|
Plagegeister aller Art und deren Bekämpfung: USB-Stick: Ordner auf einmal versteckt & teilweise .exe DateienWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
31.10.2013, 23:09 | #1 |
| USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien Hallo, offensichtlich habe ich mir einen Virus auf meinem USB-Stick eingefangen (Daten sind für Uni sehr wichtig). Problem: Meine Ordner (!) auf dem USB Stick werden nicht mehr angezeigt. Auffällig hierbei ist, dass die Ordner zeitlich versetzt verschwanden: zunächst fehlten nur ein bis zwei Ordner, am nächsten Tag waren alle verschwunden. Einige der verschwundenen Ordner wurden scheinbar in eine 0-kb-große .exe Datei umgewandelt - der Ordnername entspricht hierbei dem Dateinamen. Soweit zur Beschreibung der Umstände. Was ich bisher schon gemacht habe: Da es mir spanisch vorkam, dass der USB Speicher trotz der nicht mehr vorhandenen Ordner weiterhin komplett belegt war, habe ich über die Anzeigeoptionen die versteckten und System-Dateien anzeigen lassen. Die verschwundenen Ordner erschienen nun wieder, allerdings transparent. Was muss ich tun um den Virus (?) auf dem Stick loszuwerden und das wichtigste: um meine Daten nicht zu verlieren. Vielen Dank schon im Voraus!! Lg Christina |
31.10.2013, 23:31 | #2 |
/// the machine /// TB-Ausbilder | USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien Hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
01.11.2013, 00:06 | #3 |
| USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by Christina Maren R (administrator) on FREIER_GEIST on 01-11-2013 00:00:00 Running from C:\Users\Christina Maren R\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe () C:\Program Files (x86)\XSManager\WTGService.exe (4G Systems GmbH & Co. KG) C:\Windows\service4g.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (ATK) C:\Program Files\P4G\BatteryLife.exe (ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ASUS) C:\Windows\AsScrPro.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (4G Systems GmbH & Co. KG) C:\Windows\starter4g.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (asus) C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\system32\cmd.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Apple Inc.) C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.) HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] () HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.) HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation) HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [GoogleChromeAutoLaunch_5F1959BD232E006F56CACFDD116D8381] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752 2013-10-09] (Google Inc.) HKCU\...\Run: [WindowMessenger] - C:\RECYCLER\X-1-5-21-1960408961-725345543-839522115-1003\WinSysApp.exe HKCU\...\Run: [Windows Alerter] - C:\Program Files\Windows Alerter\WinAlert.exe HKCU\...\Run: [Windows Common Files Manager] - C:\Program Files\Windows Common Files\Commgr.exe MountPoints2: {8c4eaa17-1dad-11e0-ab62-20cf3047a4b1} - F:\autorun.exe HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\CyberLink\Shared files\brs.exe [75048 2010-02-24] (cyberlink) HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.) HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.) HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-08-26] () HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [7350912 2010-02-04] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-01-05] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [starter4g] - C:\Windows\starter4g.exe [157968 2009-06-17] (4G Systems GmbH & Co. KG) HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-05-10] (Hewlett-Packard) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-10] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll [95848 2010-03-27] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [90216 2010-03-27] (NVIDIA Corporation) Startup: C:\Users\Christina Maren R\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com URLSearchHook: HKCU - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.) BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.) BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.) Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Chrome: ======= CHR HomePage: hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=CCF4001E644F5F4D&affID=121562&tt=180613_ndt3&tsp=4921 CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\25.62074_0 CHR Extension: (YouTube) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Google Wallet) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-10-10] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] () R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [304592 2009-06-22] () R2 XS Stick Service; C:\Windows\service4g.exe [125200 2009-06-17] (4G Systems GmbH & Co. KG) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-10-10] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-10-10] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-10-10] (Avira Operations GmbH & Co. KG) S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2011-01-11] (Mobile Connector) S3 cmnsusbser; C:\Windows\SysWow64\DRIVERS\cmnsusbser.sys [117888 2008-10-31] (Mobile Connector) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] () R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] () R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-02-24] (CyberLink Corp.) U3 tmlwf; U3 tmwfp; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-31 23:59 - 2013-10-31 23:59 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Desktop\FRST64.exe 2013-10-31 23:44 - 2013-10-31 23:44 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-10-31 23:44 - 2013-10-31 23:44 - 00000000 ____D C:\Program Files\iTunes 2013-10-31 23:44 - 2013-10-31 23:44 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-10-31 23:36 - 2013-10-31 23:37 - 00045427 _____ C:\Users\Christina Maren R\Downloads\FRST.txt 2013-10-31 23:35 - 2013-10-31 23:37 - 00064259 _____ C:\Users\Christina Maren R\Downloads\Addition.txt 2013-10-31 23:34 - 2013-10-31 23:34 - 00011298 _____ C:\Users\Christina Maren R\Desktop\Kostenaufstellung.xlsx 2013-10-31 23:34 - 2013-10-31 23:34 - 00000165 ____H C:\Users\Christina Maren R\Desktop\~$Kostenaufstellung.xlsx 2013-10-31 23:33 - 2013-10-31 23:33 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST64.exe 2013-10-31 23:33 - 2013-10-31 23:33 - 00000000 ____D C:\FRST 2013-10-31 23:32 - 2013-10-31 23:32 - 01089445 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST.exe 2013-10-31 23:19 - 2013-10-31 23:44 - 00000000 ____D C:\Program Files\iPod 2013-10-31 22:34 - 2013-10-31 22:34 - 00003216 _____ C:\Windows\System32\Tasks\{76C0DB9E-0DA2-43FF-8932-A7E8E0DF8E6E} 2013-10-31 22:33 - 2013-10-31 22:33 - 00388608 _____ (Trend Micro Inc.) C:\Users\Christina Maren R\Downloads\HijackThis.exe 2013-10-31 22:33 - 2013-10-31 22:33 - 00015357 _____ C:\Users\Christina Maren R\Downloads\hijackthis.log 2013-10-31 20:00 - 2013-10-31 20:00 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Avira 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-10-31 19:58 - 2013-10-31 19:58 - 00000000 ____D C:\ProgramData\APN 2013-10-31 19:51 - 2013-10-31 19:51 - 00002064 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\ProgramData\Avira 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\Program Files (x86)\Avira 2013-10-31 19:48 - 2013-10-10 19:14 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-10-31 19:48 - 2013-10-10 19:14 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-10-31 19:48 - 2013-10-10 19:14 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-10-31 19:48 - 2013-10-10 19:14 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-10-31 19:43 - 2013-10-31 19:43 - 00003058 _____ C:\Windows\System32\Tasks\{90ED30BE-B4FE-4BEC-B171-738AB66C4A7A} 2013-10-31 19:41 - 2013-10-31 19:42 - 85269544 _____ (AVAST Software) C:\Users\Christina Maren R\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe 2013-10-31 19:37 - 2013-10-31 19:38 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de_14b411.exe 2013-10-31 19:28 - 2013-10-31 19:29 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de.exe 2013-10-30 12:59 - 2013-10-30 12:59 - 00000000 __SHD C:\Program Files 2013-10-29 13:02 - 2013-10-29 13:02 - 00171083 _____ C:\Users\Christina Maren R\Desktop\2. Sitzung Einführung BRD EU.pptx 2013-10-29 13:01 - 2013-10-29 13:01 - 00170925 _____ C:\Users\Christina Maren R\Downloads\2. Sitzung Einführung BRD EU.pptx 2013-10-28 15:46 - 2013-10-28 15:46 - 00003088 _____ C:\Windows\System32\Tasks\{8FC9014E-4053-4261-8517-5056C89D6DCC} 2013-10-28 14:25 - 2013-10-28 15:42 - 00092261 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr (1).pptx 2013-10-28 10:21 - 2013-10-28 10:21 - 00003088 _____ C:\Windows\System32\Tasks\{26FBFD2A-0450-47A4-8450-F6853D2C1E08} 2013-10-27 23:06 - 2013-10-27 23:06 - 00003088 _____ C:\Windows\System32\Tasks\{8BD73FC9-0826-4C63-8308-9F7BF369F89D} 2013-10-27 21:52 - 2013-10-27 21:52 - 00067489 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr.pptx 2013-10-27 20:54 - 2013-10-27 20:54 - 00680448 _____ C:\Users\Christina Maren R\Downloads\empiri-Vorlesung.ppt 2013-10-27 18:38 - 2013-10-27 18:38 - 01393664 _____ C:\Users\Christina Maren R\Downloads\cleavages_und_sozialstruktur.ppt 2013-10-27 15:51 - 2013-10-27 15:51 - 00003088 _____ C:\Windows\System32\Tasks\{7CA5E8F0-D8A3-46A2-8952-AE074F1A6394} 2013-10-26 18:03 - 2013-10-26 18:03 - 00003088 _____ C:\Windows\System32\Tasks\{1687F846-A15F-454E-A739-C977E3FA1594} 2013-10-25 12:41 - 2013-10-25 12:41 - 00003088 _____ C:\Windows\System32\Tasks\{19302274-A815-41E2-981B-358A9261CEFD} 2013-10-23 13:02 - 2013-10-23 13:02 - 00003088 _____ C:\Windows\System32\Tasks\{90191F87-D18E-4B72-B53F-EDC77F0141E8} 2013-10-23 12:26 - 2013-10-23 12:26 - 00003088 _____ C:\Windows\System32\Tasks\{1162C06B-2136-4348-8950-AD5F1D0A63B4} 2013-10-22 09:20 - 2013-10-22 09:20 - 00003088 _____ C:\Windows\System32\Tasks\{27DBEED7-2FB3-40C6-BD69-3A1A0EEE8A3D} 2013-10-21 14:58 - 2013-10-21 14:58 - 00003088 _____ C:\Windows\System32\Tasks\{8E9A3AF9-FF8A-484F-B976-BCA724FB930B} 2013-10-21 13:32 - 2013-10-21 13:32 - 00003088 _____ C:\Windows\System32\Tasks\{1189B055-1048-46E3-8F02-F2568AF90F91} 2013-10-20 18:58 - 2013-10-20 18:58 - 00003088 _____ C:\Windows\System32\Tasks\{46B12118-0293-4FB1-93FF-E5EC852F5362} 2013-10-18 14:30 - 2013-10-18 14:30 - 00256251 _____ C:\Users\Christina Maren R\Downloads\1. Sitzung Einführung BRD.pptx 2013-10-16 17:58 - 2013-10-25 11:26 - 00000000 ____D C:\Users\Christina Maren R\Desktop\EU WS13_14 2013-10-16 17:57 - 2013-10-29 12:56 - 00000000 ____D C:\Users\Christina Maren R\Desktop\PoWi WS13_14 2013-10-16 17:57 - 2013-10-16 17:57 - 00000000 ____D C:\Users\Christina Maren R\Desktop\BRD WS13_14 2013-10-16 17:53 - 2013-10-25 11:28 - 00000000 ____D C:\Users\Christina Maren R\Desktop\VL Statistik WS13_14 2013-10-16 17:53 - 2013-10-16 17:54 - 00000000 ____D C:\Users\Christina Maren R\Desktop\International Relations WS1314 2013-10-16 17:53 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\VL GIS WS13_14 2013-10-16 09:52 - 2013-10-16 09:52 - 00003088 _____ C:\Windows\System32\Tasks\{F57C438F-5022-459A-947D-08718FC78742} 2013-10-15 16:26 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-15 16:26 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-15 16:26 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-15 16:26 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-15 16:26 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-15 16:26 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-15 16:26 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-15 16:26 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-15 16:26 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-15 16:26 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-15 16:25 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-15 16:25 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-15 16:25 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-15 16:12 - 2013-10-15 16:12 - 00003088 _____ C:\Windows\System32\Tasks\{BA7D6CCF-FF11-4DFB-9F8F-162B1FB1BD20} 2013-10-14 09:25 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-14 09:25 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-14 09:25 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-14 09:25 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-14 09:25 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-14 09:25 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-14 09:25 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-14 09:25 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-14 09:25 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-14 09:25 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-14 09:25 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-14 09:25 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-14 09:25 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-14 09:25 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-14 09:25 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-14 09:25 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-14 09:25 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-14 09:25 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-14 09:25 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-14 09:25 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-14 09:25 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-14 09:25 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-14 09:25 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-14 09:25 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-14 09:25 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-14 09:25 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-14 09:25 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-14 09:25 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-14 09:25 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-14 09:25 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-14 09:25 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-14 09:25 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-14 09:25 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-14 09:25 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-14 09:25 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-14 09:25 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-14 09:25 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-14 09:25 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-14 09:25 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-14 09:25 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-14 09:25 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-14 09:25 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-14 09:25 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-14 09:25 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-14 09:25 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-14 09:25 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-09 12:31 - 2013-10-09 15:20 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Kleiderkrise 2013-10-09 12:19 - 2013-10-09 12:19 - 00003088 _____ C:\Windows\System32\Tasks\{6AF268C0-0292-434D-9C01-694978FC584C} 2013-10-08 13:46 - 2013-10-08 13:46 - 00003088 _____ C:\Windows\System32\Tasks\{164DB455-FEB5-4B34-A97B-3F9559741D68} 2013-10-04 16:37 - 2013-10-04 16:37 - 00003088 _____ C:\Windows\System32\Tasks\{E70CD3DC-1346-4214-94C7-62F66D6B0692} 2013-10-04 12:04 - 2013-10-04 12:04 - 00003088 _____ C:\Windows\System32\Tasks\{09234AB3-EBEC-439C-A225-76CED2BE84D7} ==================== One Month Modified Files and Folders ======= 2013-10-31 23:59 - 2013-10-31 23:59 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Desktop\FRST64.exe 2013-10-31 23:44 - 2013-10-31 23:44 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-10-31 23:44 - 2013-10-31 23:44 - 00000000 ____D C:\Program Files\iTunes 2013-10-31 23:44 - 2013-10-31 23:44 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-10-31 23:44 - 2013-10-31 23:19 - 00000000 ____D C:\Program Files\iPod 2013-10-31 23:44 - 2013-01-02 16:41 - 00000000 ____D C:\ProgramData\Apple Computer 2013-10-31 23:37 - 2013-10-31 23:36 - 00045427 _____ C:\Users\Christina Maren R\Downloads\FRST.txt 2013-10-31 23:37 - 2013-10-31 23:35 - 00064259 _____ C:\Users\Christina Maren R\Downloads\Addition.txt 2013-10-31 23:34 - 2013-10-31 23:34 - 00011298 _____ C:\Users\Christina Maren R\Desktop\Kostenaufstellung.xlsx 2013-10-31 23:34 - 2013-10-31 23:34 - 00000165 ____H C:\Users\Christina Maren R\Desktop\~$Kostenaufstellung.xlsx 2013-10-31 23:33 - 2013-10-31 23:33 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST64.exe 2013-10-31 23:33 - 2013-10-31 23:33 - 00000000 ____D C:\FRST 2013-10-31 23:32 - 2013-10-31 23:32 - 01089445 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST.exe 2013-10-31 23:30 - 2010-08-26 04:50 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-31 22:45 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-31 22:45 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-31 22:37 - 2010-08-26 04:23 - 01466840 _____ C:\Windows\WindowsUpdate.log 2013-10-31 22:34 - 2013-10-31 22:34 - 00003216 _____ C:\Windows\System32\Tasks\{76C0DB9E-0DA2-43FF-8932-A7E8E0DF8E6E} 2013-10-31 22:33 - 2013-10-31 22:33 - 00388608 _____ (Trend Micro Inc.) C:\Users\Christina Maren R\Downloads\HijackThis.exe 2013-10-31 22:33 - 2013-10-31 22:33 - 00015357 _____ C:\Users\Christina Maren R\Downloads\hijackthis.log 2013-10-31 22:33 - 2011-01-10 23:55 - 00000000 ____D C:\Users\Christina Maren R\AppData\Local\VirtualStore 2013-10-31 22:31 - 2009-08-04 10:51 - 00654852 _____ C:\Windows\system32\perfh007.dat 2013-10-31 22:31 - 2009-08-04 10:51 - 00130434 _____ C:\Windows\system32\perfc007.dat 2013-10-31 22:31 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-31 20:06 - 2011-11-09 15:54 - 00045056 _____ C:\Windows\system32\acovcnt.exe 2013-10-31 20:06 - 2010-08-26 05:16 - 00002168 _____ C:\Windows\system32\AutoRunFilter.ini 2013-10-31 20:06 - 2010-08-26 05:16 - 00001364 _____ C:\Windows\system32\ServiceFilter.ini 2013-10-31 20:06 - 2010-08-26 04:57 - 00209298 _____ C:\Windows\PFRO.log 2013-10-31 20:06 - 2010-08-26 04:50 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-31 20:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-31 20:06 - 2009-07-14 05:51 - 00078383 _____ C:\Windows\setupact.log 2013-10-31 20:00 - 2013-10-31 20:00 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Avira 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-10-31 19:58 - 2013-10-31 19:58 - 00000000 ____D C:\ProgramData\APN 2013-10-31 19:51 - 2013-10-31 19:51 - 00002064 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\ProgramData\Avira 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\Program Files (x86)\Avira 2013-10-31 19:43 - 2013-10-31 19:43 - 00003058 _____ C:\Windows\System32\Tasks\{90ED30BE-B4FE-4BEC-B171-738AB66C4A7A} 2013-10-31 19:42 - 2013-10-31 19:41 - 85269544 _____ (AVAST Software) C:\Users\Christina Maren R\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe 2013-10-31 19:38 - 2013-10-31 19:37 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de_14b411.exe 2013-10-31 19:29 - 2013-10-31 19:28 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de.exe 2013-10-30 13:33 - 2012-07-05 14:01 - 00000000 ____D C:\Users\Christina Maren R\Documents\Outlook-Dateien 2013-10-30 12:59 - 2013-10-30 12:59 - 00000000 __SHD C:\Program Files 2013-10-29 13:02 - 2013-10-29 13:02 - 00171083 _____ C:\Users\Christina Maren R\Desktop\2. Sitzung Einführung BRD EU.pptx 2013-10-29 13:01 - 2013-10-29 13:01 - 00170925 _____ C:\Users\Christina Maren R\Downloads\2. Sitzung Einführung BRD EU.pptx 2013-10-29 12:56 - 2013-10-16 17:57 - 00000000 ____D C:\Users\Christina Maren R\Desktop\PoWi WS13_14 2013-10-28 15:46 - 2013-10-28 15:46 - 00003088 _____ C:\Windows\System32\Tasks\{8FC9014E-4053-4261-8517-5056C89D6DCC} 2013-10-28 15:46 - 2012-04-10 12:30 - 00000000 ____D C:\ProgramData\Skype 2013-10-28 15:42 - 2013-10-28 14:25 - 00092261 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr (1).pptx 2013-10-28 10:21 - 2013-10-28 10:21 - 00003088 _____ C:\Windows\System32\Tasks\{26FBFD2A-0450-47A4-8450-F6853D2C1E08} 2013-10-27 23:06 - 2013-10-27 23:06 - 00003088 _____ C:\Windows\System32\Tasks\{8BD73FC9-0826-4C63-8308-9F7BF369F89D} 2013-10-27 21:52 - 2013-10-27 21:52 - 00067489 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr.pptx 2013-10-27 20:54 - 2013-10-27 20:54 - 00680448 _____ C:\Users\Christina Maren R\Downloads\empiri-Vorlesung.ppt 2013-10-27 18:38 - 2013-10-27 18:38 - 01393664 _____ C:\Users\Christina Maren R\Downloads\cleavages_und_sozialstruktur.ppt 2013-10-27 15:51 - 2013-10-27 15:51 - 00003088 _____ C:\Windows\System32\Tasks\{7CA5E8F0-D8A3-46A2-8952-AE074F1A6394} 2013-10-26 18:03 - 2013-10-26 18:03 - 00003088 _____ C:\Windows\System32\Tasks\{1687F846-A15F-454E-A739-C977E3FA1594} 2013-10-25 12:41 - 2013-10-25 12:41 - 00003088 _____ C:\Windows\System32\Tasks\{19302274-A815-41E2-981B-358A9261CEFD} 2013-10-25 11:28 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\VL Statistik WS13_14 2013-10-25 11:26 - 2013-10-16 17:58 - 00000000 ____D C:\Users\Christina Maren R\Desktop\EU WS13_14 2013-10-25 11:26 - 2012-07-16 20:52 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Uni 2013-10-25 11:26 - 2012-02-14 16:38 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Geographie 2013-10-23 13:02 - 2013-10-23 13:02 - 00003088 _____ C:\Windows\System32\Tasks\{90191F87-D18E-4B72-B53F-EDC77F0141E8} 2013-10-23 12:26 - 2013-10-23 12:26 - 00003088 _____ C:\Windows\System32\Tasks\{1162C06B-2136-4348-8950-AD5F1D0A63B4} 2013-10-22 09:20 - 2013-10-22 09:20 - 00003088 _____ C:\Windows\System32\Tasks\{27DBEED7-2FB3-40C6-BD69-3A1A0EEE8A3D} 2013-10-21 14:58 - 2013-10-21 14:58 - 00003088 _____ C:\Windows\System32\Tasks\{8E9A3AF9-FF8A-484F-B976-BCA724FB930B} 2013-10-21 13:32 - 2013-10-21 13:32 - 00003088 _____ C:\Windows\System32\Tasks\{1189B055-1048-46E3-8F02-F2568AF90F91} 2013-10-20 18:58 - 2013-10-20 18:58 - 00003088 _____ C:\Windows\System32\Tasks\{46B12118-0293-4FB1-93FF-E5EC852F5362} 2013-10-18 14:30 - 2013-10-18 14:30 - 00256251 _____ C:\Users\Christina Maren R\Downloads\1. Sitzung Einführung BRD.pptx 2013-10-16 17:57 - 2013-10-16 17:57 - 00000000 ____D C:\Users\Christina Maren R\Desktop\BRD WS13_14 2013-10-16 17:54 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\International Relations WS1314 2013-10-16 17:53 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\VL GIS WS13_14 2013-10-16 09:52 - 2013-10-16 09:52 - 00003088 _____ C:\Windows\System32\Tasks\{F57C438F-5022-459A-947D-08718FC78742} 2013-10-16 09:46 - 2013-03-22 16:42 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-16 09:46 - 2013-03-22 16:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-16 09:46 - 2009-07-14 05:45 - 00436032 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-15 16:30 - 2012-06-30 20:17 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-15 16:25 - 2010-08-26 04:50 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-15 16:25 - 2010-08-26 04:50 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-15 16:12 - 2013-10-15 16:12 - 00003088 _____ C:\Windows\System32\Tasks\{BA7D6CCF-FF11-4DFB-9F8F-162B1FB1BD20} 2013-10-10 19:14 - 2013-10-31 19:48 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-10-10 19:14 - 2013-10-31 19:48 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-10-10 19:14 - 2013-10-31 19:48 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-10-10 19:14 - 2013-10-31 19:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-10-09 15:20 - 2013-10-09 12:31 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Kleiderkrise 2013-10-09 12:20 - 2011-01-11 20:43 - 00000000 ____D C:\Users\Christina Maren R\AppData\Local\Google 2013-10-09 12:19 - 2013-10-09 12:19 - 00003088 _____ C:\Windows\System32\Tasks\{6AF268C0-0292-434D-9C01-694978FC584C} 2013-10-08 13:46 - 2013-10-08 13:46 - 00003088 _____ C:\Windows\System32\Tasks\{164DB455-FEB5-4B34-A97B-3F9559741D68} 2013-10-04 16:37 - 2013-10-04 16:37 - 00003088 _____ C:\Windows\System32\Tasks\{E70CD3DC-1346-4214-94C7-62F66D6B0692} 2013-10-04 12:04 - 2013-10-04 12:04 - 00003088 _____ C:\Windows\System32\Tasks\{09234AB3-EBEC-439C-A225-76CED2BE84D7} Some content of TEMP: ==================== C:\Users\Christina Maren R\AppData\Local\Temp\atl80.dll C:\Users\Christina Maren R\AppData\Local\Temp\avgnt.exe C:\Users\Christina Maren R\AppData\Local\Temp\COMAP.EXE C:\Users\Christina Maren R\AppData\Local\Temp\mfc80.dll C:\Users\Christina Maren R\AppData\Local\Temp\mfc80u.dll C:\Users\Christina Maren R\AppData\Local\Temp\mfcm80.dll C:\Users\Christina Maren R\AppData\Local\Temp\mfcm80u.dll C:\Users\Christina Maren R\AppData\Local\Temp\msvcm80.dll C:\Users\Christina Maren R\AppData\Local\Temp\msvcp80.dll C:\Users\Christina Maren R\AppData\Local\Temp\msvcr80.dll C:\Users\Christina Maren R\AppData\Local\Temp\SkypeSetup.exe C:\Users\Christina Maren R\AppData\Local\Temp\TmDbg32.dll C:\Users\Christina Maren R\AppData\Local\Temp\TmDbg64.dll C:\Users\Christina Maren R\AppData\Local\Temp\uninst1.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-13 13:51 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-10-2013 Ran by Christina Maren R at 2013-11-01 00:04:06 Running from C:\Users\Christina Maren R\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 64 Bit HP CIO Components Installer (Version: 7.2.8) Acrobat.com (x32 Version: 1.6.65) Adobe AIR (x32 Version: 1.5.0.7220) Adobe Flash Player 10 ActiveX (x32 Version: 10.0.42.34) Adobe Flash Player 10 Plugin (x32 Version: 10.0.32.18) Adobe Reader 9.2 MUI (x32 Version: 9.2.0) Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482) Alice Greenfingers (x32) Apple Application Support (x32 Version: 2.3.6) Apple Mobile Device Support (Version: 7.0.0.117) Apple Software Update (x32 Version: 2.1.3.127) ASUS AI Recovery (x32 Version: 1.0.9) ASUS AP Bank (x32 Version: 1.0.0.0) ASUS LifeFrame3 (x32 Version: 3.0.20) ASUS Live Update (x32 Version: 2.5.9) ASUS MultiFrame (x32 Version: 1.0.0021) ASUS Power4Gear Hybrid (Version: 1.1.37) ASUS SmartLogon (x32 Version: 1.0.0008) ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028) ASUS U Series Bamboo ScreenSaver (x32 Version: 1.0.0001) ASUS Virtual Camera (x32 Version: 1.0.19) ASUS WebStorage (x32 Version: 2.0.46.1429) ATK Package (x32 Version: 1.0.0003) Avira Free Antivirus (x32 Version: 14.0.0.411) Avira SearchFree Toolbar (x32 Version: 12.6.0.1898) Boingo Wi-Fi (x32 Version: 1.7.0048) Bonjour (Version: 3.0.0.10) BufferChm (x32 Version: 130.0.331.000) C6300 (x32 Version: 130.0.365.000) Chicken Invaders 2 (x32) Choice Guard (x32 Version: 1.2.87.0) ControlDeck (x32 Version: 1.0.7) CyberLink LabelPrint (x32 Version: 2.5.1908) CyberLink Power2Go (x32 Version: 6.1.3602c) CyberLink PowerDVD 9 (x32 Version: 9.0.3009.50) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32) Destinations (x32 Version: 130.0.0.0) DeviceDiscovery (x32 Version: 130.0.465.000) DocProc (x32 Version: 13.0.0.0) EASYSTAT (x32 Version: 2.0.1.1) ETDWare PS/2-x64 7.0.5.9_WHQL Express Gate (x32 Version: 1.4.7.1) Fast Boot (Version: 1.0.5) Game Park Console (x32 Version: 6.2.0.2) Google Chrome (x32 Version: 30.0.1599.101) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54) Google Update Helper (x32 Version: 1.3.21.165) GPBaseService2 (x32 Version: 130.0.371.000) HP Customer Participation Program 13.0 (Version: 13.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Photosmart C6300 All-In-One Driver Software 13.0 Rel. 4 (Version: 13.0) HP Photosmart Essential 3.5 (Version: 3.5) HP Smart Web Printing 4.51 (Version: 4.51) HP Solution Center 13.0 (Version: 13.0) HP Update (x32 Version: 5.003.001.001) HPPhotoGadget (x32 Version: 130.0.282.000) HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000) HPPhotosmartEssential (x32 Version: 2.04.0000) HPProductAssistant (x32 Version: 130.0.371.000) HPSSupply (x32 Version: 130.0.371.000) Intel PROSet Wireless Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2119) Intel(R) Management Engine Components (x32 Version: 6.0.0.1179) Intel(R) PROSet/Wireless WiFi Software (Version: 13.02.0000) Intel(R) Turbo Boost Technology Monitor (Version: 1.0.115.11) Intel(R) Wireless Display (Version: 1.2.15.0) iTunes (Version: 11.0.1.12) Junk Mail filter update (x32 Version: 14.0.8050.1202) MarketResearch (x32 Version: 130.0.374.000) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2010 Service Pack 1 (SP1) (x32) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000) Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Professional 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) MSVCRT (x32 Version: 14.0.1468.721) MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0) Network64 (Version: 130.0.572.000) Network64 (Version: 140.0.221.000) NVIDIA Drivers (Version: 1.10.58.36) NVIDIA Updatus (x32 Version: 1.0.3) OCR Software by I.R.I.S. 13.0 (Version: 13.0) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Piggly FREE (x32) PS_AIO_04_C6300_Software_Min (x32 Version: 130.0.365.000) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6098) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0) Scan (x32 Version: 13.0.0.0) Shop for HP Supplies (Version: 13.0) Skype™ 5.8 (x32 Version: 5.8.158) SmartWebPrinting (x32 Version: 130.0.457.000) Smileyville FREE (x32) SolutionCenter (x32 Version: 130.0.373.000) SRS Premium Sound Control Panel (Version: 1.8.5700) Statistik lokal, Ausgabe 2011 (Gebietsstand 31.12.2009) (x32 Version: 1.00.0000) Status (x32 Version: 130.0.469.000) syncables desktop (x32 Version: 5.5.502.8155) syncables desktop SE (x32 Version: 5.5.615.9518) Toolbox (x32 Version: 130.0.648.000) TrayApp (x32 Version: 130.0.422.000) UnloadSupport (x32 Version: 11.0.0) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553065) (x32) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2566458) (x32) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32) Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32) Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32) Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32) USB2.0 UVC 2M WebCam (Version: 5.8.54000.207) WebReg (x32 Version: 130.0.132.017) Windows Live Anmelde-Assistent (x32 Version: 5.000.818.6) Windows Live Call (x32 Version: 14.0.8050.1202) Windows Live Communications Platform (x32 Version: 14.0.8050.1202) Windows Live Essentials (x32 Version: 14.0.8050.1202) Windows Live Family Safety (Version: 14.0.8052.1208) Windows Live Fotogalerie (x32 Version: 14.0.8051.1204) Windows Live Mail (x32 Version: 14.0.8050.1202) Windows Live Messenger (x32 Version: 14.0.8050.1202) Windows Live Sync (x32 Version: 14.0.8050.1202) Windows Live Writer (x32 Version: 14.0.8050.1202) Windows Live-Uploadtool (x32 Version: 14.0.8014.1029) WinFlash (x32 Version: 2.30.1) Wireless Console 3 (x32 Version: 3.0.15) XSManager (x32 Version: 3.0) Yahoo! Toolbar (x32) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {01057788-0CA2-4D2E-BE33-DEE8CCE909A8} - System32\Tasks\{C74E6926-DF8B-4E40-8A35-1E36059AB303} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {034C2000-9A49-47B6-8537-698F9AC0C86B} - System32\Tasks\{A91DA84C-CB5F-46AE-9F02-1BF6AEAE5E88} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {038BE213-E605-4E15-9C8F-D6E5257DDEDA} - System32\Tasks\{54D9D38E-9267-4ED2-BC1F-873E772B8B55} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {041D051F-8C8D-4DD4-95CC-173AD0A28466} - System32\Tasks\{30421EB9-CE5F-4EEE-86D0-D3CC8CC7879F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {05129E64-DB6E-4C99-8349-01D85BD1D958} - System32\Tasks\{789ADFF0-4C3A-4F60-95CE-B22113D18649} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {065F965D-5D5F-4604-9327-6D8D85159154} - System32\Tasks\{6AF268C0-0292-434D-9C01-694978FC584C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {06765732-F01A-4699-B578-943388F04428} - System32\Tasks\{2177D094-E9FF-4E46-8B17-DEBDCF4AA8AA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0737CE72-5C82-4A90-8A89-748757C71B07} - System32\Tasks\{BEBEB2C2-556C-4619-B2DA-257FC66FF01A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {08A90500-98D2-476C-80A8-B651D246015E} - System32\Tasks\{E79AAD3D-823D-432C-93A5-21FC1EFF20C2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {09063DB6-C7AC-4F67-AF00-4076F3B00672} - System32\Tasks\{7CA5E8F0-D8A3-46A2-8952-AE074F1A6394} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {09753202-FE26-448D-ABEF-052CA813CB85} - System32\Tasks\{D5A8B36C-4D5E-4798-9AB5-1711A02793E4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0A73B995-A6D9-4B1D-84E0-DA35A0D5A80E} - System32\Tasks\{7F56BA5D-D02A-4F34-B899-020A91935CC4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0E0D5746-1614-44D4-978F-CF2F7104EB57} - System32\Tasks\{E26A8DF7-A1E2-4553-8AC4-B7FA455B251F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0E0DFAFC-1FE8-4189-9E19-23BFF3DCEF29} - System32\Tasks\{A3BC1530-C56A-4547-86F9-F25E2DAFAE99} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0EBD89FE-C928-417C-9F56-40EAF49F72A9} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [2010-05-17] (asus) Task: {113D3B3D-7B6C-4D0F-A335-D50E2177F5B2} - System32\Tasks\{09234AB3-EBEC-439C-A225-76CED2BE84D7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {11E64CC6-97D7-4D23-BC86-56A355FA68E0} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-05-28] (ATK) Task: {1211120A-C1D2-480B-A458-C8135C8F6BC9} - System32\Tasks\{6D7948E4-43DE-4305-85D7-C17C26162F98} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {14CE0A56-0DE1-4CA4-A145-7AA54AE57B3A} - System32\Tasks\{375CC34F-DEF2-4606-8BD0-7E1985136B6A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {16708FF6-00FE-4A68-8A89-75087159BEC1} - System32\Tasks\{B9915A13-303C-41C7-93F2-91A2E7599432} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {17B7CD32-52F4-4FDF-8C6E-3991055AA858} - System32\Tasks\{80EA4598-221C-44EA-B6AE-D25EA2B8D22C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {17FC454E-00A3-4416-B2C9-DCC85E4DBE44} - System32\Tasks\{40DE8272-7E42-4DFF-AAEC-72796CFE598B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {181FB8B9-D4E5-49F1-B8ED-E24F4BDE282B} - System32\Tasks\P4G Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation) Task: {18EBF132-27DD-4919-91B1-D88E1FCA75C7} - System32\Tasks\{F3219C45-EC38-4278-82C8-E22F96ACF190} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {19497948-4123-4A5D-B596-BDC1EE59B71E} - System32\Tasks\{2ADBA8BC-9D1F-43B3-B912-6A6A2D0FD49D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {198EE3E5-7271-47D5-B6B4-FF56A5053398} - System32\Tasks\{26FBFD2A-0450-47A4-8450-F6853D2C1E08} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {19ACCD47-7046-4CE0-ACAF-01FA16E3D582} - System32\Tasks\{0B63FBD6-489F-4397-AFDB-C45A8218D80F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {19D34AE3-743E-4608-B3D0-3AFB313DD1FE} - System32\Tasks\{6ABCCBF4-6748-498C-B806-B4AD01F19308} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1A4002D3-33ED-4973-8A85-6FA050133662} - System32\Tasks\{90E14099-ED27-4C6F-B99C-D7064CBE8DD5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1A6A0DA2-FC1D-47D6-ACFA-D30C10199E0D} - System32\Tasks\{85BF0243-D922-4C6B-BA3B-1E503F6C95C4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1C235DF9-E805-4850-A37A-2FB11900CE73} - System32\Tasks\{BA99A2B6-68DC-4994-A671-0E5CC4BEF603} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1C447A7B-DD60-488A-9837-F77CF107A394} - System32\Tasks\{6452C247-80AE-4C71-A8B2-9F6134C046AE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {20838A37-EBA5-42ED-AE30-869F8A377996} - System32\Tasks\{C84FDF93-F26D-4341-9954-A4D5C8DEA80F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {22F83BA6-6D14-4FB8-AA31-B40CFBE3F2F1} - System32\Tasks\{223D9249-B3F1-4C88-98A7-FE14BD51BAF3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {22FB8EC4-2A1F-40C9-A8E2-7A2424B7D96E} - System32\Tasks\{09DEF501-BF0A-4729-8539-FE19E5EAEB0C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {243CB92F-141F-4AE2-BAA0-207345986770} - System32\Tasks\{772D5A05-10CF-4F83-B7FF-50449595A190} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {25295743-4A2B-4DE4-BAAF-CB68CDD67F20} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK) Task: {259DC572-61BC-4AD6-9E8B-C923EAFDED0C} - System32\Tasks\{6E2256A9-06E6-492A-9BDA-A9C29E32EB5D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {266FA70B-E231-4D9C-83AA-3BEC0A98426F} - System32\Tasks\{F4EE1778-A367-46EF-BC3F-D8E0C3A49B9F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {2744910C-A4C7-415D-AE20-495C7B633C83} - System32\Tasks\{2BB6E531-3159-480F-87DD-030C892F6847} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {28D6E1FC-2FAA-408D-BE39-BDC48ECB3873} - System32\Tasks\{41262A51-8CAC-48EC-B84E-5FAC7869D517} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {2960C268-9EB8-42AC-92D0-4B5FCD43D237} - System32\Tasks\{F613FAA7-C557-407D-B13F-87966604FAEF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {2C4ACE87-B47F-4B58-85D9-8EADBA97204D} - System32\Tasks\{227ECF81-DD83-45BE-89CB-6F8CB1285893} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {2E214E7B-0AD7-4E5A-9954-9A074459AA92} - System32\Tasks\{C5B194E8-275F-4E82-A37E-7D25ACEF0B7B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {31AE4624-A841-4365-AF6D-A1F28C617C32} - System32\Tasks\{B335955B-EA25-4BD5-BD9E-27D57C69E36B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3268FDCB-A65D-47F6-A3B2-4E04370975F1} - System32\Tasks\{6F33F6F5-E172-410E-9B00-9E228C6AD3B2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {340507B2-93DA-4DF3-82EC-07DBC7DFF4FD} - System32\Tasks\{1D698A98-7AAD-4431-B849-9D6F333C9D24} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {346FA986-76B3-495D-9BB4-85599FEE10F3} - System32\Tasks\{E70CD3DC-1346-4214-94C7-62F66D6B0692} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3616F807-865E-41B6-BECB-936714DD80D3} - System32\Tasks\{1E178377-5D92-4E01-8B61-D71551EF13E9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {375CCC3B-BE23-48F4-BBCC-39BB31E1B99D} - System32\Tasks\{84C1795F-1BE5-4DC4-B374-6C832B1E1FAA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {390032E6-4C60-49ED-A306-C8819DE025CE} - System32\Tasks\{B8396447-7C55-40E1-8A0C-4DACA73201EF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {39A9CDE8-7EFF-4DFE-BA9A-FB70A4D857DA} - System32\Tasks\{90191F87-D18E-4B72-B53F-EDC77F0141E8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {39DBFB48-3512-48B7-B274-37D6A2A5B783} - System32\Tasks\{FD9BC258-8076-4C85-8AEA-EB6F6A6B3D8E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3ACB1832-0FBC-48A9-9748-3E9468A6AF6E} - System32\Tasks\{644AF149-26F0-4E9D-A180-A94E5FC8558A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3AF3123D-40A8-416B-9590-E850C90F828E} - System32\Tasks\{3969140B-047E-4C71-9C4C-94442DD1389F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3C25FCE5-FBD5-4733-84F8-40F2CD58C9A6} - System32\Tasks\{1988CAF9-18F2-4A58-972D-AC6A54905656} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3C65031D-2ACA-4C5C-B815-D9F0D2152972} - System32\Tasks\{90ED30BE-B4FE-4BEC-B171-738AB66C4A7A} => C:\Users\Christina Maren R\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe [2013-10-31] (AVAST Software) Task: {3EB47E28-5609-4458-A1E5-7858681C645E} - System32\Tasks\{D86345E0-82A7-46C5-8632-C8177331B133} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {41AD1049-C022-4AAE-90BF-7E6DE5E71E11} - System32\Tasks\{EC711C0D-183B-4B3C-B569-9DAF4B8C50E6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {41F0E758-CE09-4305-B90F-62264C90CFA5} - System32\Tasks\{82096931-4C58-4B14-98B6-FA1BE934D6C5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {431199EA-A369-48FE-AA54-32B015BCDC93} - System32\Tasks\{2EE93BCA-7E13-4F83-805D-0F3C7EF588D1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4925B716-F223-43BC-8B24-D34D6861407B} - System32\Tasks\{2A856108-BBE1-44B8-89C0-2708227883D0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4C60D082-463F-429C-B331-CD3CA70F63CB} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {4CCD1333-0C6E-4056-BE49-E8C6734CFD96} - System32\Tasks\{A87D016E-F7C7-4F90-85B9-7F3309D691C1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4CFF7805-7E0C-4971-A8ED-4DD0D4C50670} - System32\Tasks\{36D4AF7E-7366-40DD-8AA1-B6184666EF35} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4E2D9B2B-5EDA-446F-9D13-E7E48856D873} - System32\Tasks\{46B12118-0293-4FB1-93FF-E5EC852F5362} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4E931FBA-B2E5-47D8-924B-522432F54B5F} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: {4EF9B660-92E9-4ECE-B2C2-13426FDE25C8} - System32\Tasks\{DDBA0C7C-8824-4F02-AE4B-E4ECA1A1A08C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {508B9500-7C53-4976-8FFF-E44B68D7E8BE} - System32\Tasks\{7EF5202C-BB6C-4A56-83D1-4730ACF8CBA9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5165ADB9-5532-4171-846E-E2D7EDB845AC} - System32\Tasks\{035CD1DE-FE34-49D2-A42C-985E60064380} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {52F4E52B-8743-4A90-A6CA-CDD926E5B4F2} - System32\Tasks\{BA7D6CCF-FF11-4DFB-9F8F-162B1FB1BD20} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {53E137C3-8F4F-442B-8DE6-3F464615741F} - System32\Tasks\{E4726D79-E819-4D7B-947F-B9A9FEC22802} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {544A0263-B34D-4BFE-8D68-46AC21A3AD65} - System32\Tasks\{800F7556-3711-46BE-A4AF-FC79497A60A7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5654A659-3C5A-4020-9B8C-50CCFBE1DD6F} - System32\Tasks\{FFE68BB3-3784-4ECF-B9B4-8EBCE5C207F4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {566108FB-9C17-4110-A9AE-29CABC30C165} - System32\Tasks\{05C72E91-7DE3-4FFA-A449-0F16F2942688} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {57447289-0162-480D-96CC-A22F5E1C5D68} - System32\Tasks\{39E0009B-D750-4F20-9E70-C68E1545E33F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {57483E08-AD44-4ADE-AB7D-4A25F36A9957} - System32\Tasks\{D628FE57-4B0B-45E4-9A1C-F70B24F268B6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {57CAA212-1104-4D5D-9736-856B1AE92DAF} - System32\Tasks\{0FB04F52-780C-45FD-A99E-1AB75BF04963} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {59038A63-0F5E-4E2F-92F9-5E12E403F351} - System32\Tasks\{D5DC0D77-E393-4AFB-9E92-7EA2B1412360} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {59539D07-89CC-4D11-A21B-5F901EFF8BFC} - System32\Tasks\{2228C05B-704C-4095-8AB0-29D98A49ADF3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {595544CD-EB5F-4717-880D-0B1712A0042B} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {59D81D10-C396-4723-94C9-92D92AB21A28} - System32\Tasks\{8176BEDB-6002-4525-9B30-F6E918D9DEC1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5D0B998B-49DB-4769-B458-D76B71713FD7} - System32\Tasks\{8378B2ED-293E-4CF7-8037-56CFF2B41F1E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5FCBFC6E-F7E7-4357-AB1E-BD2AC87B2E33} - System32\Tasks\{A80B6F27-B18B-48AF-A1AD-F16FCEFD65F9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5FECF2C5-E37A-4962-8D9E-171721817E79} - System32\Tasks\{A3C2328A-FFD8-4E5E-BCB6-97CC1E0F6CFD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6153B87C-3BE3-430F-A210-00BB3D336A00} - System32\Tasks\{60DABC3D-AABA-4682-8109-FECFF4CED9DC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {61DD145E-AC25-40C8-ACAC-B6671B4BCCB6} - System32\Tasks\{217DCD82-8EE3-4550-AFB4-17D6A322F071} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {62318AED-4E49-4D83-A1B1-8939632D8EF6} - System32\Tasks\{892A673E-78BD-4F82-A49A-6DA94699661A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {63EDECE1-44F7-45C7-92B6-BF7B2D3BF1CD} - System32\Tasks\{8E9A3AF9-FF8A-484F-B976-BCA724FB930B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {64201B07-4B83-4F2F-A0B9-B342B0A4D5AE} - System32\Tasks\{F759C602-46AF-476B-97C7-BBBDE5686626} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {666D3E6C-573A-4AC0-9C32-B3320855A42B} - System32\Tasks\{E67DD114-AC23-48CE-A19E-EBDBD90E41E2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {69804C87-4BC4-4C2E-B0CC-165F7FEA6A46} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS) Task: {6988BB09-C3AB-4437-990A-48142877CC94} - System32\Tasks\{15315535-85CC-4BB5-9EAC-5815F9669126} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6A5B7410-CCD8-4513-9243-D301C0CA5AD1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {6A5F56E0-E271-4DBF-AF02-3EF0C77F2405} - System32\Tasks\{CF8E5DB3-E23D-4669-9E49-5DE79D3D82E3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6B01B163-A9FC-433C-B33D-CC22C7F6780E} - System32\Tasks\{3443B3C5-809C-436A-904D-33C784764478} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6C483818-31CD-4545-ADC0-2CAF891518A2} - System32\Tasks\{F02D00FB-B8A5-4D8C-9ED2-BD124D868692} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6C4A42A7-D855-4BB1-AFB4-49CF03C76E18} - System32\Tasks\{A5F9B302-124D-434D-B8CE-1E61D1B5F8AA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6C7FACB0-4BB8-4009-9866-5219EB5DF178} - System32\Tasks\{E6A413AD-6E75-4EB4-80F0-5DD27A06358D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6D5D9525-6811-44B4-A6E3-D1BABDF5D61F} - System32\Tasks\{19302274-A815-41E2-981B-358A9261CEFD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6F43306D-2A39-47A0-BBF3-C5FF794BD386} - System32\Tasks\{47D7BA31-DF29-4EFE-8945-3C62F333CA75} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6FEC4EE7-C41C-413F-B639-42B3F5EEEDC2} - System32\Tasks\{240A334F-D949-42CB-B0B8-76FF27FCE16C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7011F323-FA52-444F-9FD2-EBE5738547E4} - System32\Tasks\{8126E1ED-736C-443F-8E28-00E7F4931846} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {726008AE-563B-44F1-A5A6-220042D3BE40} - System32\Tasks\{1C4F1D00-E89A-4A0E-9947-F399C0B932DB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {73E54753-7BB5-4122-98F0-F5860EB2D213} - System32\Tasks\{1687F846-A15F-454E-A739-C977E3FA1594} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {79A4AD02-9069-484D-8528-B7E32E679725} - System32\Tasks\{0F399F0C-A665-4D21-8DDB-533DA5F09298} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7DCD9EE7-5B6E-407A-9C7C-651AB876685A} - System32\Tasks\{6273AFF2-5714-4661-BF47-8FA4B70888C4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7E695853-79EA-4332-8A9D-DEE63B9A20CC} - System32\Tasks\{48C1BBB8-7221-48CF-928C-EC841EAC289A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7EFA625C-9134-442F-91AC-BE71326E23D4} - System32\Tasks\{0D324B12-8E9F-460C-A3AE-A53B2F233AE0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7FBDF05D-C652-4435-8E17-6BBADCD07AF4} - System32\Tasks\{AA6F9F4D-B555-4F6B-8C83-BCC1B47E62D0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {80A04D2E-24A3-4B1C-BC03-DDB1B1247743} - System32\Tasks\{E94435B5-B7C7-4EEA-94EF-58A4E2120CDF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {80B65745-41C1-4E73-86F0-F6F2AEBE0E9D} - System32\Tasks\{B9CE8C51-39CD-4342-A6F8-79DAE639A39E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {81A1F1F3-045A-4BB5-9FC4-EC54B8DECB1E} - System32\Tasks\{CF9C6B54-38D3-49B7-86EA-D9F0D0F8E17E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {84076024-5B7F-4CEB-AB8F-E14FFEE18175} - System32\Tasks\{6709C7BF-6CC2-4206-93E0-1CEF660502BD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {844D8FC7-469D-44B2-BD18-20D185B2BB78} - System32\Tasks\{28971330-855D-4EEF-A443-649A32F0D10D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {84C2633A-2CE5-4595-A746-BC9F1B7E8D0F} - System32\Tasks\{C02E1490-5E71-433D-ACEF-1C32615C5B9C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {84EFBC51-C5D7-48F8-B894-857F414DBB74} - System32\Tasks\{9FC94B47-C51A-4E67-9B55-91450B30BDC0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8503C7BC-6726-4EE7-BE25-E8586B0F318F} - System32\Tasks\{57924561-0ABE-4337-8FD4-4A1853288374} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {85A8F832-10F1-419E-9080-053DC7431923} - System32\Tasks\{1162C06B-2136-4348-8950-AD5F1D0A63B4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {85D27317-EF39-4C01-B2B0-8DD1D80768CE} - System32\Tasks\{48696A54-F10C-4C56-9951-B7F452E1D312} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {85E77937-238A-4B5B-B749-825F43325133} - System32\Tasks\{12E716F4-BDB2-4B9D-88DC-B2455D48D3AD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {868AAC0D-E58E-41B9-B134-12053C9EC5D8} - System32\Tasks\{77ECDF74-BB89-4CDE-BF0E-35B8E7645914} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {86EA2B41-163E-421A-A25F-CC1F932BDCC8} - System32\Tasks\{62DE1103-5D6A-4AEC-8D55-EF818007B453} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {878F3C8F-6210-4199-B72B-00AD4108A0B5} - System32\Tasks\{52462C6D-77EF-4B0C-8457-75FF9C21497C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {88806592-C54E-4847-84F5-FB0B6278D227} - System32\Tasks\{3EC2E3F9-D9EA-4DEC-AA61-E24308469809} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8AC591B6-DF2D-447F-99AD-26855271FE67} - System32\Tasks\{B5D1C085-58D7-409D-902C-D1053B5503D2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8BF5F4D8-AADC-4D3E-8F5F-CA026AF458A4} - System32\Tasks\{898479F1-31A2-4EAD-9A8E-CA2602836EE5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8BFDA221-E6BC-408F-99BD-62D85AFB12E0} - System32\Tasks\{2216AC00-F7BF-4928-A6D1-2CC6C9DB6EC1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8C0943E4-1E5F-493B-8150-46A61F9D4206} - System32\Tasks\{20697777-F83A-4243-9D55-2D17425BEB4C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8D114E29-46CD-4E17-BCBF-A68007561FCD} - System32\Tasks\{CE5D1FD2-ECE2-4B55-A7BE-BE32CF0BA711} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8DE1667F-5264-4FF9-A133-D4C7C0C7EF03} - System32\Tasks\{F57C438F-5022-459A-947D-08718FC78742} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8DF0682B-2E1E-4D5D-926E-F5E51C97A928} - System32\Tasks\{33FE496F-1CD3-4226-8DDB-F7BB59197F8D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8EB4984C-0851-47C4-9D96-DEB15D715161} - System32\Tasks\{983E6E11-BDB0-4EBB-B0C4-E6C04B5294F0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8F678695-DE7A-4443-BB29-E7101D54D42A} - System32\Tasks\{3BA564B5-ECDD-468E-99ED-58B2E4082ABE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9053109F-2969-4A5F-B99D-759B07C9F161} - System32\Tasks\{0CAA4CF6-6CE5-4DB2-96BF-AEDD37E275B4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {91510620-6020-4D7C-A25F-3C2B3A4170C8} - System32\Tasks\{177A3480-D2F2-4E43-A631-86C318B3C33C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {91B2858C-CBBD-467C-A358-07CF73A6F112} - System32\Tasks\{D27BA931-1DB4-4F36-BC0C-3B331DFD0275} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {930A7EF0-8F80-4AF9-A368-3F1B32D61535} - System32\Tasks\{228E0034-114C-4652-96A2-92D031C67FAC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {97140EB0-879A-4221-BAA2-15EBED65134C} - System32\Tasks\{F97802DC-3374-4662-96CC-F095E9CA57D5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9893BF10-8E88-4035-8B50-EE5B75701F09} - System32\Tasks\{B2C81616-FC01-4102-B5F9-EF7F5F4271AB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {99A59F88-2474-4D67-9AD6-8D18FB7EAAB1} - System32\Tasks\{750DC8D5-B6F5-4F00-BE17-FE6B51239153} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {99B28FC4-85CB-4553-80ED-04BD574E9910} - System32\Tasks\{95BBA5FE-6B05-4CD2-B16B-354F55A3B187} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9C4D01CB-E2C2-4A6F-93B0-1FC736311C24} - System32\Tasks\{1189B055-1048-46E3-8F02-F2568AF90F91} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9E558935-155E-41E4-9929-56400895C988} - System32\Tasks\{D824FE5B-660E-47DB-818D-ED775441849F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A450F29B-B84B-4F24-AD93-D89DEFEA2C06} - System32\Tasks\{6AB2F423-C2B7-450C-A1F0-EC3DD05E29FB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A63C98D0-CBE8-4E38-AA2B-B9CD89708EB0} - System32\Tasks\{4D7878DA-0D40-410F-ABE0-BC07319682C0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A7199FAA-51F6-4CF7-AB31-2342BF4243C0} - System32\Tasks\{49605E2F-DAE9-4905-8BF7-651DF7F60693} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A75D3AE8-93D5-480C-AC9C-B57A194C7F11} - System32\Tasks\{0D9444D4-59F2-453D-B774-D6F11E64E415} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A7B7802E-28F8-4187-8DBB-94A61F9046A4} - System32\Tasks\{31703DC6-B6C2-4ED0-ADC5-605D1A82FD5B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A89F8872-EF90-47B9-9608-2C92D99F1F1A} - System32\Tasks\{4D9D0D13-7639-4574-AAE1-512DAF7DA560} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AA1CF2AB-AB72-42D6-B62B-6048D713FC6A} - System32\Tasks\{949642B9-4831-40FB-90A6-292E3D39C1E6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AA6B9DD2-E82A-4EF3-B425-B1D383ED167C} - System32\Tasks\{CC3923DA-D71F-43AF-863B-5ABB3ABA0775} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AD054644-6B22-47C2-ADA7-85FBED8061CC} - System32\Tasks\{59095751-E04D-4C85-87D8-17BA5A795647} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AEAF516A-D932-44D2-8665-992A32AC499D} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {AF815C9C-CE2F-4392-B77A-70BDF0E5B6B9} - System32\Tasks\{0400B23E-058D-4FBF-B43F-040E2FE16F79} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B0F3595E-1C1E-40A7-B65B-B7BA545776E8} - System32\Tasks\{191B1F18-1E38-4854-ACE5-3264A22BC4CC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B149D4BD-DFB4-4AB8-8FDE-A0CCA36D415B} - System32\Tasks\{CA2BF6EB-4122-4727-9D0C-C68C127D364E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B23DD8F3-9FC5-4920-BE11-84D09D31192B} - System32\Tasks\{164DB455-FEB5-4B34-A97B-3F9559741D68} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B3A4D122-B0FB-4F2C-87ED-A5A4BD6D95C7} - System32\Tasks\{EB3AFE32-3796-4470-91E5-284EC41C67CB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B424F409-A68C-4617-9BE0-81688EFA94D6} - System32\Tasks\{BA336F2F-638A-490F-B045-6AD017CF11ED} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B69E319B-EF45-479C-B559-69E1B6DFAE16} - System32\Tasks\{6D05ECE0-ABF7-4AA4-9706-51A9FE378BB6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B7860344-A75B-41C8-A8D5-1E13F2205F39} - System32\Tasks\{B85997DF-3F4C-4D58-AF01-139BD9C98D50} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B7EE4298-AE75-4BE5-AE52-DB7A0C195AD9} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] () Task: {B9B18774-2DF9-431F-81D7-5B91C0C6D0D1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-26] (Google Inc.) Task: {BB6440E5-F382-44AD-A235-3ED562FD7118} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-26] (Google Inc.) Task: {BE5F9B03-C6A4-42E1-BF41-594C43EE0BD1} - System32\Tasks\{B693EF54-879F-4457-8214-0E62533EB16F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C2255484-EAFE-461C-B260-3853731098B8} - System32\Tasks\{F1366A62-99F4-48B5-A68F-6F4F24231445} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C3D5C242-7FA9-4427-8C81-83D08FF813CB} - System32\Tasks\{8BD73FC9-0826-4C63-8308-9F7BF369F89D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C4042DFF-220F-4A49-A1A8-DDDC7DF8A05B} - System32\Tasks\{F7D0EF2D-58EE-477F-B9D6-40B6687B1814} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C42FDC63-4531-4798-99B9-0DD6A3C3F196} - System32\Tasks\{ADA7DA06-CF5B-4670-9CFA-1AB376CD0696} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C4D747B7-E3CF-43B2-89C5-91C2187217F4} - System32\Tasks\{48C3BA08-403D-4A3A-99E5-43D823FAE046} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C85E75D2-4B4B-458C-B31E-B33F8354AF85} - System32\Tasks\{44FDA611-2311-4610-9853-7570031D0B1C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C9EB8EC3-AB96-4A1A-AA03-7B2564722A94} - System32\Tasks\{1CBBA1E2-553C-4135-925D-A56A12723A92} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CB660D61-CA3A-4D7C-8E62-511FE4E205B2} - System32\Tasks\{2D71129E-E49B-4050-B0EF-A821582A59C7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CCE6CBF9-C7F8-4EFA-BD84-624BD8E708B8} - System32\Tasks\{DB0228A7-6DBF-432B-AE3F-D150B134382B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CDCD50F3-A7FD-4507-8401-1E07395290AB} - System32\Tasks\{695911EC-1504-4F9C-A79D-412AACAFD337} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CE9ECAA1-BCF4-4642-BB6D-4D3313688775} - System32\Tasks\{27DBEED7-2FB3-40C6-BD69-3A1A0EEE8A3D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {D19FD417-2826-4502-A543-F0F882E98B2F} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-04-03] (ASUSTek Computer Inc.) Task: {D1A13256-ED94-4408-A95F-461A044193EE} - System32\Tasks\{C7D62223-4FC6-4600-8BC0-8F625FA724E2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {D1F7FDC8-F47A-4033-BB6E-7BD1E3994598} - System32\Tasks\{6B5DE8FE-5C0F-4901-B23A-65333D46CE7C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {D5D1AF83-4383-47D9-8651-090CA54FA77F} - System32\Tasks\{A94963FE-FF06-45BD-B229-7140954B8CB6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DA6F74FE-CF2B-4372-9413-8D4851C4BEA6} - System32\Tasks\{C5ED1157-E580-4DE1-BD6C-068E4FFBC2DF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DBBD89D1-DFAB-44E8-859B-BF751BA5F091} - System32\Tasks\{F039868D-2C7F-40C4-9C29-51AF95310D49} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DBED63CD-6706-4723-8B83-0611EB4DDD30} - System32\Tasks\{FD670DC8-481C-4132-A4E9-82E12B26E761} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DC304DF8-396A-4251-8234-D940FEABF18E} - System32\Tasks\{3DF41DE3-7D51-4633-8375-55593A6B6AF8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DD60DC0B-D775-4E86-9A37-41C5A1032446} - System32\Tasks\{097BAD95-8541-4B5A-9967-0C9C2E2A9459} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DDD32AC5-E919-46FC-A4E9-2F575B571A0B} - System32\Tasks\{F70C6D38-6DEA-413B-A4A7-D1DAACC2D7C0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DDD40F22-7612-401C-8FC8-39AAC8C7B94C} - System32\Tasks\{2EF976B8-8BA0-4C83-B728-CB01813AFF30} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DF586A9D-5BFC-4FAF-ADF6-B4E1E0749CBE} - System32\Tasks\{B067EFF3-8130-49B6-9935-DA34EC8B18F5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E0C6D4DD-B4D2-48D5-8158-52CCDBDF7BE1} - System32\Tasks\{D3941A39-F745-4294-BC98-CE1661FC6547} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E1AB0704-AA6F-48C2-A87A-9AB0CF2526EA} - System32\Tasks\{103D0387-739A-4BC7-AB77-C1F270698507} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E2BA0C93-B6E7-40A0-B4C4-1C5EE7C8D62A} - System32\Tasks\{42F2FD00-9419-4D7C-BA22-58D0B4C88EBB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E32F1FF4-F7F3-4F91-BA6E-43ECED5BAD90} - System32\Tasks\{C72E62A4-22D9-413F-B34B-7AACD123D07E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E5C30882-B1A0-457B-A92A-4A1147C10CEB} - System32\Tasks\{6840AFAE-E85A-4951-816A-AB695C844563} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E5E6DE78-82FB-4F8B-9634-69D2BFDE3CB6} - System32\Tasks\{3B4F9FC5-0782-4011-A6E5-54EDB1675C73} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E655A113-8297-40BC-BB80-9D8E18C0AA45} - System32\Tasks\{0EEAAD34-19BE-43F0-8CCD-FD83BD82BEE3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E65EE36F-4CF6-49C5-9117-D42E482B75C5} - System32\Tasks\{301BD591-CFAE-4E72-B465-CC86C46D9B17} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E73E3EFF-C57A-4492-B3F5-3B40280A6B4D} - System32\Tasks\{24AA084E-AAA2-42FE-8F55-FAE64D63B012} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E9320F83-0FC0-44EC-AD8F-473BB740AC47} - System32\Tasks\{5A58A535-5A30-4B8E-9EB1-5EFDCC607FD1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E9811937-C3DD-4E94-BCFD-6B20BDC42AA7} - System32\Tasks\{F987AC36-5D01-4E49-B7A5-B997C5C19C3F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EB0E735D-172C-425A-9F38-D08A4B05F79B} - System32\Tasks\{F5E79996-C170-4086-99C0-A6FBE5E0AA1D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EB22AF0A-D5AB-49AA-B9E8-E3B03E36EAB5} - System32\Tasks\{481AC641-9BD7-4D3C-BB10-2759A49541A4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {ECF2577A-52CD-437A-82DD-E6EDBBF5A300} - System32\Tasks\{1BB48CAC-3015-4E8C-987F-9C936BFE7BEA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {ED8CB67F-51EF-4EF9-A2E7-ED8976F5F379} - System32\Tasks\{F0FC2ABD-601D-4D2F-9044-7F734E76CD92} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EDA80D2F-07AA-400E-9354-DE5591116E92} - System32\Tasks\{B0D717BF-CB4F-414A-A9C4-FB4EBF7195A7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EF6AEFCE-82F7-478C-87F4-4C0737A7423B} - System32\Tasks\{261F6AAD-43B3-4B87-B64B-F1B608E6A1F1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EF72663C-C7D0-4D37-9B35-739485674763} - System32\Tasks\{75DA428B-937E-4737-8901-6B8E9D4B180F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EF935F79-ECDF-427F-98BC-2D7F7B7908E4} - System32\Tasks\{3110578A-BC7B-4485-BB52-FC6B3031EB05} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F1F60DB3-9DCB-4EC9-A135-63A6D44DA5BA} - System32\Tasks\{3A59247A-FD93-4335-ABC4-A55E2383E120} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F6EC7C4D-CA8B-403C-8BA4-F50D5E4E9FF8} - System32\Tasks\{2E952AE4-B626-428D-B1D4-06216083E056} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F930B0FF-E6F6-4C75-BF37-56E5644FEDF5} - System32\Tasks\{4C910DB7-CF71-4625-8CEF-6439882947A0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F97D2424-0B83-479C-9C60-047F3C377001} - System32\Tasks\{CF75BE27-DCE3-47E8-A1B4-C8A98863616E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F98DD4AE-E5B0-4CE7-BD50-56CDCEAD8F2E} - System32\Tasks\{74E4C0AA-44E4-4652-88B1-EFA5E74BD2AF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F9D25730-F402-4238-A0DA-F635DA3DA741} - System32\Tasks\{C64D7C0D-8C56-4FC3-8399-F0BF98D72FDD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {FAA37E12-E48A-470F-A9AD-67C498A9C2DB} - System32\Tasks\{635A7DBB-F7EF-44FF-B9F5-1C06B2C9CC98} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {FC158403-9EE6-4141-BA15-F3AB13B76724} - System32\Tasks\{8FC9014E-4053-4261-8517-5056C89D6DCC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {FCE3B6E1-AE50-4805-BA03-0CB996DC225C} - System32\Tasks\{3F4AC976-9CF7-40FB-AF4B-24798C744422} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {FCFE8054-77C2-4315-A3B6-65453E453F1A} - System32\Tasks\{5D193E50-73FA-4ACC-A4C8-EE5D2B615B90} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: C:\Windows\Tasks\AIRecoveryRemind.job => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-03-05 17:21 - 2010-03-05 17:21 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll 2010-01-11 18:27 - 2010-01-11 18:27 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll 2010-05-06 02:22 - 2010-05-06 02:22 - 00108544 _____ () C:\Program Files\P4G\OvrClk.dll 2008-10-01 07:02 - 2008-10-01 07:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2011-03-16 23:07 - 2011-03-16 23:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-03-16 02:48 - 2010-03-16 02:48 - 00148816 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\EcaremeDLL.dll 2010-08-26 04:50 - 2010-08-26 04:50 - 00030032 _____ () C:\Windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll 2010-08-26 04:50 - 2010-08-26 04:50 - 00931840 _____ () C:\Windows\assembly\GAC_64\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll 2010-03-05 17:21 - 2010-03-05 17:21 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll 2013-10-31 19:48 - 2013-10-10 19:14 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2010-02-23 23:14 - 2010-02-23 23:14 - 00071680 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll 2010-02-23 23:11 - 2010-02-23 23:11 - 00076288 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll 2010-02-23 23:12 - 2010-02-23 23:12 - 00186880 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll 2010-02-23 23:14 - 2010-02-23 23:14 - 00050688 _____ () C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll 2011-03-16 23:11 - 2011-03-16 23:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2013-10-21 13:37 - 2013-10-09 01:01 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libglesv2.dll 2013-10-21 13:37 - 2013-10-09 01:01 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libegl.dll 2013-10-21 13:37 - 2013-10-09 01:02 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll 2013-10-21 13:37 - 2013-10-09 01:02 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll 2013-10-21 13:37 - 2013-10-09 01:01 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll 2011-03-16 23:11 - 2011-03-16 23:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf 2012-11-28 14:13 - 2012-11-28 14:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-11-28 14:13 - 2012-11-28 14:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-10-21 13:37 - 2013-10-09 01:02 - 13584336 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:2F370DA6 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/31/2013 11:43:57 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Fehler 1307. Auf der Festplatte ist nicht genügend freier Speicherplatz vorhanden, um diese Datei zu installieren: C:\Program Files (x86)\iTunes\iTunes.Resources\nl.lproj\iPod License.rtf. Sorgen Sie für zusätzlichen freien Speicher und klicken Sie auf "Wiederholen", oder klicken Sie auf "Abbrechen", um Installer zu beenden. Error: (10/31/2013 11:42:23 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen. Error: (10/31/2013 11:42:22 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen. Error: (10/31/2013 11:42:15 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen. Error: (10/31/2013 11:42:15 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen. Error: (10/31/2013 11:42:15 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen. Error: (10/31/2013 11:42:14 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen. Error: (10/31/2013 11:42:14 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen. Error: (10/31/2013 11:42:14 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen. Error: (10/31/2013 11:42:14 PM) (Source: MsiInstaller) (User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen. System errors: ============= Error: (10/31/2013 11:14:42 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error: (10/31/2013 10:28:22 PM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (10/31/2013 10:28:21 PM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (10/31/2013 09:08:02 PM) (Source: volsnap) (User: ) Description: Beim Vorbereiten einer neuen Volumeschattenkopie für Volume C:, wurde festgestellt, dass der Schattenkopiespeicher auf Volume C: nicht über ausreichend große fortwährende Blocks verfügt. Löschen Sie überflüssige Dateien auf dem Schattenkopie-Speichervolume, oder verwenden Sie ein anderes Schattenkopie-Speichervolume. Error: (10/31/2013 09:07:58 PM) (Source: volsnap) (User: ) Description: Beim Vorbereiten einer neuen Volumeschattenkopie für Volume C:, wurde festgestellt, dass der Schattenkopiespeicher auf Volume C: nicht über ausreichend große fortwährende Blocks verfügt. Löschen Sie überflüssige Dateien auf dem Schattenkopie-Speichervolume, oder verwenden Sie ein anderes Schattenkopie-Speichervolume. Error: (10/31/2013 08:16:50 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (10/31/2013 08:05:07 PM) (Source: DCOM) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (10/30/2013 01:33:47 PM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (10/30/2013 01:33:46 PM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (10/30/2013 00:57:43 PM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Microsoft Office Sessions: ========================= Error: (10/31/2013 11:43:57 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Fehler 1307. Auf der Festplatte ist nicht genügend freier Speicherplatz vorhanden, um diese Datei zu installieren: C:\Program Files (x86)\iTunes\iTunes.Resources\nl.lproj\iPod License.rtf. Sorgen Sie für zusätzlichen freien Speicher und klicken Sie auf "Wiederholen", oder klicken Sie auf "Abbrechen", um Installer zu beenden.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/31/2013 11:42:23 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/31/2013 11:42:22 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/31/2013 11:42:15 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/31/2013 11:42:15 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/31/2013 11:42:15 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/31/2013 11:42:14 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/31/2013 11:42:14 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/31/2013 11:42:14 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/31/2013 11:42:14 PM) (Source: MsiInstaller)(User: Freier_Geist) Description: Produkt: iTunes -- Festplatte voll: Auf Volume "C:" steht nicht genügend Speicherplatz für die Installation bei aktivierter Wiederherstellungsoption zur Verfügung. 272.202 KB sind erforderlich, aber nur 231.972 KB sind verfügbar. Klicken Sie auf "Ignorieren", um die Installation ohne Speicherung von Wiederherstellungsinformationen fortzusetzen, klicken Sie auf "Wiederholen", um den verfügbaren Speicher erneut zu überprüfen oder auf "Abbrechen", um die Installation abzubrechen.(NULL)(NULL)(NULL)(NULL)(NULL) ==================== Memory info =========================== Percentage of memory in use: 64% Total physical RAM: 3884.48 MB Available physical RAM: 1396.46 MB Total Pagefile: 7767.13 MB Available Pagefile: 4843.52 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:74.52 GB) (Free:0.22 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Data) (Fixed) (Total:204.03 GB) (Free:199.92 GB) NTFS Drive e: (STAT_ LOKAL 2011) (CDROM) (Total:0.87 GB) (Free:0 GB) CDFS Drive f: () (Removable) (Total:7.39 GB) (Free:3.33 GB) FAT32 Drive g: (CMR_DATEN) (Removable) (Total:7.52 GB) (Free:1.2 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: E0C5913D) Partition 1: (Not Active) - (Size=20 GB) - (Type=1C) Partition 2: (Active) - (Size=75 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=204 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 7 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=7 GB) - (Type=0B) ======================================================== Disk: 2 (Size: 8 GB) (Disk ID: 2C6B7369) No partition Table on disk 2. ==================== End Of Log ============================ Geändert von diderus (01.11.2013 um 00:01 Uhr) |
01.11.2013, 18:44 | #4 | |
/// the machine /// TB-Ausbilder | USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien Infizierte Sticks anklemmen, nicht mehr abmachen. Panda USB Vaccine - Download - Filepony laufen lassen. Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
01.11.2013, 22:39 | #5 |
| USB-Stick: Ordner auf einmal versteckt & teilweise .exe DateienCode:
ATTFilter ComboFix 13-11-01.03 - Christina Maren R 01.11.2013 22:22:13.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3884.1920 [GMT 1:00] ausgeführt von:: c:\users\Christina Maren R\Downloads\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\esupport\eDriver\Software\ASUS\MultiFrame\XP32_Vista32_Vista64_Win7_32_Win7_64_1.0.0021\Desktop_.ini c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe . . ((((((((((((((((((((((( Dateien erstellt von 2013-10-01 bis 2013-11-01 )))))))))))))))))))))))))))))) . . 2013-11-01 21:33 . 2013-11-01 21:33 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2013-11-01 21:33 . 2013-11-01 21:33 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-11-01 21:15 . 2013-11-01 21:15 -------- d-----w- c:\programdata\Panda Security 2013-11-01 21:15 . 2013-11-01 21:15 -------- d-----w- c:\program files (x86)\Panda USB Vaccine 2013-11-01 21:09 . 2013-10-14 07:12 10280728 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{48D7BC73-F3F0-4C9F-BD88-897701AE8482}\mpengine.dll 2013-11-01 10:25 . 2013-11-01 10:25 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-11-01 10:25 . 2013-11-01 10:25 -------- d-----w- c:\program files\iTunes 2013-11-01 10:25 . 2013-11-01 10:25 -------- d-----w- c:\program files (x86)\iTunes 2013-10-31 22:33 . 2013-10-31 22:33 -------- d-----w- C:\FRST 2013-10-31 22:19 . 2013-11-01 10:25 -------- d-----w- c:\program files\iPod 2013-10-31 19:00 . 2013-10-31 19:00 -------- d-----w- c:\users\Christina Maren R\AppData\Roaming\Avira 2013-10-31 18:59 . 2013-10-31 18:59 -------- d-----w- c:\programdata\AskPartnerNetwork 2013-10-31 18:59 . 2013-10-31 18:59 -------- d-----w- c:\program files (x86)\AskPartnerNetwork 2013-10-31 18:58 . 2013-10-31 18:58 -------- d-----w- c:\programdata\APN 2013-10-31 18:48 . 2013-10-10 18:14 83160 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2013-10-31 18:48 . 2013-10-10 18:14 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2013-10-31 18:48 . 2013-10-10 18:14 132600 ----a-w- c:\windows\system32\drivers\avipbb.sys 2013-10-31 18:48 . 2013-10-10 18:14 105856 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2013-10-31 18:48 . 2013-10-31 18:48 -------- d-----w- c:\programdata\Avira 2013-10-31 18:48 . 2013-10-31 18:48 -------- d-----w- c:\program files (x86)\Avira 2013-10-30 11:59 . 2013-10-30 11:59 -------- d-----w- C:\Program Files 2013-10-15 15:25 . 2013-09-22 22:54 15404544 ----a-w- c:\windows\system32\ieframe.dll 2013-10-15 15:25 . 2013-09-22 22:54 19252224 ----a-w- c:\windows\system32\mshtml.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-11-01 09:37 . 2011-11-09 14:54 45056 ----a-w- c:\windows\system32\acovcnt.exe 2013-09-03 12:35 . 2012-03-30 15:15 278800 ------w- c:\windows\system32\MpSigStub.exe 2013-08-29 01:48 . 2013-10-14 08:25 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2013-08-05 02:25 . 2013-09-18 18:12 155584 ----a-w- c:\windows\system32\drivers\ataport.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}] 2013-10-23 18:43 12240 ----a-w- c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" [2013-10-23 12240] . [HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-00a7-7a786e7484d7}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "GoogleChromeAutoLaunch_5F1959BD232E006F56CACFDD116D8381"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2013-10-09 844752] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2009-07-06 87336] "BDRegion"="c:\program files (x86)\Cyberlink\Shared files\brs.exe" [2010-02-24 75048] "UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "Boingo Wi-Fi"="c:\program files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk" [2010-08-26 2429] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288] "ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-02-04 7350912] "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-01-05 170624] "HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016] "starter4g"="c:\windows\starter4g.exe" [2009-06-17 157968] "hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528] "BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520] "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-10-10 681032] "ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-10-23 1673680] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-10-23 152392] . c:\users\Christina Maren R\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-8-13 1199104] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "Userinit"="userinit.exe" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) "AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 cmnsusbser;Mobile Connector USB Device for Legacy Serial Communication LCT2053s;c:\windows\system32\DRIVERS\cmnsusbser.sys;c:\windows\SYSNATIVE\DRIVERS\cmnsusbser.sys [x] R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x] R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x] S2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/08/25 20:39];c:\program files (x86)\CyberLink\PowerDVD9\000.fcl;c:\program files (x86)\CyberLink\PowerDVD9\000.fcl [x] S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x] S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x] S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x] S2 APNMCP;Ask Aktualisierungsdienst;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x] S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x] S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x] S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S2 WTGService;WTGService;c:\program files (x86)\XSManager\WTGService.exe;c:\program files (x86)\XSManager\WTGService.exe [x] S2 XS Stick Service;XS Stick Service;c:\windows\service4g.exe;c:\windows\service4g.exe [x] S3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x] S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x] S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x] S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x] S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys;c:\windows\SYSNATIVE\DRIVERS\WDKMD.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-10-21 12:30 1185744 ----a-w- c:\program files (x86)\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2012-07-11 c:\windows\Tasks\AIRecoveryRemind.job - c:\program files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-04-02 23:02] . 2013-11-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-26 03:50] . 2013-11-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-26 03:50] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}] 2013-10-23 18:43 13776 ----a-w- c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" [2013-10-23 13776] . [HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B] @="{6D4133E5-0742-4ADC-8A8C-9303440F7190}" [HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}] 2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O] @="{64174815-8D98-4CE6-8646-4C039977D808}" [HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}] 2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440] "ASUS WebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2010-03-16 1754448] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-03-27 17412200] "AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-09-01 323584] "IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-03-05 1928976] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 161304] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 386584] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 415256] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=c:\windows\System32\nvinitx.dll . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://asus.msn.com uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105 IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) Wow6432Node-HKCU-Run-Windows Alerter - c:\program files\Windows Alerter\WinAlert.exe Wow6432Node-HKCU-Run-Windows Common Files Manager - c:\program files\Windows Common Files\Commgr.exe Wow6432Node-HKLM-Run-<NO NAME> - (no file) Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe /f=srs_premium_sound_nopreset.zip /h HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start Toolbar-Locked - (no file) HKLM-Run-Setwallpaper - c:\programdata\SetWallpaper.cmd . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{B154377D-700F-42cc-9474-23858FBDF4BD}] "ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD9\000.fcl" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}] @Denied: (A 2) (Everyone) @="IFlashBroker3" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-11-01 22:38:23 ComboFix-quarantined-files.txt 2013-11-01 21:38 . Vor Suchlauf: 9 Verzeichnis(se), 16.607.010.816 Bytes frei Nach Suchlauf: 17 Verzeichnis(se), 17.979.711.488 Bytes frei . - - End Of File - - 55B5DBCBA70AC63D22D5F8EF91F13BDE A36C5E4F47E84449FF07ED3517B43A31 |
02.11.2013, 18:28 | #6 |
/// the machine /// TB-Ausbilder | USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien MBAM bitte nen Vollscan, also auch die Sticks. Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien |
02.11.2013, 21:31 | #7 |
| USB-Stick: Ordner auf einmal versteckt & teilweise .exe DateienCode:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.02.08 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16721 Christina Maren R :: FREIER_GEIST [Administrator] 02.11.2013 19:48:13 mbam-log-2013-11-02 (19-48-13).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|G:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 405323 Laufzeit: 1 Stunde(n), 41 Minute(n), 37 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 4 C:\Users\Christina Maren R\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Christina Maren R\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Christina Maren R\AppData\Roaming\OpenCandy\A06E536461AD44EB9B06E1992F5B7EB6 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Christina Maren R\AppData\Roaming\OpenCandy\EFA9175DC62E471DB085DDB19DF11D19 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 7 C:\Users\Christina Maren R\AppData\Roaming\OpenCandy\EFA9175DC62E471DB085DDB19DF11D19\DeltaTB.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Christina Maren R\Downloads\bie_o10install86 (1).zip (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Christina Maren R\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Christina Maren R\AppData\Roaming\OpenCandy\A06E536461AD44EB9B06E1992F5B7EB6\TuneUpUtilities2013-2200218_de-DE.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Christina Maren R\AppData\Roaming\OpenCandy\EFA9175DC62E471DB085DDB19DF11D19\5471.ico (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Christina Maren R\AppData\Roaming\OpenCandy\EFA9175DC62E471DB085DDB19DF11D19\EBB77268-338F-4C6A-8590-AD88FED26F4A (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Christina Maren R\AppData\Roaming\OpenCandy\EFA9175DC62E471DB085DDB19DF11D19\OCBrowserHelper_1.0.6.125.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
