| |
| |||||||
Log-Analyse und Auswertung: Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
14.10.2013, 01:54
| #1 |
 |  Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... Hallo! Ich habe seit einigen Tagen das Problem, dass Google Suchergebnisse in Chrome meist (nicht immer) in einem neuen Tab geöffnet wurden. Hab eine Infektion vermutet, diverse Scans und Reinigungen durchlaufen lassen. Jetzt kommt es aber immernoch vereinzelt vor, dass mal nach einem Neustart was gefunden wird (vereinzelte Reg-Einträge, meist im AdwCleaner. Hatte zwischendurch Chrome (und anderes) mit Revo uninstaller entfernt, außerdem auch mal SpywareBlast installiert (jetzt wieder weg). Bei Neuinstallation war irgendwas versaut und Chrome vermeldete immer, "wurde nicht richtig beendet...", konnte das Problem aber durch löschen der Preferences Datei (versteckt) lösen. Noch ein ganz wichtiger Punkt: Ich hab zwischendurch einen Ordner "Remote Programs" auf der Platte entdeckt, mit Inhalten, die ich nicht kannte. Deutsche Titel, wie von Büchern/Hörbüchern, aber mit sehr vielen unterschiedlichen Dateien darin. Gleich gelöscht und überprüft: Es gab eine aktivierte Einstellung, dass Remotezugriff auf meinen Rechner erlaubt ist! Kein Scanner hat dazu irgendwas gesagt. Bisher blieb die Option, nach abschalten, deaktiviert. Trotz Neustarts. Hoffe, das passt... Ich poste jetzt mal die Log-Files (nur die mit Funden plus alle Suchen, die ich laut Anleitung hier machen sollte, also GMER, etc). Danach mache ich einen Neustart und lasse nochmal AdwCleaner laufen (falls er nochmal was findet). Danke schonmal! PS: Vermutliche Quelle(n) - JDownloader und/oder Cryptload. Obwohl von sicherer Quelle (ich glaub JD von Chip.de)... MBAM: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.10.12.03 Windows 8 x64 NTFS (Abgesichertenmodus/Netzwerkfähig) Internet Explorer 10.0.9200.16688 Udo :: UDO-PC [Administrator] 12.10.2013 11:31:03 mbam-log-2013-10-12 (11-31-03).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 464693 Laufzeit: 59 Minute(n), 24 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 8 HKCR\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} (PUP.Optional.BrowseFox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{204df522-9a96-4a72-abb0-60f7a216d6d2} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{0131533C-F056-4E64-8A9D-B7C0EF342EFD} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{AB4DA692-F26B-403C-AF8F-FD87D121F8F1} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} (PUP.Optional.BrowseFox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 1 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 2O1R1G2Z1F1G1M -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 1 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage.A) -> Bösartig: (hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=C250C2143DC0FEE3&affID=125035&tsp=5028) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 3 C:\Users\Udo\AppData\Local\Temp\mt_ffx\searchgol (PUP.Optional.SearchGolTB.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Udo\AppData\Local\Temp\mt_ffx\searchgol\searchgol (PUP.Optional.SearchGolTB.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Udo\AppData\Local\Temp\mt_ffx\searchgol\searchgol\1.8.16.19 (PUP.Optional.SearchGolTB.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 4 C:\Program Files (x86)\Whilokii\WhilokiiBHO.dll (Adware.Whilokii) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Udo\Desktop\Udo Sicherung\Downloads\Downloads\MyPhoneExplorer_Setup_1.8.2.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Udo\Downloads\CryptLoad_1.1.8.rar (PUP.Netcat) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Udo\Downloads\CryptLoad_1.1.8\router\FRITZ!Box\nc.exe (PUP.Netcat) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.10.12.03 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16688 Udo :: UDO-PC [Administrator] 12.10.2013 17:47:53 mbam-log-2013-10-12 (17-47-53).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 41321 Laufzeit: 5 Minute(n), 8 Sekunde(n) [Abgebrochen] Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKCR\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} (PUP.Optional.BrowseFox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Dann also zu ADWCleaner: Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 12/10/2013 um 17:57:46
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gefunden C:\Users\Udo\Documents\PC Speed Maximizer
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16688
-\\ Google Chrome v30.0.1599.69
[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [1195 octets] - [12/10/2013 17:57:46]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1255 octets] ##########
Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 12/10/2013 um 21:23:49
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16688
-\\ Google Chrome v30.0.1599.69
[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [974 octets] - [12/10/2013 21:23:49]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
########## EOF - C:\AdwCleaner\AdwCleaner[R4].txt - [1272 octets] ##########
Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 13/10/2013 um 14:34:05
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
-\\ Google Chrome v30.0.1599.69
[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1533 octets] - [13/10/2013 14:33:32]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]
AdwCleaner[S5].txt - [1454 octets] - [13/10/2013 14:34:05]
########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1514 octets] ##########
Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 13/10/2013 um 14:33:32
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
-\\ Google Chrome v30.0.1599.69
[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1094 octets] - [13/10/2013 14:33:32]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]
########## EOF - C:\AdwCleaner\AdwCleaner[R6].txt - [1453 octets] ##########
Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 14/10/2013 um 01:27:02
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
-\\ Google Chrome v30.0.1599.69
[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1533 octets] - [13/10/2013 14:33:32]
AdwCleaner[R7].txt - [1890 octets] - [14/10/2013 01:26:06]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]
AdwCleaner[S5].txt - [1594 octets] - [13/10/2013 14:34:05]
AdwCleaner[S6].txt - [1799 octets] - [14/10/2013 01:27:02]
########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [1859 octets] ##########
Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 14/10/2013 um 01:26:06
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
-\\ Google Chrome v30.0.1599.69
[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1533 octets] - [13/10/2013 14:33:32]
AdwCleaner[R7].txt - [1379 octets] - [14/10/2013 01:26:06]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]
AdwCleaner[S5].txt - [1594 octets] - [13/10/2013 14:34:05]
########## EOF - C:\AdwCleaner\AdwCleaner[R7].txt - [1798 octets] ##########
Defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 02:10 on 14/10/2013 (Udo)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 Ran by Udo (administrator) on UDO-PC on 14-10-2013 02:11:22 Running from C:\Users\Udo\Downloads Windows 8 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe (Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe (Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe (Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe (Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\WINDOWS\system32\dashost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe (Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe (AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe (Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe (Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE (CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe (Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe (AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe (Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe () C:\Users\Udo\Downloads\Defogger.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.) HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] () HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated) HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo) HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor) HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKLM\...\Policies\Explorer: [RestrictRun] 0 HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] () HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.) HKCU\...\Policies\Explorer: [RestrictRun] 0 HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro) HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software) HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo) HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo) Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech) Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.) BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: ( "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0 CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0 CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0 CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0 CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software) R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.) R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation) R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.) R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo) R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] () S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] () R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] () R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation) S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x] ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] () S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.) R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated) S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited) S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited) R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation) S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.) R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.) R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.) U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST 2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log 2013-10-14 01:39 - 2013-10-14 01:39 - 00000000 _____ C:\Users\Udo\defogger_reenable 2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe 2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe 2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe 2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW 2013-10-14 01:19 - 2013-10-14 01:19 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-10-14 01:19 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2013-10-14 01:19 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2013-10-14 01:19 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys 2013-10-14 01:19 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys 2013-10-14 01:18 - 2013-10-14 01:29 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2013-10-14 01:18 - 2013-10-14 01:24 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt 2013-10-14 01:18 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2013-10-14 01:18 - 2013-08-30 09:48 - 00204880 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys 2013-10-14 01:18 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2013-10-14 01:18 - 2013-08-30 09:48 - 00065336 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys 2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2013-10-14 01:18 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2013-10-14 01:17 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software 2013-10-14 01:16 - 2013-10-14 01:17 - 00000000 ____D C:\ProgramData\AVAST Software 2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe 2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe 2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe 2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp 2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt 2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-13 14:33 - 2013-10-13 14:33 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt 2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe 2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe 2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe 2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe 2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe 2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe 2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe 2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe 2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe 2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox 2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt 2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe 2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-10-13 13:49 - 2013-10-14 01:54 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-13 13:49 - 2013-10-14 01:28 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin 2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin 2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe 2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log 2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi 2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll 2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll 2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll 2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx 2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx 2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll 2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll 2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll 2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll 2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml 2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll 2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll 2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster 2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses 2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL 2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk 2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe 2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe 2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe 2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe 