE\Sync.resources.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00018728 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NeDevDB.interop.dll 2011-07-07 19:15 - 2011-07-07 19:15 - 00595248 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nero.NeDevDB\NeDevDB.dll 2011-07-07 19:15 - 2011-07-07 19:15 - 00386376 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\LocalFSConnectorEx.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00026408 _____ () C:\Program Files (x86)\Nero\SyncUP\AdbDetect.dll 2013-08-15 06:47 - 2013-08-15 06:47 - 00039424 _____ (Adobe Systems Incorporated) C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3ea679e79eda32e3465d8cf36e838a00\PresentationCFFRasterizer.ni.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00034712 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMSearch.Interop.dll 2013-08-14 15:21 - 2013-08-14 15:21 - 00542376 _____ (RealDownloader) C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll 2013-09-13 17:18 - 2013-09-13 17:18 - 16244616 ____R (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_8_800_174.ocx 2013-09-19 08:11 - 2013-06-27 19:58 - 00164352 _____ (Microsoft Corporation.) C:\Users\***\AppData\Local\Microsoft\BingBar\Apps\Mail_15642ee020d2449d86382022aa6f2548\7.2.103\mailcomm.dll 2013-09-19 08:11 - 2013-04-23 03:06 - 00090112 _____ (Microsoft Corporation.) C:\Users\***\AppData\Local\Microsoft\BingBar\Apps\Translator_f5cbd3ef4c144434b17913278004e270\7.2.230\LanguageDetector.dll 2013-09-19 08:11 - 2012-02-01 16:15 - 01042432 _____ () C:\Users\Hansulrich\AppData\Local\Microsoft\BingBar\Apps\Translator_f5cbd3ef4c144434b17913278004e270\7.2.230\Blingext.dll 2013-09-19 08:11 - 2013-03-27 02:55 - 00162304 _____ (Microsoft Corporation.) C:\Users\***\AppData\Local\Microsoft\BingBar\Apps\Search_6f21d9007fa34bc78d94309126de58f5\7.2.232\SearchHistoryStore.dll 2013-09-19 08:11 - 2013-03-27 02:55 - 00140800 _____ (Microsoft Corporation.) C:\Users\***\AppData\Local\Microsoft\BingBar\Apps\Search_6f21d9007fa34bc78d94309126de58f5\7.2.232\SearchGhosting.dll ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15616 Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 15616 Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (09/19/2013 11:33:10 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 179370 Error: (09/19/2013 11:33:10 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 179370 Error: (09/19/2013 11:33:07 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (09/19/2013 07:28:31 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 07:28:24 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (09/19/2013 06:51:39 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 06:51:31 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) System errors: ============= Error: (09/19/2013 07:28:21 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/19/2013 07:28:21 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlecCATSCustConnectService erreicht. Error: (09/19/2013 07:28:06 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 07:28:06 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 07:28:05 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 06:51:28 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/19/2013 06:51:28 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlecCATSCustConnectService erreicht. Error: (09/19/2013 06:51:16 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 06:51:15 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 06:51:15 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Microsoft Office Sessions: ========================= Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15616 Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 15616 Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (09/19/2013 11:33:10 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 179370 Error: (09/19/2013 11:33:10 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 179370 Error: (09/19/2013 11:33:07 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (09/19/2013 07:28:31 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 07:28:24 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (09/19/2013 06:51:39 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 06:51:31 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) CodeIntegrity Errors: =================================== Date: 2013-09-19 21:59:51.523 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 21:59:51.523 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 21:59:51.523 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 13:08:46.157 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 13:08:46.142 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 13:08:46.142 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-18 19:12:16.720 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-18 19:12:16.720 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-18 19:12:16.720 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-15 13:28:56.795 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 19% Total physical RAM: 16366.45 MB Available physical RAM: 13188.63 MB Total Pagefile: 32731.07 MB Available Pagefile: 28438.21 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:446.47 GB) (Free:313.31 GB) NTFS Drive d: (DATAPART1) (Fixed) (Total:931.51 GB) (Free:915.52 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 12501AB2) Partition 1: (Not Active) - (Size=39 MB) - (Type=DE) Partition 2: (Active) - (Size=19 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=446 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 12501AAF) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
|
20.09.2013, 11:49
| #5 |
| | Wirklich alle Trojaner vom PC entfernt? Hallo schrauber, Ich hatte vergessen mein NAS zu starten, wo ich meine Backups vom PC uploade. Ich habe sicherheitshalber die Logdateien mit Farbar's Recovery Scan Tool nochmal erstellt. Sorry hatte das ganz vergessen. Unten die neuen Logfiles FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01
Ran by *** (administrator) on ***-PC on 20-09-2013 12:30:21
Running from C:\Users\***\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
( ) C:\Windows\system32\dleccoms.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe
() C:\Program Files (x86)\Dell P713w\dlecmon.exe
() C:\Program Files (x86)\Dell P713w\ezprint.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
() C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
(CyberLink Corp.) C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
() C:\Program Files (x86)\ZyXEL\NetUSB Share Center\Share Center.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackup.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Nero AG) C:\Program Files (x86)\Nero\SyncUP\SyncUP.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nero.AndroidServer.exe
(McAfee, Inc.) C:\Program Files\mcafee.com\agent\mcagent.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Core\mchost.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RunDLLEntry_THXCfg] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [RunDLLEntry_EptMon] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\EptMon64.dll,RunDLLEntry EptMon64
HKLM\...\Run: [Stage Remote] - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-27] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [DellStage] - C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj [207845 2011-04-29] ()
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Bluetooth Connection Assistant] - LBTWIZ.EXE -silent
HKLM\...\Run: [dlecmon.exe] - C:\Program Files (x86)\Dell P713w\dlecmon.exe [770728 2011-01-24] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Dell P713w\ezprint.exe [139944 2011-01-24] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKCU\...\Run: [OM_Monitor] - C:\Program Files (x86)\OLYMPUS\OLYMPUS Master\Monitor.exe [57344 2006-05-16] (OLYMPUS IMAGING CORP.)
HKCU\...\Run: [Google Update] - C:\Users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-04-07] (Google Inc.)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [237693 2009-02-03] (Creative Technology Ltd)
HKLM-x32\...\Run: [SPIRunE] - C:\Windows\\SysWOW64\SPIRunE.dll [18432 2009-07-27] (Creative Technology Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [ShwiconXP9106] - C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] - C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [75048 2011-08-12] (cyberlink)
HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-25] (Dell, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [RoxWatchTray] - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [NeroLauncher] - C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [67496 2012-08-21] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj [2825741 2011-04-29] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [ZyXEL USB Share Center] - C:\Program Files (x86)\ZyXEL\NetUSB Share Center\Share Center.exe [5623808 2010-07-22] ()
HKLM-x32\...\Run: [Memeo Backup] - C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2010-07-28] (Memeo Inc.)
HKLM-x32\...\Run: [QuickTime Task] - D:\Programme\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\Programme\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [DivXMediaServer] - D:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-18] (RealNetworks, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.sunrise.ch/
URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
SearchScopes: HKLM - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
SearchScopes: HKCU - {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120627195329.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Dell Symbolleiste - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120627195329.dll (McAfee, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Dell Symbolleiste - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 212.98.37.128 194.230.55.99
FireFox:
========
FF ProfilePath: C:\Users\Hansulrich\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1%20%26%26%20url.indexOf('.png')%20%3D%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*'))%20%7B%20return%20'PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - D:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - D:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Просмотр HTTP заголовков - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{BAEBEF65-9289-47c5-8524-C345CC5D860D}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK
FF StartMenuInternet: FIREFOX.EXE - D:\Programme\Mozilla Firefox\firefox.exe
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\***\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\***\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\***\AppData\Local\Google\Chrome\Application\29.0.1547.66\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll ()
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (YouTube) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (SiteAdvisor) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_1
CHR Extension: (RealDownloader) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0
CHR Extension: (ProxTube) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkdbaehcjcomcnnjhlmnfddpgoafpcko\1.0.5_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
==================== Services (Whitelisted) =================
S2 0251491379611881mcinstcleanup; C:\Windows\TEMP\025149~1.EXE [834664 2013-07-30] (McAfee, Inc.)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [248304 2011-08-11] (CyberLink)
S2 dlecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dlecserv.exe [45224 2010-05-21] ()
R2 dlec_device; C:\Windows\system32\dleccoms.exe [1052328 2010-05-21] ( )
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [224704 2011-03-08] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [383608 2012-11-16] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
==================== Drivers (Whitelisted) ====================
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 ZyxelUDSMBus; C:\Windows\SysWow64\Drivers\ZyxelUDSMBus.sys [67168 2010-07-22] (Windows (R) Codename Longhorn DDK provider)
R3 ZyxelUDSTcpBus; C:\Windows\SysWow64\Drivers\ZyxelUDSTcpBus.sys [98912 2010-07-22] (Windows (R) Codename Longhorn DDK provider)
S3 catchme; \??\C:\cf\catchme.sys [x]
S1 cdrbsdrv; No ImagePath
U3 mfeavfk01; No ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-20 12:30 - 2013-09-20 12:30 - 01950622 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-20 12:23 - 2013-09-20 12:23 - 00000000 ____D C:\Users\***\Desktop\Neuer Ordner
2013-09-20 10:51 - 2013-09-20 10:51 - 00000000 ____D C:\FRST
2013-09-18 21:04 - 2013-09-19 19:28 - 00000392 _____ C:\Windows\setupact.log
2013-09-18 21:04 - 2013-09-18 21:04 - 00000802 _____ C:\Windows\PFRO.log
2013-09-18 21:04 - 2013-09-18 21:04 - 00000000 _____ C:\Windows\setuperr.log
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Users\***\AppData\Roaming\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\ProgramData\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-09-18 14:19 - 2013-09-18 14:19 - 00000494 _____ C:\Users\***\Desktop\***website
2013-09-18 14:05 - 2013-09-18 14:05 - 00000000 _____ C:\END
2013-09-12 11:48 - 2013-09-12 11:48 - 00186940 _____ C:\ProgramData\SPL764.tmp
2013-09-11 20:50 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 20:50 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 20:50 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 20:50 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 20:50 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 20:50 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 20:50 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 20:50 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 20:50 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 20:50 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 11:33 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 11:33 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 11:33 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 11:33 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 11:33 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 11:33 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 11:33 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 11:33 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 11:33 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 11:33 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 11:33 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 11:33 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 11:33 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:33 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 11:33 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 12:07 - 2013-09-10 12:07 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-10 11:49 - 2013-09-10 11:48 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-07 10:38 - 2013-09-07 10:38 - 00643504 _____ C:\ProgramData\SPLF680.tmp
2013-09-05 13:41 - 2013-09-05 13:41 - 00248650 _____ C:\ProgramData\SPL2A52.tmp
2013-08-26 15:56 - 2013-08-26 15:56 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-26 09:10 - 2013-04-30 17:24 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts.20130826-091004.backup
2013-08-26 08:28 - 2013-08-26 08:28 - 00000000 ____D C:\Users\***\AppData\Roaming\NVIDIA
2013-08-26 08:24 - 2013-08-26 08:24 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-26 08:20 - 2013-08-26 09:35 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-26 08:20 - 2013-08-26 08:31 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-26 08:20 - 2013-08-26 08:20 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-26 08:20 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-08-26 08:11 - 2013-08-26 08:11 - 00000000 ____D C:\Users\Hansulrich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Browser
2013-08-26 07:48 - 2013-08-26 07:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 06:46 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\SoftThinks
2013-08-26 07:48 - 2012-02-11 11:22 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-08-26 07:48 - 2012-01-17 13:03 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2013-08-26 07:48 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-08-26 07:48 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-08-26 07:47 - 2013-08-09 03:05 - 03310693 _____ C:\Windows\system32\nvcoproc.bin
2013-08-26 07:46 - 2013-08-26 07:48 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-08-24 21:53 - 2013-09-19 19:28 - 00003258 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-08-24 15:31 - 2013-08-24 15:31 - 01178921 _____ C:\ProgramData\SPLC200.tmp
==================== One Month Modified Files and Folders =======
2013-09-20 12:30 - 2013-09-20 12:30 - 01950622 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-20 12:24 - 2012-02-09 14:29 - 00000000 ____D C:\Users\***\AppData\Local\Nero
2013-09-20 12:23 - 2013-09-20 12:23 - 00000000 ____D C:\Users\***\Desktop\Neuer Ordner
2013-09-20 12:18 - 2012-05-09 13:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 12:18 - 2012-05-09 13:02 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 12:18 - 2012-05-09 13:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 12:18 - 2012-01-17 12:23 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 12:01 - 2012-02-14 22:14 - 00000000 ____D C:\Users\***\Documents\Outlook-Dateien
2013-09-20 12:00 - 2012-02-10 19:36 - 00000000 ____D C:\Users\***\Desktop\Sicherheitsprogramme
2013-09-20 11:53 - 2013-04-07 18:36 - 00001140 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA.job
2013-09-20 10:55 - 2009-07-14 06:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-20 10:55 - 2009-07-14 06:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-20 10:51 - 2013-09-20 10:51 - 00000000 ____D C:\FRST
2013-09-20 10:18 - 2013-05-22 15:45 - 00003440 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2013-09-20 08:54 - 2012-01-17 12:21 - 01364176 _____ C:\Windows\WindowsUpdate.log
2013-09-19 19:33 - 2012-02-10 19:31 - 00000000 ____D C:\Program Files\Recuva
2013-09-19 19:31 - 2012-01-17 13:00 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-09-19 19:29 - 2012-02-16 18:08 - 00139426 _____ C:\ProgramData\dlecscan.log
2013-09-19 19:28 - 2013-09-18 21:04 - 00000392 _____ C:\Windows\setupact.log
2013-09-19 19:28 - 2013-08-24 21:53 - 00003258 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-19 19:28 - 2012-01-17 13:07 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2013-09-19 19:28 - 2012-01-17 13:07 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2013-09-19 19:28 - 2012-01-17 12:42 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-09-19 19:28 - 2012-01-17 11:17 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-19 19:28 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-19 19:27 - 2012-02-10 09:59 - 00000000 ____D C:\Users\***\Geschäft
2013-09-19 18:55 - 2013-05-16 17:37 - 00003970 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C2FB5E82-8A0D-4224-BEE1-D9B54F21E70E}
2013-09-19 18:52 - 2012-01-17 12:59 - 00000000 ____D C:\ProgramData\Sonic
2013-09-19 18:47 - 2012-05-31 20:21 - 00000000 ____D C:\Users\***\AppData\Roaming\DVDVideoSoft
2013-09-19 16:54 - 2013-04-07 18:36 - 00001088 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core.job
2013-09-19 09:51 - 2012-02-16 18:26 - 01709990 _____ C:\ProgramData\dlecJSW.log
2013-09-19 09:51 - 2012-02-16 18:25 - 00000000 ____D C:\ProgramData\Dl_cats
2013-09-19 08:06 - 2012-03-07 10:41 - 00000656 _____ C:\Users\***\Desktop\meteo.ch – Swiss Weather Portal.website
2013-09-18 21:04 - 2013-09-18 21:04 - 00000802 _____ C:\Windows\PFRO.log
2013-09-18 21:04 - 2013-09-18 21:04 - 00000000 _____ C:\Windows\setuperr.log
2013-09-18 21:04 - 2009-07-14 06:45 - 00480048 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-18 19:09 - 2012-07-31 21:48 - 00000000 ____D C:\Users\***\AppData\Roaming\FileZilla
2013-09-18 17:53 - 2012-03-07 10:45 - 00000987 _____ C:\Users\***\Desktop\***.website
2013-09-18 15:28 - 2012-02-13 14:08 - 00000000 ___RD C:\Users\***\Desktop\Homepage
2013-09-18 14:37 - 2013-04-30 20:33 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Multimedia
2013-09-18 14:34 - 2012-02-10 19:53 - 00017408 _____ C:\Users\***\AppData\Local\WebpageIcons.db
2013-09-18 14:33 - 2013-06-13 21:00 - 00003360 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-18 14:33 - 2013-06-13 21:00 - 00003236 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Users\***\AppData\Roaming\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\ProgramData\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-09-18 14:32 - 2013-06-13 21:00 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-09-18 14:32 - 2012-02-10 21:42 - 00000000 ____D C:\ProgramData\Real
2013-09-18 14:32 - 2012-02-10 21:42 - 00000000 ____D C:\Program Files (x86)\Real
2013-09-18 14:31 - 2013-06-13 20:59 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-09-18 14:19 - 2013-09-18 14:19 - 00000494 _____ C:\Users\***\Desktop\Curling Club Langenthal - clubmeisterschaft - Gruppe B.website
2013-09-18 14:15 - 2012-02-10 21:21 - 00000000 ____D C:\Users\***\AppData\Local\Mozilla