03.11.2013, 08:09 | #8 |
/// the machine /// TB-Ausbilder | USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien und weiter
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
03.11.2013, 17:32 | #9 |
| USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien Sorry, hier der Rest: Code:
ATTFilter # AdwCleaner v3.010 - Bericht erstellt am 03/11/2013 um 17:05:51 # Updated 20/10/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Christina Maren R - FREIER_GEIST # Gestartet von : C:\Users\Christina Maren R\Downloads\adwcleaner (1).exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\Babylon Ordner Gelöscht : C:\ProgramData\Partner ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\85588dde73aeb41 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909} Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}] Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKLM\Software\DataMngr Schlüssel Gelöscht : HKLM\Software\DeviceVM Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DeviceVM ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.16720 -\\ Google Chrome v30.0.1599.101 [ Datei : C:\Users\Christina Maren R\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht : homepage ************************* AdwCleaner[R0].txt - [3095 octets] - [03/11/2013 16:58:37] AdwCleaner[S0].txt - [2843 octets] - [03/11/2013 17:05:51] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2903 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.7 (10.15.2013:3) OS: Windows 7 Home Premium x64 Ran by Christina Maren R on 03.11.2013 at 17:13:23,19 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-617077074-545991199-443821844-1001\Software\SweetIM ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" ~~~ Chrome Failed to delete: [Folder] C:\Users\Christina Maren R\appdata\local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh Successfully deleted: [Folder] C:\Users\Christina Maren R\appdata\local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 03.11.2013 at 17:24:43,89 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by Christina Maren R (administrator) on FREIER_GEIST on 03-11-2013 17:25:51 Running from C:\Users\Christina Maren R\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ATK) C:\Program Files\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe () C:\Program Files (x86)\XSManager\WTGService.exe (4G Systems GmbH & Co. KG) C:\Windows\service4g.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (4G Systems GmbH & Co. KG) C:\Windows\starter4g.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ASUS) C:\Windows\AsScrPro.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (asus) C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.) HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] () HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.) HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation) HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [GoogleChromeAutoLaunch_5F1959BD232E006F56CACFDD116D8381] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752 2013-10-09] (Google Inc.) HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\CyberLink\Shared files\brs.exe [75048 2010-02-24] (cyberlink) HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.) HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.) HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-08-26] () HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [7350912 2010-02-04] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-01-05] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [starter4g] - C:\Windows\starter4g.exe [157968 2009-06-17] (4G Systems GmbH & Co. KG) HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-05-10] (Hewlett-Packard) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-10] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [95848 2010-03-27] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll [90216 2010-03-27] (NVIDIA Corporation) Startup: C:\Users\Christina Maren R\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.) BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Chrome: ======= CHR HomePage: hxxp://www.google.com CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Extension: (YouTube) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Gmail) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-10-10] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] () R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [304592 2009-06-22] () R2 XS Stick Service; C:\Windows\service4g.exe [125200 2009-06-17] (4G Systems GmbH & Co. KG) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-10-10] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-10-10] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-10-10] (Avira Operations GmbH & Co. KG) S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2011-01-11] (Mobile Connector) S3 cmnsusbser; C:\Windows\SysWow64\DRIVERS\cmnsusbser.sys [117888 2008-10-31] (Mobile Connector) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] () R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] () R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-02-24] (CyberLink Corp.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] U3 tmlwf; U3 tmwfp; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-03 17:24 - 2013-11-03 17:24 - 00001418 _____ C:\Users\Christina Maren R\Desktop\JRT.txt 2013-11-03 17:11 - 2013-11-03 17:11 - 00000000 ____D C:\Windows\ERUNT 2013-11-03 17:10 - 2013-11-03 17:11 - 01033335 _____ (Thisisu) C:\Users\Christina Maren R\Downloads\JRT (1).exe 2013-11-03 17:09 - 2013-11-03 17:10 - 01033335 _____ (Thisisu) C:\Users\Christina Maren R\Downloads\JRT.exe 2013-11-03 16:57 - 2013-11-03 16:58 - 01060070 _____ C:\Users\Christina Maren R\Downloads\adwcleaner (1).exe 2013-11-02 23:13 - 2013-11-02 23:13 - 00003088 _____ C:\Windows\System32\Tasks\{C0EC8212-D2BF-4B0D-91BB-B1797055CC3F} 2013-11-02 21:33 - 2013-11-03 17:06 - 00000000 ____D C:\AdwCleaner 2013-11-02 21:32 - 2013-11-02 21:32 - 01060070 _____ C:\Users\Christina Maren R\Downloads\adwcleaner.exe 2013-11-02 19:02 - 2013-11-02 19:02 - 00003088 _____ C:\Windows\System32\Tasks\{CE13E26E-3B4D-40E3-84C7-56D1E396AE1E} 2013-11-02 19:02 - 2013-11-02 19:02 - 00001107 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-02 19:02 - 2013-11-02 19:02 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Malwarebytes 2013-11-02 19:01 - 2013-11-02 19:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-02 19:01 - 2013-11-02 19:01 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-02 19:01 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-11-02 19:00 - 2013-11-02 19:01 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christina Maren R\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-01 23:54 - 2013-11-01 23:54 - 00152704 ____H C:\Windows\SysWOW64\mlfcache.dat 2013-11-01 22:38 - 2013-11-01 22:38 - 00021366 _____ C:\ComboFix.txt 2013-11-01 22:19 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-11-01 22:19 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-11-01 22:19 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-11-01 22:18 - 2013-11-01 22:38 - 00000000 ____D C:\Qoobox 2013-11-01 22:18 - 2013-11-01 22:35 - 00000000 ____D C:\Windows\erdnt 2013-11-01 22:17 - 2013-11-01 22:17 - 05143186 ____R (Swearware) C:\Users\Christina Maren R\Downloads\ComboFix.exe 2013-11-01 22:15 - 2013-11-01 22:15 - 00003042 _____ C:\Windows\System32\Tasks\PandaUSBVaccine 2013-11-01 22:15 - 2013-11-01 22:15 - 00000000 ____D C:\ProgramData\Panda Security 2013-11-01 22:15 - 2013-11-01 22:15 - 00000000 ____D C:\Program Files (x86)\Panda USB Vaccine 2013-11-01 22:14 - 2013-11-01 22:14 - 00848856 _____ (Panda Security ) C:\Users\Christina Maren R\Downloads\USBVaccineSetup.exe 2013-11-01 22:14 - 2013-11-01 22:14 - 00848856 _____ (Panda Security ) C:\Users\Christina Maren R\Downloads\USBVaccineSetup (1).exe 2013-11-01 11:26 - 2013-11-01 11:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files\iTunes 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-11-01 00:08 - 2013-11-01 00:08 - 00003088 _____ C:\Windows\System32\Tasks\{55A3A05B-3223-4149-A2C0-DF43C720686D} 2013-11-01 00:04 - 2013-11-01 00:06 - 00072683 _____ C:\Users\Christina Maren R\Desktop\Addition.txt 2013-10-31 23:59 - 2013-10-31 23:59 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Desktop\FRST64.exe 2013-10-31 23:36 - 2013-10-31 23:37 - 00045427 _____ C:\Users\Christina Maren R\Downloads\FRST.txt 2013-10-31 23:35 - 2013-10-31 23:37 - 00064259 _____ C:\Users\Christina Maren R\Downloads\Addition.txt 2013-10-31 23:34 - 2013-11-01 00:07 - 00011564 _____ C:\Users\Christina Maren R\Desktop\Kostenaufstellung.xlsx 2013-10-31 23:33 - 2013-10-31 23:33 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST64.exe 2013-10-31 23:33 - 2013-10-31 23:33 - 00000000 ____D C:\FRST 2013-10-31 23:32 - 2013-10-31 23:32 - 01089445 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST.exe 2013-10-31 23:19 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files\iPod 2013-10-31 22:34 - 2013-10-31 22:34 - 00003216 _____ C:\Windows\System32\Tasks\{76C0DB9E-0DA2-43FF-8932-A7E8E0DF8E6E} 2013-10-31 22:33 - 2013-10-31 22:33 - 00388608 _____ (Trend Micro Inc.) C:\Users\Christina Maren R\Downloads\HijackThis.exe 2013-10-31 22:33 - 2013-10-31 22:33 - 00015357 _____ C:\Users\Christina Maren R\Downloads\hijackthis.log 2013-10-31 20:00 - 2013-10-31 20:00 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Avira 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-10-31 19:51 - 2013-10-31 19:51 - 00002064 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\ProgramData\Avira 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\Program Files (x86)\Avira 2013-10-31 19:48 - 2013-10-10 19:14 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-10-31 19:48 - 2013-10-10 19:14 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-10-31 19:48 - 2013-10-10 19:14 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-10-31 19:48 - 2013-10-10 19:14 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-10-31 19:43 - 2013-10-31 19:43 - 00003058 _____ C:\Windows\System32\Tasks\{90ED30BE-B4FE-4BEC-B171-738AB66C4A7A} 2013-10-31 19:41 - 2013-10-31 19:42 - 85269544 _____ (AVAST Software) C:\Users\Christina Maren R\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe 2013-10-31 19:37 - 2013-10-31 19:38 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de_14b411.exe 2013-10-31 19:28 - 2013-10-31 19:29 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de.exe 2013-10-30 12:59 - 2013-10-30 12:59 - 00000000 ____D C:\Program Files 2013-10-29 13:02 - 2013-10-29 13:02 - 00171083 _____ C:\Users\Christina Maren R\Desktop\2. Sitzung Einführung BRD EU.pptx 2013-10-29 13:01 - 2013-10-29 13:01 - 00170925 _____ C:\Users\Christina Maren R\Downloads\2. Sitzung Einführung BRD EU.pptx 2013-10-28 15:46 - 2013-10-28 15:46 - 00003088 _____ C:\Windows\System32\Tasks\{8FC9014E-4053-4261-8517-5056C89D6DCC} 2013-10-28 14:25 - 2013-10-28 15:42 - 00092261 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr (1).pptx 2013-10-28 10:21 - 2013-10-28 10:21 - 00003088 _____ C:\Windows\System32\Tasks\{26FBFD2A-0450-47A4-8450-F6853D2C1E08} 2013-10-27 23:06 - 2013-10-27 23:06 - 00003088 _____ C:\Windows\System32\Tasks\{8BD73FC9-0826-4C63-8308-9F7BF369F89D} 2013-10-27 21:52 - 2013-10-27 21:52 - 00067489 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr.pptx 2013-10-27 20:54 - 2013-10-27 20:54 - 00680448 _____ C:\Users\Christina Maren R\Downloads\empiri-Vorlesung.ppt 2013-10-27 18:38 - 2013-10-27 18:38 - 01393664 _____ C:\Users\Christina Maren R\Downloads\cleavages_und_sozialstruktur.ppt 2013-10-27 15:51 - 2013-10-27 15:51 - 00003088 _____ C:\Windows\System32\Tasks\{7CA5E8F0-D8A3-46A2-8952-AE074F1A6394} 2013-10-26 18:03 - 2013-10-26 18:03 - 00003088 _____ C:\Windows\System32\Tasks\{1687F846-A15F-454E-A739-C977E3FA1594} 2013-10-25 12:41 - 2013-10-25 12:41 - 00003088 _____ C:\Windows\System32\Tasks\{19302274-A815-41E2-981B-358A9261CEFD} 2013-10-23 13:02 - 2013-10-23 13:02 - 00003088 _____ C:\Windows\System32\Tasks\{90191F87-D18E-4B72-B53F-EDC77F0141E8} 2013-10-23 12:26 - 2013-10-23 12:26 - 00003088 _____ C:\Windows\System32\Tasks\{1162C06B-2136-4348-8950-AD5F1D0A63B4} 2013-10-22 09:20 - 2013-10-22 09:20 - 00003088 _____ C:\Windows\System32\Tasks\{27DBEED7-2FB3-40C6-BD69-3A1A0EEE8A3D} 2013-10-21 14:58 - 2013-10-21 14:58 - 00003088 _____ C:\Windows\System32\Tasks\{8E9A3AF9-FF8A-484F-B976-BCA724FB930B} 2013-10-21 13:32 - 2013-10-21 13:32 - 00003088 _____ C:\Windows\System32\Tasks\{1189B055-1048-46E3-8F02-F2568AF90F91} 2013-10-20 18:58 - 2013-10-20 18:58 - 00003088 _____ C:\Windows\System32\Tasks\{46B12118-0293-4FB1-93FF-E5EC852F5362} 2013-10-18 14:30 - 2013-10-18 14:30 - 00256251 _____ C:\Users\Christina Maren R\Downloads\1. Sitzung Einführung BRD.pptx 2013-10-16 17:58 - 2013-10-25 11:26 - 00000000 ____D C:\Users\Christina Maren R\Desktop\EU WS13_14 2013-10-16 17:57 - 2013-10-29 12:56 - 00000000 ____D C:\Users\Christina Maren R\Desktop\PoWi WS13_14 2013-10-16 17:57 - 2013-10-16 17:57 - 00000000 ____D C:\Users\Christina Maren R\Desktop\BRD WS13_14 2013-10-16 17:53 - 2013-10-25 11:28 - 00000000 ____D C:\Users\Christina Maren R\Desktop\VL Statistik WS13_14 2013-10-16 17:53 - 2013-10-16 17:54 - 00000000 ____D C:\Users\Christina Maren R\Desktop\International Relations WS1314 2013-10-16 17:53 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\VL GIS WS13_14 2013-10-16 09:52 - 2013-10-16 09:52 - 00003088 _____ C:\Windows\System32\Tasks\{F57C438F-5022-459A-947D-08718FC78742} 2013-10-15 16:26 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-15 16:26 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-15 16:26 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-15 16:26 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-15 16:26 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-15 16:26 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-15 16:26 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-15 16:26 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-15 16:26 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-15 16:26 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-15 16:26 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-15 16:26 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-15 16:25 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-15 16:25 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-15 16:25 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-15 16:12 - 2013-10-15 16:12 - 00003088 _____ C:\Windows\System32\Tasks\{BA7D6CCF-FF11-4DFB-9F8F-162B1FB1BD20} 2013-10-14 09:25 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-14 09:25 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-14 09:25 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-14 09:25 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-14 09:25 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-14 09:25 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-14 09:25 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-14 09:25 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-14 09:25 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-14 09:25 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-14 09:25 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-14 09:25 