2013-10-12 17:57 - 2013-10-14 01:27 - 00000000 ____D C:\AdwCleaner 2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe 2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi 2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi 2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi 2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi 2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi 2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi 2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi 2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi 2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi 2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi 2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi 2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi 2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi 2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi 2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi 2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi 2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi 2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi 2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi 2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi 2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi 2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes 2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe 2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll 2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll 2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll 2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll 2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll 2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll 2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys 2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys 2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys 2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys 2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys 2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys 2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys 2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys 2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys 2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys 2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys 2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys 2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS 2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR 2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8 2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip 2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi 2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics 2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader 2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe 2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle 2013-10-07 19:34 - 2013-10-07 19:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe 2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe 2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe 2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd 2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe 2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll 2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe 2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc 2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe 2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla 2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk 2013-09-14 22:07 - 2013-09-15 19:30 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2 2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Udo\Downloads\Trine2CompleteStory_Win_1378323763 ==================== One Month Modified Files and Folders ======= 2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST 2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log 2013-10-14 02:01 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files 2013-10-14 02:00 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru 2013-10-14 01:54 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-14 01:48 - 2012-10-18 07:15 - 01917337 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-14 01:39 - 2013-10-14 01:39 - 00000000 _____ C:\Users\Udo\defogger_reenable 2013-10-14 01:39 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo 2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe 2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe 2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe 2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-14 01:31 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job 2013-10-14 01:31 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF 2013-10-14 01:29 - 2013-10-14 01:18 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2013-10-14 01:28 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-14 01:28 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-10-14 01:27 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner 2013-10-14 01:27 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW 2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe 2013-10-14 01:24 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt 2013-10-14 01:24 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db 2013-10-14 01:19 - 2013-10-14 01:19 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-10-14 01:17 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software 2013-10-14 01:17 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software 2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache 2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001 2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe 2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe 2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe 2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job 2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA 2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core 2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp 2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt 2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox 2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini 2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt 2013-10-13 14:47 - 2012-09-13 20:32 - 00936142 _____ C:\WINDOWS\PFRO.log 2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak 2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak 2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak 2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak 2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak 2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-13 14:33 - 2013-10-13 14:33 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt 2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData 2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google 2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster 2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-10-13 12:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent 2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin 2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin 2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe 2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log 2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi 2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google 2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses 2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk 2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe 2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe 2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe 2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe 2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe 2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi 2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi 2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi 2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi 2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi 2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi 2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi 2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi 2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi 2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi 2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi 2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi 2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi 2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi 2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi 2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi 2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi 2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi 2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi 2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi 2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi 2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes 2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe 2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat 2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat 2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log 2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8 2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR 2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip 2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi 2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics 2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader 2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe 2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle 2013-10-07 19:33 - 2013-10-07 19:34 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe 2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe 2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe 2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2013-10-07 19:33 - 2013-03-22 21:25 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npDeployJava1.dll 2013-10-07 19:33 - 2013-03-22 21:25 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll 2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd 2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys 2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG 2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log 2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd 2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd 2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech 2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd 2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe 2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe 2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc 2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe 2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla 2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC 2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2013-09-22 12:07 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps 2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore 2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe 2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk 2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag 2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo 2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo 2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations 2013-09-15 19:30 - 2013-09-14 22:07 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2 2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Udo\Downloads\Trine2CompleteStory_Win_1378323763 Some content of TEMP: ==================== C:\Users\Udo\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-10 03:01 ==================== End Of Log ============================ Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-14 02:12:01
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.8.0.1430)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)
==================== Restore Points =========================
25-09-2013 19:10:14 Windows Update
03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup
==================== Hosts content: ==========================
2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {925293A7-DDD7-44BB-93DB-C7943E4D4897} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-14 01:24 - 2013-10-13 16:24 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101300\algo.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== Faulty Device Manager Devices =============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (10/14/2013 01:31:38 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:31:38 AM) (Source: Location Task Manager) (User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:31:35 AM) (Source: Location Task Manager) (User: )
Description: (GetHomepage()): Vorgabendatei für Mozilla Firefox konnte nicht geöffnet werden. Überprüfen Sie die Installation.
Error: (10/14/2013 01:31:31 AM) (Source: Location Task Manager) (User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 00:16:51 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/13/2013 09:05:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (10/13/2013 09:05:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
System errors:
=============
Error: (10/14/2013 01:48:04 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/14/2013 01:28:13 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/14/2013 01:28:00 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/14/2013 01:27:38 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0
Error: (10/14/2013 01:27:13 AM) (Source: DCOM) (User: UDO-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}
Error: (10/13/2013 02:48:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/13/2013 02:47:54 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/13/2013 02:47:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (10/13/2013 02:47:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (10/13/2013 02:44:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Microsoft Office Sessions:
=========================
Error: (10/14/2013 01:31:38 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:31:38 AM) (Source: Location Task Manager)(User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:31:35 AM) (Source: Location Task Manager)(User: )
Description: (GetHomepage()): Vorgabendatei für Mozilla Firefox konnte nicht geöffnet werden. Überprüfen Sie die Installation.