2013-09-18 14:14 - 2012-02-10 21:21 - 00000864 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-09-18 14:11 - 2012-02-09 14:18 - 00127384 _____ C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-18 14:09 - 2012-02-10 22:29 - 00000000 ____D C:\Program Files (x86)\DivX
2013-09-18 14:09 - 2012-02-10 22:25 - 00000000 ____D C:\ProgramData\DivX
2013-09-18 14:08 - 2012-02-10 22:29 - 00000000 ____D C:\Program Files\DivX
2013-09-18 14:05 - 2013-09-18 14:05 - 00000000 _____ C:\END
2013-09-18 14:00 - 2012-02-10 19:34 - 00000000 ____D C:\Program Files\Speccy
2013-09-18 12:44 - 2010-11-21 08:50 - 00696620 _____ C:\Windows\system32\perfh007.dat
2013-09-18 12:44 - 2010-11-21 08:50 - 00147916 _____ C:\Windows\system32\perfc007.dat
2013-09-18 12:44 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-18 06:53 - 2013-06-13 21:02 - 00003382 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-17 09:17 - 2013-05-22 15:45 - 00000000 ____D C:\Program Files\My Dell
2013-09-17 09:17 - 2012-02-09 15:13 - 00000000 ____D C:\ProgramData\PCDr
2013-09-15 16:05 - 2011-02-11 19:57 - 00000000 ____D C:\Windows\panther
2013-09-12 11:48 - 2013-09-12 11:48 - 00186940 _____ C:\ProgramData\SPL764.tmp
2013-09-12 11:48 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-12 09:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-12 07:12 - 2012-02-09 14:19 - 00000000 ___RD C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-12 07:12 - 2012-02-09 14:19 - 00000000 ___RD C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-11 20:51 - 2012-02-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-11 20:50 - 2013-08-06 11:56 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 20:49 - 2012-02-09 18:54 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 07:40 - 2012-02-10 13:25 - 00000000 ____D C:\Users\***\Verschiedenes
2013-09-10 19:11 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130915-160739.backup
2013-09-10 12:07 - 2013-09-10 12:07 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-10 11:48 - 2013-09-10 11:49 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-10 11:48 - 2012-06-15 21:56 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-09-10 11:48 - 2012-01-17 12:35 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-10 11:18 - 2012-01-17 12:35 - 00000000 ____D C:\Program Files\Java
2013-09-09 15:52 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130910-191130.backup
2013-09-09 11:44 - 2012-02-10 19:29 - 00000000 ____D C:\Program Files\CCleaner
2013-09-09 06:52 - 2012-01-17 13:00 - 00000000 ____D C:\Program Files\mcafee
2013-09-07 10:38 - 2013-09-07 10:38 - 00643504 _____ C:\ProgramData\SPLF680.tmp
2013-09-05 13:41 - 2013-09-05 13:41 - 00248650 _____ C:\ProgramData\SPL2A52.tmp
2013-09-04 13:47 - 2012-02-10 21:33 - 00002402 _____ C:\Users\***\Desktop\Google Chrome.lnk
2013-09-02 19:40 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130909-155239.backup
2013-08-26 19:47 - 2013-06-10 10:29 - 00000000 __SHD C:\Users\***\AppData\Roaming\.#
2013-08-26 18:39 - 2012-02-13 21:09 - 00000000 ____D C:\Users\***\Documents\Incomedia WebSite X5
2013-08-26 15:56 - 2013-08-26 15:56 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-26 09:35 - 2013-08-26 08:20 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-26 09:10 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130902-194014.backup
2013-08-26 08:31 - 2013-08-26 08:20 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-26 08:28 - 2013-08-26 08:28 - 00000000 ____D C:\Users\***\AppData\Roaming\NVIDIA
2013-08-26 08:24 - 2013-08-26 08:24 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-26 08:20 - 2013-08-26 08:20 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-26 08:11 - 2013-08-26 08:11 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Browser
2013-08-26 08:09 - 2013-04-30 20:32 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tools
2013-08-26 07:55 - 2012-02-10 10:13 - 00000000 ____D C:\Users\***\Desktop\Verschiedenes
2013-08-26 07:50 - 2009-07-14 04:34 - 00000510 _____ C:\Windows\win.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-08-26 07:48 - 2012-01-17 11:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 07:42 - 2012-09-30 17:50 - 00000000 ____D C:\Windows\Minidump
2013-08-26 06:46 - 2013-08-26 07:48 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\SoftThinks
2013-08-24 15:31 - 2013-08-24 15:31 - 01178921 _____ C:\ProgramData\SPLC200.tmp
Files to move or delete:
====================
C:\ProgramData\dzofae.reg
Some content of TEMP:
====================
C:\Users\***\AppData\Local\Temp\DivXSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 08:14
==================== End Of Log ============================
|
|
20.09.2013, 11:50
| #6 |
| | Wirklich alle Trojaner vom PC entfernt?Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-09-2013 01 Ran by *** at 2013-09-20 12:30:41 Running from C:\Users\***\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621) Adobe AIR (x32 Version: 3.1.0.4880) Adobe Community Help (x32 Version: 3.2.1) Adobe Community Help (x32 Version: 3.2.1.650) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168) Adobe Photoshop Elements 9 (x32 Version: 9.0.3.0) Adobe Premiere Elements 9 (x32 Version: 9.0) Adobe Premiere Elements 9 (x32 Version: 9.0.1) Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Bing Bar (x32 Version: 7.2.241.0) Bonjour (Version: 3.0.0.10) CCleaner (Version: 4.05) CDDRV_Installer (Version: 4.60) Creative Audio Control Panel (x32 Version: 3.00) Creative Software AutoUpdate (x32 Version: 1.40) Creative Sound Blaster Properties x64 Edition (x32) CyberLink PowerDVD 9.5 (x32 Version: 9.5.1.4418) D3DX10 (x32 Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition Dell DataSafe Local Backup - Support Software (x32 Version: 9.4.61) Dell DataSafe Local Backup (x32 Version: 9.4.61) Dell DataSafe Online (x32 Version: 2.1.19634) Dell Edoc Viewer (Version: 1.0.0) Dell Getting Started Guide (x32 Version: 1.00.0000) Dell MusicStage (x32 Version: 1.6.225.0) Dell P713w Dell PhotoStage (x32 Version: 1.5.0.65) Dell Stage (x32 Version: 1.5.201.0) Dell Stage Remote (x32 Version: 2.0.0.43) Dell Symbolleiste (x32 Version: 1.8.12.0) Dell VideoStage (x32 Version: 1.2.0.1719) Der Übersetzungsprofi 7.0 Europa Edition (x32) DesignPro 5 (x32 Version: 5.5.708) DirectX 9 Runtime (x32 Version: 1.00.0000) DivX-Setup (x32 Version: 2.6.1.84) DW WLAN Card (Version: 5.60.48.35) eBay (x32 Version: 1.4.0) Elements 9 Organizer (x32 Version: 9.0) Elements STI Installer (x32 Version: 1.0) erLT (x32 Version: 1.20.0137) ESET Online Scanner v3 (x32) FastStone Capture 5.3 (x32 Version: 5.3) FileZilla Client 3.7.3 (x32 Version: 3.7.3) FLV Player 2.0 (build 25) (x32 Version: 2.0 (build 25)) Google Chrome (HKCU Version: 29.0.1547.66) Google Earth (x32 Version: 6.2.0.5905) Host OpenAL (x32 Version: 1.00) iCloud (Version: 2.1.2.8) ImageMixer VCD/DVD2 for OLYMPUS (x32 Version: 2.01.050.1) Incomedia WebSite X5 Evolution (x32) Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002) IrfanView (remove only) (x32 Version: 4.32) iTunes (Version: 11.0.5.5) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Junk Mail filter update (x32 Version: 15.4.3502.0922) JURA IMPRESSA Z5 G2 (x32 Version: 1.0) KhalInstallWrapper (Version: 2.00.0000) Logitech SetPoint (x32 Version: 4.80) Logitech Unifying-Software 2.10 (Version: 2.10.37) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) McAfee SecurityCenter (x32 Version: 11.6.511) Memeo Backup (x32) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) Mozilla Firefox 10.0 (x86 de) (x32 Version: 10.0) Mozilla Firefox 24.0 (x86 de) (HKCU Version: 24.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Multimedia Card Reader (x32 Version: 1.7.915.93) My Dell (Version: 3.4.6308.28) Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0) Nero Blu-ray Player (x32 Version: 12.0.20014) Nero Control Center 10 (x32 Version: 10.6.13000.0.11) Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800) Nero Core Components 10 (x32 Version: 2.0.20000.9.12) Nero Update (x32 Version: 11.0.11800.31.0) NVIDIA 3D Vision Treiber 320.78 (Version: 320.78) NVIDIA Grafiktreiber 320.78 (Version: 320.78) NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0) NVIDIA Install Application (Version: 2.1002.124.810) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2078) NVIDIA Systemsteuerung 320.78 (Version: 320.78) NVIDIA Update 1.14.17 (Version: 1.14.17) NVIDIA Update Components (Version: 1.14.17) OLYMPUS Master (x32 Version: 1.00.8000) OLYMPUS Master addin (x32 Version: 1.00.0000) PhotoShowExpress (x32 Version: 2.0.063) PopTray Plug-ins (beta 6) (x32 Version: (beta 6)) PVX Plus WindX Standalone V10 (build 9300.2) (x32 Version: 10.0.9300.2) QuickTime (x32 Version: 7.74.80.86) RBVirtualFolder64Inst (Version: 1.00.0000) RealDownloader (x32 Version: 1.3.3) RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0) RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0) RealPlayer (x32 Version: 16.0.3) RealUpgrade 1.1 (x32 Version: 1.1.0) Recuva (Version: 1.48) Roxio Activation Module (x32 Version: 1.0) Roxio BackOnTrack (x32 Version: 1.3.3) Roxio Burn (x32 Version: 1.8) Roxio Creator Starter (x32 Version: 1.0.439) Roxio Creator Starter (x32 Version: 12.1.77.0) Roxio Creator Starter (x32 Version: 5.0.0) Roxio Express Labeler 3 (x32 Version: 3.2.2) Roxio File Backup (Version: 1.3.2) SafeGuard® PrivateCrypto 2.31.1 (x32 Version: 2.31.1.2) SereneScreen Marine Aquarium 3 (x32 Version: 3.0) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition Shared C Run-time for x64 (Version: 10.0.0) Skype™ 5.10 (x32 Version: 5.10.116) SmartSound Quicktracks for Premiere Elements 9.0 (x32 Version: 3.12.3090) Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0) Sound Blaster X-Fi (x32 Version: 1.0) Speccy (Version: 1.23) Spybot - Search & Destroy (x32 Version: 2.1.21) SWFBanner (x32) SyncUP (x32 Version: 1.12.12400.17.102) SyncUP (x32 Version: 10.2.15400) THX TruStudio PC (x32 Version: 1.0) Translators (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition Update for Microsoft Office 2010 (KB2553092) Update for Microsoft Office 2010 (KB2553157) 64-Bit Edition Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition Update for Microsoft Office 2010 (KB2589370) 64-Bit Edition Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition Update for Microsoft Office 2010 (KB2760758) 64-Bit Edition Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) White Christmas 3D Screensaver and Animated Wallpaper 1.0 (x32 Version: 1.0) WIDCOMM Bluetooth Software (Version: 6.3.0.6200) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3508.1109) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) WinRAR 4.20 (64-Bit) (Version: 4.20.0) World of Tanks (x32) Zattoo4 4.0.5 (x32 Version: 4.0.5) Zinio Reader 4 (x32 Version: 4.2.4164) ZyXEL NAS Starter Utility (x32 Version: 2.00.18) ZyXEL NetUSB Share Center (x32 Version: 1.0.1.c) ==================== Restore Points ========================= 11-09-2013 18:45:56 Windows Update 19-09-2013 13:31:27 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-09-15 16:07 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com There are 1000 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {0C1F02CE-7F0C-4CAB-9E38-B3FAC1A6CBD6} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {0E9C04BF-B99A-4155-96B3-BE4F30F4F371} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA => C:\Users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07] (Google Inc.) Task: {12444129-DF73-4B3B-AF80-70D4C4372E95} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-09-06] (PC-Doctor, Inc.) Task: {12BCD626-B866-4EED-8648-84E413F59079} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {1F8B5F37-2C7B-403B-AF71-ADDA4D6AF1E8} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {3B82F3E0-1BCE-4C76-BB25-B7ECC370D2D3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd) Task: {40F48374-FF80-48D6-98D2-2F9B77B1E57D} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3354904592-2679355235-2660027724-1000 Task: {5C3A1CF3-713D-4861-A683-5D27D54D6387} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {5C548308-66C5-4EF2-9922-895B6D4617E6} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {6730EC82-92E9-4B52-97CE-2C22A64E64E8} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {7416F852-5512-45B3-BF93-8BF19DE6E6D7} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {7C62FD5E-009A-47FE-94F4-55788F50E832} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {7D6CE335-8BAE-4153-B9F2-67DC352466E7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {8E287E0D-63E7-4BC2-BBE1-E2B190CE1C0D} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-09-06] (PC-Doctor, Inc.) Task: {971D683D-1C76-4582-BBF1-8FCA33658373} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {9FF8F513-47D7-411D-A2F7-303AE40950E5} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.) Task: {A4B8D584-FFF0-4BEC-BC06-3FAEF4F3C82F} - System32\Tasks\User_Feed_Synchronization-{C2FB5E82-8A0D-4224-BEE1-D9B54F21E70E} => C:\Windows\system32\msfeedssync.exe [2013-06-04] (Microsoft Corporation) Task: {A98B46B1-D86A-407A-9FF1-FD1CCF0D0E26} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated) Task: {B605FC93-E9AD-4F46-9EFC-121157B8A1FE} - System32\Tasks\SystemToolsDailyTest => C:\Windows\System32\uaclauncher.exe Task: {CFE92416-BC4A-46C3-8262-C36B90136161} - System32\Tasks\AdobeAAMUpdater-1.0-Hansulrich-PC-Hansulrich => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29] (Adobe Systems Incorporated) Task: {D02CCBE4-45A8-491F-8DC8-C9D6CE4A5304} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {DBCF0047-961E-4F86-9725-1FE23F9ADE05} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {DCAC94A2-7DE5-4E12-BB3A-3C01EF10AFF2} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {DEF5A94B-3788-448E-BCFB-079631B791D5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core => C:\Users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA.job => C:\Users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () D:\Programme\FileZilla FTP Client\fzshellext_64.dll 2010-07-21 15:46 - 2010-07-21 15:46 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll 2013-04-05 12:58 - 2013-04-05 12:58 - 00021320 _____ () C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreamsPS64.dll 2013-06-19 12:59 - 2012-06-09 19:20 - 00196096 _____ (Alexander Roshal) D:\Programme\WinRAR\rarext.dll 2010-11-11 00:54 - 2010-11-11 00:54 - 00177136 _____ (TODO: <Company name>) C:\Program Files\Roxio\Roxio Burn\RB_ContextMenu64.dll 2013-04-05 12:58 - 2013-04-05 12:58 - 00954696 _____ () C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll 2012-02-10 22:54 - 2009-07-20 13:35 - 00096272 _____ (Logitech, Inc.) C:\Windows\system32\KemXML.dll 2012-02-10 22:54 - 2009-07-20 13:34 - 00235536 _____ (Logitech, Inc.) C:\Windows\system32\kemutb.dll 2012-02-10 22:54 - 2009-07-20 13:34 - 00235536 _____ (Logitech, Inc.) C:\Windows\system32\KemUtil.dll 2012-02-10 22:54 - 2009-07-20 13:34 - 00159248 _____ (Logitech, Inc.) C:\Windows\system32\KemWnd.dll 2012-02-10 22:54 - 2009-07-20 13:35 - 00018960 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll 2010-03-16 22:28 - 2010-03-16 22:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll 2010-03-22 17:52 - 2010-03-22 17:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll 2010-03-16 22:28 - 2010-03-16 22:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll 2010-03-16 22:28 - 2010-03-16 22:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll 2011-06-29 10:52 - 2011-06-29 10:52 - 00077376 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\DMSAdapter.dll 2011-06-27 21:25 - 2011-06-27 21:25 - 00491968 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\DHServerAgent.dll 2011-06-27 21:26 - 2011-06-27 21:26 - 00715400 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\UMediaManager.dll 2011-06-25 01:19 - 2011-06-25 01:19 - 00043584 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\ASDBTool.dll 2011-06-25 01:20 - 2011-06-25 01:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll 2011-06-27 21:25 - 2011-06-27 21:25 - 00051264 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\ASTransMgr.dll 2011-06-25 01:19 - 2011-06-25 01:19 - 00043584 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\ASXmlTool.dll 2011-06-27 21:25 - 2011-06-27 21:25 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll 2011-06-25 01:32 - 2011-06-25 01:32 - 00323136 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll 2010-03-11 21:52 - 2010-03-11 21:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll 2010-03-05 17:07 - 2010-03-05 17:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll 2010-03-05 17:07 - 2010-03-05 17:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll 2010-03-11 21:52 - 2010-03-11 21:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll 2012-02-16 18:05 - 2009-11-26 10:53 - 00086180 _____ () C:\Program Files (x86)\Dell P713w\dleccfg.dll 2012-02-16 18:06 - 2010-04-01 19:23 - 00389120 _____ () C:\Program Files (x86)\Dell P713w\dlecscw.dll 2012-02-16 18:06 - 2009-03-25 17:10 - 00192512 _____ () C:\Program Files (x86)\Dell P713w\dlecdatr.dll 2012-02-16 18:06 - 2010-04-01 19:24 - 01159168 _____ () C:\Program Files (x86)\Dell P713w\dlecDRS.dll 2012-02-16 18:06 - 2009-03-10 07:43 - 00155648 _____ () C:\Program Files (x86)\Dell P713w\dleccaps.dll 2012-02-16 18:06 - 2009-03-05 19:55 - 00059904 _____ () C:\Program Files (x86)\Dell P713w\dleccnv4.dll 2012-02-16 18:06 - 2009-03-10 07:41 - 00966656 _____ (Corp.) C:\Program Files (x86)\Dell P713w\dlecmonr.dll 2012-02-16 18:06 - 2009-12-09 21:35 - 00802816 _____ ( ) C:\Program Files (x86)\Dell P713w\dleccomc.dll 2012-02-16 17:59 - 2009-02-12 13:33 - 00381952 _____ () C:\Windows\system32\dlecsm.dll 2012-02-16 17:59 - 2009-04-28 09:57 - 00032768 _____ () C:\Windows\system32\dlecsmr.dll 2012-02-16 18:06 - 2009-06-22 15:08 - 00708608 _____ () C:\Program Files (x86)\Dell P713w\Epwizard.DLL 2012-02-16 18:06 - 2009-06-22 15:06 - 00159744 _____ () C:\Program Files (x86)\Dell P713w\customui.dll 2012-02-16 18:06 - 2009-06-22 15:06 - 00114688 _____ () C:\Program Files (x86)\Dell P713w\Eputil.DLL 2012-02-16 18:06 - 2009-06-22 15:05 - 00139264 _____ () C:\Program Files (x86)\Dell P713w\Imagutil.DLL 2012-02-16 18:06 - 2009-06-22 15:06 - 00061440 _____ () C:\Program Files (x86)\Dell P713w\Epfunct.DLL 2012-02-16 18:06 - 2009-06-23 13:11 - 02203648 _____ () C:\Program Files (x86)\Dell P713w\EPWizRes.dll 2012-02-16 18:06 - 2009-06-23 13:13 - 00045056 _____ () C:\Program Files (x86)\Dell P713w\epstring.dll 2012-02-16 18:06 - 2009-06-23 13:13 - 00221184 _____ () C:\Program Files (x86)\Dell P713w\EPOEMDll.dll 2012-02-16 18:06 - 2009-04-07 21:25 - 00409600 _____ () C:\Program Files (x86)\Dell P713w\iptk.dll 2012-02-16 18:06 - 2010-04-01 19:18 - 00548864 _____ (PDFlib GmbH) C:\Program Files (x86)\Dell P713w\PdfLib.dll 2012-02-16 18:06 - 2009-03-02 16:25 - 00151552 _____ () C:\Program Files (x86)\Dell P713w\dlecptp.dll 2012-01-17 12:36 - 2009-12-29 18:50 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL 2012-01-17 12:36 - 2010-01-12 17:36 - 00177664 _____ () C:\Windows\SysWOW64\APOMngr.DLL 2009-08-26 06:29 - 2009-08-26 06:29 - 00150016 _____ () C:\Windows\SysWOW64\OemSpiE.dll 2013-08-15 07:38 - 2013-08-15 07:38 - 00492032 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\97ce162bb354fcf9c8d9eae8252ee216\IAStorUtil.ni.dll 2013-07-12 06:56 - 2013-07-12 06:56 - 00014336 _____ (Intel Corp.) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\22d36f517c7545fdb65ccddae680a3eb\IAStorCommon.ni.dll 2010-11-22 15:27 - 2010-11-22 15:27 - 00190960 _____ (Roxio, Inc.) c:\program files (x86)\common files\roxio shared\dllshared\rsl.dll 2010-11-25 00:44 - 2010-11-25 00:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll 2011-04-29 20:13 - 2011-04-29 20:13 - 18908672 _____ (Unlimited Realities) C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\libumajin.dll 2011-04-29 20:13 - 2011-04-29 20:13 - 07938048 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll 2011-04-29 20:13 - 2011-04-29 20:13 - 02225664 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll 2013-04-04 01:09 - 2013-04-04 01:09 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-11-21 05:25 - 2010-11-21 05:25 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2011-11-02 00:26 - 2011-11-02 00:26 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll 2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2011-08-31 00:05 - 2011-08-31 00:05 - 00085864 _____ (Apple Inc.) C:\Windows\system32\dnssd.dll 2013-08-26 08:20 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-08-26 08:20 - 2013-05-16 10:55 - 03643800 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl 2013-08-26 08:20 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2010-01-06 22:43 - 2010-01-06 22:43 - 00017408 _____ (ArcSoft Inc.) C:\Program Files (x86)\Dell\Stage Remote\EndPointCtrl.dll 2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 01660128 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Utility.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00020704 _____ (Stan Schultes, VBNetExpert.com) C:\Program Files (x86)\Memeo\AutoBackup\XMLSettings.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00054496 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Interop.