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-14 09:25 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-14 09:25 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-14 09:25 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-14 09:25 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-14 09:25 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-14 09:25 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-14 09:25 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-14 09:25 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-14 09:25 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-14 09:25 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-14 09:25 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-14 09:25 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-14 09:25 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-14 09:25 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-14 09:25 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-14 09:25 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-14 09:25 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-14 09:25 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-14 09:25 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-14 09:25 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-14 09:25 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-14 09:25 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-14 09:25 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-14 09:25 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-14 09:25 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-14 09:25 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-14 09:25 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-14 09:25 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-14 09:25 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-14 09:25 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-14 09:25 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-14 09:25 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-14 09:25 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-14 09:25 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-09 12:31 - 2013-10-09 15:20 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Kleiderkrise 2013-10-09 12:19 - 2013-10-09 12:19 - 00003088 _____ C:\Windows\System32\Tasks\{6AF268C0-0292-434D-9C01-694978FC584C} 2013-10-08 13:46 - 2013-10-08 13:46 - 00003088 _____ C:\Windows\System32\Tasks\{164DB455-FEB5-4B34-A97B-3F9559741D68} 2013-10-04 16:37 - 2013-10-04 16:37 - 00003088 _____ C:\Windows\System32\Tasks\{E70CD3DC-1346-4214-94C7-62F66D6B0692} 2013-10-04 12:04 - 2013-10-04 12:04 - 00003088 _____ C:\Windows\System32\Tasks\{09234AB3-EBEC-439C-A225-76CED2BE84D7} ==================== One Month Modified Files and Folders ======= 2013-11-03 17:24 - 2013-11-03 17:24 - 00001418 _____ C:\Users\Christina Maren R\Desktop\JRT.txt 2013-11-03 17:16 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-03 17:16 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-03 17:11 - 2013-11-03 17:11 - 00000000 ____D C:\Windows\ERUNT 2013-11-03 17:11 - 2013-11-03 17:10 - 01033335 _____ (Thisisu) C:\Users\Christina Maren R\Downloads\JRT (1).exe 2013-11-03 17:11 - 2009-08-04 10:51 - 00654852 _____ C:\Windows\system32\perfh007.dat 2013-11-03 17:11 - 2009-08-04 10:51 - 00130434 _____ C:\Windows\system32\perfc007.dat 2013-11-03 17:11 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-03 17:10 - 2013-11-03 17:09 - 01033335 _____ (Thisisu) C:\Users\Christina Maren R\Downloads\JRT.exe 2013-11-03 17:08 - 2010-08-26 04:50 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-03 17:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-03 17:06 - 2013-11-02 21:33 - 00000000 ____D C:\AdwCleaner 2013-11-03 17:06 - 2010-08-26 04:23 - 01711629 _____ C:\Windows\WindowsUpdate.log 2013-11-03 17:06 - 2009-07-14 05:51 - 00079528 _____ C:\Windows\setupact.log 2013-11-03 16:58 - 2013-11-03 16:57 - 01060070 _____ C:\Users\Christina Maren R\Downloads\adwcleaner (1).exe 2013-11-03 16:51 - 2010-08-26 04:57 - 00216788 _____ C:\Windows\PFRO.log 2013-11-02 23:13 - 2013-11-02 23:13 - 00003088 _____ C:\Windows\System32\Tasks\{C0EC8212-D2BF-4B0D-91BB-B1797055CC3F} 2013-11-02 23:13 - 2012-04-10 12:30 - 00000000 ____D C:\ProgramData\Skype 2013-11-02 22:30 - 2010-08-26 04:50 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-02 21:32 - 2013-11-02 21:32 - 01060070 _____ C:\Users\Christina Maren R\Downloads\adwcleaner.exe 2013-11-02 19:19 - 2012-06-30 20:17 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-02 19:19 - 2009-07-14 03:34 - 00000513 _____ C:\Windows\win.ini 2013-11-02 19:02 - 2013-11-02 19:02 - 00003088 _____ C:\Windows\System32\Tasks\{CE13E26E-3B4D-40E3-84C7-56D1E396AE1E} 2013-11-02 19:02 - 2013-11-02 19:02 - 00001107 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-02 19:02 - 2013-11-02 19:02 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Malwarebytes 2013-11-02 19:02 - 2013-11-02 19:01 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-02 19:01 - 2013-11-02 19:01 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-02 19:01 - 2013-11-02 19:00 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christina Maren R\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-02 18:57 - 2011-11-09 15:54 - 00045056 _____ C:\Windows\system32\acovcnt.exe 2013-11-01 23:54 - 2013-11-01 23:54 - 00152704 ____H C:\Windows\SysWOW64\mlfcache.dat 2013-11-01 22:38 - 2013-11-01 22:38 - 00021366 _____ C:\ComboFix.txt 2013-11-01 22:38 - 2013-11-01 22:18 - 00000000 ____D C:\Qoobox 2013-11-01 22:38 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2013-11-01 22:35 - 2013-11-01 22:18 - 00000000 ____D C:\Windows\erdnt 2013-11-01 22:33 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2013-11-01 22:17 - 2013-11-01 22:17 - 05143186 ____R (Swearware) C:\Users\Christina Maren R\Downloads\ComboFix.exe 2013-11-01 22:15 - 2013-11-01 22:15 - 00003042 _____ C:\Windows\System32\Tasks\PandaUSBVaccine 2013-11-01 22:15 - 2013-11-01 22:15 - 00000000 ____D C:\ProgramData\Panda Security 2013-11-01 22:15 - 2013-11-01 22:15 - 00000000 ____D C:\Program Files (x86)\Panda USB Vaccine 2013-11-01 22:14 - 2013-11-01 22:14 - 00848856 _____ (Panda Security ) C:\Users\Christina Maren R\Downloads\USBVaccineSetup.exe 2013-11-01 22:14 - 2013-11-01 22:14 - 00848856 _____ (Panda Security ) C:\Users\Christina Maren R\Downloads\USBVaccineSetup (1).exe 2013-11-01 11:28 - 2013-01-02 16:39 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-11-01 11:26 - 2013-11-01 11:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files\iTunes 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-11-01 11:25 - 2013-10-31 23:19 - 00000000 ____D C:\Program Files\iPod 2013-11-01 00:08 - 2013-11-01 00:08 - 00003088 _____ C:\Windows\System32\Tasks\{55A3A05B-3223-4149-A2C0-DF43C720686D} 2013-11-01 00:07 - 2013-10-31 23:34 - 00011564 _____ C:\Users\Christina Maren R\Desktop\Kostenaufstellung.xlsx 2013-11-01 00:06 - 2013-11-01 00:04 - 00072683 _____ C:\Users\Christina Maren R\Desktop\Addition.txt 2013-10-31 23:59 - 2013-10-31 23:59 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Desktop\FRST64.exe 2013-10-31 23:44 - 2013-01-02 16:41 - 00000000 ____D C:\ProgramData\Apple Computer 2013-10-31 23:37 - 2013-10-31 23:36 - 00045427 _____ C:\Users\Christina Maren R\Downloads\FRST.txt 2013-10-31 23:37 - 2013-10-31 23:35 - 00064259 _____ C:\Users\Christina Maren R\Downloads\Addition.txt 2013-10-31 23:33 - 2013-10-31 23:33 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST64.exe 2013-10-31 23:33 - 2013-10-31 23:33 - 00000000 ____D C:\FRST 2013-10-31 23:32 - 2013-10-31 23:32 - 01089445 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST.exe 2013-10-31 22:34 - 2013-10-31 22:34 - 00003216 _____ C:\Windows\System32\Tasks\{76C0DB9E-0DA2-43FF-8932-A7E8E0DF8E6E} 2013-10-31 22:33 - 2013-10-31 22:33 - 00388608 _____ (Trend Micro Inc.) C:\Users\Christina Maren R\Downloads\HijackThis.exe 2013-10-31 22:33 - 2013-10-31 22:33 - 00015357 _____ C:\Users\Christina Maren R\Downloads\hijackthis.log 2013-10-31 22:33 - 2011-01-10 23:55 - 00000000 ____D C:\Users\Christina Maren R\AppData\Local\VirtualStore 2013-10-31 20:06 - 2010-08-26 05:16 - 00002168 _____ C:\Windows\system32\AutoRunFilter.ini 2013-10-31 20:06 - 2010-08-26 05:16 - 00001364 _____ C:\Windows\system32\ServiceFilter.ini 2013-10-31 20:00 - 2013-10-31 20:00 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Avira 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-10-31 19:51 - 2013-10-31 19:51 - 00002064 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\ProgramData\Avira 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\Program Files (x86)\Avira 2013-10-31 19:43 - 2013-10-31 19:43 - 00003058 _____ C:\Windows\System32\Tasks\{90ED30BE-B4FE-4BEC-B171-738AB66C4A7A} 2013-10-31 19:42 - 2013-10-31 19:41 - 85269544 _____ (AVAST Software) C:\Users\Christina Maren R\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe 2013-10-31 19:38 - 2013-10-31 19:37 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de_14b411.exe 2013-10-31 19:29 - 2013-10-31 19:28 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de.exe 2013-10-30 13:33 - 2012-07-05 14:01 - 00000000 ____D C:\Users\Christina Maren R\Documents\Outlook-Dateien 2013-10-30 12:59 - 2013-10-30 12:59 - 00000000 ____D C:\Program Files 2013-10-29 13:02 - 2013-10-29 13:02 - 00171083 _____ C:\Users\Christina Maren R\Desktop\2. Sitzung Einführung BRD EU.pptx 2013-10-29 13:01 - 2013-10-29 13:01 - 00170925 _____ C:\Users\Christina Maren R\Downloads\2. Sitzung Einführung BRD EU.pptx 2013-10-29 12:56 - 2013-10-16 17:57 - 00000000 ____D C:\Users\Christina Maren R\Desktop\PoWi WS13_14 2013-10-28 15:46 - 2013-10-28 15:46 - 00003088 _____ C:\Windows\System32\Tasks\{8FC9014E-4053-4261-8517-5056C89D6DCC} 2013-10-28 15:42 - 2013-10-28 14:25 - 00092261 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr (1).pptx 2013-10-28 10:21 - 2013-10-28 10:21 - 00003088 _____ C:\Windows\System32\Tasks\{26FBFD2A-0450-47A4-8450-F6853D2C1E08} 2013-10-27 23:06 - 2013-10-27 23:06 - 00003088 _____ C:\Windows\System32\Tasks\{8BD73FC9-0826-4C63-8308-9F7BF369F89D} 2013-10-27 21:52 - 2013-10-27 21:52 - 00067489 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr.pptx 2013-10-27 20:54 - 2013-10-27 20:54 - 00680448 _____ C:\Users\Christina Maren R\Downloads\empiri-Vorlesung.ppt 2013-10-27 18:38 - 2013-10-27 18:38 - 01393664 _____ C:\Users\Christina Maren R\Downloads\cleavages_und_sozialstruktur.ppt 2013-10-27 15:51 - 2013-10-27 15:51 - 00003088 _____ C:\Windows\System32\Tasks\{7CA5E8F0-D8A3-46A2-8952-AE074F1A6394} 2013-10-26 18:03 - 2013-10-26 18:03 - 00003088 _____ C:\Windows\System32\Tasks\{1687F846-A15F-454E-A739-C977E3FA1594} 2013-10-25 12:41 - 2013-10-25 12:41 - 00003088 _____ C:\Windows\System32\Tasks\{19302274-A815-41E2-981B-358A9261CEFD} 2013-10-25 11:28 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\VL Statistik WS13_14 2013-10-25 11:26 - 2013-10-16 17:58 - 00000000 ____D C:\Users\Christina Maren R\Desktop\EU WS13_14 2013-10-25 11:26 - 2012-07-16 20:52 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Uni 2013-10-25 11:26 - 2012-02-14 16:38 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Geographie 2013-10-23 13:02 - 2013-10-23 13:02 - 00003088 _____ C:\Windows\System32\Tasks\{90191F87-D18E-4B72-B53F-EDC77F0141E8} 2013-10-23 12:26 - 2013-10-23 12:26 - 00003088 _____ C:\Windows\System32\Tasks\{1162C06B-2136-4348-8950-AD5F1D0A63B4} 2013-10-22 09:20 - 2013-10-22 09:20 - 00003088 _____ C:\Windows\System32\Tasks\{27DBEED7-2FB3-40C6-BD69-3A1A0EEE8A3D} 2013-10-21 14:58 - 2013-10-21 14:58 - 00003088 _____ C:\Windows\System32\Tasks\{8E9A3AF9-FF8A-484F-B976-BCA724FB930B} 2013-10-21 13:32 - 2013-10-21 13:32 - 00003088 _____ C:\Windows\System32\Tasks\{1189B055-1048-46E3-8F02-F2568AF90F91} 2013-10-20 18:58 - 2013-10-20 18:58 - 00003088 _____ C:\Windows\System32\Tasks\{46B12118-0293-4FB1-93FF-E5EC852F5362} 2013-10-18 14:30 - 2013-10-18 14:30 - 00256251 _____ C:\Users\Christina Maren R\Downloads\1. Sitzung Einführung BRD.pptx 2013-10-16 17:57 - 2013-10-16 17:57 - 00000000 ____D C:\Users\Christina Maren R\Desktop\BRD WS13_14 2013-10-16 17:54 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\International Relations WS1314 2013-10-16 17:53 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\VL GIS WS13_14 2013-10-16 09:52 - 2013-10-16 09:52 - 00003088 _____ C:\Windows\System32\Tasks\{F57C438F-5022-459A-947D-08718FC78742} 2013-10-16 09:46 - 2013-03-22 16:42 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-16 09:46 - 2013-03-22 16:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-16 09:46 - 2009-07-14 05:45 - 00436032 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-15 16:25 - 2010-08-26 04:50 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-15 16:25 - 2010-08-26 04:50 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-15 16:12 - 2013-10-15 16:12 - 00003088 _____ C:\Windows\System32\Tasks\{BA7D6CCF-FF11-4DFB-9F8F-162B1FB1BD20} 2013-10-10 19:14 - 2013-10-31 19:48 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-10-10 19:14 - 2013-10-31 19:48 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-10-10 19:14 - 2013-10-31 19:48 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-10-10 19:14 - 2013-10-31 19:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-10-09 15:20 - 2013-10-09 12:31 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Kleiderkrise 2013-10-09 12:20 - 2011-01-11 20:43 - 00000000 ____D C:\Users\Christina Maren R\AppData\Local\Google 2013-10-09 12:19 - 2013-10-09 12:19 - 00003088 _____ C:\Windows\System32\Tasks\{6AF268C0-0292-434D-9C01-694978FC584C} 2013-10-08 13:46 - 2013-10-08 13:46 - 00003088 _____ C:\Windows\System32\Tasks\{164DB455-FEB5-4B34-A97B-3F9559741D68} 2013-10-04 16:37 - 2013-10-04 16:37 - 00003088 _____ C:\Windows\System32\Tasks\{E70CD3DC-1346-4214-94C7-62F66D6B0692} 2013-10-04 12:04 - 2013-10-04 12:04 - 00003088 _____ C:\Windows\System32\Tasks\{09234AB3-EBEC-439C-A225-76CED2BE84D7} Some content of TEMP: ==================== C:\Users\Christina Maren R\AppData\Local\Temp\avgnt.exe C:\Users\Christina Maren R\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-13 13:51 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-10-2013 Ran by Christina Maren R at 2013-11-03 17:30:40 Running from C:\Users\Christina Maren R\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 64 Bit HP CIO Components Installer (Version: 7.2.8) Acrobat.com (x32 Version: 1.6.65) Adobe AIR (x32 Version: 1.5.0.7220) Adobe Flash Player 10 ActiveX (x32 Version: 10.0.42.34) Adobe Flash Player 10 Plugin (x32 Version: 10.0.32.18) Adobe Reader 9.2 MUI (x32 Version: 9.2.0) Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482) Alice Greenfingers (x32) Apple Application Support (x32 Version: 2.3.6) Apple Mobile Device Support (Version: 7.0.0.117) Apple Software Update (x32 Version: 2.1.3.127) ASUS AI Recovery (x32 Version: 1.0.9) ASUS AP Bank (x32 Version: 1.0.0.0) ASUS LifeFrame3 (x32 Version: 3.0.20) ASUS Live Update (x32 Version: 2.5.9) ASUS MultiFrame (x32 Version: 1.0.0021) ASUS Power4Gear Hybrid (Version: 1.1.37) ASUS SmartLogon (x32 Version: 1.0.0008) ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028) ASUS U Series Bamboo ScreenSaver (x32 Version: 1.0.0001) ASUS Virtual Camera (x32 Version: 1.0.19) ASUS WebStorage (x32 Version: 2.0.46.1429) ATK Package (x32 Version: 1.0.0003) Avira Free Antivirus (x32 Version: 14.0.0.411) Avira SearchFree Toolbar (x32 Version: 12.6.0.1898) Boingo Wi-Fi (x32 Version: 1.7.0048) Bonjour (Version: 3.0.0.10) BufferChm (x32 Version: 130.0.331.000) C6300 (x32 Version: 130.0.365.000) Chicken Invaders 2 (x32) Choice Guard (x32 Version: 1.2.87.0) ControlDeck (x32 Version: 1.0.7) CyberLink LabelPrint (x32 Version: 2.5.1908) CyberLink Power2Go (x32 Version: 6.1.3602c) CyberLink PowerDVD 9 (x32 Version: 9.0.3009.50) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32) Destinations (x32 Version: 130.0.0.0) DeviceDiscovery (x32 Version: 130.0.465.000) DocProc (x32 Version: 13.0.0.0) EASYSTAT (x32 Version: 2.0.1.1) ETDWare PS/2-x64 7.0.5.9_WHQL Express Gate (x32 Version: 1.4.7.1) Fast Boot (Version: 1.0.5) Game Park Console (x32 Version: 6.2.0.2) Google Chrome (x32 Version: 30.0.1599.101) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54) Google Update Helper (x32 Version: 1.3.21.165) GPBaseService2 (x32 Version: 130.0.371.000) HP Customer Participation Program 13.0 (Version: 13.