Error: (10/14/2013 01:31:31 AM) (Source: Location Task Manager)(User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 01:10:04 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 00:16:51 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/13/2013 09:05:38 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
Error: (10/13/2013 09:05:38 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
CodeIntegrity Errors:
===================================
Date: 2013-10-13 14:25:33.357
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.504
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.480
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 26%
Total physical RAM: 7950.22 MB
Available physical RAM: 5849.44 MB
Total Pagefile: 9678.22 MB
Available Pagefile: 7499.21 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB
==================== Drives ================================
Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:705.58 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)
Partition: GPT Partition Type
==================== End Of Log ============================
Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:49:52, on 12.10.2013 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v10.0 (10.00.9200.16688) Boot mode: Normal Running processes: C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe C:\Program Files (x86)\USB Camera\VM331STI.EXE C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe C:\WINDOWS\SysWOW64\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE O4 - HKLM\..\Run: [UpdatePPShortCut] "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" update "Software\CyberLink\PowerProducer\5.0" O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Unified Remote v2] C:\Program Files (x86)\Unified Remote\RemoteServer.exe O4 - HKCU\..\Run: [Spybot-S&D Cleaning] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe O4 - Startup: Logitech . Produktregistrierung.lnk = C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe O4 - Startup: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE O4 - Global Startup: Bluetooth.lnk = ? O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Auswahl speichern - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 O8 - Extra context menu item: Bild ausschneiden - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 O8 - Extra context menu item: Diese Seite ausschneiden - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: Neue Notiz - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html O8 - Extra context menu item: URL notieren - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {4FF78044-96B4-4312-A5B7-FDA3CB328095} (ExentInf1 Class) - O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: @oem14.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Radio Control Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing) O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: TrueSuiteService (FPLService) - AuthenTec, Inc - C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe O23 - Service: Google Update-Dienst (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @oem25.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing) O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe O23 - Service: Lenovo AVFramework Camera Privacy Controller (LENOVO.CAMMUTE) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe O23 - Service: Lenovo AVFramework Microphone Volume Controller and Dolby Interface (LENOVO.TPKNRSVC) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe O23 - Service: Lenovo AVFramework Control Center and ThinkVantage Virtual Camera Controller (LENOVO.TVTVCAM) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: LnvMHService (LnvHotSpotSvc) - Lenovo - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe O23 - Service: Location Task Manager (LocationTaskManager) - Unknown owner - C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NitroPDFDriverCreatorReadSpool2 (NitroDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe O23 - Service: TrueAPI Service component (TrueService) - AuthenTec, Inc. - C:\Program Files\Common Files\AuthenTec\TrueService.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: Util Whilokii - Unknown owner - C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: Cisco AnyConnect Secure Mobility Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 14543 bytes Ich habe, muss ich bekennen, noch Combifix verwendet... Wo finde ich dessen LogFiles, falls vorhanden/nötig? Eset Onlinescanner gab keine Funde (heute - davor keine Suche durchgeführt). Habe also jetzt MBAM installiert (scant ja nur nach Aufforderung) und Avast. Irgendwelche Tipps diesbezüglich? Lieber SpyBot oder dergleichen für aktiven Schutz? Edit: ADWCleaner hat nichts mehr gefunden, nach Neustart. Will nur jedes Mal die Chrome Preferences löschen. Ist das normal? Browser läuft ohne Probleme. Ich mache mal morgen weitere Tests und warte ansonsten auf Tipps. Geändert von Sportler (14.10.2013 um 02:10 Uhr) |
|
14.10.2013, 07:31
| #2 |
| /// the machine /// TB-Ausbilder    | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... hi,
__________________Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
14.10.2013, 09:58
| #3 |
| | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... Guten Morgen!
__________________JRT hatte ich ganz vergessen. Hier das aktuellste Log von heute: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.4 (10.06.2013:1)
OS: Windows 8 x64
Ran by Udo on 14.10.2013 at 10:44:25,13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.10.2013 at 10:49:44,26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Udo (administrator) on UDO-PC on 14-10-2013 10:52:36
Running from C:\Users\Udo\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] ()
HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.)
HKCU\...\Policies\Explorer: [RestrictRun] 0
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095}
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: ( "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0
CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]
==================== Drivers (Whitelisted) ====================
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-14 02:12 - 00031119 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:18 - 2013-10-14 01:24 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-14 01:17 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:16 - 2013-10-14 01:17 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox
2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:49 - 2013-10-14 04:54 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-13 13:49 - 2013-10-14 03:05 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-14 03:08 - 00000000 ____D C:\AdwCleaner
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:34 - 2013-10-07 19:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-14 22:07 - 2013-09-15 19:30 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2
2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Udo\Downloads\Trine2CompleteStory_Win_1378323763
==================== One Month Modified Files and Folders =======
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 10:42 - 2012-10-18 07:15 - 01974912 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-14 10:33 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-10-14 10:31 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db
2013-10-14 04:54 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-14 04:30 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job
2013-10-14 03:36 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files
2013-10-14 03:08 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner
2013-10-14 03:07 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:06 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo
2013-10-14 03:05 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 03:03 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-14 02:12 - 00031119 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:27 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-14 01:24 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:17 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:17 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001
2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job
2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA
2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox
2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini
2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:47 - 2012-09-13 20:32 - 00936142 _____ C:\WINDOWS\PFRO.log
2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 12:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log
2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:33 - 2013-10-07 19:34 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npDeployJava1.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG
2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log
2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC
2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-22 12:07 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag
2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo
2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations
2013-09-15 19:30 - 2013-09-14 22:07 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2
2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Udo\Downloads\Trine2CompleteStory_Win_1378323763
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-10 03:01
==================== End Of Log ============================
Addition (beim zweiten Durchlauf, hatte den Haken vergessen): Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-14 10:56:40
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.8.0.1430)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)
==================== Restore Points =========================
25-09-2013 19:10:14 Windows Update
03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup
==================== Hosts content: ==========================
2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-06-01 12:20 - 2013-06-01 12:20 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== Faulty Device Manager Devices =============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (10/14/2013 10:55:49 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FRST64.exe, Version: 3.3.8.1, Zeitstempel: 0x4f25bafd
Name des fehlerhaften Moduls: FRST64.exe, Version: 3.3.8.1, Zeitstempel: 0x4f25bafd
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000014760
ID des fehlerhaften Prozesses: 0x1ec8
Startzeit der fehlerhaften Anwendung: 0xFRST64.exe0
Pfad der fehlerhaften Anwendung: FRST64.exe1
Pfad des fehlerhaften Moduls: FRST64.exe2
Berichtskennung: FRST64.exe3
Vollständiger Name des fehlerhaften Pakets: FRST64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FRST64.exe5
System errors:
=============
Microsoft Office Sessions:
=========================
Error: (10/14/2013 10:55:49 AM) (Source: Application Error)(User: )
Description: FRST64.exe3.3.8.14f25bafdFRST64.exe3.3.8.14f25bafdc000000500000000000147601ec801cec8bab86df458C:\Users\Udo\Downloads\FRST64.exeC:\Users\Udo\Downloads\FRST64.exe6bd42660-34ae-11e3-bea1-3c970e41b885
CodeIntegrity Errors:
===================================
Date: 2013-10-13 14:25:33.357
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.504
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.480
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 31%
Total physical RAM: 7950.22 MB
Available physical RAM: 5480.95 MB
Total Pagefile: 16142.22 MB
Available Pagefile: 13533.56 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:699.33 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
14.10.2013, 19:41
| #4 |
| /// the machine /// TB-Ausbilder | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.10.2013, 09:31
| #5 |
| | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... Eset (hatte ich schonmal laufen) hat 0 Funde. Security Check: Code:
ATTFilter Results of screen317's Security Check version 0.99.74 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Windows Defender Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 40 Adobe Flash Player 11.6.602.180 Google Chrome 30.0.1599.69 ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastUI.exe AVAST Software Avast AvastSvc.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Udo (administrator) on UDO-PC on 15-10-2013 10:26:55
Running from C:\Users\Udo\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] ()
HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.)
HKCU\...\Policies\Explorer: [RestrictRun] 0
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095}
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: ( "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0
CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-14 23:59 - 2013-10-14 23:59 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:30 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-10-14 11:29 - 2013-10-14 23:58 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 11:29 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00204880 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00065336 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-10-14 11:29 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-14 10:56 - 00021702 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:18 - 2013-10-14 23:58 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-14 01:17 - 2013-10-14 11:28 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:16 - 2013-10-14 11:28 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox
2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:49 - 2013-10-15 09:54 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-13 13:49 - 2013-10-14 11:27 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-14 03:08 - 00000000 ____D C:\AdwCleaner
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:34 - 2013-10-07 19:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
==================== One Month Modified Files and Folders =======
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-15 10:17 - 2012-10-18 07:15 - 01217620 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-15 10:02 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-10-15 09:54 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-15 09:30 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job
2013-10-15 04:28 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-14 23:59 - 2013-10-14 23:59 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-14 23:58 - 2013-10-14 11:29 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 23:58 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 11:58 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:30 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF
2013-10-14 11:28 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 11:28 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 11:27 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-14 11:27 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-14 11:26 - 2012-09-13 20:32 - 00936888 _____ C:\WINDOWS\PFRO.log
2013-10-14 11:26 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-10-14 10:56 - 2013-10-14 02:12 - 00021702 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 10:55 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 10:31 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db
2013-10-14 03:08 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:06 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001
2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job
2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA
2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox
2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini
2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-13 13:49 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log
2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:33 - 2013-10-07 19:34 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npDeployJava1.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG
2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log
2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC
2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag
2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo
2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations
2013-09-15 19:30 - 2013-09-14 22:07 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Trine2
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-10 03:01
==================== End Of Log ============================
--- --- --- --- --- --- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-15 10:27:43
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.8.0.1430)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)
==================== Restore Points =========================
25-09-2013 19:10:14 Windows Update
03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup
==================== Hosts content: ==========================
2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {08D4F941-144B-4F09-8D74-5978D88B8D26} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-10-15 10:17 - 2013-10-15 08:07 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101500\algo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== Faulty Device Manager Devices =============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (10/14/2013 11:59:40 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (10/14/2013 11:59:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (10/14/2013 11:57:46 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:57:42 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:30:42 AM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:30:42 AM) (Source: Location Task Manager) (User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:30:32 AM) (Source: Location Task Manager) (User: )
Description: (GetHomepage()): Vorgabendatei für Mozilla Firefox konnte nicht geöffnet werden. Überprüfen Sie die Installation.