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 01553632 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00057344 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.DataClad.resources.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 02887904 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.UI.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00025824 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.DriveDetection.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00094208 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\MemeoBackup.resources.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00296160 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.DataAccess.dll 2010-07-28 19:57 - 2010-07-28 19:57 - 02798816 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.BMU.dll 2010-04-05 20:52 - 2010-04-05 20:52 - 00013824 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.eWebControl.dll 2009-08-19 20:56 - 2009-08-19 20:56 - 00143360 _____ (Digital River, Inc.) C:\Program Files (x86)\Common Files\Memeo\eWebControl365.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00025824 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Third-party.Security.dll 2010-07-28 19:57 - 2010-07-28 19:57 - 00067808 _____ (Newtonsoft) C:\Program Files (x86)\Memeo\AutoBackup\Newtonsoft.Json.dll 2010-07-28 19:57 - 2010-07-28 19:57 - 00074976 _____ (Finisar Corporation) C:\Program Files (x86)\Memeo\AutoBackup\SQLite.NET.dll 2010-04-05 20:52 - 2010-04-05 20:52 - 00504293 _____ () C:\Program Files (x86)\Memeo\AutoBackup\sqlite3.DLL 2010-07-28 19:58 - 2010-07-28 19:58 - 00087264 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\providers\Tanagra.BMU.Providers.FileCopyBackupProvider.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00036864 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.Utility.resources.dll 2010-04-05 20:14 - 2010-04-05 20:14 - 00397312 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.Outlook.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00114688 _____ () C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Memeo.Client.UI.resources.dll 2010-07-30 14:59 - 2010-07-30 14:59 - 01975592 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SplashScreen.dll 2010-07-30 14:52 - 2010-07-30 14:52 - 00034600 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DotNetAppLauncher.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00135464 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.Wpf.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00200088 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeroLibrary.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00103720 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.Foundation.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00349480 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\AdvrCntrProxy.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00071576 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MainAppCommunicator.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00040232 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.License.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00983448 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaHub.Sdk.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00283544 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaLibrary.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00391576 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaHub.DataLibrary.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00081816 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaHub.DataModel.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00014744 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MediaLibraryInterfaces.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00111000 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceManager.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00018328 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\TaskScheduler.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00428328 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.UXLibrary.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00251688 _____ () C:\Program Files (x86)\Nero\SyncUP\System.ComponentModel.Composition.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00141208 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\StartPage.dll 2011-07-07 19:14 - 2011-07-07 19:14 - 00095528 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeAE.Interop.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00046376 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\BurnAPI.Interop.dll 2011-09-19 16:54 - 2011-09-19 16:54 - 00148776 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NOSWebCommunity.Export.dll 2012-02-06 18:24 - 2012-02-06 18:24 - 00058664 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NOSMetaData.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00160664 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\PlaybackLibrary.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00038184 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NeroUpdate.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00042904 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\ImageProcessLib.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00075672 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMCoFoundation.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00096152 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMTTranscoder.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00016280 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeTargetSettings.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00115096 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceOperations.dll 2012-08-21 14:19 - 2012-08-21 14:19 - 00194496 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\de-DE\MediaHub.Main.resources.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00051136 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\de-DE\MediaHub.Sdk.resources.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00011560 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\de-DE\Nfx.UXLibrary.resources.dll 2010-10-28 16:42 - 2010-10-28 16:42 - 00068424 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SolutionExplorerCLI.dll 2011-05-31 19:19 - 2011-05-31 19:19 - 05076264 _____ (Nero AG) C:\Program Files (x86)\Common Files\Nero\AdvrCntr5\AdvrCntr5.dll 2010-10-28 16:42 - 2010-10-28 16:42 - 00031040 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SolutionExplorer.dll 2012-02-06 18:23 - 2012-02-06 18:23 - 00010536 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NOSProductRegistration.Interop.dll 2011-09-19 16:49 - 2011-09-19 16:49 - 03740968 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\OnlineServices\NOSProductRegistration.dll 2012-02-06 18:21 - 2012-02-06 18:21 - 00010536 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NOSUsageStatistics.Interop.dll 2011-09-19 16:52 - 2011-09-19 16:52 - 01078568 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\OnlineServices\NOSUsageStatistics.dll 2012-02-06 18:23 - 2012-02-06 18:23 - 00740648 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NCCoreInterop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00022936 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceMonitor.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00021400 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceConnector.interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00157592 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMDataServices.Interop.dll 2011-09-19 16:47 - 2011-09-19 16:47 - 00255272 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NOSMetaDataWPF.dll 2011-09-19 16:44 - 2011-09-19 16:44 - 00033064 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NOSUtils.Client.dll 2011-09-19 16:46 - 2011-09-19 16:46 - 04695336 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\OnlineServices\NOSMetaData.dll 2011-08-19 04:31 - 2011-08-19 04:31 - 02864424 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NScCoreComponents\NMDataServices.dll 2011-08-19 04:31 - 2011-08-19 04:31 - 00771368 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NScCoreComponents\NMCoFoundation.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00381848 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\DeviceSync.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00040344 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SyncLibrary.dll 2011-07-07 19:14 - 2011-07-07 19:14 - 00891688 _____ () C:\Program Files (x86)\Nero\SyncUP\System.Data.SQLite.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00179496 _____ (hxxp://sqlite.phxsoftware.com) C:\Program Files (x86)\Nero\SyncUP\System.Data.SQLite.Linq.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00026008 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\LibraryBrowserStub.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00087336 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\Interop.iTunesLib.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00075048 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeEE.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00029592 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MovieWizardLibrary.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00047000 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\IndexingManager.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00013608 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\AppFormatCOM.Interop.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00013096 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\MovieWizard.Interop.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00060712 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.Burn.ViewModel.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00011160 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NeAudioPCM.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00053144 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\FileScanner.dll 2011-07-07 19:14 - 2011-07-07 19:14 - 00345384 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\Interop.WMPLib.dll 2011-02-09 18:25 - 2011-02-09 18:25 - 00100648 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nfx.Picker.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00021912 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\ImageEffects.Interop.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00030616 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMCdRip.Interop.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00505128 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\ActiveSyncConnector.dll 2011-07-07 19:14 - 2011-07-07 19:14 - 00537896 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\DCIMConnector.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00841000 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\USBConnector.dll 2011-10-13 14:50 - 2011-10-13 14:50 - 00873768 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\PTT\NMThumbnailIconsGen.dll 2011-10-13 14:47 - 2011-10-13 14:47 - 01647912 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\PTT\ImageProcessLib.dll 2011-10-13 14:24 - 2011-10-13 14:24 - 02716968 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\SMC\NeMetadata.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00320808 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\UsbBasedDeviceMonitor.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00562472 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\PSPConnector.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00019864 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\FileSystemWatcher.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00505128 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\PCSuiteConnector.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00566568 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\SEConnector.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00570664 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\WiFiConnector.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00783656 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\NCConnector.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00640936 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\WPDConnector.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00079776 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\wpdenc.DLL 2012-02-06 18:20 - 2012-02-06 18:20 - 00408872 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\desktopclientlib.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00018216 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\Interop.UPNPLib.dll 2012-07-13 17:27 - 2012-07-13 17:27 - 00048024 _____ (Nero AG) C:\Program Files (x86)\Nero\Update\NASvcPS.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00017832 _____ (Nero AG) C:\PROGRAM FILES (X86)\NERO\SYNCUP\PLUGINS\SYNC.PLUGIN.dll 2012-08-21 14:20 - 2012-08-21 14:20 - 00911768 _____ (Nero AG) C:\PROGRAM FILES (X86)\NERO\SYNCUP\PLUGINS\Sync.dll 2012-08-21 14:22 - 2012-08-21 14:22 - 00075696 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\de-DE\Sync.resources.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00018728 _____ ( ) C:\Program Files (x86)\Nero\SyncUP\NeDevDB.interop.dll 2011-07-07 19:15 - 2011-07-07 19:15 - 00595248 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nero.NeDevDB\NeDevDB.dll 2011-07-07 19:15 - 2011-07-07 19:15 - 00386376 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\Deviceconnectors\LocalFSConnectorEx.dll 2011-07-07 19:13 - 2011-07-07 19:13 - 00026408 _____ () C:\Program Files (x86)\Nero\SyncUP\AdbDetect.dll 2013-08-15 06:47 - 2013-08-15 06:47 - 00039424 _____ (Adobe Systems Incorporated) C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3ea679e79eda32e3465d8cf36e838a00\PresentationCFFRasterizer.ni.dll 2012-08-21 13:48 - 2012-08-21 13:48 - 00034712 _____ (Nero AG) C:\Program Files (x86)\Nero\SyncUP\NMSearch.Interop.dll ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15616 Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 15616 Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (09/19/2013 11:33:10 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 179370 Error: (09/19/2013 11:33:10 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 179370 Error: (09/19/2013 11:33:07 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (09/19/2013 07:28:31 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 07:28:24 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (09/19/2013 06:51:39 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 06:51:31 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) System errors: ============= Error: (09/19/2013 07:28:21 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/19/2013 07:28:21 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlecCATSCustConnectService erreicht. Error: (09/19/2013 07:28:06 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 07:28:06 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 07:28:05 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 06:51:28 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/19/2013 06:51:28 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlecCATSCustConnectService erreicht. Error: (09/19/2013 06:51:16 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 06:51:15 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/19/2013 06:51:15 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Microsoft Office Sessions: ========================= Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15616 Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 15616 Error: (09/20/2013 00:10:04 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (09/19/2013 11:33:10 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 179370 Error: (09/19/2013 11:33:10 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 179370 Error: (09/19/2013 11:33:07 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (09/19/2013 07:28:31 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 07:28:24 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (09/19/2013 06:51:39 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/19/2013 06:51:31 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) CodeIntegrity Errors: =================================== Date: 2013-09-19 21:59:51.523 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 21:59:51.523 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 21:59:51.523 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 13:08:46.157 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 13:08:46.142 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 13:08:46.142 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-18 19:12:16.720 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-18 19:12:16.720 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-18 19:12:16.720 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-15 13:28:56.795 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 18% Total physical RAM: 16366.45 MB Available physical RAM: 13386.94 MB Total Pagefile: 32731.07 MB Available Pagefile: 28665 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:446.47 GB) (Free:313.31 GB) NTFS Drive d: (DATAPART1) (Fixed) (Total:931.51 GB) (Free:915.52 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 12501AB2) Partition 1: (Not Active) - (Size=39 MB) - (Type=DE) Partition 2: (Active) - (Size=19 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=446 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 12501AAF) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
|
20.09.2013, 15:41
| #7 | |
| /// the machine /// TB-Ausbilder | Wirklich alle Trojaner vom PC entfernt?Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.09.2013, 16:41
| #8 |
| | Wirklich alle Trojaner vom PC entfernt? Hallo schrauber Hier das Combofix Logfile Code:
ATTFilter ComboFix 13-09-19.01 - *** 20.09.2013 17:24:40.2.8 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.41.1031.18.16366.13630 [GMT 2:00]
ausgeführt von:: c:\users\***\Desktop\ComboFix.exe
AV: McAfee Anti-Virus und Anti-Spyware *Disabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
FW: McAfee Firewall *Disabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}
SP: McAfee Anti-Virus und Anti-Spyware *Disabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
SP: Spybot - Search and Destroy *Disabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\programdata\PCDr\6308\AddOnDownloaded\244ec244-34e7-4b04-85aa-c16ea08f2533.dll
c:\programdata\PCDr\6308\AddOnDownloaded\31d5a116-b563-4195-8dbd-1798d14bfacd.dll
c:\programdata\PCDr\6308\AddOnDownloaded\3265cc37-1ae8-4a1d-b93a-d8a0d09ba823.dll
c:\programdata\PCDr\6308\AddOnDownloaded\394b144a-f70e-44ff-a1ce-7fed69d15b12.dll
c:\programdata\PCDr\6308\AddOnDownloaded\50441041-9037-4c34-842c-4a8523e700da.dll
c:\programdata\PCDr\6308\AddOnDownloaded\5737a9df-39af-4df3-b97d-07f556d679c5.dll
c:\programdata\PCDr\6308\AddOnDownloaded\5ec8c7eb-8ac7-4252-bb47-87f22e27e4a9.dll
c:\programdata\PCDr\6308\AddOnDownloaded\646d4422-eb1f-4e32-8b16-f32fc711fbc0.dll
c:\programdata\PCDr\6308\AddOnDownloaded\751275e0-9b7c-49a7-b6d8-eaf73a4eac58.dll
c:\programdata\PCDr\6308\AddOnDownloaded\7ec00d71-b236-42d5-b7d2-aab97a4a1f3d.dll
c:\programdata\PCDr\6308\AddOnDownloaded\840b04b8-fb1e-4492-9645-97c163fb4348.dll
c:\programdata\PCDr\6308\AddOnDownloaded\8658165e-a29d-4eca-a939-35aff3e05f62.dll
c:\programdata\PCDr\6308\AddOnDownloaded\8aa95cb2-816d-4a9a-a370-962b815a3013.dll
c:\programdata\PCDr\6308\AddOnDownloaded\a7c185b3-39a9-4aaf-9506-7726c68d6350.dll
c:\programdata\PCDr\6308\AddOnDownloaded\ad245130-e9e2-4a7e-8912-a540560daf66.dll
c:\programdata\PCDr\6308\AddOnDownloaded\be543d7a-9241-474e-9567-a20b994760c0.dll
c:\programdata\PCDr\6308\AddOnDownloaded\c0c54ea3-e58e-438a-9c4c-778b0979180a.dll
c:\programdata\PCDr\6308\AddOnDownloaded\e2989224-3347-43ce-b7a2-533339a265b0.dll
c:\programdata\SPL1478.tmp
c:\programdata\SPL18F9.tmp
c:\programdata\SPL1B13.tmp
c:\programdata\SPL2A52.tmp
c:\programdata\SPL30D7.tmp
c:\programdata\SPL4B26.tmp
c:\programdata\SPL522C.tmp
c:\programdata\SPL56F.tmp
c:\programdata\SPL5CDF.tmp
c:\programdata\SPL62DE.tmp
c:\programdata\SPL66EB.tmp
c:\programdata\SPL6935.tmp
c:\programdata\SPL764.tmp
c:\programdata\SPL82C5.tmp
c:\programdata\SPL83BA.tmp
c:\programdata\SPL8589.tmp
c:\programdata\SPL88D.tmp
c:\programdata\SPL90F6.tmp
c:\programdata\SPLA59E.tmp
c:\programdata\SPLA7B6.tmp
c:\programdata\SPLB3AD.tmp
c:\programdata\SPLBA2C.tmp
c:\programdata\SPLC200.tmp
c:\programdata\SPLD80.tmp
c:\programdata\SPLD993.tmp
c:\programdata\SPLE94C.tmp
c:\programdata\SPLEA62.tmp
c:\programdata\SPLED57.tmp
c:\programdata\SPLF014.tmp
c:\programdata\SPLF134.tmp
c:\programdata\SPLF3CA.tmp
c:\programdata\SPLF680.tmp
c:\programdata\SPLF998.tmp
c:\users\***\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\***\AppData\Roaming\.#
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-08-20 bis 2013-09-20 ))))))))))))))))))))))))))))))
.
.
2013-09-20 15:29 . 2013-09-20 15:29 -------- d-----w- c:\users\Public\AppData\Local\temp
2013-09-20 15:29 . 2013-09-20 15:29 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-09-20 13:05 . 2013-09-20 13:05 -------- d-----w- c:\program files\iPod
2013-09-20 13:05 . 2013-09-20 13:05 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-20 13:05 . 2013-09-20 13:05 -------- d-----w- c:\program files\iTunes
2013-09-20 08:51 . 2013-09-20 08:51 -------- d-----w- C:\FRST
2013-09-18 12:32 . 2013-09-18 12:32 -------- d-----w- c:\users\***\AppData\Roaming\RealNetworks
2013-09-18 12:32 . 2013-09-18 12:32 -------- d-----w- c:\program files (x86)\RealNetworks
2013-09-18 12:32 . 2013-09-18 12:32 -------- d-----w- c:\programdata\RealNetworks
2013-09-18 12:32 . 2013-09-18 12:32 -------- d-----w- c:\program files (x86)\Common Files\xing shared
2013-09-11 09:33 . 2013-08-05 02:25 155584 ----a-w- c:\windows\system32\drivers\ataport.sys
2013-09-10 10:07 . 2013-09-10 10:07 -------- d-----w- c:\program files (x86)\ESET
2013-09-10 09:49 . 2013-09-10 09:49 -------- d-----w- c:\program files (x86)\Common Files\Java
2013-09-10 09:48 . 2013-09-10 09:48 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-08-26 09:13 . 2013-08-26 09:13 354656 ----a-w- c:\windows\SysWow64\DivXControlPanelApplet.cpl
2013-08-26 06:28 . 2013-08-26 06:28 -------- d-----w- c:\users\***\AppData\Roaming\NVIDIA
2013-08-26 06:20 . 2013-09-20 15:19 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2013-08-26 06:20 . 2009-01-25 11:14 17272 ----a-w- c:\windows\system32\sdnclean64.exe
2013-08-26 06:20 . 2013-08-26 06:31 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2013-08-26 05:48 . 2013-08-26 05:48 -------- d-----w- c:\users\UpdatusUser
2013-08-26 05:47 . 2013-08-09 01:05 3310693 ----a-w- c:\windows\system32\nvcoproc.bin
2013-08-26 05:46 . 2013-08-26 05:48 -------- d-----w- c:\program files (x86)\NVIDIA Corporation
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-20 10:18 . 2012-05-09 11:02 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-20 10:18 . 2012-01-17 10:23 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-18 12:31 . 2013-06-13 18:59 499712 ----a-w- c:\windows\SysWow64\msvcp71.dll
2013-09-11 18:49 . 2012-02-09 16:54 79143768 ----a-w- c:\windows\system32\MRT.exe
2013-09-10 09:48 . 2012-06-15 19:56 867240 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-09-10 09:48 . 2012-01-17 10:35 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-08-20 04:54 . 2013-08-20 04:54 15149048 ----a-w- c:\windows\system32\nvd3dumx.dll
2013-08-20 04:54 . 2013-08-20 04:54 25256224 ----a-w- c:\windows\system32\nvcompiler.dll
2013-08-20 04:54 . 2013-08-20 04:54 467744 ----a-w- c:\windows\SysWow64\NvIFR.dll
2013-08-20 04:54 . 2012-01-17 17:55 13419112 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-08-20 04:54 . 2013-08-20 04:54 11248416 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-08-20 04:54 . 2013-08-20 04:54 2362656 ----a-w- c:\windows\system32\nvcuvenc.dll
2013-08-20 04:53 . 2013-08-20 04:53 1511712 ----a-w- c:\windows\system32\nvdispgenco6432078.dll
2013-08-20 04:53 . 2013-08-20 04:53 620832 ----a-w- c:\windows\system32\NvFBC64.dll
2013-08-20 04:53 . 2013-08-20 04:53 548128 ----a-w- c:\windows\SysWow64\NvFBC.dll
2013-08-20 04:53 . 2012-01-17 17:55 12431872 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-08-20 04:53 . 2013-08-20 04:53 2780960 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2013-08-20 04:53 . 2013-08-20 04:53 266448 ----a-w- c:\windows\system32\nvinitx.dll
2013-08-20 04:53 . 2013-08-20 04:53 2598368 ----a-w- c:\windows\SysWow64\nvapi.dll
2013-08-20 04:53 . 2013-08-20 04:53 2002720 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2013-08-20 04:53 . 2012-01-17 17:55 2937256 ----a-w- c:\windows\system32\nvapi64.dll
2013-08-20 04:53 . 2013-08-20 04:53 6324896 ----a-w- c:\windows\SysWow64\nvopencl.dll
2013-08-20 04:53 . 2013-08-20 04:53 1061632 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-08-20 04:52 . 2013-08-20 04:52 21106464 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2013-08-20 04:52 . 2013-08-20 04:52 2958112 ----a-w- c:\windows\system32\nvcuvid.dll
2013-08-20 04:52 . 2013-08-20 04:52 214960 ----a-w- c:\windows\SysWow64\nvinit.dll
2013-08-20 04:52 . 2013-08-20 04:52 181488 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2013-08-20 04:52 . 2012-01-17 17:55 15928264 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-08-20 04:52 . 2013-08-20 04:52 9281544 ----a-w- c:\windows\system32\nvcuda.dll
2013-08-20 04:52 . 2013-08-20 04:52 928744 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2013-08-20 04:52 . 2013-08-20 04:52 570656 ----a-w- c:\windows\system32\NvIFR64.dll
2013-08-20 04:52 . 2013-08-20 04:52 1832224 ----a-w- c:\windows\system32\nvdispco6432078.dll
2013-08-20 04:52 . 2013-08-20 04:52 7719528 ----a-w- c:\windows\SysWow64\nvcuda.dll
2013-08-20 04:52 . 2013-08-20 04:52 7642344 ----a-w- c:\windows\system32\nvopencl.dll
2013-08-20 04:52 . 2013-08-20 04:52 218592 ----a-w- c:\windows\system32\nvoglshim64.dll
2013-08-20 04:52 . 2013-08-20 04:52 17560352 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2013-08-20 04:52 . 2013-08-20 04:52 27786528 ----a-w- c:\windows\system32\nvoglv64.dll
2013-08-09 20:07 . 2011-04-03 22:14 6513440 ----a-w- c:\windows\system32\nvcpl.dll
2013-08-09 20:07 . 2011-04-03 22:14 3519264 ----a-w- c:\windows\system32\nvsvc64.dll
2013-08-09 20:07 . 2011-04-03 22:15 893728 ----a-w- c:\windows\system32\nvvsvc.exe
2013-08-09 20:07 . 2011-04-03 22:15 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-08-09 20:07 . 2011-04-03 22:15 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-08-09 20:07 . 2011-04-03 21:15 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-08-09 13:37 . 2013-08-09 13:37 566560 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-08-07 22:54 . 2013-08-07 22:54 94208 ----a-w- c:\windows\SysWow64\dpl100.dll
2013-08-02 01:48 . 2013-09-11 09:33 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-07-25 09:25 . 2013-08-14 04:53 1888768 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-25 08:57 . 2013-08-14 04:53 1620992 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-19 01:58 . 2013-08-14 04:53 2048 ----a-w- c:\windows\system32\tzres.dll
2013-07-19 01:41 . 2013-08-14 04:53 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-07-09 05:52 . 2013-08-14 04:53 224256 ----a-w- c:\windows\system32\wintrust.dll
2013-07-09 05:51 . 2013-08-14 04:53 1217024 ----a-w- c:\windows\system32\rpcrt4.dll
2013-07-09 05:46 . 2013-08-14 04:53 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-07-09 05:46 . 2013-08-14 04:53 1472512 ----a-w- c:\windows\system32\crypt32.dll
2013-07-09 05:46 . 2013-08-14 04:53 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-07-09 04:52 . 2013-08-14 04:53 663552 ----a-w- c:\windows\SysWow64\rpcrt4.dll
2013-07-09 04:52 . 2013-08-14 04:53 175104 ----a-w- c:\windows\SysWow64\wintrust.dll
2013-07-09 04:46 . 2013-08-14 04:53 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-07-09 04:46 . 2013-08-14 04:53 1166848 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-07-09 04:46 . 2013-08-14 04:53 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-07-06 06:03 . 2013-08-14 04:52 1910208 ----a-w- c:\windows\system32\drivers\tcpip.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OM_Monitor"="c:\program files (x86)\OLYMPUS\OLYMPUS Master\Monitor.exe" [2006-05-16 57344]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"VolPanel"="c:\program files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" [2009-02-03 237693]
"SPIRunE"="SPIRunE.dll" [2009-07-27 18432]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-05-20 284440]
"ShwiconXP9106"="c:\program files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe" [2010-03-10 237568]
"THX Audio Control Panel"="c:\program files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe" [2009-12-01 963584]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2010-10-01 87336]
"PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-09-17 50472]
"BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2011-08-12 75048]
"Dell DataSafe Online"="c:\program files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe" [2010-08-25 1117528]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2013-09-03 40312]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-17 514544]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2013-03-13 1532992]
"NeroLauncher"="c:\program files (x86)\Nero\SyncUP\NeroLauncher.exe" [2012-08-21 67496]
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" [2011-04-29 885760]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"ZyXEL USB Share Center"="c:\program files (x86)\ZyXEL\NetUSB Share Center\Share Center.exe" [2010-07-22 5623808]
"Memeo Backup"="c:\program files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe" [2010-07-28 136416]
"QuickTime Task"="d:\programme\QuickTime\QTTask.exe" [2013-05-01 421888]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-07-25 5624784]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"DivXMediaServer"="d:\programme\DivX\DivX Media Server\DivXMediaServer.exe" [2013-08-21 450560]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2013-08-29 1861968]
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2013-09-18 295512]
"iTunesHelper"="d:\programme\iTunes\iTunesHelper.exe" [2013-09-17 152392]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-7-21 1132320]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2012-2-10 1207312]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe [x]
R2 CLKMSVC10_9EC60124;CyberLink Product - 2012/01/17 10:48;c:\program files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe;c:\program files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 dlecCATSCustConnectService;dlecCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\dlecserv.exe;c:\windows\SYSNATIVE\spool\DRIVERS\x64\3\\dlecserv.exe [x]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
R2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 HipShieldK;McAfee Inc. HipShieldK;c:\windows\system32\drivers\HipShieldK.sys;c:\windows\SYSNATIVE\drivers\HipShieldK.sys [x]
R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe;c:\progra~1\mcafee\msc\mcawfwk.exe [x]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys;c:\windows\SYSNATIVE\drivers\mferkdet.sys [x]
R3 netvsc;netvsc;c:\windows\system32\DRIVERS\netvsc60.sys;c:\windows\SYSNATIVE\DRIVERS\netvsc60.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]
R3 Synth3dVsc;Microsoft Virtual 3D Video Transport Driver;c:\windows\system32\drivers\Synth3dVsc.sys;c:\windows\SYSNATIVE\drivers\Synth3dVsc.sys [x]
R3 SynthVid;SynthVid;c:\windows\system32\DRIVERS\VMBusVideoM.sys;c:\windows\SYSNATIVE\DRIVERS\VMBusVideoM.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;Remote Deskotop USB Hub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 ZyxelUDSTcpBus;ZyxelUDSTcpBus;SysWOW64\Drivers\ZyxelUDSTcpBus.sys;SysWOW64\Drivers\ZyxelUDSTcpBus.sys [x]
R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys;c:\windows\SYSNATIVE\drivers\mfewfpk.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 dlec_device;dlec_device;c:\windows\system32\dleccoms.exe;c:\windows\SYSNATIVE\dleccoms.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]
S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [x]
S2 MemeoBackgroundService;MemeoBackgroundService;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe [x]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [x]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe;c:\windows\SYSNATIVE\mfevtps.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe [x]
S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys;c:\windows\SYSNATIVE\drivers\cfwids.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys;c:\windows\SYSNATIVE\drivers\mfefirek.sys [x]
S3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
S3 t3;Sound Blaster X-Fi Xtreme Audio;c:\windows\system32\drivers\t3.sys;c:\windows\SYSNATIVE\drivers\t3.sys [x]
S3 ZyxelUDSMBus;UDS Master Bus of Kernel USB Software Bus by TCP;SysWOW64\Drivers\ZyxelUDSMBus.sys;SysWOW64\Drivers\ZyxelUDSMBus.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - CLKMDRV10_9EC60124
*Deregistered* - mfeavfk01
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-09 10:18]
.
2013-09-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core.job
- c:\users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07 16:36]
.
2013-09-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA.job
- c:\users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07 16:36]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bluetooth Connection Assistant"="LBTWIZ.EXE -silent" [X]
"RunDLLEntry_THXCfg"="c:\windows\system32\THXCfg64.dll" [2009-10-15 17920]
"RunDLLEntry_EptMon"="c:\windows\system32\EptMon64.dll" [2009-10-15 21504]
"Stage Remote"="c:\program files (x86)\Dell\Stage Remote\StageRemote.exe" [2011-06-27 2022976]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-07-29 497648]
"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2011-04-29 2055016]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 108144]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]
"dlecmon.exe"="c:\program files (x86)\Dell P713w\dlecmon.exe" [2011-01-24 770728]
"EzPrint"="c:\program files (x86)\Dell P713w\ezprint.exe" [2011-01-24 139944]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www1.sunrise.ch/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.1 212.98.37.128 194.230.55.99
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\users\Hansulrich\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\
FF - prefs.js: network.proxy.type - 2
FF - ExtSQL: 2013-08-21 18:34; jid1-QpHD8URtZWJC2A@jetpack; c:\users\Hansulrich\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF - ExtSQL: 2013-09-18 14:32; {DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}; c:\programdata\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Notify-SDWinLogon - SDWinLogon.dll
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-Incomedia WebSite X5 Evolution - c:\windows\system32\iwpsetup.exe
AddRemove-PopTray Plug-ins - d:\programme\PopTray\Plugins\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-09-20 17:30:52
ComboFix-quarantined-files.txt 2013-09-20 15:30
.
Vor Suchlauf: 16 Verzeichnis(se), 335'750'135'808 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 335'677'509'632 Bytes frei
.
- - End Of File - - 22121BF9E811852B1A74998B00C1F810
|
|
20.09.2013, 21:02
| #9 |
| /// the machine /// TB-Ausbilder | Wirklich alle Trojaner vom PC entfernt? Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.09.2013, 19:24
| #10 |
| | Wirklich alle Trojaner vom PC entfernt? Hallo Schrauber Habe deine Anweisungen ausgeführt. Hier die Logfiles Gruss Hitman 21 Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.22.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16686 *** :: ***-PC [Administrator] 22.09.2013 16:54:52 mbam-log-2013-09-22 (16-54-52).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|G:\|H:\|I:\|J:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 521849 Laufzeit: 1 Stunde(n), 30 Minute(n), 17 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.004 - Bericht erstellt am 22/09/2013 um 19:02:38
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : *** - ***-PC
# Gestartet von : C:\Users\***\Desktop\adwcleaner.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gefunden : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\foxydeal.sqlite
Ordner Gefunden : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Ordner Gefunden C:\Users\***\AppData\LocalLow\boost_interprocess
Ordner Gefunden C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\jetpack
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : HKLM\Software\Conduit
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16686
-\\ Mozilla Firefox v10.0 (de)
[ Datei : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [1640 octets] - [22/09/2013 19:02:38]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1700 octets] ##########
Code:
ATTFilter # AdwCleaner v3.004 - Bericht erstellt am 22/09/2013 um 19:04:31
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : *** - ***-PC
# Gestartet von : C:\Users\***\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\***\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\jetpack
Ordner Gelöscht : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Datei Gelöscht : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\foxydeal.sqlite
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\Conduit
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16686
-\\ Mozilla Firefox v10.0 (de)
[ Datei : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [1784 octets] - [22/09/2013 19:02:38]
AdwCleaner[S0].txt - [1659 octets] - [22/09/2013 19:04:31]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1719 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.2 (09.22.2013:1)
OS: Windows 7 Ultimate x64
Ran by *** on 22.09.2013 at 19:14:59.40
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
~~~ Files
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\***\appdata\local\{186A3FD9-C7AE-4993-BD33-AA92A006CE2C}
Successfully deleted: [Empty Folder] C:\Users\***\appdata\local\{359006DF-7E48-44E9-9116-8A30940A1493}
Successfully deleted: [Empty Folder] C:\Users\***\appdata\local\{DF26A31E-45AA-4BC9-8398-0DF1D0374B90}
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.09.2013 at 19:19:36.13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2013
Ran by *** (administrator) on ***-PC on 22-09-2013 19:37:33
Running from C:\Users\***\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
( ) C:\Windows\system32\dleccoms.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe
() C:\Program Files (x86)\Dell P713w\dlecmon.exe
() C:\Program Files (x86)\Dell P713w\ezprint.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
() C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(CyberLink Corp.) C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(McAfee, Inc.) C:\Program Files\mcafee.com\agent\mcagent.exe
() C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
() C:\Program Files (x86)\ZyXEL\NetUSB Share Center\Share Center.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackup.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RunDLLEntry_THXCfg] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [RunDLLEntry_EptMon] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\EptMon64.dll,RunDLLEntry EptMon64
HKLM\...\Run: [Stage Remote] - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-27] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [DellStage] - C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj [207845 2011-04-29] ()
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Bluetooth Connection Assistant] - LBTWIZ.EXE -silent
HKLM\...\Run: [dlecmon.exe] - C:\Program Files (x86)\Dell P713w\dlecmon.exe [770728 2011-01-24] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Dell P713w\ezprint.exe [139944 2011-01-24] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [OM_Monitor] - C:\Program Files (x86)\OLYMPUS\OLYMPUS Master\Monitor.exe [57344 2006-05-16] (OLYMPUS IMAGING CORP.)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [237693 2009-02-03] (Creative Technology Ltd)
HKLM-x32\...\Run: [SPIRunE] - C:\Windows\\SysWOW64\SPIRunE.dll [18432 2009-07-27] (Creative Technology Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [ShwiconXP9106] - C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] - C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [75048 2011-08-12] (cyberlink)
HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-25] (Dell, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [RoxWatchTray] - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [NeroLauncher] - C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [67496 2012-08-21] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj [2825741 2011-04-29] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [ZyXEL USB Share Center] - C:\Program Files (x86)\ZyXEL\NetUSB Share Center\Share Center.exe [5623808 2010-07-22] ()
HKLM-x32\...\Run: [Memeo Backup] - C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2010-07-28] (Memeo Inc.)
HKLM-x32\...\Run: [QuickTime Task] - D:\Programme\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [DivXMediaServer] - D:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-18] (RealNetworks, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\Programme\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.sunrise.ch/
URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
SearchScopes: HKCU - {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120627195329.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Dell Symbolleiste - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120627195329.dll (McAfee, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Dell Symbolleiste - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 212.98.37.128 194.230.55.99
FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1%20%26%26%20url.indexOf('.png')%20%3D%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*'))%20%7B%20return%20'PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - D:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - D:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Просмотр HTTP заголовков - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{BAEBEF65-9289-47c5-8524-C345CC5D860D}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK
FF StartMenuInternet: FIREFOX.EXE - D:\Programme\Mozilla Firefox\firefox.exe
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (YouTube) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (SiteAdvisor) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_1
CHR Extension: (RealDownloader) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0
CHR Extension: (ProxTube) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkdbaehcjcomcnnjhlmnfddpgoafpcko\1.0.5_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
==================== Services (Whitelisted) =================
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [248304 2011-08-11] (CyberLink)
S2 dlecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dlecserv.exe [45224 2010-05-21] ()
R2 dlec_device; C:\Windows\system32\dleccoms.exe [1052328 2010-05-21] ( )
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [224704 2011-03-08] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [383608 2012-11-16] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