System errors:
=============
Error: (10/15/2013 02:15:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/15/2013 01:17:09 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/14/2013 11:27:23 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/14/2013 11:27:10 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Microsoft Office Sessions:
=========================
Error: (10/14/2013 11:59:40 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
Error: (10/14/2013 11:59:38 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
Error: (10/14/2013 11:57:46 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:57:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:57:42 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:30:42 AM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:30:42 AM) (Source: Location Task Manager)(User: )
Description: (CheckLpdVersion()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/14/2013 11:30:32 AM) (Source: Location Task Manager)(User: )
Description: (GetHomepage()): Vorgabendatei für Mozilla Firefox konnte nicht geöffnet werden. Überprüfen Sie die Installation.
CodeIntegrity Errors:
===================================
Date: 2013-10-13 14:25:33.357
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.504
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.480
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 32%
Total physical RAM: 7950.22 MB
Available physical RAM: 5355.99 MB
Total Pagefile: 16142.22 MB
Available Pagefile: 13321.02 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:697.79 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)
Partition: GPT Partition Type
==================== End Of Log ============================
Browser verhält sich wieder normal. FRST findet aber noch Whilokii (und evtl. weitere?). Mist... Dieser komische Ordner "Remote programs". Muss ich mir da Sorgen machen? Hat da jemand Zugriff gehabt, evtl. Daten ausgelesen? Remotezugriff ist jetzt abgestellt (hatte ich auch nie selbst aktiviert)... Danke für die Hilfe!!  Aktueller ADWCleaner (S7): Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 15/10/2013 um 10:36:00
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Udo - UDO-PC
# Gestartet von : C:\Users\Udo\Downloads\AdwCleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
-\\ Google Chrome v30.0.1599.69
[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [1335 octets] - [12/10/2013 17:57:46]
AdwCleaner[R1].txt - [877 octets] - [12/10/2013 18:48:11]
AdwCleaner[R2].txt - [995 octets] - [12/10/2013 20:12:08]
AdwCleaner[R3].txt - [991 octets] - [12/10/2013 20:54:16]
AdwCleaner[R4].txt - [1352 octets] - [12/10/2013 21:23:49]
AdwCleaner[R5].txt - [1354 octets] - [12/10/2013 21:34:04]
AdwCleaner[R6].txt - [1533 octets] - [13/10/2013 14:33:32]
AdwCleaner[R7].txt - [1890 octets] - [14/10/2013 01:26:06]
AdwCleaner[R8].txt - [1655 octets] - [14/10/2013 03:07:26]
AdwCleaner[R9].txt - [2070 octets] - [15/10/2013 10:34:37]
AdwCleaner[S0].txt - [1398 octets] - [12/10/2013 17:59:45]
AdwCleaner[S1].txt - [937 octets] - [12/10/2013 18:49:57]
AdwCleaner[S2].txt - [1055 octets] - [12/10/2013 20:14:27]
AdwCleaner[S3].txt - [1051 octets] - [12/10/2013 20:55:46]
AdwCleaner[S4].txt - [1414 octets] - [12/10/2013 21:25:47]
AdwCleaner[S5].txt - [1594 octets] - [13/10/2013 14:34:05]
AdwCleaner[S6].txt - [1951 octets] - [14/10/2013 01:27:02]
AdwCleaner[S7].txt - [1979 octets] - [15/10/2013 10:36:00]
########## EOF - C:\AdwCleaner\AdwCleaner[S7].txt - [2039 octets] ##########
Geändert von Sportler (15.10.2013 um 10:24 Uhr) |
|
15.10.2013, 18:37
| #6 |
| /// the machine /// TB-Ausbilder | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... |
|
15.10.2013, 23:17
| #7 |
| | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... Probleme nicht mehr. Nur die Funde im AdwCleaner (sind das überhaupt Funde?). Security Check: Code:
ATTFilter Results of screen317's Security Check version 0.99.74 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Windows Defender Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 40 Adobe Flash Player 11.6.602.180 Google Chrome 30.0.1599.69 ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b7bef78bf500104c898fb9cde0717610
# engine=15497
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-15 10:05:14
# local_time=2013-10-16 12:05:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=774 16777213 85 91 86819 158584586 0 0
# compatibility_mode=5893 16776574 100 94 210393 9158189 0 0
# scanned=273271
# found=0
# cleaned=0
# scan_time=7359
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Udo (administrator) on UDO-PC on 16-10-2013 00:08:18
Running from C:\Users\Udo\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] ()
HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.)
HKCU\...\Policies\Explorer: [RestrictRun] 0
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095}
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: ( "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0
CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-15 21:55 - 2013-10-15 21:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:30 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-10-14 11:29 - 2013-10-14 23:58 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 11:29 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00204880 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00065336 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-10-14 11:29 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-15 10:28 - 00029758 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:18 - 2013-10-14 23:58 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-14 01:17 - 2013-10-14 11:28 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:16 - 2013-10-14 11:28 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox
2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:49 - 2013-10-16 00:01 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-13 13:49 - 2013-10-15 12:00 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-13 13:49 - 2013-10-15 11:56 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-15 11:55 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-15 10:36 - 00000000 ____D C:\AdwCleaner
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:34 - 2013-10-07 19:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
==================== One Month Modified Files and Folders =======
2013-10-16 00:02 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-10-16 00:01 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-15 23:45 - 2012-10-18 07:15 - 01312728 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-15 23:30 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job
2013-10-15 21:55 - 2013-10-15 21:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-15 12:00 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-15 11:56 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-15 11:55 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-15 11:53 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files
2013-10-15 11:24 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF
2013-10-15 11:20 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-15 10:36 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner
2013-10-15 10:36 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-10-15 10:28 - 2013-10-14 02:12 - 00029758 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-15 04:28 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-14 23:58 - 2013-10-14 11:29 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 23:58 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:28 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 11:28 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 11:26 - 2012-09-13 20:32 - 00936888 _____ C:\WINDOWS\PFRO.log
2013-10-14 10:55 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 10:31 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:06 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001
2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job
2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA
2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox
2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini
2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log
2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:33 - 2013-10-07 19:34 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:33 - 2013-10-07 19:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npDeployJava1.dll
2013-10-07 19:33 - 2013-03-22 21:25 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG
2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log
2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC
2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag
2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo
2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations
Some content of TEMP:
====================
C:\Users\Udo\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-10 03:01
==================== End Of Log ============================
Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-16 00:09:09
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.8.0.1430)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
ESET Online Scanner v3 (x32)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Google Update Helper (x32 Version: 1.3.21.165)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)
==================== Restore Points =========================
25-09-2013 19:10:14 Windows Update
03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup
==================== Hosts content: ==========================
2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {08D4F941-144B-4F09-8D74-5978D88B8D26} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2013-06-01 12:20 - 2013-06-01 12:20 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-15 21:59 - 2013-10-15 19:04 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101501\algo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== Faulty Device Manager Devices =============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (10/16/2013 00:06:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (10/15/2013 09:55:50 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (10/15/2013 09:55:48 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (10/15/2013 09:50:46 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:46 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:45 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
System errors:
=============
Error: (10/15/2013 09:58:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/15/2013 11:22:19 AM) (Source: DCOM) (User: UDO-PC)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Udo-PCUdoS-1-5-21-2131803641-2614642185-218673870-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/15/2013 11:21:21 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/15/2013 11:20:30 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/15/2013 11:20:24 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 15.10.2013 um 11:17:10 unerwartet heruntergefahren.