==================== Drivers (Whitelisted) ====================
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 ZyxelUDSMBus; C:\Windows\SysWow64\Drivers\ZyxelUDSMBus.sys [67168 2010-07-22] (Windows (R) Codename Longhorn DDK provider)
R3 ZyxelUDSTcpBus; C:\Windows\SysWow64\Drivers\ZyxelUDSTcpBus.sys [98912 2010-07-22] (Windows (R) Codename Longhorn DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S1 cdrbsdrv; No ImagePath
U3 mfeavfk01; No ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-22 19:37 - 2013-09-22 19:37 - 01956670 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-22 19:19 - 2013-09-22 19:19 - 00001439 _____ C:\Users\***\Desktop\JRT.txt
2013-09-22 19:14 - 2013-09-22 19:14 - 00000000 ____D C:\Windows\ERUNT
2013-09-22 19:12 - 2013-09-22 19:12 - 01030038 _____ (Thisisu) C:\Users\***\Desktop\JRT.exe
2013-09-22 19:01 - 2013-09-22 19:04 - 00000000 ____D C:\AdwCleaner
2013-09-22 19:00 - 2013-09-22 19:01 - 01039554 _____ C:\Users\***\Desktop\adwcleaner.exe
2013-09-20 17:49 - 2013-09-22 19:35 - 00000000 ____D C:\Users\***\Desktop\Neuer Ordner
2013-09-20 17:30 - 2013-09-20 17:30 - 00031923 _____ C:\ComboFix.txt
2013-09-20 17:19 - 2013-09-20 17:19 - 00000000 ____D C:\Users\***\Documents\ProcAlyzer Dumps
2013-09-20 17:13 - 2013-09-20 17:30 - 00000000 ____D C:\Qoobox
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\Program Files\iTunes
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\Program Files\iPod
2013-09-20 10:51 - 2013-09-20 10:51 - 00000000 ____D C:\FRST
2013-09-18 21:04 - 2013-09-22 19:29 - 00000840 _____ C:\Windows\setupact.log
2013-09-18 21:04 - 2013-09-20 17:31 - 00001912 _____ C:\Windows\PFRO.log
2013-09-18 21:04 - 2013-09-18 21:04 - 00000000 _____ C:\Windows\setuperr.log
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Users\***\AppData\Roaming\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\ProgramData\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-09-18 14:19 - 2013-09-18 14:19 - 00000494 _____ C:\Users\***\Desktop\***.website
2013-09-11 20:50 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 20:50 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 20:50 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 20:50 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 20:50 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 20:50 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 20:50 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 20:50 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 20:50 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 20:50 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 11:33 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 11:33 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 11:33 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 11:33 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 11:33 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 11:33 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 11:33 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 11:33 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 11:33 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 11:33 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 11:33 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 11:33 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 11:33 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:33 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 11:33 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 12:07 - 2013-09-10 12:07 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-10 11:49 - 2013-09-10 11:48 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-26 15:56 - 2013-08-26 15:56 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-26 09:10 - 2013-04-30 17:24 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts.20130826-091004.backup
2013-08-26 08:28 - 2013-08-26 08:28 - 00000000 ____D C:\Users\***\AppData\Roaming\NVIDIA
2013-08-26 08:24 - 2013-08-26 08:24 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-26 08:20 - 2013-09-20 17:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-26 08:20 - 2013-08-26 08:31 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-26 08:20 - 2013-08-26 08:20 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-26 08:20 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-08-26 08:11 - 2013-08-26 08:11 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Browser
2013-08-26 07:48 - 2013-08-26 07:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 06:46 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\SoftThinks
2013-08-26 07:48 - 2012-02-11 11:22 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-08-26 07:48 - 2012-01-17 13:03 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2013-08-26 07:48 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-08-26 07:48 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-08-26 07:47 - 2013-08-09 03:05 - 03310693 _____ C:\Windows\system32\nvcoproc.bin
2013-08-26 07:46 - 2013-08-26 07:48 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-08-24 21:53 - 2013-09-22 19:06 - 00003258 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
==================== One Month Modified Files and Folders =======
2013-09-22 19:37 - 2013-09-22 19:37 - 01956670 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-22 19:37 - 2009-07-14 06:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-22 19:37 - 2009-07-14 06:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-22 19:35 - 2013-09-20 17:49 - 00000000 ____D C:\Users\***\Desktop\Neuer Ordner
2013-09-22 19:33 - 2012-01-17 12:21 - 01421192 _____ C:\Windows\WindowsUpdate.log
2013-09-22 19:32 - 2012-02-14 22:14 - 00000000 ____D C:\Users\***\Documents\Outlook-Dateien
2013-09-22 19:30 - 2013-06-13 21:02 - 00003382 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-22 19:30 - 2012-02-16 18:08 - 00140306 _____ C:\ProgramData\dlecscan.log
2013-09-22 19:30 - 2012-01-17 13:07 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2013-09-22 19:30 - 2012-01-17 13:07 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2013-09-22 19:30 - 2012-01-17 12:42 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-09-22 19:30 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-22 19:29 - 2013-09-18 21:04 - 00000840 _____ C:\Windows\setupact.log
2013-09-22 19:29 - 2012-01-17 11:17 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-22 19:19 - 2013-09-22 19:19 - 00001439 _____ C:\Users\***\Desktop\JRT.txt
2013-09-22 19:18 - 2012-05-09 13:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-22 19:14 - 2013-09-22 19:14 - 00000000 ____D C:\Windows\ERUNT
2013-09-22 19:12 - 2013-09-22 19:12 - 01030038 _____ (Thisisu) C:\Users\***\Desktop\JRT.exe
2013-09-22 19:06 - 2013-08-24 21:53 - 00003258 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-22 19:04 - 2013-09-22 19:01 - 00000000 ____D C:\AdwCleaner
2013-09-22 19:01 - 2013-09-22 19:00 - 01039554 _____ C:\Users\***\Desktop\adwcleaner.exe
2013-09-22 18:53 - 2013-04-07 18:36 - 00001140 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA.job
2013-09-22 17:49 - 2012-02-09 14:29 - 00000000 ____D C:\Users\Hansulrich\AppData\Local\Nero
2013-09-22 16:53 - 2013-04-07 18:36 - 00001088 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core.job
2013-09-22 16:37 - 2012-03-07 10:41 - 00000656 _____ C:\Users\Hansulrich\Desktop\meteo.ch – Swiss Weather Portal.website
2013-09-22 16:18 - 2013-05-16 17:37 - 00003970 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C2FB5E82-8A0D-4224-BEE1-D9B54F21E70E}
2013-09-22 16:16 - 2012-01-17 12:59 - 00000000 ____D C:\ProgramData\Sonic
2013-09-20 17:31 - 2013-09-18 21:04 - 00001912 _____ C:\Windows\PFRO.log
2013-09-20 17:30 - 2013-09-20 17:30 - 00031923 _____ C:\ComboFix.txt
2013-09-20 17:30 - 2013-09-20 17:13 - 00000000 ____D C:\Qoobox
2013-09-20 17:29 - 2009-07-14 04:34 - 00000276 _____ C:\Windows\system.ini
2013-09-20 17:19 - 2013-09-20 17:19 - 00000000 ____D C:\Users\***\Documents\ProcAlyzer Dumps
2013-09-20 17:19 - 2013-08-26 08:20 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-20 17:06 - 2012-02-16 18:25 - 00000000 ____D C:\ProgramData\Dl_cats
2013-09-20 17:05 - 2012-02-10 09:59 - 00000000 ____D C:\Users\***\Geschäft
2013-09-20 17:04 - 2012-02-16 18:26 - 01712690 _____ C:\ProgramData\dlecJSW.log
2013-09-20 15:36 - 2012-01-17 13:00 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\Program Files\iTunes
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\Program Files\iPod
2013-09-20 13:56 - 2012-02-10 21:33 - 00002402 _____ C:\Users\Hansulrich\Desktop\Google Chrome.lnk
2013-09-20 12:18 - 2012-05-09 13:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 12:18 - 2012-05-09 13:02 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 12:18 - 2012-01-17 12:23 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 12:00 - 2012-02-10 19:36 - 00000000 ____D C:\Users\***\Desktop\Sicherheitsprogramme
2013-09-20 10:51 - 2013-09-20 10:51 - 00000000 ____D C:\FRST
2013-09-20 10:18 - 2013-05-22 15:45 - 00003440 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2013-09-19 19:33 - 2012-02-10 19:31 - 00000000 ____D C:\Program Files\Recuva
2013-09-19 18:47 - 2012-05-31 20:21 - 00000000 ____D C:\Users\***\AppData\Roaming\DVDVideoSoft
2013-09-18 21:04 - 2013-09-18 21:04 - 00000000 _____ C:\Windows\setuperr.log
2013-09-18 21:04 - 2009-07-14 06:45 - 00480048 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-18 19:09 - 2012-07-31 21:48 - 00000000 ____D C:\Users\***\AppData\Roaming\FileZilla
2013-09-18 17:53 - 2012-03-07 10:45 - 00000987 _____ C:\Users\***\Desktop\***.website
2013-09-18 15:28 - 2012-02-13 14:08 - 00000000 ___RD C:\Users\***\Desktop\Homepage
2013-09-18 14:37 - 2013-04-30 20:33 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Multimedia
2013-09-18 14:34 - 2012-02-10 19:53 - 00017408 _____ C:\Users\***\AppData\Local\WebpageIcons.db
2013-09-18 14:33 - 2013-06-13 21:00 - 00003360 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-18 14:33 - 2013-06-13 21:00 - 00003236 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Users\Hansulrich\AppData\Roaming\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\ProgramData\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-09-18 14:32 - 2013-06-13 21:00 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-09-18 14:32 - 2012-02-10 21:42 - 00000000 ____D C:\ProgramData\Real
2013-09-18 14:32 - 2012-02-10 21:42 - 00000000 ____D C:\Program Files (x86)\Real
2013-09-18 14:31 - 2013-06-13 20:59 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-09-18 14:19 - 2013-09-18 14:19 - 00000494 _____ C:\Users\***\Desktop\Curling Club Langenthal - clubmeisterschaft - Gruppe B.website
2013-09-18 14:15 - 2012-02-10 21:21 - 00000000 ____D C:\Users\***\AppData\Local\Mozilla
2013-09-18 14:14 - 2012-02-10 21:21 - 00000864 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-09-18 14:11 - 2012-02-09 14:18 - 00127384 _____ C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-18 14:09 - 2012-02-10 22:29 - 00000000 ____D C:\Program Files (x86)\DivX
2013-09-18 14:09 - 2012-02-10 22:25 - 00000000 ____D C:\ProgramData\DivX
2013-09-18 14:08 - 2012-02-10 22:29 - 00000000 ____D C:\Program Files\DivX
2013-09-18 14:00 - 2012-02-10 19:34 - 00000000 ____D C:\Program Files\Speccy
2013-09-18 12:44 - 2010-11-21 08:50 - 00696620 _____ C:\Windows\system32\perfh007.dat
2013-09-18 12:44 - 2010-11-21 08:50 - 00147916 _____ C:\Windows\system32\perfc007.dat
2013-09-18 12:44 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-17 09:17 - 2013-05-22 15:45 - 00000000 ____D C:\Program Files\My Dell
2013-09-17 09:17 - 2012-02-09 15:13 - 00000000 ____D C:\ProgramData\PCDr
2013-09-15 16:05 - 2011-02-11 19:57 - 00000000 ____D C:\Windows\panther
2013-09-12 11:48 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-12 09:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-12 07:12 - 2012-02-09 14:19 - 00000000 ___RD C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-12 07:12 - 2012-02-09 14:19 - 00000000 ___RD C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-11 20:51 - 2012-02-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-11 20:50 - 2013-08-06 11:56 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 20:49 - 2012-02-09 18:54 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 07:40 - 2012-02-10 13:25 - 00000000 ____D C:\Users\***\Verschiedenes
2013-09-10 19:11 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130915-160739.backup
2013-09-10 12:07 - 2013-09-10 12:07 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-10 11:48 - 2013-09-10 11:49 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-10 11:48 - 2012-06-15 21:56 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-09-10 11:48 - 2012-01-17 12:35 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-10 11:18 - 2012-01-17 12:35 - 00000000 ____D C:\Program Files\Java
2013-09-09 15:52 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130910-191130.backup
2013-09-09 11:44 - 2012-02-10 19:29 - 00000000 ____D C:\Program Files\CCleaner
2013-09-09 06:52 - 2012-01-17 13:00 - 00000000 ____D C:\Program Files\mcafee
2013-09-02 19:40 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130909-155239.backup
2013-08-26 18:39 - 2012-02-13 21:09 - 00000000 ____D C:\Users\***\Documents\Incomedia WebSite X5
2013-08-26 15:56 - 2013-08-26 15:56 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-26 09:10 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130902-194014.backup
2013-08-26 08:31 - 2013-08-26 08:20 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-26 08:28 - 2013-08-26 08:28 - 00000000 ____D C:\Users\***\AppData\Roaming\NVIDIA
2013-08-26 08:24 - 2013-08-26 08:24 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-26 08:20 - 2013-08-26 08:20 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-26 08:11 - 2013-08-26 08:11 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Browser
2013-08-26 08:09 - 2013-04-30 20:32 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tools
2013-08-26 07:55 - 2012-02-10 10:13 - 00000000 ____D C:\Users\***\Desktop\Verschiedenes
2013-08-26 07:50 - 2009-07-14 04:34 - 00000510 _____ C:\Windows\win.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-08-26 07:48 - 2012-01-17 11:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 07:42 - 2012-09-30 17:50 - 00000000 ____D C:\Windows\Minidump
2013-08-26 06:46 - 2013-08-26 07:48 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\SoftThinks
Files to move or delete:
====================
C:\ProgramData\dzofae.reg
Some content of TEMP:
====================
C:\Users\***\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 08:14
==================== End Of Log ============================
--- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-09-2013 Ran by *** at 2013-09-22 19:38:40 Running from C:\Users\***\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621) Adobe AIR (x32 Version: 3.1.0.4880) Adobe Community Help (x32 Version: 3.2.1) Adobe Community Help (x32 Version: 3.2.1.650) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168) Adobe Photoshop Elements 9 (x32 Version: 9.0.3.0) Adobe Premiere Elements 9 (x32 Version: 9.0) Adobe Premiere Elements 9 (x32 Version: 9.0.1) Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8) Apple Application Support (x32 Version: 2.3.6) Apple Mobile Device Support (Version: 7.0.0.117) Apple Software Update (x32 Version: 2.1.3.127) Bing Bar (x32 Version: 7.2.241.0) Bonjour (Version: 3.0.0.10) CCleaner (Version: 4.05) CDDRV_Installer (Version: 4.60) Creative Audio Control Panel (x32 Version: 3.00) Creative Software AutoUpdate (x32 Version: 1.40) Creative Sound Blaster Properties x64 Edition (x32) CyberLink PowerDVD 9.5 (x32 Version: 9.5.1.4418) D3DX10 (x32 Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition Dell DataSafe Local Backup - Support Software (x32 Version: 9.4.61) Dell DataSafe Local Backup (x32 Version: 9.4.61) Dell DataSafe Online (x32 Version: 2.1.19634) Dell Edoc Viewer (Version: 1.0.0) Dell Getting Started Guide (x32 Version: 1.00.0000) Dell MusicStage (x32 Version: 1.6.225.0) Dell P713w Dell PhotoStage (x32 Version: 1.5.0.65) Dell Stage (x32 Version: 1.5.201.0) Dell Stage Remote (x32 Version: 2.0.0.43) Dell Symbolleiste (x32 Version: 1.8.12.0) Dell VideoStage (x32 Version: 1.2.0.1719) Der Übersetzungsprofi 7.0 Europa Edition (x32) DesignPro 5 (x32 Version: 5.5.708) DirectX 9 Runtime (x32 Version: 1.00.0000) DivX-Setup (x32 Version: 2.6.1.84) DW WLAN Card (Version: 5.60.48.35) eBay (x32 Version: 1.4.0) Elements 9 Organizer (x32 Version: 9.0) Elements STI Installer (x32 Version: 1.0) erLT (x32 Version: 1.20.0137) ESET Online Scanner v3 (x32) FastStone Capture 5.3 (x32 Version: 5.3) FileZilla Client 3.7.3 (x32 Version: 3.7.3) FLV Player 2.0 (build 25) (x32 Version: 2.0 (build 25)) Google Chrome (HKCU Version: 29.0.1547.76) Google Earth (x32 Version: 6.2.0.5905) Host OpenAL (x32 Version: 1.00) iCloud (Version: 3.0.2.163) ImageMixer VCD/DVD2 for OLYMPUS (x32 Version: 2.01.050.1) Incomedia WebSite X5 Evolution (x32) Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002) IrfanView (remove only) (x32 Version: 4.32) iTunes (Version: 11.1.0.126) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Junk Mail filter update (x32 Version: 15.4.3502.0922) JURA IMPRESSA Z5 G2 (x32 Version: 1.0) KhalInstallWrapper (Version: 2.00.0000) Logitech SetPoint (x32 Version: 4.80) Logitech Unifying-Software 2.10 (Version: 2.10.37) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) McAfee SecurityCenter (x32 Version: 11.6.511) Memeo Backup (x32) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) Mozilla Firefox 10.0 (x86 de) (x32 Version: 10.0) Mozilla Firefox 24.0 (x86 de) (HKCU Version: 24.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Multimedia Card Reader (x32 Version: 1.7.915.93) My Dell (Version: 3.4.6308.28) Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0) Nero Blu-ray Player (x32 Version: 12.0.20014) Nero Control Center 10 (x32 Version: 10.6.13000.0.11) Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800) Nero Core Components 10 (x32 Version: 2.0.20000.9.12) Nero Update (x32 Version: 11.0.11800.31.0) NVIDIA 3D Vision Treiber 320.78 (Version: 320.78) NVIDIA Grafiktreiber 320.78 (Version: 320.78) NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0) NVIDIA Install Application (Version: 2.1002.124.810) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2078) NVIDIA Systemsteuerung 320.78 (Version: 320.78) NVIDIA Update 1.14.17 (Version: 1.14.17) NVIDIA Update Components (Version: 1.14.17) OLYMPUS Master (x32 Version: 1.00.8000) OLYMPUS Master addin (x32 Version: 1.00.0000) PhotoShowExpress (x32 Version: 2.0.063) PopTray Plug-ins (beta 6) (x32 Version: (beta 6)) PVX Plus WindX Standalone V10 (build 9300.2) (x32 Version: 10.0.9300.2) QuickTime (x32 Version: 7.74.80.86) RBVirtualFolder64Inst (Version: 1.00.0000) RealDownloader (x32 Version: 1.3.3) RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0) RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0) RealPlayer (x32 Version: 16.0.3) RealUpgrade 1.1 (x32 Version: 1.1.0) Recuva (Version: 1.48) Roxio Activation Module (x32 Version: 1.0) Roxio BackOnTrack (x32 Version: 1.3.3) Roxio Burn (x32 Version: 1.8) Roxio Creator Starter (x32 Version: 1.0.439) Roxio Creator Starter (x32 Version: 12.1.77.0) Roxio Creator Starter (x32 Version: 5.0.0) Roxio Express Labeler 3 (x32 Version: 3.2.2) Roxio File Backup (Version: 1.3.2) SafeGuard® PrivateCrypto 2.31.1 (x32 Version: 2.31.1.2) SereneScreen Marine Aquarium 3 (x32 Version: 3.0) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition Shared C Run-time for x64 (Version: 10.0.0) Skype™ 5.10 (x32 Version: 5.10.116) SmartSound Quicktracks for Premiere Elements 9.0 (x32 Version: 3.12.3090) Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0) Sound Blaster X-Fi (x32 Version: 1.0) Speccy (Version: 1.23) Spybot - Search & Destroy (x32 Version: 2.1.21) SWFBanner (x32) SyncUP (x32 Version: 1.12.12400.17.102) SyncUP (x32 Version: 10.2.15400) THX TruStudio PC (x32 Version: 1.0) Translators (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition Update for Microsoft Office 2010 (KB2553092) Update for Microsoft Office 2010 (KB2553157) 64-Bit Edition Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition Update for Microsoft Office 2010 (KB2589370) 64-Bit Edition Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition Update for Microsoft Office 2010 (KB2760758) 64-Bit Edition Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) White Christmas 3D Screensaver and Animated Wallpaper 1.0 (x32 Version: 1.0) WIDCOMM Bluetooth Software (Version: 6.3.0.6200) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3508.1109) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) WinRAR 4.20 (64-Bit) (Version: 4.20.0) World of Tanks (x32) Zattoo4 4.0.5 (x32 Version: 4.0.5) Zinio Reader 4 (x32 Version: 4.2.4164) ZyXEL NAS Starter Utility (x32 Version: 2.00.18) ZyXEL NetUSB Share Center (x32 Version: 1.0.1.c) ==================== Restore Points ========================= 11-09-2013 18:45:56 Windows Update 19-09-2013 13:31:27 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-09-20 17:29 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {0C1F02CE-7F0C-4CAB-9E38-B3FAC1A6CBD6} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {0E9C04BF-B99A-4155-96B3-BE4F30F4F371} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07] (Google Inc.) Task: {12444129-DF73-4B3B-AF80-70D4C4372E95} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-09-06] (PC-Doctor, Inc.) Task: {12BCD626-B866-4EED-8648-84E413F59079} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {1ED8EC9A-4750-4BED-9FDA-AC6085A6D836} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {1F8B5F37-2C7B-403B-AF71-ADDA4D6AF1E8} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {200C55F2-3559-4AAD-8F98-E745305144D7} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {3B82F3E0-1BCE-4C76-BB25-B7ECC370D2D3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd) Task: {40F48374-FF80-48D6-98D2-2F9B77B1E57D} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3354904592-2679355235-2660027724-1000 Task: {5C3A1CF3-713D-4861-A683-5D27D54D6387} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {5C548308-66C5-4EF2-9922-895B6D4617E6} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {6730EC82-92E9-4B52-97CE-2C22A64E64E8} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {7416F852-5512-45B3-BF93-8BF19DE6E6D7} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {7C62FD5E-009A-47FE-94F4-55788F50E832} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {7D6CE335-8BAE-4153-B9F2-67DC352466E7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {8E287E0D-63E7-4BC2-BBE1-E2B190CE1C0D} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-09-06] (PC-Doctor, Inc.) Task: {9FF8F513-47D7-411D-A2F7-303AE40950E5} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.) Task: {A4B8D584-FFF0-4BEC-BC06-3FAEF4F3C82F} - System32\Tasks\User_Feed_Synchronization-{C2FB5E82-8A0D-4224-BEE1-D9B54F21E70E} => C:\Windows\system32\msfeedssync.exe [2013-06-04] (Microsoft Corporation) Task: {A98B46B1-D86A-407A-9FF1-FD1CCF0D0E26} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated) Task: {B605FC93-E9AD-4F46-9EFC-121157B8A1FE} - System32\Tasks\SystemToolsDailyTest => C:\Windows\System32\uaclauncher.exe Task: {CFE92416-BC4A-46C3-8262-C36B90136161} - System32\Tasks\AdobeAAMUpdater-1.0-Hansulrich-PC-*** => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29] (Adobe Systems Incorporated) Task: {D02CCBE4-45A8-491F-8DC8-C9D6CE4A5304} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {DCAC94A2-7DE5-4E12-BB3A-3C01EF10AFF2} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {DEF5A94B-3788-448E-BCFB-079631B791D5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () D:\Programme\FileZilla FTP Client\fzshellext_64.dll 2010-07-21 15:46 - 2010-07-21 15:46 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll 2012-02-10 22:54 - 2009-07-20 13:35 - 00096272 _____ (Logitech, Inc.) C:\Windows\system32\KemXML.dll 2012-02-10 22:54 - 2009-07-20 13:34 - 00235536 _____ (Logitech, Inc.) C:\Windows\system32\kemutb.dll 2012-02-10 22:54 - 2009-07-20 13:34 - 00235536 _____ (Logitech, Inc.) C:\Windows\system32\KemUtil.dll 2012-02-10 22:54 - 2009-07-20 13:34 - 00159248 _____ (Logitech, Inc.) C:\Windows\system32\KemWnd.dll 2012-02-10 22:54 - 2009-07-20 13:35 - 00018960 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll 2010-03-16 22:28 - 2010-03-16 22:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll 2010-03-22 17:52 - 2010-03-22 17:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll 2010-03-16 22:28 - 2010-03-16 22:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll 2010-03-16 22:28 - 2010-03-16 22:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll 2011-06-25 01:20 - 2011-06-25 01:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll 2011-06-27 21:25 - 2011-06-27 21:25 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll 2011-06-25 01:32 - 2011-06-25 01:32 - 00323136 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll 2010-03-11 21:52 - 2010-03-11 21:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll 2010-03-05 17:07 - 2010-03-05 17:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll 2010-03-05 17:07 - 2010-03-05 17:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll 2010-03-11 21:52 - 2010-03-11 21:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll 2012-02-16 18:05 - 2009-11-26 10:53 - 00086180 _____ () C:\Program Files (x86)\Dell P713w\dleccfg.dll 2012-02-16 18:06 - 2010-04-01 19:23 - 00389120 _____ () C:\Program Files (x86)\Dell P713w\dlecscw.dll 2012-02-16 18:06 - 2009-03-25 17:10 - 00192512 _____ () C:\Program Files (x86)\Dell P713w\dlecdatr.dll 2012-02-16 18:06 - 2010-04-01 19:24 - 01159168 _____ () C:\Program Files (x86)\Dell P713w\dlecDRS.dll 2012-02-16 18:06 - 2009-03-10 07:43 - 00155648 _____ () C:\Program Files (x86)\Dell P713w\dleccaps.dll 2012-02-16 18:06 - 2009-03-05 19:55 - 00059904 _____ () C:\Program Files (x86)\Dell P713w\dleccnv4.dll 2012-02-16 18:06 - 2009-03-10 07:41 - 00966656 _____ (Corp.) C:\Program Files (x86)\Dell P713w\dlecmonr.dll 2012-02-16 18:06 - 2009-12-09 21:35 - 00802816 _____ ( ) C:\Program Files (x86)\Dell P713w\dleccomc.dll 2012-02-16 17:59 - 2009-02-12 13:33 - 00381952 _____ () C:\Windows\system32\dlecsm.dll 2012-02-16 17:59 - 2009-04-28 09:57 - 00032768 _____ () C:\Windows\system32\dlecsmr.dll 2012-02-16 18:06 - 2009-06-22 15:08 - 00708608 _____ () C:\Program Files (x86)\Dell P713w\Epwizard.DLL 2012-02-16 18:06 - 2009-06-22 15:06 - 00159744 _____ () C:\Program Files (x86)\Dell P713w\customui.dll 2012-02-16 18:06 - 2009-06-22 15:06 - 00114688 _____ () C:\Program Files (x86)\Dell P713w\Eputil.DLL 2012-02-16 18:06 - 2009-06-22 15:05 - 00139264 _____ () C:\Program Files (x86)\Dell P713w\Imagutil.DLL 2012-02-16 18:06 - 2009-06-22 15:06 - 00061440 _____ () C:\Program Files (x86)\Dell P713w\Epfunct.DLL 2012-02-16 18:06 - 2009-06-23 13:11 - 02203648 _____ () C:\Program Files (x86)\Dell P713w\EPWizRes.dll 2012-02-16 18:06 - 2009-06-23 13:13 - 00045056 _____ () C:\Program Files (x86)\Dell P713w\epstring.dll 2012-02-16 18:06 - 2009-06-23 13:13 - 00221184 _____ () C:\Program Files (x86)\Dell P713w\EPOEMDll.dll 2012-02-16 18:06 - 2009-04-07 21:25 - 00409600 _____ () C:\Program Files (x86)\Dell P713w\iptk.dll 2012-02-16 18:06 - 2010-04-01 19:18 - 00548864 _____ (PDFlib GmbH) C:\Program Files (x86)\Dell P713w\PdfLib.dll 2012-02-16 18:06 - 2009-03-02 16:25 - 00151552 _____ () C:\Program Files (x86)\Dell P713w\dlecptp.dll 2012-01-17 12:36 - 2009-12-29 18:50 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL 2012-01-17 12:36 - 2010-01-12 17:36 - 00177664 _____ () C:\Windows\SysWOW64\APOMngr.DLL 2009-08-26 06:29 - 2009-08-26 06:29 - 00150016 _____ () C:\Windows\SysWOW64\OemSpiE.dll 2013-08-15 07:38 - 2013-08-15 07:38 - 00492032 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\97ce162bb354fcf9c8d9eae8252ee216\IAStorUtil.ni.dll 2013-07-12 06:56 - 2013-07-12 06:56 - 00014336 _____ (Intel Corp.) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\22d36f517c7545fdb65ccddae680a3eb\IAStorCommon.ni.dll 2010-11-22 15:27 - 2010-11-22 15:27 - 00190960 _____ (Roxio, Inc.) c:\program files (x86)\common files\roxio shared\dllshared\rsl.dll 2010-11-25 00:44 - 2010-11-25 00:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll 2011-04-29 20:13 - 2011-04-29 20:13 - 18908672 _____ (Unlimited Realities) C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\libumajin.dll 2011-04-29 20:13 - 2011-04-29 20:13 - 07938048 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll 2011-04-29 20:13 - 2011-04-29 20:13 - 02225664 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll 2013-04-04 01:09 - 2013-04-04 01:09 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-11-21 05:25 - 2010-11-21 05:25 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2013-08-26 08:20 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-08-26 08:20 - 2013-05-16 10:55 - 03643800 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl 2013-08-26 08:20 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll 2011-11-02 00:26 - 2011-11-02 00:26 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll 2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 01660128 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Utility.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00020704 _____ (Stan Schultes, VBNetExpert.com) C:\Program Files (x86)\Memeo\AutoBackup\XMLSettings.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00054496 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Interop.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 01553632 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00057344 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.DataClad.resources.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 02887904 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.UI.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00025824 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.DriveDetection.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00094208 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\MemeoBackup.resources.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00296160 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.DataAccess.dll 2010-07-28 19:57 - 2010-07-28 19:57 - 02798816 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.BMU.dll 2010-04-05 20:52 - 2010-04-05 20:52 - 00013824 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.eWebControl.dll 2009-08-19 20:56 - 2009-08-19 20:56 - 00143360 _____ (Digital River, Inc.) C:\Program Files (x86)\Common Files\Memeo\eWebControl365.dll 2010-07-28 19:58 - 2010-07-28 19:58 - 00025824 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Third-party.Security.dll 2010-07-28 19:57 - 2010-07-28 19:57 - 00074976 _____ (Finisar Corporation) C:\Program Files (x86)\Memeo\AutoBackup\SQLite.NET.dll 2010-04-05 20:52 - 2010-04-05 20:52 - 00504293 _____ () C:\Program Files (x86)\Memeo\AutoBackup\sqlite3.DLL 2010-07-28 19:58 - 2010-07-28 19:58 - 00087264 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\providers\Tanagra.BMU.Providers.FileCopyBackupProvider.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00036864 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.Utility.resources.dll 2010-04-05 20:14 - 2010-04-05 20:14 - 00397312 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.Outlook.dll 2010-07-28 19:57 - 2010-07-28 19:57 - 00067808 _____ (Newtonsoft) C:\Program Files (x86)\Memeo\AutoBackup\Newtonsoft.Json.dll 2010-07-28 19:59 - 2010-07-28 19:59 - 00114688 _____ () C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Memeo.Client.UI.resources.dll ==================== Alternate Data Streams (whitelisted) ====== ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/22/2013 07:30:13 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/22/2013 07:30:07 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (09/22/2013 07:21:45 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/22/2013 07:21:36 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) System errors: ============= Error: (09/22/2013 07:31:16 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht. Error: (09/22/2013 07:30:46 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht. Error: (09/22/2013 07:30:02 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/22/2013 07:30:02 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlecCATSCustConnectService erreicht. Error: (09/22/2013 07:29:52 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/22/2013 07:29:52 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/22/2013 07:29:51 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/22/2013 07:21:32 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/22/2013 07:21:32 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlecCATSCustConnectService erreicht. Error: (09/22/2013 07:21:21 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Microsoft Office Sessions: ========================= Error: (09/22/2013 07:30:13 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/22/2013 07:30:07 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (09/22/2013 07:21:45 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/22/2013 07:21:36 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) CodeIntegrity Errors: =================================== Date: 2013-09-22 16:56:08.349 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-22 16:56:08.349 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-22 16:56:08.349 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-20 17:28:59.457 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-20 17:28:59.426 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-19 21:59:51.523 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 21:59:51.523 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 21:59:51.523 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 13:08:46.157 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-19 13:08:46.142 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 16% Total physical RAM: 16366.45 MB Available physical RAM: 13635.96 MB Total Pagefile: 32731.07 MB Available Pagefile: 29715.33 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:446.47 GB) (Free:312.02 GB) NTFS Drive d: (DATAPART1) (Fixed) (Total:931.51 GB) (Free:915.5 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 12501AB2) Partition 1: (Not Active) - (Size=39 MB) - (Type=DE) Partition 2: (Active) - (Size=19 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=446 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 12501AAF) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
|
22.09.2013, 19:45
| #11 |
| /// the machine /// TB-Ausbilder | Wirklich alle Trojaner vom PC entfernt?ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
25.09.2013, 20:24
| #12 |
| | Wirklich alle Trojaner vom PC entfernt? Guten Abend Schrauber Habe deine Anweisungen wieder ausgeführt und nun hier die Logfiles: ESET Online Scanner kein Fund Code:
ATTFilter ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=93eeaa7d6291b04d951c7ade196551e9
# engine=15073
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-10 12:18:58
# local_time=2013-09-10 02:18:58 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5122 16777213 100 88 11469976 127598134 0 0
# compatibility_mode=5893 16776574 100 94 5212332 130445388 0 0
# scanned=340516
# found=0
# cleaned=0
# scan_time=7640
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=93eeaa7d6291b04d951c7ade196551e9
# engine=15189
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2013-09-19 04:39:14
# local_time=2013-09-19 06:39:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5122 16777213 100 88 12263192 128391350 0 0
# compatibility_mode=5893 16776574 100 94 6005548 131238604 0 0
# scanned=92104
# found=3
# cleaned=0
# scan_time=2288
sh=81C2C3354F11ECE49D7667538CEFE9F2B2395319 ft=1 fh=cca4b3788ffc60aa vn="a variant of Win32/Bundled.Toolbar.Ask application" ac=I fn="C:\Program Files (x86)\Common Files\DVDVideoSoft\AskTB\ApnIC.dll"
sh=99DD33D629341F95D9853B1E63FCE454EC654560 ft=1 fh=08803d4e54260720 vn="a variant of Win32/Bundled.Toolbar.Ask application" ac=I fn="C:\Program Files (x86)\Common Files\DVDVideoSoft\AskTB\ApnToolbarInstaller.exe"
sh=785DFABC46C9C7565399D88303FCCEEE74CC3232 ft=1 fh=aec9b4377c177968 vn="a variant of Win32/HiddenStart.A application" ac=I fn="C:\Program Files (x86)\Dell DataSafe Local Backup\hstart.exe"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=93eeaa7d6291b04d951c7ade196551e9
# engine=15246
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-25 07:19:08
# local_time=2013-09-25 09:19:08 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5122 16777213 100 88 12747986 128876144 0 0
# compatibility_mode=5893 16776574 100 94 6490342 131723398 0 0
# scanned=344010
# found=0
# cleaned=0
# scan_time=5193
Code:
ATTFilter Results of screen317's Security Check version 0.99.73 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` McAfee Anti-Virus und Anti-Spyware WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 25 Adobe Flash Player 11.8.800.168 Adobe Reader 10.1.8 Adobe Reader out of Date! Mozilla Firefox 10.0 Firefox out of Date! Google Chrome 29.0.1547.66 Google Chrome 29.0.1547.76 ````````Process Check: objlist.exe by Laurent```````` Spybot Teatimer.exe is disabled! `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2013
Ran by *** (administrator) on ***-PC on 25-09-2013 20:53:18
Running from C:\Users\H***\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
( ) C:\Windows\system32\dleccoms.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe
() C:\Program Files (x86)\Dell P713w\dlecmon.exe
() C:\Program Files (x86)\Dell P713w\ezprint.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
() C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(CyberLink Corp.) C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(McAfee, Inc.) C:\Program Files\mcafee.com\agent\mcagent.exe
() C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
() C:\Program Files (x86)\ZyXEL\NetUSB Share Center\Share Center.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackup.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RunDLLEntry_THXCfg] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [RunDLLEntry_EptMon] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\EptMon64.dll,RunDLLEntry EptMon64
HKLM\...\Run: [Stage Remote] - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-27] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [DellStage] - C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj [207845 2011-04-29] ()
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Bluetooth Connection Assistant] - LBTWIZ.EXE -silent
HKLM\...\Run: [dlecmon.exe] - C:\Program Files (x86)\Dell P713w\dlecmon.exe [770728 2011-01-24] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Dell P713w\ezprint.exe [139944 2011-01-24] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKCU\...\Run: [OM_Monitor] - C:\Program Files (x86)\OLYMPUS\OLYMPUS Master\Monitor.exe [57344 2006-05-16] (OLYMPUS IMAGING CORP.)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [237693 2009-02-03] (Creative Technology Ltd)
HKLM-x32\...\Run: [SPIRunE] - C:\Windows\\SysWOW64\SPIRunE.dll [18432 2009-07-27] (Creative Technology Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [ShwiconXP9106] - C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] - C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [75048 2011-08-12] (cyberlink)
HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-25] (Dell, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [RoxWatchTray] - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [NeroLauncher] - C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [67496 2012-08-21] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj [2825741 2011-04-29] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [ZyXEL USB Share Center] - C:\Program Files (x86)\ZyXEL\NetUSB Share Center\Share Center.exe [5623808 2010-07-22] ()
HKLM-x32\...\Run: [Memeo Backup] - C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2010-07-28] (Memeo Inc.)
HKLM-x32\...\Run: [QuickTime Task] - D:\Programme\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [DivXMediaServer] - D:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-18] (RealNetworks, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\Programme\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.sunrise.ch/
URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
SearchScopes: HKCU - {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120627195329.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Dell Symbolleiste - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120627195329.dll (McAfee, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Dell Symbolleiste - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 212.98.37.128 194.230.55.99
FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1%20%26%26%20url.indexOf('.png')%20%3D%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*'))%20%7B%20return%20'PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - D:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - D:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Просмотр HTTP заголовков - C:\Users\Hansulrich\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4988pq95.default\Extensions\{BAEBEF65-9289-47c5-8524-C345CC5D860D}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK
FF StartMenuInternet: FIREFOX.EXE - D:\Programme\Mozilla Firefox\firefox.exe
Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Google Docs) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\***L~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1
CHR Extension: (Google Search) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (SiteAdvisor) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_0
CHR Extension: (RealDownloader) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\***L~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\***~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
==================== Services (Whitelisted) =================
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [248304 2011-08-11] (CyberLink)
S2 dlecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dlecserv.exe [45224 2010-05-21] ()
R2 dlec_device; C:\Windows\system32\dleccoms.exe [1052328 2010-05-21] ( )
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [224704 2011-03-08] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [383608 2012-11-16] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
==================== Drivers (Whitelisted) ====================
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 ZyxelUDSMBus; C:\Windows\SysWow64\Drivers\ZyxelUDSMBus.sys [67168 2010-07-22] (Windows (R) Codename Longhorn DDK provider)
R3 ZyxelUDSTcpBus; C:\Windows\SysWow64\Drivers\ZyxelUDSTcpBus.sys [98912 2010-07-22] (Windows (R) Codename Longhorn DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S1 cdrbsdrv; No ImagePath
U3 mfeavfk01; No ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-25 09:51 - 2013-09-25 09:51 - 01955802 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-25 09:50 - 2013-09-25 09:50 - 00001053 _____ C:\Users\***\Desktop\checkup.txt
2013-09-25 09:37 - 2013-09-25 09:37 - 00891144 _____ C:\Users\***\Desktop\SecurityCheck.exe
2013-09-25 07:48 - 2013-09-25 07:48 - 02347384 _____ (ESET) C:\Users\***\Desktop\esetsmartinstaller_enu.exe
2013-09-24 13:04 - 2013-09-24 13:04 - 305072229 _____ C:\Users\***\Desktop\Holmac.mp4
2013-09-22 20:35 - 2013-09-25 09:50 - 00000000 ____D C:\Users\***\Desktop\Neuer Ordner (2)
2013-09-22 20:35 - 2013-09-22 20:35 - 00000000 ____D C:\Users\***\Desktop\Neuer Ordner (3)
2013-09-22 19:14 - 2013-09-22 19:14 - 00000000 ____D C:\Windows\ERUNT
2013-09-22 19:01 - 2013-09-22 19:04 - 00000000 ____D C:\AdwCleaner
2013-09-20 17:49 - 2013-09-25 07:48 - 00000000 ____D C:\Users\***\Desktop\Neuer Ordner
2013-09-20 17:30 - 2013-09-20 17:30 - 00031923 _____ C:\ComboFix.txt
2013-09-20 17:19 - 2013-09-20 17:19 - 00000000 ____D C:\Users\***\Documents\ProcAlyzer Dumps
2013-09-20 17:13 - 2013-09-20 17:30 - 00000000 ____D C:\Qoobox
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\Program Files\iTunes
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\Program Files\iPod
2013-09-20 10:51 - 2013-09-20 10:51 - 00000000 ____D C:\FRST
2013-09-18 21:04 - 2013-09-25 20:45 - 00001400 _____ C:\Windows\setupact.log
2013-09-18 21:04 - 2013-09-20 17:31 - 00001912 _____ C:\Windows\PFRO.log
2013-09-18 21:04 - 2013-09-18 21:04 - 00000000 _____ C:\Windows\setuperr.log
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Users\***\AppData\Roaming\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\ProgramData\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-09-18 14:19 - 2013-09-18 14:19 - 00000494 _____ C:\Users\***\Desktop\***.website
2013-09-11 20:50 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 20:50 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 20:50 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 20:50 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 20:50 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 20:50 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 20:50 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 20:50 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 20:50 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 20:50 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 20:50 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 11:33 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 11:33 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 11:33 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 11:33 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 11:33 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 11:33 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 11:33 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 11:33 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 11:33 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 11:33 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 11:33 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 11:33 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 11:33 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 11:33 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 11:33 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:33 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:33 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 11:33 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 12:07 - 2013-09-10 12:07 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-10 11:49 - 2013-09-10 11:48 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-26 15:56 - 2013-08-26 15:56 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-26 09:10 - 2013-04-30 17:24 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts.20130826-091004.backup
2013-08-26 08:28 - 2013-08-26 08:28 - 00000000 ____D C:\Users\***\AppData\Roaming\NVIDIA
2013-08-26 08:24 - 2013-08-26 08:24 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-26 08:20 - 2013-09-20 17:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-26 08:20 - 2013-08-26 08:31 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-26 08:20 - 2013-08-26 08:20 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-26 08:20 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-08-26 08:11 - 2013-08-26 08:11 - 00000000 ____D C:\Users\Hansulrich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Browser
2013-08-26 07:48 - 2013-08-26 07:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 06:46 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\SoftThinks
2013-08-26 07:48 - 2012-02-11 11:22 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-08-26 07:48 - 2012-01-17 13:03 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2013-08-26 07:48 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-08-26 07:48 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-08-26 07:47 - 2013-08-09 03:05 - 03310693 _____ C:\Windows\system32\nvcoproc.bin
2013-08-26 07:46 - 2013-08-26 07:48 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
==================== One Month Modified Files and Folders =======
2013-09-25 20:53 - 2013-04-07 18:36 - 00001140 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA.job
2013-09-25 20:52 - 2012-02-14 22:14 - 00000000 ____D C:\Users\***\Documents\Outlook-Dateien
2013-09-25 20:52 - 2009-07-14 06:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-25 20:52 - 2009-07-14 06:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-25 20:48 - 2012-01-17 12:21 - 01502978 _____ C:\Windows\WindowsUpdate.log
2013-09-25 20:46 - 2012-02-16 18:08 - 00141406 _____ C:\ProgramData\dlecscan.log
2013-09-25 20:45 - 2013-09-18 21:04 - 00001400 _____ C:\Windows\setupact.log
2013-09-25 20:45 - 2012-01-17 13:07 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2013-09-25 20:45 - 2012-01-17 13:07 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2013-09-25 20:45 - 2012-01-17 12:42 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-09-25 20:45 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-25 20:44 - 2012-01-17 11:17 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-25 19:40 - 2013-05-16 17:37 - 00003970 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C2FB5E82-8A0D-4224-BEE1-D9B54F21E70E}
2013-09-25 19:18 - 2012-05-09 13:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-25 19:17 - 2012-02-09 14:29 - 00000000 ____D C:\Users\***\AppData\Local\Nero
2013-09-25 16:53 - 2013-04-07 18:36 - 00001088 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core.job
2013-09-25 12:28 - 2013-08-24 21:53 - 00003258 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-25 12:28 - 2013-06-13 21:02 - 00003382 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-25 09:51 - 2013-09-25 09:51 - 01955802 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-25 09:50 - 2013-09-25 09:50 - 00001053 _____ C:\Users\Hansulrich\Desktop\checkup.txt
2013-09-25 09:50 - 2013-09-22 20:35 - 00000000 ____D C:\Users\Hansulrich\Desktop\Neuer Ordner (2)
2013-09-25 09:37 - 2013-09-25 09:37 - 00891144 _____ C:\Users\Hansulrich\Desktop\SecurityCheck.exe
2013-09-25 09:03 - 2013-05-22 15:45 - 00003440 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2013-09-25 07:48 - 2013-09-25 07:48 - 02347384 _____ (ESET) C:\Users\***\Desktop\esetsmartinstaller_enu.exe
2013-09-25 07:48 - 2013-09-20 17:49 - 00000000 ____D C:\Users\Hansulrich\Desktop\Neuer Ordner
2013-09-25 06:51 - 2012-03-07 10:41 - 00000656 _____ C:\Users\Hansulrich\Desktop\meteo.ch – Swiss Weather Portal.website
2013-09-24 13:10 - 2013-06-13 21:00 - 00003360 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-24 13:10 - 2013-06-13 21:00 - 00003236 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-24 13:04 - 2013-09-24 13:04 - 305072229 _____ C:\Users\***\Desktop\Holmac.mp4
2013-09-24 12:55 - 2013-06-13 21:02 - 00003402 _____ C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000
2013-09-24 08:32 - 2012-02-16 18:26 - 01713230 _____ C:\ProgramData\dlecJSW.log
2013-09-24 08:32 - 2012-02-16 18:25 - 00000000 ____D C:\ProgramData\Dl_cats
2013-09-23 12:42 - 2012-02-10 09:59 - 00000000 ____D C:\Users\***\Geschäft
2013-09-23 12:21 - 2012-07-30 19:44 - 00000000 ____D C:\Users\***\NSU
2013-09-22 20:35 - 2013-09-22 20:35 - 00000000 ____D C:\Users\***\Desktop\Neuer Ordner (3)
2013-09-22 19:14 - 2013-09-22 19:14 - 00000000 ____D C:\Windows\ERUNT
2013-09-22 19:04 - 2013-09-22 19:01 - 00000000 ____D C:\AdwCleaner
2013-09-22 16:16 - 2012-01-17 12:59 - 00000000 ____D C:\ProgramData\Sonic
2013-09-20 17:31 - 2013-09-18 21:04 - 00001912 _____ C:\Windows\PFRO.log
2013-09-20 17:30 - 2013-09-20 17:30 - 00031923 _____ C:\ComboFix.txt
2013-09-20 17:30 - 2013-09-20 17:13 - 00000000 ____D C:\Qoobox
2013-09-20 17:29 - 2009-07-14 04:34 - 00000276 _____ C:\Windows\system.ini
2013-09-20 17:19 - 2013-09-20 17:19 - 00000000 ____D C:\Users\***\Documents\ProcAlyzer Dumps
2013-09-20 17:19 - 2013-08-26 08:20 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-20 15:36 - 2012-01-17 13:00 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\Program Files\iTunes
2013-09-20 15:05 - 2013-09-20 15:05 - 00000000 ____D C:\Program Files\iPod
2013-09-20 13:56 - 2012-02-10 21:33 - 00002402 _____ C:\Users\***\Desktop\Google Chrome.lnk
2013-09-20 12:18 - 2012-05-09 13:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 12:18 - 2012-05-09 13:02 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 12:18 - 2012-01-17 12:23 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 12:00 - 2012-02-10 19:36 - 00000000 ____D C:\Users\***\Desktop\Sicherheitsprogramme
2013-09-20 10:51 - 2013-09-20 10:51 - 00000000 ____D C:\FRST
2013-09-19 19:33 - 2012-02-10 19:31 - 00000000 ____D C:\Program Files\Recuva
2013-09-19 18:47 - 2012-05-31 20:21 - 00000000 ____D C:\Users\***\AppData\Roaming\DVDVideoSoft
2013-09-18 21:04 - 2013-09-18 21:04 - 00000000 _____ C:\Windows\setuperr.log
2013-09-18 21:04 - 2009-07-14 06:45 - 00480048 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-18 19:09 - 2012-07-31 21:48 - 00000000 ____D C:\Users\***\AppData\Roaming\FileZilla
2013-09-18 17:53 - 2012-03-07 10:45 - 00000987 _____ C:\Users\***\Desktop\***.website
2013-09-18 15:28 - 2012-02-13 14:08 - 00000000 ___RD C:\Users\***\Desktop\Homepage
2013-09-18 14:37 - 2013-04-30 20:33 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Multimedia
2013-09-18 14:34 - 2012-02-10 19:53 - 00017408 _____ C:\Users\***\AppData\Local\WebpageIcons.db
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Users\***\AppData\Roaming\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\ProgramData\RealNetworks
2013-09-18 14:32 - 2013-09-18 14:32 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-09-18 14:32 - 2013-06-13 21:00 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-09-18 14:32 - 2013-06-13 20:59 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-09-18 14:32 - 2012-02-10 21:42 - 00000000 ____D C:\ProgramData\Real
2013-09-18 14:32 - 2012-02-10 21:42 - 00000000 ____D C:\Program Files (x86)\Real
2013-09-18 14:31 - 2013-06-13 20:59 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-09-18 14:19 - 2013-09-18 14:19 - 00000494 _____ C:\Users\***\Desktop\Curling Club Langenthal - clubmeisterschaft - Gruppe B.website
2013-09-18 14:15 - 2012-02-10 21:21 - 00000000 ____D C:\Users\***\AppData\Local\Mozilla
2013-09-18 14:14 - 2012-02-10 21:21 - 00000864 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-09-18 14:11 - 2012-02-09 14:18 - 00127384 _____ C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-18 14:09 - 2012-02-10 22:29 - 00000000 ____D C:\Program Files (x86)\DivX
2013-09-18 14:09 - 2012-02-10 22:25 - 00000000 ____D C:\ProgramData\DivX
2013-09-18 14:08 - 2012-02-10 22:29 - 00000000 ____D C:\Program Files\DivX
2013-09-18 14:00 - 2012-02-10 19:34 - 00000000 ____D C:\Program Files\Speccy
2013-09-18 12:44 - 2010-11-21 08:50 - 00696620 _____ C:\Windows\system32\perfh007.dat
2013-09-18 12:44 - 2010-11-21 08:50 - 00147916 _____ C:\Windows\system32\perfc007.dat
2013-09-18 12:44 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-17 09:17 - 2013-05-22 15:45 - 00000000 ____D C:\Program Files\My Dell
2013-09-17 09:17 - 2012-02-09 15:13 - 00000000 ____D C:\ProgramData\PCDr
2013-09-15 16:05 - 2011-02-11 19:57 - 00000000 ____D C:\Windows\panther
2013-09-12 11:48 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-12 09:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-12 07:12 - 2012-02-09 14:19 - 00000000 ___RD C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-12 07:12 - 2012-02-09 14:19 - 00000000 ___RD C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-11 20:51 - 2012-02-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-11 20:50 - 2013-08-06 11:56 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 20:49 - 2012-02-09 18:54 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 07:40 - 2012-02-10 13:25 - 00000000 ____D C:\Users\***\Verschiedenes
2013-09-10 19:11 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130915-160739.backup
2013-09-10 12:07 - 2013-09-10 12:07 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-10 11:48 - 2013-09-10 11:49 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-10 11:48 - 2013-09-10 11:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-10 11:48 - 2012-06-15 21:56 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-09-10 11:48 - 2012-01-17 12:35 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-10 11:18 - 2012-01-17 12:35 - 00000000 ____D C:\Program Files\Java
2013-09-09 15:52 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130910-191130.backup
2013-09-09 11:44 - 2012-02-10 19:29 - 00000000 ____D C:\Program Files\CCleaner
2013-09-09 06:52 - 2012-01-17 13:00 - 00000000 ____D C:\Program Files\mcafee
2013-09-02 19:40 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130909-155239.backup
2013-08-26 18:39 - 2012-02-13 21:09 - 00000000 ____D C:\Users\***\Documents\Incomedia WebSite X5
2013-08-26 15:56 - 2013-08-26 15:56 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-26 09:10 - 2009-07-14 04:34 - 00448635 ____R C:\Windows\system32\Drivers\etc\hosts.20130902-194014.backup
2013-08-26 08:31 - 2013-08-26 08:20 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-26 08:28 - 2013-08-26 08:28 - 00000000 ____D C:\Users\***\AppData\Roaming\NVIDIA
2013-08-26 08:24 - 2013-08-26 08:24 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-26 08:20 - 2013-08-26 08:20 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-26 08:11 - 2013-08-26 08:11 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Browser
2013-08-26 08:09 - 2013-04-30 20:32 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tools
2013-08-26 07:55 - 2012-02-10 10:13 - 00000000 ____D C:\Users\***\Desktop\Verschiedenes
2013-08-26 07:50 - 2009-07-14 04:34 - 00000510 _____ C:\Windows\win.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:48 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-08-26 07:48 - 2013-08-26 07:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-08-26 07:48 - 2012-01-17 11:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 07:42 - 2012-09-30 17:50 - 00000000 ____D C:\Windows\Minidump
2013-08-26 06:46 - 2013-08-26 07:48 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\SoftThinks
Files to move or delete:
====================
C:\ProgramData\dzofae.reg
Some content of TEMP:
====================
C:\Users\***\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-22 21:08
==================== End Of Log ============================
--- --- --- |
|
25.09.2013, 20:38
| #13 |
| | Wirklich alle Trojaner vom PC entfernt? Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-09-2013
Ran by *** at 2013-09-25 20:54:10
Running from C:\Users\***\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
==================== Installed Programs ======================
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621)
Adobe AIR (x32 Version: 3.1.0.4880)
Adobe Community Help (x32 Version: 3.2.1)
Adobe Community Help (x32 Version: 3.2.1.650)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Photoshop Elements 9 (x32 Version: 9.0.3.0)
Adobe Premiere Elements 9 (x32 Version: 9.0)
Adobe Premiere Elements 9 (x32 Version: 9.0.1)
Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
Bing Bar (x32 Version: 7.2.241.0)
Bonjour (Version: 3.0.0.10)
CCleaner (Version: 4.05)
CDDRV_Installer (Version: 4.60)
Creative Audio Control Panel (x32 Version: 3.00)
Creative Software AutoUpdate (x32 Version: 1.40)
Creative Sound Blaster Properties x64 Edition (x32)
CyberLink PowerDVD 9.5 (x32 Version: 9.5.1.4418)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition
Dell DataSafe Local Backup - Support Software (x32 Version: 9.4.61)
Dell DataSafe Local Backup (x32 Version: 9.4.61)
Dell DataSafe Online (x32 Version: 2.1.19634)
Dell Edoc Viewer (Version: 1.0.0)
Dell Getting Started Guide (x32 Version: 1.00.0000)
Dell MusicStage (x32 Version: 1.6.225.0)
Dell P713w
Dell PhotoStage (x32 Version: 1.5.0.65)
Dell Stage (x32 Version: 1.5.201.0)
Dell Stage Remote (x32 Version: 2.0.0.43)
Dell Symbolleiste (x32 Version: 1.8.12.0)
Dell VideoStage (x32 Version: 1.2.0.1719)
Der Übersetzungsprofi 7.0 Europa Edition (x32)
DesignPro 5 (x32 Version: 5.5.708)
DirectX 9 Runtime (x32 Version: 1.00.0000)
DivX-Setup (x32 Version: 2.6.1.84)
DW WLAN Card (Version: 5.60.48.35)
eBay (x32 Version: 1.4.0)
Elements 9 Organizer (x32 Version: 9.0)
Elements STI Installer (x32 Version: 1.0)
erLT (x32 Version: 1.20.0137)
ESET Online Scanner v3 (x32)
FastStone Capture 5.3 (x32 Version: 5.3)
FileZilla Client 3.7.3 (x32 Version: 3.7.3)
FLV Player 2.0 (build 25) (x32 Version: 2.0 (build 25))
Google Chrome (HKCU Version: 29.0.1547.76)
Google Earth (x32 Version: 6.2.0.5905)
Host OpenAL (x32 Version: 1.00)
iCloud (Version: 3.0.2.163)
ImageMixer VCD/DVD2 for OLYMPUS (x32 Version: 2.01.050.1)
Incomedia WebSite X5 Evolution (x32)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002)
IrfanView (remove only) (x32 Version: 4.32)
iTunes (Version: 11.1.0.126)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
JURA IMPRESSA Z5 G2 (x32 Version: 1.0)
KhalInstallWrapper (Version: 2.00.0000)
Logitech SetPoint (x32 Version: 4.80)
Logitech Unifying-Software 2.10 (Version: 2.10.37)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
McAfee SecurityCenter (x32 Version: 11.6.511)
Memeo Backup (x32)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Mozilla Firefox 10.0 (x86 de) (x32 Version: 10.0)
Mozilla Firefox 24.0 (x86 de) (HKCU Version: 24.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Multimedia Card Reader (x32 Version: 1.7.915.93)
My Dell (Version: 3.4.6308.28)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0)
Nero Blu-ray Player (x32 Version: 12.0.20014)
Nero Control Center 10 (x32 Version: 10.6.13000.0.11)
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800)
Nero Core Components 10 (x32 Version: 2.0.20000.9.12)
Nero Update (x32 Version: 11.0.11800.31.0)
NVIDIA 3D Vision Treiber 320.78 (Version: 320.78)
NVIDIA Grafiktreiber 320.78 (Version: 320.78)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.124.810)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2078)
NVIDIA Systemsteuerung 320.78 (Version: 320.78)
NVIDIA Update 1.14.17 (Version: 1.14.17)
NVIDIA Update Components (Version: 1.14.17)
OLYMPUS Master (x32 Version: 1.00.8000)
OLYMPUS Master addin (x32 Version: 1.00.0000)
PhotoShowExpress (x32 Version: 2.0.063)
PopTray Plug-ins (beta 6) (x32 Version: (beta 6))
PVX Plus WindX Standalone V10 (build 9300.2) (x32 Version: 10.0.9300.2)
QuickTime (x32 Version: 7.74.80.86)
RBVirtualFolder64Inst (Version: 1.00.0000)
RealDownloader (x32 Version: 1.3.3)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.3)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Recuva (Version: 1.48)
Roxio Activation Module (x32 Version: 1.0)
Roxio BackOnTrack (x32 Version: 1.3.3)
Roxio Burn (x32 Version: 1.8)
Roxio Creator Starter (x32 Version: 1.0.439)
Roxio Creator Starter (x32 Version: 12.1.77.0)
Roxio Creator Starter (x32 Version: 5.0.0)
Roxio Express Labeler 3 (x32 Version: 3.2.2)
Roxio File Backup (Version: 1.3.2)
SafeGuard® PrivateCrypto 2.31.1 (x32 Version: 2.31.1.2)
SereneScreen Marine Aquarium 3 (x32 Version: 3.0)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition
Shared C Run-time for x64 (Version: 10.0.0)
Skype™ 5.10 (x32 Version: 5.10.116)
SmartSound Quicktracks for Premiere Elements 9.0 (x32 Version: 3.12.3090)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0)
Sound Blaster X-Fi (x32 Version: 1.0)
Speccy (Version: 1.23)
Spybot - Search & Destroy (x32 Version: 2.1.21)
SWFBanner (x32)
SyncUP (x32 Version: 1.12.12400.17.102)
SyncUP (x32 Version: 10.2.15400)
THX TruStudio PC (x32 Version: 1.0)
Translators (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553157) 64-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition
Update for Microsoft Office 2010 (KB2589370) 64-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition
Update for Microsoft Office 2010 (KB2760758) 64-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition
Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
White Christmas 3D Screensaver and Animated Wallpaper 1.0 (x32 Version: 1.0)
WIDCOMM Bluetooth Software (Version: 6.3.0.6200)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
World of Tanks (x32)
Zattoo4 4.0.5 (x32 Version: 4.0.5)
Zinio Reader 4 (x32 Version: 4.2.4164)
ZyXEL NAS Starter Utility (x32 Version: 2.00.18)
ZyXEL NetUSB Share Center (x32 Version: 1.0.1.c)
==================== Restore Points =========================
11-09-2013 18:45:56 Windows Update
19-09-2013 13:31:27 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-09-20 17:29 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0C1F02CE-7F0C-4CAB-9E38-B3FAC1A6CBD6} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {0E9C04BF-B99A-4155-96B3-BE4F30F4F371} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07] (Google Inc.)
Task: {110A8379-F311-40C0-95E9-284574EFAD0C} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {12444129-DF73-4B3B-AF80-70D4C4372E95} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-09-06] (PC-Doctor, Inc.)
Task: {12BCD626-B866-4EED-8648-84E413F59079} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {3B82F3E0-1BCE-4C76-BB25-B7ECC370D2D3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {40F48374-FF80-48D6-98D2-2F9B77B1E57D} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3354904592-2679355235-2660027724-1000
Task: {5C3A1CF3-713D-4861-A683-5D27D54D6387} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {60AA34B3-CA5F-47BB-9F45-91AE724980F8} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {6730EC82-92E9-4B52-97CE-2C22A64E64E8} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {7416F852-5512-45B3-BF93-8BF19DE6E6D7} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {7C62FD5E-009A-47FE-94F4-55788F50E832} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {7D6CE335-8BAE-4153-B9F2-67DC352466E7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {84502886-0E0E-4BD3-B451-91DC34183B89} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {8E287E0D-63E7-4BC2-BBE1-E2B190CE1C0D} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-09-06] (PC-Doctor, Inc.)
Task: {978E114F-ACA5-42BB-94A1-FE3AA01D4990} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {A4B8D584-FFF0-4BEC-BC06-3FAEF4F3C82F} - System32\Tasks\User_Feed_Synchronization-{C2FB5E82-8A0D-4224-BEE1-D9B54F21E70E} => C:\Windows\system32\msfeedssync.exe [2013-06-04] (Microsoft Corporation)
Task: {A98B46B1-D86A-407A-9FF1-FD1CCF0D0E26} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {B605FC93-E9AD-4F46-9EFC-121157B8A1FE} - System32\Tasks\SystemToolsDailyTest => C:\Windows\System32\uaclauncher.exe
Task: {B6DADFF0-DFCC-4768-9E15-E05014A45CFA} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3354904592-2679355235-2660027724-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {CFE92416-BC4A-46C3-8262-C36B90136161} - System32\Tasks\AdobeAAMUpdater-1.0-***-PC-*** => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29] (Adobe Systems Incorporated)
Task: {D02CCBE4-45A8-491F-8DC8-C9D6CE4A5304} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {DEF5A94B-3788-448E-BCFB-079631B791D5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core => C:\Users\Hansulrich\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-07] (Google Inc.)