Error: (10/15/2013 11:20:05 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0
Error: (10/15/2013 10:37:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/15/2013 10:37:10 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/15/2013 10:36:35 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0
Error: (10/15/2013 10:36:13 AM) (Source: DCOM) (User: UDO-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}
Microsoft Office Sessions:
=========================
Error: (10/16/2013 00:06:34 AM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (10/15/2013 09:55:50 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
Error: (10/15/2013 09:55:48 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
Error: (10/15/2013 09:50:46 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:46 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:45 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/15/2013 09:50:41 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
CodeIntegrity Errors:
===================================
Date: 2013-10-13 14:25:33.357
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.504
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.480
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 32%
Total physical RAM: 7950.22 MB
Available physical RAM: 5346.74 MB
Total Pagefile: 16142.22 MB
Available Pagefile: 13310.53 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:697.3 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
16.10.2013, 10:59
| #8 | |
| /// the machine /// TB-Ausbilder | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...Zitat:
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Sollte jetzt weg sein
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
16.10.2013, 21:30
| #9 |
| | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... Fixlog: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2013
Ran by Udo at 2013-10-16 22:11:07 Run:1
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
S2 Util Whilokii; "C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe" [x]
*****************
Util Whilokii => Service deleted successfully.
==== End of Fixlog ====
FRST (hier ist noch ein Eintrag Whilokii): Code:
ATTFilter CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Udo (administrator) on UDO-PC on 16-10-2013 22:13:34
Running from C:\Users\Udo\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(CyberLink Corp.) C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-20] (Alcor Micro Corp.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2646592 2012-11-13] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [572992 2012-11-15] (Lenovo Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-06] ()
HKCU\...\Run: [Google Update] - C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-06] (Google Inc.)
HKCU\...\Policies\Explorer: [RestrictRun] 0
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [UpdatePPShortCut] - C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {720F6D90-0609-4D0A-89FE-B6A9808C4F6E} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095}
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: ( "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (ShiftEdit) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcgmndephhjcabhhjfcmncnhbmgbkpij\1.39_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.0.2_0
CHR Extension: (Gmail) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx
CHR HKLM-x32\...\Chrome\Extension: [iokmdlapebooifaijckgcmncjdpojmjl] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252600 2012-08-17] (Broadcom Corporation.)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [661056 2012-11-15] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [460864 2012-11-13] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458304 2012-10-26] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-31] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [164152 2012-08-17] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-05] (Vimicro Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [50128 2013-03-26] (Cisco Systems, Inc.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
R2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-16 21:29 - 2013-10-16 21:29 - 00004278 _____ C:\WINDOWS\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-16 21:29 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-16 21:29 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-16 21:29 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-16 21:29 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-16 00:30 - 2013-10-16 00:30 - 18080872 _____ (Adobe Systems Inc.) C:\Users\Udo\Downloads\AdobeAIRInstaller.exe
2013-10-15 21:55 - 2013-10-15 21:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:30 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-10-14 11:30 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-10-14 11:29 - 2013-10-14 23:58 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 11:29 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00204880 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-10-14 11:29 - 2013-08-30 09:48 - 00065336 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-10-14 11:29 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:12 - 2013-10-16 00:09 - 00032079 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 01:39 - 2013-10-14 02:10 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:18 - 2013-10-14 23:58 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 01:18 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-14 01:17 - 2013-10-14 11:28 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 01:16 - 2013-10-14 11:28 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-13 21:24 - 2013-10-13 21:27 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:21 - 2013-10-13 21:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:14 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-13 14:14 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-13 14:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-13 14:14 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-13 14:13 - 2013-10-13 14:53 - 00000000 ____D C:\Qoobox
2013-10-13 14:13 - 2013-10-13 14:47 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:12 - 2013-10-14 01:25 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:49 - 2013-10-16 22:01 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-13 13:49 - 2013-10-15 12:00 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-13 13:49 - 2013-10-15 11:56 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:49 - 2013-10-15 11:55 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:01 - 2013-10-13 12:04 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:45 - 2013-10-12 21:47 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 20:55 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-12 20:55 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-12 20:55 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-12 20:55 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-12 20:55 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-12 20:55 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-12 20:55 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-12 20:55 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-12 20:55 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-12 20:55 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-12 20:55 - 2013-07-31 01:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-12 20:55 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-12 20:55 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2013-10-12 20:55 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-12 20:55 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-12 20:45 - 2013-10-13 12:53 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:45 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:36 - 2013-10-12 20:37 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:22 - 2013-10-12 20:23 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-15 10:36 - 00000000 ____D C:\AdwCleaner
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:01 - 2013-10-12 17:04 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:01 - 2013-10-12 17:02 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:58 - 2013-10-12 17:00 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:58 - 2013-10-12 16:59 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 10:58 - 2013-10-12 11:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-09 10:13 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-09 10:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2013-10-09 10:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2013-10-09 10:13 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2013-10-09 10:13 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-09 10:13 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2013-10-09 10:13 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2013-10-09 10:13 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2013-10-09 10:12 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-10-09 10:12 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-09 10:12 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-09 10:12 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-10-09 10:12 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-10-09 10:12 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2013-10-09 10:12 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-09 10:12 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2013-10-09 10:12 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2013-10-09 10:12 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2013-10-09 10:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2013-10-09 10:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2013-10-09 10:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2013-10-09 10:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-10-09 10:09 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2013-10-09 10:09 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-10-09 10:08 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2013-10-09 10:08 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2013-10-09 10:08 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2013-10-09 10:08 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2013-10-09 10:07 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2013-10-09 10:07 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2013-10-09 10:07 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2013-10-09 10:07 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-10-09 10:06 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 10:06 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-10-09 10:06 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:55 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:46 - 2013-10-07 19:47 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:39 - 2013-10-07 19:45 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:35 - 2013-10-16 21:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-05 13:19 - 2013-10-13 12:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 22:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-10-03 18:29 - 2013-10-03 18:30 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-22 00:52 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-09-22 00:52 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
==================== One Month Modified Files and Folders =======
2013-10-16 22:01 - 2013-10-13 13:49 - 00001118 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-16 22:00 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-10-16 21:40 - 2012-10-18 07:15 - 01545094 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-16 21:30 - 2013-10-07 19:35 - 00000000 ____D C:\ProgramData\Oracle
2013-10-16 21:30 - 2013-02-13 20:05 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job
2013-10-16 21:29 - 2013-10-16 21:29 - 00004278 _____ C:\WINDOWS\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-16 21:29 - 2013-06-24 20:42 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-16 00:30 - 2013-10-16 00:30 - 18080872 _____ (Adobe Systems Inc.) C:\Users\Udo\Downloads\AdobeAIRInstaller.exe
2013-10-16 00:09 - 2013-10-14 02:12 - 00032079 _____ C:\Users\Udo\Downloads\Addition.txt
2013-10-15 21:55 - 2013-10-15 21:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-10-15 12:00 - 2013-10-13 13:49 - 00001114 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-15 11:56 - 2013-10-13 13:49 - 00004090 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-15 11:55 - 2013-10-13 13:49 - 00003854 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-15 11:53 - 2013-02-06 20:09 - 00000000 ____D C:\Users\Udo\AppData\Local\PMB Files
2013-10-15 11:24 - 2013-02-06 18:02 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Nitro PDF
2013-10-15 11:20 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-15 10:36 - 2013-10-12 17:57 - 00000000 ____D C:\AdwCleaner
2013-10-15 10:36 - 2012-07-26 07:26 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-10-15 10:23 - 2013-10-15 10:23 - 00891167 _____ C:\Users\Udo\Downloads\SecurityCheck.exe
2013-10-15 04:28 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-14 23:58 - 2013-10-14 11:29 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-10-14 23:58 - 2013-10-14 01:18 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2013-10-14 11:30 - 2013-10-14 11:30 - 00001933 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-14 11:28 - 2013-10-14 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 11:28 - 2013-10-14 01:16 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 11:26 - 2012-09-13 20:32 - 00936888 _____ C:\WINDOWS\PFRO.log
2013-10-14 10:55 - 2013-02-06 20:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2013-10-14 10:49 - 2013-10-14 10:49 - 00000610 _____ C:\Users\Udo\Desktop\JRT.txt
2013-10-14 10:31 - 2013-02-20 00:28 - 00036864 ___SH C:\Users\Udo\Desktop\Thumbs.db
2013-10-14 03:06 - 2013-10-14 03:06 - 00000240 _____ C:\Users\Udo\Downloads\defogger_enable.log
2013-10-14 03:06 - 2013-02-06 18:01 - 00000000 ____D C:\Users\Udo
2013-10-14 03:03 - 2013-10-14 03:03 - 721262806 _____ C:\WINDOWS\MEMORY.DMP
2013-10-14 03:03 - 2013-10-14 03:03 - 00297808 _____ C:\WINDOWS\Minidump\101413-27859-01.dmp
2013-10-14 03:03 - 2013-10-14 03:03 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-14 02:18 - 2013-10-14 02:18 - 00806723 _____ C:\Users\Udo\Downloads\gmer.log
2013-10-14 02:11 - 2013-10-14 02:11 - 00000000 ____D C:\FRST
2013-10-14 02:10 - 2013-10-14 01:39 - 00000468 _____ C:\Users\Udo\Downloads\defogger_disable.log
2013-10-14 01:37 - 2013-10-14 01:37 - 01954124 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2013-10-14 01:37 - 2013-10-14 01:37 - 00377856 _____ C:\Users\Udo\Downloads\3imi4iv4.exe
2013-10-14 01:36 - 2013-10-14 01:36 - 00050477 _____ C:\Users\Udo\Downloads\Defogger.exe
2013-10-14 01:31 - 2013-10-14 01:31 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-14 01:31 - 2013-10-14 01:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-14 01:25 - 2013-10-14 01:25 - 00000000 ____D C:\32788R22FWJFW
2013-10-14 01:25 - 2013-10-13 14:12 - 05132614 _____ (Swearware) C:\Users\Udo\Downloads\ComboFix.exe
2013-10-14 00:12 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-14 00:02 - 2013-02-06 18:12 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2131803641-2614642185-218673870-1001
2013-10-13 21:27 - 2013-10-13 21:24 - 131918888 _____ C:\Users\Udo\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-10-13 21:22 - 2013-10-13 21:21 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-10-13 19:59 - 2013-10-13 19:59 - 02347384 _____ (ESET) C:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
2013-10-13 19:30 - 2013-02-13 20:05 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job
2013-10-13 19:25 - 2013-02-13 20:05 - 00004068 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA
2013-10-13 19:25 - 2013-02-13 20:05 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core
2013-10-13 19:18 - 2013-10-13 19:18 - 00000000 ____H C:\Users\Udo\Documents\Default.rdp
2013-10-13 14:53 - 2013-10-13 14:53 - 00024165 _____ C:\ComboFix.txt
2013-10-13 14:53 - 2013-10-13 14:13 - 00000000 ____D C:\Qoobox
2013-10-13 14:48 - 2012-07-26 07:26 - 00000215 _____ C:\WINDOWS\system.ini
2013-10-13 14:47 - 2013-10-13 14:13 - 00000000 ____D C:\WINDOWS\erdnt
2013-10-13 14:47 - 2012-07-26 07:26 - 75497472 _____ C:\WINDOWS\system32\config\SOFTWARE.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 14155776 _____ C:\WINDOWS\system32\config\SYSTEM.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-13 14:47 - 2012-07-26 07:26 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-13 14:35 - 2013-10-13 14:35 - 00432600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-13 14:05 - 2013-02-06 18:05 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 14:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-13 13:56 - 2013-10-13 13:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-13 13:56 - 2013-02-06 18:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-13 13:38 - 2013-02-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 13:36 - 2013-07-23 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-13 13:35 - 2013-02-06 19:43 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-13 12:53 - 2013-10-12 20:45 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-13 12:36 - 2013-10-05 13:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Garmin
2013-10-13 12:05 - 2013-10-13 12:05 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-13 12:04 - 2013-10-13 12:01 - 18854112 _____ C:\Users\Udo\Downloads\CommunicatorPlugin_404.exe
2013-10-12 21:49 - 2013-10-12 21:49 - 00014545 _____ C:\Users\Udo\Desktop\hijackthis.log
2013-10-12 21:47 - 2013-10-12 21:45 - 01402880 _____ C:\Users\Udo\Downloads\HiJackThis.msi
2013-10-12 21:10 - 2013-02-06 18:10 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2013-10-12 20:45 - 2013-10-12 20:45 - 00000000 ____D C:\ProgramData\Licenses
2013-10-12 20:38 - 2013-10-12 20:38 - 00001275 _____ C:\Users\Udo\Desktop\Revo Uninstaller.lnk
2013-10-12 20:38 - 2013-10-12 20:38 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-12 20:37 - 2013-10-12 20:36 - 04095448 _____ (BrightFort LLC ) C:\Users\Udo\Downloads\spywareblastersetup50.exe
2013-10-12 20:35 - 2013-10-12 20:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Udo\Downloads\revosetup95.exe
2013-10-12 20:23 - 2013-10-12 20:22 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner (1).exe
2013-10-12 18:45 - 2013-10-12 18:45 - 00000000 ____D C:\WINDOWS\ERUNT