Task: {FB784323-FE19-4E46-9091-E59D90E8A367} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-09] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000Core.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3354904592-2679355235-2660027724-1000UA.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-01-17 19:55 - 2013-08-20 06:52 - 15928264 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () D:\Programme\FileZilla FTP Client\fzshellext_64.dll
2010-11-11 00:54 - 2010-11-11 00:54 - 00177136 _____ (TODO: <Company name>) C:\Program Files\Roxio\Roxio Burn\RB_ContextMenu64.dll
2013-08-06 15:08 - 2013-08-13 15:20 - 00472344 _____ (Piriform Ltd) C:\Program Files\Recuva\RecuvaShell64.dll
2012-01-17 12:46 - 2009-10-15 15:38 - 00017920 ____N (Creative Technology Ltd.) C:\Windows\system32\THXCfg64.dll
2012-01-17 12:46 - 2009-10-15 15:32 - 00021504 ____N (Creative Technology Ltd.) C:\Windows\system32\EptMon64.dll
2010-07-21 15:46 - 2010-07-21 15:46 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2012-02-10 22:54 - 2009-07-20 13:35 - 00096272 _____ (Logitech, Inc.) C:\Windows\system32\KemXML.dll
2012-02-10 22:54 - 2009-07-20 13:34 - 00235536 _____ (Logitech, Inc.) C:\Windows\system32\kemutb.dll
2012-02-10 22:54 - 2009-07-20 13:34 - 00235536 _____ (Logitech, Inc.) C:\Windows\system32\KemUtil.dll
2012-02-10 22:54 - 2009-07-20 13:34 - 00159248 _____ (Logitech, Inc.) C:\Windows\system32\KemWnd.dll
2012-02-10 22:54 - 2009-07-20 13:35 - 00018960 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll
2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf
2013-09-11 11:33 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNEL32.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNELBASE.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\ADVAPI32.dll
2012-02-15 07:55 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\syswow64\msvcrt.dll
2009-07-14 01:11 - 2009-07-14 03:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2013-08-14 06:53 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\syswow64\RPCRT4.dll
2013-08-06 11:51 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\syswow64\SspiCli.dll
2009-07-14 01:12 - 2009-07-14 03:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPTBASE.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\SHLWAPI.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00311296 _____ (Microsoft Corporation) C:\Windows\syswow64\GDI32.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00833024 _____ (Microsoft Corporation) C:\Windows\syswow64\USER32.dll
2009-07-14 01:25 - 2009-07-14 03:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\syswow64\LPK.dll
2013-01-09 17:17 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\syswow64\USP10.dll
2009-07-14 01:28 - 2009-07-14 03:15 - 00828928 _____ (Microsoft Corporation) C:\Windows\syswow64\MSCTF.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\shell32.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\ole32.dll
2012-01-17 20:12 - 2012-01-17 20:12 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\OLEAUT32.dll
2013-08-14 06:53 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\WINTRUST.dll
2013-08-14 06:53 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPT32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\syswow64\MSASN1.dll
2012-04-12 20:03 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\syswow64\imagehlp.dll
2009-07-14 01:33 - 2009-07-14 03:17 - 00249680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00269824 _____ (Microsoft Corporation) C:\Windows\syswow64\WLDAP32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00206848 _____ (Microsoft Corporation) C:\Windows\syswow64\WS2_32.dll
2009-07-14 01:12 - 2009-07-14 03:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\syswow64\NSI.dll
2012-01-17 20:12 - 2012-01-17 20:12 - 00145920 _____ (Microsoft Corporation) C:\Windows\syswow64\CFGMGR32.dll
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\PSAPI.DLL
2010-11-21 05:23 - 2010-11-21 05:23 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\SETUPAPI.dll
2012-01-17 20:12 - 2012-01-17 20:12 - 00064512 _____ (Microsoft Corporation) C:\Windows\syswow64\DEVOBJ.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\syswow64\urlmon.dll
2009-07-14 01:15 - 2009-07-14 03:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\syswow64\normaliz.DLL
2013-09-11 20:50 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\syswow64\iertutil.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\WININET.dll
2013-09-11 11:33 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\kernel32.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00119808 _____ (Microsoft Corporation) C:\Windows\syswow64\IMM32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.dll
2013-09-11 11:33 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\SHELL32.dll
2009-07-14 01:44 - 2009-07-14 03:15 - 00522240 _____ (Microsoft Corporation) C:\Windows\syswow64\CLBCatQ.DLL
2010-03-16 22:28 - 2010-03-16 22:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
2010-03-22 17:52 - 2010-03-22 17:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
2010-03-16 22:28 - 2010-03-16 22:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
2010-03-16 22:28 - 2010-03-16 22:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
2011-06-25 01:20 - 2011-06-25 01:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
2011-06-27 21:25 - 2011-06-27 21:25 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
2011-06-25 01:32 - 2011-06-25 01:32 - 00323136 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
2010-03-11 21:52 - 2010-03-11 21:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
2010-03-05 17:07 - 2010-03-05 17:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
2010-03-05 17:07 - 2010-03-05 17:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
2010-03-11 21:52 - 2010-03-11 21:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
2012-02-16 18:05 - 2009-11-26 10:53 - 00086180 _____ () C:\Program Files (x86)\Dell P713w\dleccfg.dll
2012-02-16 18:06 - 2010-04-01 19:23 - 00389120 _____ () C:\Program Files (x86)\Dell P713w\dlecscw.dll
2012-02-16 18:06 - 2009-03-25 17:10 - 00192512 _____ () C:\Program Files (x86)\Dell P713w\dlecdatr.dll
2012-02-16 18:06 - 2010-04-01 19:24 - 01159168 _____ () C:\Program Files (x86)\Dell P713w\dlecDRS.dll
2012-02-16 18:06 - 2009-03-10 07:43 - 00155648 _____ () C:\Program Files (x86)\Dell P713w\dleccaps.dll
2012-02-16 18:06 - 2009-03-05 19:55 - 00059904 _____ () C:\Program Files (x86)\Dell P713w\dleccnv4.dll
2012-02-16 18:06 - 2009-03-10 07:41 - 00966656 _____ (Corp.) C:\Program Files (x86)\Dell P713w\dlecmonr.dll
2012-02-16 18:06 - 2009-12-09 21:35 - 00802816 _____ ( ) C:\Program Files (x86)\Dell P713w\dleccomc.dll
2012-02-16 17:59 - 2009-02-12 13:33 - 00381952 _____ () C:\Windows\system32\dlecsm.dll
2012-02-16 17:59 - 2009-04-28 09:57 - 00032768 _____ () C:\Windows\system32\dlecsmr.dll
2012-02-16 18:06 - 2009-06-22 15:08 - 00708608 _____ () C:\Program Files (x86)\Dell P713w\Epwizard.DLL
2012-02-16 18:06 - 2009-06-22 15:06 - 00159744 _____ () C:\Program Files (x86)\Dell P713w\customui.dll
2012-02-16 18:06 - 2009-06-22 15:06 - 00114688 _____ () C:\Program Files (x86)\Dell P713w\Eputil.DLL
2012-02-16 18:06 - 2009-06-22 15:05 - 00139264 _____ () C:\Program Files (x86)\Dell P713w\Imagutil.DLL
2012-02-16 18:06 - 2009-06-22 15:06 - 00061440 _____ () C:\Program Files (x86)\Dell P713w\Epfunct.DLL
2012-02-16 18:06 - 2009-06-23 13:11 - 02203648 _____ () C:\Program Files (x86)\Dell P713w\EPWizRes.dll
2012-02-16 18:06 - 2009-06-23 13:13 - 00045056 _____ () C:\Program Files (x86)\Dell P713w\epstring.dll
2012-02-16 18:06 - 2009-06-23 13:13 - 00221184 _____ () C:\Program Files (x86)\Dell P713w\EPOEMDll.dll
2012-02-16 18:06 - 2009-04-07 21:25 - 00409600 _____ () C:\Program Files (x86)\Dell P713w\iptk.dll
2012-02-16 18:06 - 2010-04-01 19:18 - 00548864 _____ (PDFlib GmbH) C:\Program Files (x86)\Dell P713w\PdfLib.dll
2012-02-16 18:06 - 2009-03-02 16:25 - 00151552 _____ () C:\Program Files (x86)\Dell P713w\dlecptp.dll
2009-07-14 02:14 - 2009-07-14 03:16 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2012-01-17 12:36 - 2009-12-29 18:50 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL
2012-01-17 12:36 - 2010-01-12 17:36 - 00177664 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2009-07-14 01:51 - 2009-07-14 03:15 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\HID.DLL
2010-11-21 05:24 - 2010-11-21 05:24 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL
2009-07-14 01:12 - 2009-07-14 03:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINNSI.DLL
2009-08-26 06:29 - 2009-08-26 06:29 - 00150016 _____ () C:\Windows\SysWOW64\OemSpiE.dll
2009-07-14 01:40 - 2009-07-14 03:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHFOLDER.dll
2012-01-17 12:36 - 2009-07-27 08:50 - 00498688 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\T3APO32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\comdlg32.dll
2013-09-11 11:33 - 2013-08-02 03:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcWow64.DLL
2012-01-17 12:36 - 2009-07-27 08:50 - 00018432 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\SPIRunE.dll
2009-07-14 01:24 - 2009-07-14 03:15 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINMM.dll
2009-07-14 01:34 - 2009-07-14 03:16 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntmarta.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\USERENV.dll
2009-07-14 01:12 - 2009-07-14 03:16 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\profapi.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00320000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINSPOOL.DRV
2009-07-14 01:55 - 2009-07-14 03:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPR.dll
2009-07-14 01:41 - 2009-07-14 03:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VERSION.dll
2013-08-15 07:38 - 2013-08-15 07:38 - 00492032 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\97ce162bb354fcf9c8d9eae8252ee216\IAStorUtil.ni.dll
2013-07-12 06:56 - 2013-07-12 06:56 - 00014336 _____ (Intel Corp.) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\22d36f517c7545fdb65ccddae680a3eb\IAStorCommon.ni.dll
2010-11-22 15:27 - 2010-11-22 15:27 - 00190960 _____ (Roxio, Inc.) c:\program files (x86)\common files\roxio shared\dllshared\rsl.dll
2010-11-25 00:44 - 2010-11-25 00:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll
2011-04-29 20:13 - 2011-04-29 20:13 - 18908672 _____ (Unlimited Realities) C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\libumajin.dll
2011-04-29 20:13 - 2011-04-29 20:13 - 07938048 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll
2011-04-29 20:13 - 2011-04-29 20:13 - 02225664 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll
2013-04-04 01:09 - 2013-04-04 01:09 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-11-21 05:23 - 2010-11-21 05:23 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\SETUPAPI.DLL
2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.DLL
2009-07-14 01:53 - 2009-07-14 03:15 - 00462848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2010-11-21 05:25 - 2010-11-21 05:25 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
2012-01-17 20:12 - 2012-01-17 20:12 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\oleaut32.dll
2013-08-14 06:53 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\crypt32.dll
2013-09-11 20:50 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\wininet.dll
2013-08-14 06:53 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\wintrust.dll
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\psapi.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00206848 _____ (Microsoft Corporation) C:\Windows\syswow64\ws2_32.dll
2012-04-12 20:03 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\syswow64\IMAGEHLP.DLL
2013-08-26 08:20 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-08-26 08:20 - 2013-05-16 10:55 - 03643800 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl
2013-08-26 08:20 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2013-09-11 20:50 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-07-28 19:58 - 2010-07-28 19:58 - 01660128 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Utility.dll
2010-07-28 19:58 - 2010-07-28 19:58 - 00020704 _____ (Stan Schultes, VBNetExpert.com) C:\Program Files (x86)\Memeo\AutoBackup\XMLSettings.dll
2010-07-28 19:58 - 2010-07-28 19:58 - 00054496 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Interop.dll
2010-07-28 19:58 - 2010-07-28 19:58 - 01553632 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.dll
2010-07-28 19:59 - 2010-07-28 19:59 - 00057344 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.DataClad.resources.dll
2010-07-28 19:58 - 2010-07-28 19:58 - 02887904 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.UI.dll
2010-07-28 19:58 - 2010-07-28 19:58 - 00025824 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.DriveDetection.dll
2010-07-28 19:59 - 2010-07-28 19:59 - 00094208 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\MemeoBackup.resources.dll
2010-07-28 19:58 - 2010-07-28 19:58 - 00296160 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.DataAccess.dll
2010-07-28 19:57 - 2010-07-28 19:57 - 02798816 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.BMU.dll
2010-04-05 20:52 - 2010-04-05 20:52 - 00013824 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.eWebControl.dll
2009-08-19 20:56 - 2009-08-19 20:56 - 00143360 _____ (Digital River, Inc.) C:\Program Files (x86)\Common Files\Memeo\eWebControl365.dll
2010-07-28 19:58 - 2010-07-28 19:58 - 00025824 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Third-party.Security.dll
2010-07-28 19:57 - 2010-07-28 19:57 - 00067808 _____ (Newtonsoft) C:\Program Files (x86)\Memeo\AutoBackup\Newtonsoft.Json.dll
2010-07-28 19:57 - 2010-07-28 19:57 - 00074976 _____ (Finisar Corporation) C:\Program Files (x86)\Memeo\AutoBackup\SQLite.NET.dll
2010-04-05 20:52 - 2010-04-05 20:52 - 00504293 _____ () C:\Program Files (x86)\Memeo\AutoBackup\sqlite3.DLL
2010-07-28 19:58 - 2010-07-28 19:58 - 00087264 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\providers\Tanagra.BMU.Providers.FileCopyBackupProvider.dll
2010-07-28 19:59 - 2010-07-28 19:59 - 00036864 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.Utility.resources.dll
2010-04-05 20:14 - 2010-04-05 20:14 - 00397312 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.Outlook.dll
2010-07-28 19:59 - 2010-07-28 19:59 - 00114688 _____ () C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Memeo.Client.UI.resources.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/25/2013 08:45:20 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/25/2013 08:45:09 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (09/25/2013 08:12:04 PM) (Source: Application Error) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Spybot - Search & Destroy tray access wurde wegen dieses Fehlers geschlossen.
Programm: Spybot - Search & Destroy tray access
Datei:
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: 00000000
Datenträgertyp: 0
Error: (09/25/2013 08:12:04 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SDTray.exe, Version: 2.1.21.129, Zeitstempel: 0x51f0ed9e
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000096
Fehleroffset: 0x00048665
ID des fehlerhaften Prozesses: 0x15f4
Startzeit der fehlerhaften Anwendung: 0xSDTray.exe0
Pfad der fehlerhaften Anwendung: SDTray.exe1
Pfad des fehlerhaften Moduls: SDTray.exe2
Berichtskennung: SDTray.exe3
Error: (09/25/2013 08:12:01 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: mcshield.exe, Version: 15.1.0.520, Zeitstempel: 0x50f59f8d
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c92c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000d89e
ID des fehlerhaften Prozesses: 0xb0c
Startzeit der fehlerhaften Anwendung: 0xmcshield.exe0
Pfad der fehlerhaften Anwendung: mcshield.exe1
Pfad des fehlerhaften Moduls: mcshield.exe2
Berichtskennung: mcshield.exe3
Error: (09/25/2013 01:39:52 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 33197
Error: (09/25/2013 01:39:52 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 33197
Error: (09/25/2013 01:39:52 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (09/25/2013 01:39:36 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15585
Error: (09/25/2013 01:39:36 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15585
System errors:
=============
Error: (09/25/2013 08:45:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "dlecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (09/25/2013 08:45:06 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlecCATSCustConnectService erreicht.
Error: (09/25/2013 08:44:50 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (09/25/2013 08:44:50 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (09/25/2013 08:44:49 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (09/25/2013 08:44:55 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 25.09.2013 um 20:43:15 unerwartet heruntergefahren.
Error: (09/25/2013 00:36:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "dlecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (09/25/2013 00:36:26 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlecCATSCustConnectService erreicht.
Error: (09/25/2013 00:36:15 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (09/25/2013 00:36:15 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cdrbsdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Microsoft Office Sessions:
=========================
Error: (09/25/2013 08:45:20 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/25/2013 08:45:09 PM) (Source: MemeoBackgroundService)(User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (09/25/2013 08:12:04 PM) (Source: Application Error)(User: )
Description: Spybot - Search & Destroy tray access000000000
Error: (09/25/2013 08:12:04 PM) (Source: Application Error)(User: )
Description: SDTray.exe2.1.21.12951f0ed9eole32.dll6.1.7601.175144ce7b96fc00000960004866515f401ceb9db4e3cb199C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exeC:\Windows\syswow64\ole32.dllfab8215b-260d-11e3-a28a-d4bed9910b76
Error: (09/25/2013 08:12:01 PM) (Source: Application Error)(User: )
Description: mcshield.exe15.1.0.52050f59f8dole32.dll6.1.7601.175144ce7c92cc0000005000000000000d89eb0c01ceb9db1bda32eaC:\Program Files\Common Files\McAfee\SystemCore\mcshield.exeC:\Windows\system32\ole32.dllf8ffe950-260d-11e3-a28a-d4bed9910b76
Error: (09/25/2013 01:39:52 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 33197
Error: (09/25/2013 01:39:52 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 33197
Error: (09/25/2013 01:39:52 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (09/25/2013 01:39:36 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15585
Error: (09/25/2013 01:39:36 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15585
CodeIntegrity Errors:
===================================
Date: 2013-09-25 16:05:20.135
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-25 16:05:20.135
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-25 16:05:20.135
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-25 15:43:13.989
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-25 15:43:13.989
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-25 15:43:13.989
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-22 16:56:08.349
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-22 16:56:08.349
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-22 16:56:08.349
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-20 17:28:59.457
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 17%
Total physical RAM: 16366.45 MB
Available physical RAM: 13508.71 MB
Total Pagefile: 32731.07 MB
Available Pagefile: 29655.02 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:446.47 GB) (Free:310.74 GB) NTFS
Drive d: (DATAPART1) (Fixed) (Total:931.51 GB) (Free:915.5 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 12501AB2)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=19 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=446 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 12501AAF)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ich würde sagen, dass der PC wieder schneller läuft. Noch ein paar Fragen. Im Addition Logfile sind einige Errors -Was hat das zu bedeuten? Im FRST Logfile ist mir folgendes aufgefallen: Some content of TEMP: ==================== C:\Users\***\AppData\Local\Temp\Quarantine.exe Was gefährliches? Gestern hatte McAffe eine Datei unter Quarantäne gestellt und gesagt, dass es eventuell ein Trojaner sei ist das wirklich so? C\Windows\TEMP\MCE00000\MCE00001 Heute hat McAffe plötzlich ComboFix.exe in die Quaräntäne getan und es hiess dass es der Trojaner Artemis!7DB475969B64 sei. Da ist sicher kein Trojaner drinn oder? Besten Dank für deine super Hilfe! Gruss Hitman 21 |
|
26.09.2013, 08:59
| #14 |
| /// the machine /// TB-Ausbilder | Wirklich alle Trojaner vom PC entfernt? McAfee spinnt. temps leeren wir jetzt, Fehler im Log sind normal. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\ProgramData\dzofae.reg
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.09.2013, 12:00
| #15 |
| | Wirklich alle Trojaner vom PC entfernt? Hallo Schrauber Habe alle Punkte fertig abgearbeitet. Hier noch das Fixlog.txt Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-09-2013
Ran by *** at 2013-09-26 12:11:34 Run:1
Running from C:\Users\***\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\ProgramData\dzofae.reg
*****************
C:\ProgramData\dzofae.reg => Moved successfully.
==== End of Fixlog ====
PS: Mein "Game - PC" muss ich auch noch auf Trojanerbefall (1 Hatte ich sicher drauf )kontrollieren. Kann ich die Punkte mit Combofix, Malwarebites Anti-Malware, Adw-Cleaner, Junkware Removal Tool, ... so abarbeiten oder ist es besser einen neuen Threath zu starten und wieder zuerst mal nur ein FRST-Logfile zu posten? Besten Dank für deine super Hilfe und die Tipps zur Absicherung des Systems. Gruss Hitman 21 |
|
| Themen zu Wirklich alle Trojaner vom PC entfernt? |
| anti-malware, browser, entfernt, exploit-fdi!cve2012-1723, exploit-fio!cve2013-2423, gelöscht, js/blacole-redirect.ae, js/exploit!jnlp, js/exploit-blacole.eu, js/exploit-blacole.lv, js/exploit-blacole.lz, js/exploit-stykit.l, js/ransom-abj, komplett, logfile, malwarebytes, meldung, nicht installiert, online, quarantäne, ransom-fac!bat, rdn/generic exploit!1n3, scanner, sicherheitssoftware, trojaner, wirklich |
Linear-Darstellung