2013-10-12 17:58 - 2013-10-12 17:58 - 01032220 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2013-10-12 17:57 - 2013-10-12 17:57 - 01048960 _____ C:\Users\Udo\Downloads\AdwCleaner.exe
2013-10-12 17:04 - 2013-10-12 17:04 - 00674146 _____ C:\Users\Udo\Downloads\ADFC_Bett_und_Bike.gpi
2013-10-12 17:04 - 2013-10-12 17:01 - 17465928 _____ C:\Users\Udo\Downloads\Biergaerten.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00050753 _____ C:\Users\Udo\Downloads\Heu-Stroh-Herbergen.gpi
2013-10-12 17:03 - 2013-10-12 17:03 - 00048250 _____ C:\Users\Udo\Downloads\Bauernhof_Naturcamping.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00131277 _____ C:\Users\Udo\Downloads\Roemer_in_Deutschland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00058987 _____ C:\Users\Udo\Downloads\FraenkischesWeinland.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00055116 _____ C:\Users\Udo\Downloads\Altmuehltal.gpi
2013-10-12 17:02 - 2013-10-12 17:02 - 00043419 _____ C:\Users\Udo\Downloads\FraenkischeSchweiz.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 02824860 _____ C:\Users\Udo\Downloads\HarzerWandernadel.gpi
2013-10-12 17:02 - 2013-10-12 17:01 - 00258199 _____ C:\Users\Udo\Downloads\Bauernhofgastronomie.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00099817 _____ C:\Users\Udo\Downloads\braugasthoefe.gpi
2013-10-12 17:01 - 2013-10-12 17:01 - 00032508 _____ C:\Users\Udo\Downloads\BotanischeGaerten.gpi
2013-10-12 17:00 - 2013-10-12 17:00 - 00103626 _____ C:\Users\Udo\Downloads\Minigolf.gpi
2013-10-12 17:00 - 2013-10-12 16:58 - 14945139 _____ C:\Users\Udo\Downloads\Zoos.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00149375 _____ C:\Users\Udo\Downloads\Naturerlebnispfade.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00024199 _____ C:\Users\Udo\Downloads\Schaubergwerke.gpi
2013-10-12 16:59 - 2013-10-12 16:59 - 00012435 _____ C:\Users\Udo\Downloads\Schauhoehlen.gpi
2013-10-12 16:59 - 2013-10-12 16:58 - 00260329 _____ C:\Users\Udo\Downloads\Themenwege.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00057459 _____ C:\Users\Udo\Downloads\wanderparkplaetze.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00056879 _____ C:\Users\Udo\Downloads\Themengaerten.gpi
2013-10-12 16:58 - 2013-10-12 16:58 - 00038524 _____ C:\Users\Udo\Downloads\Trimm-Dich-Pfade.gpi
2013-10-12 11:05 - 2013-10-12 11:05 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2013-10-12 11:04 - 2013-10-12 11:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-12 11:03 - 2013-10-12 10:58 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-12 10:46 - 2012-10-18 16:51 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-10-12 10:46 - 2012-10-18 16:51 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-10-12 10:46 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-12 10:43 - 2012-07-26 09:21 - 00055263 _____ C:\WINDOWS\setupact.log
2013-10-08 07:50 - 2013-10-16 21:29 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-10-08 07:46 - 2013-10-16 21:29 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-10-08 07:46 - 2013-10-16 21:29 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-10-08 07:46 - 2013-10-16 21:29 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-10-07 19:55 - 2013-10-07 19:50 - 00000000 ____D C:\Users\Udo\Downloads\CryptLoad_1.1.8
2013-10-07 19:51 - 2013-10-07 19:51 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WinRAR
2013-10-07 19:50 - 2013-10-07 19:50 - 00000000 ____D C:\Program Files\7-Zip
2013-10-07 19:49 - 2013-10-07 19:49 - 01376768 _____ C:\Users\Udo\Downloads\7z920-x64.msi
2013-10-07 19:47 - 2013-10-07 19:46 - 00000000 ____D C:\Users\Udo\Downloads\comics
2013-10-07 19:45 - 2013-10-07 19:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-07 19:40 - 2013-10-07 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 19:36 - 2013-10-07 19:36 - 00913832 _____ (Oracle Corporation) C:\Users\Udo\Downloads\chromeinstall-7u40.exe
2013-10-07 19:15 - 2013-10-07 19:15 - 00000000 ____D C:\Users\Udo\AppData\Local\Logishrd
2013-10-07 19:15 - 2013-02-06 21:42 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-10-07 19:15 - 2013-02-06 21:42 - 00016232 _____ C:\WINDOWS\LDPINST.LOG
2013-10-07 19:15 - 2013-02-06 21:42 - 00000708 _____ C:\WINDOWS\LkmdfCoInst.log
2013-10-07 19:15 - 2013-02-06 21:42 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2013-10-07 19:15 - 2013-02-06 21:41 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logitech
2013-10-07 19:14 - 2013-02-06 21:42 - 00000000 ____D C:\ProgramData\Logishrd
2013-10-05 13:19 - 2013-10-05 13:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-10-05 13:10 - 2013-10-05 13:10 - 37672592 _____ (Safer-Networking Ltd. ) C:\Users\Udo\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-03 18:30 - 2013-10-03 18:29 - 02828552 _____ (AVAST Software) C:\Users\Udo\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-09-22 00:52 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-29 00:31 - 2013-09-29 00:31 - 00329304 _____ C:\Users\Udo\Downloads\dcnew52alle.dlc
2013-09-29 00:27 - 2013-09-29 00:27 - 00081488 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\Udo\Downloads\WebInstaller.exe
2013-09-27 01:25 - 2013-09-27 01:25 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2013-09-25 21:27 - 2013-02-06 18:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\LSC
2013-09-23 01:28 - 2013-10-09 10:13 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-09-23 01:28 - 2013-10-09 10:12 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 14335488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 02048512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 10:12 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 10:12 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 10:12 - 19252224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-09-22 00:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-09-22 00:48 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-09-21 23:11 - 2013-09-21 23:11 - 00002002 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2013-09-21 23:11 - 2013-02-06 20:56 - 00000000 ____D C:\ldiag
2013-09-21 23:11 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2013-09-21 23:11 - 2012-10-18 06:59 - 00000000 ____D C:\Program Files\Lenovo
2013-09-21 23:09 - 2012-10-18 07:14 - 00000000 ____D C:\WINDOWS\Downloaded Installations
Some content of TEMP:
====================
C:\Users\Udo\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Udo\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-10 03:01
==================== End Of Log ============================
Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Udo at 2013-10-16 22:14:21
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
PowerDVD Create 10 (x32 Version: 10.0.1.1904)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe AIR (x32 Version: 3.9.0.1030)
Adobe Flash Player 11 Plugin (x32 Version: 11.6.602.180)
Alcor Micro USB Card Reader (x32 Version: 3.12.3042.71515)
Anzeige am Bildschirm (Version: 7.01.00)
Audacity 2.0.3 (x32 Version: 2.0.3)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Broadcom 802.11 Network Adapter (Version: 6.30.59.26)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
CyberLink Power2Go 7 (x32 Version: 7.0.0.3104)
CyberLink PowerDVD 10 (x32 Version: 10.0.4420.52)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4306b)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
eReg (x32 Version: 1.20.138.34)
ESET Online Scanner v3 (x32)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Fingerprint Reader (Version: 6.0.200.75)
FreeRide Games (x32 Version: 07.05.80.00)
FTL version 1.03.3 (x32 Version: 1.03.3)
Google Chrome (x32 Version: 30.0.1599.69)
Google Talk Plugin (x32 Version: 4.7.0.15362)
Google Update Helper (x32 Version: 1.3.21.165)
Integrated Camera (x32 Version: 5.12.831.31)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) Update Manager (x32 Version: 1.0.0.34813)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
LAME v3.99.3 (for Windows) (x32)
Lenovo Auto Scroll Utility (Version: 1.33)
Lenovo Dependency Package (x32 Version: 1.0)
Lenovo Patch Utility (x32 Version: 1.3.1.1)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.66.00.22)
Lenovo QuickLaunch (x32 Version: 1.2.0010)
Lenovo Settings - Camera Audio (Version: 4.0.20.0)
Lenovo Settings Dependency Package (Version: 1.0.5.8)
Lenovo Settings Mobile Hotspot (Version: 1.0.0.27)
Lenovo Solution Center (Version: 2.2.002.00)
Lenovo Solutions for Small Business Customizations (x32 Version: 1.1.0004.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0007.00)
Logitech SetPoint 6.61 (Version: 6.61.15)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mendeley Desktop 1.8.4 (x32 Version: 1.8.4)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Nitro Pro 7 (Version: 7.4.1.21)
NVIDIA PhysX (x32 Version: 9.12.0613)
Origin8 (x32 Version: 8.00.000)
OriginPro 8 (x32 Version: 8.00.000)
Pando Media Booster (x32 Version: 2.6.0.8)
PAYDAY: The Heist (x32)
Portal 2 (x32)
PowerDVD Create (x32 Version: 10.0)
Primordia (x32 Version: 2.0.0.2)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710)
Revo Uninstaller 1.95 (x32 Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Skitch (x32 Version: 2.1.2.9)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.92.107379)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
The Elder Scrolls V: Skyrim (x32)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.1900)
Unity Web Player (HKCU Version: )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
WaveEditor (x32 Version: 1.0.1.4013)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC (07/09/2012 11.5.0.1207) (Version: 07/09/2012 11.5.0.1207)
Windows-Treiberpaket - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (Version: 08/15/2012 1.66.00.07)
XBMC (HKCU)
==================== Restore Points =========================
03-10-2013 11:31:36 Geplanter Prüfpunkt
06-10-2013 13:56:06 Windows Update
07-10-2013 17:33:02 Installed Java 7 Update 40
12-10-2013 18:39:52 Revo Uninstaller's restore point - µTorrent
13-10-2013 23:17:32 avast! Free Antivirus Setup
16-10-2013 19:28:51 Installed Java 7 Update 45
==================== Hosts content: ==========================
2012-07-26 07:26 - 2013-10-13 14:48 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0444A6C0-C61F-410C-9FE7-58332C165D25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {08D4F941-144B-4F09-8D74-5978D88B8D26} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {0A404C79-F19B-4281-B915-F9B5D844C049} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: {135AE5BD-03D5-4A2F-9AA9-5480FB559E09} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24] (CyberLink)
Task: {350C3AC2-0118-4904-AC3F-53EAB8A63162} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12] (Intel Corporation)
Task: {464D4197-2EE8-46A8-9DF8-DD9658DAB2BA} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-08-08] ()
Task: {614A93C8-08D4-4A7E-AE67-78D963275E74} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {72DF4FDC-FB22-43A0-97EA-3AD0C3433926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {7DF9723F-73A3-4740-9420-B2CDF2B3990A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8A33E30F-A0AA-48D9-98FF-1E82101542DA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-08-08] (Lenovo)
Task: {B876035A-B12D-4D36-967C-552207BB8D34} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF45E9F7-545B-4CDA-B3F3-58D42F7A399A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {C4081DD2-1FEC-489B-818D-494145522D61} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\pla.dll [2012-07-26] (Microsoft Corporation)
Task: {C81B04D1-A793-4FB9-B254-C1A62C449487} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {E0DCCD85-12F4-4145-974E-A99BAD69A0A0} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2012-07-13] (CyberLink Corp.)
Task: {FAE9C969-B82F-4E5F-B85D-B3D5A928248E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001Core.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2131803641-2614642185-218673870-1001UA.job => C:\Users\Udo\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-07-31 22:17 - 2012-07-31 22:17 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2013-06-01 12:20 - 2013-06-01 12:20 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2012-10-18 07:06 - 2012-08-24 12:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 01130344 _____ () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-08-31 04:43 - 2012-08-31 04:43 - 00087400 _____ () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-02-06 20:12 - 2012-11-15 15:05 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2012-05-24 21:19 - 2012-05-24 21:19 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2012-10-18 07:21 - 2012-07-12 14:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2011-03-17 01:11 - 2011-03-17 01:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2012-08-31 04:44 - 2012-08-31 04:44 - 00900456 _____ () C:\Program Files\Lenovo Fingerprint Reader\x86\DataManager.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-13 13:56 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-13 13:56 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00491008 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\48c2e4346c32df24c33f7a095339881c\Windows.Networking.ni.dll
2013-07-18 09:31 - 2013-07-18 09:31 - 00184832 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\387a593cd07b32b07cbdf0e94ae9a092\Windows.Foundation.ni.dll
2012-10-18 07:01 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-15 21:59 - 2013-10-15 19:04 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101501\algo.dll
2013-10-15 05:57 - 2013-10-15 05:57 - 13584776 _____ () C:\Users\Udo\AppData\Local\Google\Chrome\User Data\PepperFlash\11.9.900.117\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:AD022376
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== Faulty Device Manager Devices =============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Broadcom Bluetooth 4.0
Description: Broadcom Bluetooth 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: WAN-Miniport (Netzwerkmonitor)
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: WAN-Miniport (Netzwerkmonitor) #2
Description: WAN-Miniport (Netzwerkmonitor)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (10/16/2013 08:49:09 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:49:09 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:54 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:54 PM) (Source: Location Task Manager) (User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 03:27:37 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (10/16/2013 00:06:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (10/15/2013 09:55:50 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
System errors:
=============
Error: (10/15/2013 09:58:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/15/2013 11:22:19 AM) (Source: DCOM) (User: UDO-PC)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Udo-PCUdoS-1-5-21-2131803641-2614642185-218673870-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/15/2013 11:21:21 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/15/2013 11:20:30 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/15/2013 11:20:24 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 15.10.2013 um 11:17:10 unerwartet heruntergefahren.
Error: (10/15/2013 11:20:05 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0
Error: (10/15/2013 10:37:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util Whilokii" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/15/2013 10:37:10 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{7160A13D-73DA-4CEA-95B9-37356478588A}Nicht verfügbarNT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/15/2013 10:36:35 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0
Error: (10/15/2013 10:36:13 AM) (Source: DCOM) (User: UDO-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}
Microsoft Office Sessions:
=========================
Error: (10/16/2013 08:49:09 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:49:09 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:59 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:54 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 08:48:54 PM) (Source: Location Task Manager)(User: )
Description: (GetUserLpd()): "user_lpd.xml" konnte nicht gefunden werden. Überprüfen Sie, ob "Lenovo Settings" installiert ist: C:\Users\Udo\AppData\Local\Packages\LenovoCorporation.LenovoSettings_4642shxvsv8s2\LocalState\user_lpd.xml
Error: (10/16/2013 03:27:37 AM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (10/16/2013 00:06:34 AM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (10/15/2013 09:55:50 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\Udo\Downloads\esetsmartinstaller_enu.exe
CodeIntegrity Errors:
===================================
Date: 2013-10-13 14:25:33.357
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.504
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Udo\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-07 19:32:17.480
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 54%
Total physical RAM: 7950.22 MB
Available physical RAM: 3634.91 MB
Total Pagefile: 16142.22 MB
Available Pagefile: 11606.11 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (Windows8_OS) (Fixed) (Total:918.42 GB) (Free:699.02 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9DCE0ACE)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
17.10.2013, 11:02
| #10 |
| /// the machine /// TB-Ausbilder | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... Genau, die Zeile so noch fixen. Adware ändert nix an Remote Einstellungen. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.11.2013, 18:27
| #11 | |
| | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr...Zitat:
 |
|
03.11.2013, 08:01
| #12 |
| /// the machine /// TB-Ausbilder | Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... alles klar
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win8 Whilokii, BrowseFox.A und Delta-Search, evtl. mehr... |
| 4d36e972-e325-11ce-bfc1-08002be10318, adblock, adware.whilokii, antivirus, antivirus se, chip.de, combofix, device driver, farbar, farbar recovery scan tool, feedback, flash player, google, hilfreich, homepage, hotspot, iexplore.exe, mozilla, myphoneexplorer, nicht möglich, plug-in, preferences, pup.netcat, pup.optional.browsefox.a, pup.optional.installcore.a, pup.optional.opencandy, pup.optional.searchgoltb.a, pup.optional.startpage.a, registrierungsdatenbank, required, revo uninstaller, richtlinie, software, svchost.exe, whilokii, windowsapps |
Linear-Darstellung