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Photosmart C6300 All-In-One Driver Software 13.0 Rel. 4 (Version: 13.0) HP Photosmart Essential 3.5 (Version: 3.5) HP Smart Web Printing 4.51 (Version: 4.51) HP Solution Center 13.0 (Version: 13.0) HP Update (x32 Version: 5.003.001.001) HPPhotoGadget (x32 Version: 130.0.282.000) HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000) HPPhotosmartEssential (x32 Version: 2.04.0000) HPProductAssistant (x32 Version: 130.0.371.000) HPSSupply (x32 Version: 130.0.371.000) iCloud (Version: 3.0.2.163) Intel PROSet Wireless Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2119) Intel(R) Management Engine Components (x32 Version: 6.0.0.1179) Intel(R) PROSet/Wireless WiFi Software (Version: 13.02.0000) Intel(R) Turbo Boost Technology Monitor (Version: 1.0.115.11) Intel(R) Wireless Display (Version: 1.2.15.0) iTunes (Version: 11.1.2.32) Junk Mail filter update (x32 Version: 14.0.8050.1202) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) MarketResearch (x32 Version: 130.0.374.000) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000) Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Professional 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) MSVCRT (x32 Version: 14.0.1468.721) MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0) Network64 (Version: 130.0.572.000) Network64 (Version: 140.0.221.000) NVIDIA Drivers (Version: 1.10.58.36) NVIDIA Updatus (x32 Version: 1.0.3) OCR Software by I.R.I.S. 13.0 (Version: 13.0) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Panda USB Vaccine 1.0.1.4 (x32) Piggly FREE (x32) PS_AIO_04_C6300_Software_Min (x32 Version: 130.0.365.000) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6098) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0) Scan (x32 Version: 13.0.0.0) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32) Shop for HP Supplies (Version: 13.0) Skype™ 5.8 (x32 Version: 5.8.158) SmartWebPrinting (x32 Version: 130.0.457.000) Smileyville FREE (x32) SolutionCenter (x32 Version: 130.0.373.000) SRS Premium Sound Control Panel (Version: 1.8.5700) Statistik lokal, Ausgabe 2011 (Gebietsstand 31.12.2009) (x32 Version: 1.00.0000) Status (x32 Version: 130.0.469.000) syncables desktop (x32 Version: 5.5.502.8155) syncables desktop SE (x32 Version: 5.5.615.9518) Toolbox (x32 Version: 130.0.648.000) TrayApp (x32 Version: 130.0.422.000) UnloadSupport (x32 Version: 11.0.0) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32) Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32) USB2.0 UVC 2M WebCam (Version: 5.8.54000.207) WebReg (x32 Version: 130.0.132.017) Windows Live Anmelde-Assistent (x32 Version: 5.000.818.6) Windows Live Call (x32 Version: 14.0.8050.1202) Windows Live Communications Platform (x32 Version: 14.0.8050.1202) Windows Live Essentials (x32 Version: 14.0.8050.1202) Windows Live Family Safety (Version: 14.0.8052.1208) Windows Live Fotogalerie (x32 Version: 14.0.8051.1204) Windows Live Mail (x32 Version: 14.0.8050.1202) Windows Live Messenger (x32 Version: 14.0.8050.1202) Windows Live Sync (x32 Version: 14.0.8050.1202) Windows Live Writer (x32 Version: 14.0.8050.1202) Windows Live-Uploadtool (x32 Version: 14.0.8014.1029) WinFlash (x32 Version: 2.30.1) Wireless Console 3 (x32 Version: 3.0.15) XSManager (x32 Version: 3.0) Yahoo! Toolbar (x32) ==================== Restore Points ========================= 02-11-2013 18:01:43 Windows Update 02-11-2013 22:12:57 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2013-11-01 22:33 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {01057788-0CA2-4D2E-BE33-DEE8CCE909A8} - System32\Tasks\{C74E6926-DF8B-4E40-8A35-1E36059AB303} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {034C2000-9A49-47B6-8537-698F9AC0C86B} - System32\Tasks\{A91DA84C-CB5F-46AE-9F02-1BF6AEAE5E88} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {038BE213-E605-4E15-9C8F-D6E5257DDEDA} - System32\Tasks\{54D9D38E-9267-4ED2-BC1F-873E772B8B55} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {041D051F-8C8D-4DD4-95CC-173AD0A28466} - System32\Tasks\{30421EB9-CE5F-4EEE-86D0-D3CC8CC7879F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {05129E64-DB6E-4C99-8349-01D85BD1D958} - System32\Tasks\{789ADFF0-4C3A-4F60-95CE-B22113D18649} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {065F965D-5D5F-4604-9327-6D8D85159154} - System32\Tasks\{6AF268C0-0292-434D-9C01-694978FC584C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {06765732-F01A-4699-B578-943388F04428} - System32\Tasks\{2177D094-E9FF-4E46-8B17-DEBDCF4AA8AA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0737CE72-5C82-4A90-8A89-748757C71B07} - System32\Tasks\{BEBEB2C2-556C-4619-B2DA-257FC66FF01A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {08A90500-98D2-476C-80A8-B651D246015E} - System32\Tasks\{E79AAD3D-823D-432C-93A5-21FC1EFF20C2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {09063DB6-C7AC-4F67-AF00-4076F3B00672} - System32\Tasks\{7CA5E8F0-D8A3-46A2-8952-AE074F1A6394} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {09753202-FE26-448D-ABEF-052CA813CB85} - System32\Tasks\{D5A8B36C-4D5E-4798-9AB5-1711A02793E4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0A73B995-A6D9-4B1D-84E0-DA35A0D5A80E} - System32\Tasks\{7F56BA5D-D02A-4F34-B899-020A91935CC4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0E0D5746-1614-44D4-978F-CF2F7104EB57} - System32\Tasks\{E26A8DF7-A1E2-4553-8AC4-B7FA455B251F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0E0DFAFC-1FE8-4189-9E19-23BFF3DCEF29} - System32\Tasks\{A3BC1530-C56A-4547-86F9-F25E2DAFAE99} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0EBD89FE-C928-417C-9F56-40EAF49F72A9} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [2010-05-17] (asus) Task: {113D3B3D-7B6C-4D0F-A335-D50E2177F5B2} - System32\Tasks\{09234AB3-EBEC-439C-A225-76CED2BE84D7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {11E64CC6-97D7-4D23-BC86-56A355FA68E0} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-05-28] (ATK) Task: {1211120A-C1D2-480B-A458-C8135C8F6BC9} - System32\Tasks\{6D7948E4-43DE-4305-85D7-C17C26162F98} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {14CE0A56-0DE1-4CA4-A145-7AA54AE57B3A} - System32\Tasks\{375CC34F-DEF2-4606-8BD0-7E1985136B6A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {16708FF6-00FE-4A68-8A89-75087159BEC1} - System32\Tasks\{B9915A13-303C-41C7-93F2-91A2E7599432} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {17B7CD32-52F4-4FDF-8C6E-3991055AA858} - System32\Tasks\{80EA4598-221C-44EA-B6AE-D25EA2B8D22C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {17FC454E-00A3-4416-B2C9-DCC85E4DBE44} - System32\Tasks\{40DE8272-7E42-4DFF-AAEC-72796CFE598B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {181FB8B9-D4E5-49F1-B8ED-E24F4BDE282B} - System32\Tasks\P4G Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation) Task: {18EBF132-27DD-4919-91B1-D88E1FCA75C7} - System32\Tasks\{F3219C45-EC38-4278-82C8-E22F96ACF190} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {19497948-4123-4A5D-B596-BDC1EE59B71E} - System32\Tasks\{2ADBA8BC-9D1F-43B3-B912-6A6A2D0FD49D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {198EE3E5-7271-47D5-B6B4-FF56A5053398} - System32\Tasks\{26FBFD2A-0450-47A4-8450-F6853D2C1E08} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {19ACCD47-7046-4CE0-ACAF-01FA16E3D582} - System32\Tasks\{0B63FBD6-489F-4397-AFDB-C45A8218D80F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {19D34AE3-743E-4608-B3D0-3AFB313DD1FE} - System32\Tasks\{6ABCCBF4-6748-498C-B806-B4AD01F19308} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1A4002D3-33ED-4973-8A85-6FA050133662} - System32\Tasks\{90E14099-ED27-4C6F-B99C-D7064CBE8DD5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1A6A0DA2-FC1D-47D6-ACFA-D30C10199E0D} - System32\Tasks\{85BF0243-D922-4C6B-BA3B-1E503F6C95C4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1C235DF9-E805-4850-A37A-2FB11900CE73} - System32\Tasks\{BA99A2B6-68DC-4994-A671-0E5CC4BEF603} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1C447A7B-DD60-488A-9837-F77CF107A394} - System32\Tasks\{6452C247-80AE-4C71-A8B2-9F6134C046AE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {20838A37-EBA5-42ED-AE30-869F8A377996} - System32\Tasks\{C84FDF93-F26D-4341-9954-A4D5C8DEA80F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {22F83BA6-6D14-4FB8-AA31-B40CFBE3F2F1} - System32\Tasks\{223D9249-B3F1-4C88-98A7-FE14BD51BAF3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {22FB8EC4-2A1F-40C9-A8E2-7A2424B7D96E} - System32\Tasks\{09DEF501-BF0A-4729-8539-FE19E5EAEB0C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {243CB92F-141F-4AE2-BAA0-207345986770} - System32\Tasks\{772D5A05-10CF-4F83-B7FF-50449595A190} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {25295743-4A2B-4DE4-BAAF-CB68CDD67F20} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK) Task: {259DC572-61BC-4AD6-9E8B-C923EAFDED0C} - System32\Tasks\{6E2256A9-06E6-492A-9BDA-A9C29E32EB5D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {266FA70B-E231-4D9C-83AA-3BEC0A98426F} - System32\Tasks\{F4EE1778-A367-46EF-BC3F-D8E0C3A49B9F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {2744910C-A4C7-415D-AE20-495C7B633C83} - System32\Tasks\{2BB6E531-3159-480F-87DD-030C892F6847} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {28D6E1FC-2FAA-408D-BE39-BDC48ECB3873} - System32\Tasks\{41262A51-8CAC-48EC-B84E-5FAC7869D517} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {2960C268-9EB8-42AC-92D0-4B5FCD43D237} - System32\Tasks\{F613FAA7-C557-407D-B13F-87966604FAEF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {2C4ACE87-B47F-4B58-85D9-8EADBA97204D} - System32\Tasks\{227ECF81-DD83-45BE-89CB-6F8CB1285893} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {2E214E7B-0AD7-4E5A-9954-9A074459AA92} - System32\Tasks\{C5B194E8-275F-4E82-A37E-7D25ACEF0B7B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {31AE4624-A841-4365-AF6D-A1F28C617C32} - System32\Tasks\{B335955B-EA25-4BD5-BD9E-27D57C69E36B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3268FDCB-A65D-47F6-A3B2-4E04370975F1} - System32\Tasks\{6F33F6F5-E172-410E-9B00-9E228C6AD3B2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {340507B2-93DA-4DF3-82EC-07DBC7DFF4FD} - System32\Tasks\{1D698A98-7AAD-4431-B849-9D6F333C9D24} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {346FA986-76B3-495D-9BB4-85599FEE10F3} - System32\Tasks\{E70CD3DC-1346-4214-94C7-62F66D6B0692} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3616F807-865E-41B6-BECB-936714DD80D3} - System32\Tasks\{1E178377-5D92-4E01-8B61-D71551EF13E9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {375CCC3B-BE23-48F4-BBCC-39BB31E1B99D} - System32\Tasks\{84C1795F-1BE5-4DC4-B374-6C832B1E1FAA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {390032E6-4C60-49ED-A306-C8819DE025CE} - System32\Tasks\{B8396447-7C55-40E1-8A0C-4DACA73201EF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {39A9CDE8-7EFF-4DFE-BA9A-FB70A4D857DA} - System32\Tasks\{90191F87-D18E-4B72-B53F-EDC77F0141E8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {39DBFB48-3512-48B7-B274-37D6A2A5B783} - System32\Tasks\{FD9BC258-8076-4C85-8AEA-EB6F6A6B3D8E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3ACB1832-0FBC-48A9-9748-3E9468A6AF6E} - System32\Tasks\{644AF149-26F0-4E9D-A180-A94E5FC8558A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3AF3123D-40A8-416B-9590-E850C90F828E} - System32\Tasks\{3969140B-047E-4C71-9C4C-94442DD1389F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3C25FCE5-FBD5-4733-84F8-40F2CD58C9A6} - System32\Tasks\{1988CAF9-18F2-4A58-972D-AC6A54905656} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3C65031D-2ACA-4C5C-B815-D9F0D2152972} - System32\Tasks\{90ED30BE-B4FE-4BEC-B171-738AB66C4A7A} => C:\Users\Christina Maren R\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe [2013-10-31] (AVAST Software) Task: {3EB47E28-5609-4458-A1E5-7858681C645E} - System32\Tasks\{D86345E0-82A7-46C5-8632-C8177331B133} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {41AD1049-C022-4AAE-90BF-7E6DE5E71E11} - System32\Tasks\{EC711C0D-183B-4B3C-B569-9DAF4B8C50E6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {41F0E758-CE09-4305-B90F-62264C90CFA5} - System32\Tasks\{82096931-4C58-4B14-98B6-FA1BE934D6C5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {431199EA-A369-48FE-AA54-32B015BCDC93} - System32\Tasks\{2EE93BCA-7E13-4F83-805D-0F3C7EF588D1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4925B716-F223-43BC-8B24-D34D6861407B} - System32\Tasks\{2A856108-BBE1-44B8-89C0-2708227883D0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4C60D082-463F-429C-B331-CD3CA70F63CB} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {4CCD1333-0C6E-4056-BE49-E8C6734CFD96} - System32\Tasks\{A87D016E-F7C7-4F90-85B9-7F3309D691C1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4CFF7805-7E0C-4971-A8ED-4DD0D4C50670} - System32\Tasks\{36D4AF7E-7366-40DD-8AA1-B6184666EF35} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4E2D9B2B-5EDA-446F-9D13-E7E48856D873} - System32\Tasks\{46B12118-0293-4FB1-93FF-E5EC852F5362} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4E931FBA-B2E5-47D8-924B-522432F54B5F} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: {4EF9B660-92E9-4ECE-B2C2-13426FDE25C8} - System32\Tasks\{DDBA0C7C-8824-4F02-AE4B-E4ECA1A1A08C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {508B9500-7C53-4976-8FFF-E44B68D7E8BE} - System32\Tasks\{7EF5202C-BB6C-4A56-83D1-4730ACF8CBA9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5165ADB9-5532-4171-846E-E2D7EDB845AC} - System32\Tasks\{035CD1DE-FE34-49D2-A42C-985E60064380} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {52F4E52B-8743-4A90-A6CA-CDD926E5B4F2} - System32\Tasks\{BA7D6CCF-FF11-4DFB-9F8F-162B1FB1BD20} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {53E137C3-8F4F-442B-8DE6-3F464615741F} - System32\Tasks\{E4726D79-E819-4D7B-947F-B9A9FEC22802} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {544A0263-B34D-4BFE-8D68-46AC21A3AD65} - System32\Tasks\{800F7556-3711-46BE-A4AF-FC79497A60A7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5654A659-3C5A-4020-9B8C-50CCFBE1DD6F} - System32\Tasks\{FFE68BB3-3784-4ECF-B9B4-8EBCE5C207F4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {566108FB-9C17-4110-A9AE-29CABC30C165} - System32\Tasks\{05C72E91-7DE3-4FFA-A449-0F16F2942688} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {57447289-0162-480D-96CC-A22F5E1C5D68} - System32\Tasks\{39E0009B-D750-4F20-9E70-C68E1545E33F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {57483E08-AD44-4ADE-AB7D-4A25F36A9957} - System32\Tasks\{D628FE57-4B0B-45E4-9A1C-F70B24F268B6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {57CAA212-1104-4D5D-9736-856B1AE92DAF} - System32\Tasks\{0FB04F52-780C-45FD-A99E-1AB75BF04963} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {59038A63-0F5E-4E2F-92F9-5E12E403F351} - System32\Tasks\{D5DC0D77-E393-4AFB-9E92-7EA2B1412360} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {59539D07-89CC-4D11-A21B-5F901EFF8BFC} - System32\Tasks\{2228C05B-704C-4095-8AB0-29D98A49ADF3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {595544CD-EB5F-4717-880D-0B1712A0042B} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {59D81D10-C396-4723-94C9-92D92AB21A28} - System32\Tasks\{8176BEDB-6002-4525-9B30-F6E918D9DEC1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5D0B998B-49DB-4769-B458-D76B71713FD7} - System32\Tasks\{8378B2ED-293E-4CF7-8037-56CFF2B41F1E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5FCBFC6E-F7E7-4357-AB1E-BD2AC87B2E33} - System32\Tasks\{A80B6F27-B18B-48AF-A1AD-F16FCEFD65F9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5FECF2C5-E37A-4962-8D9E-171721817E79} - System32\Tasks\{A3C2328A-FFD8-4E5E-BCB6-97CC1E0F6CFD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6153B87C-3BE3-430F-A210-00BB3D336A00} - System32\Tasks\{60DABC3D-AABA-4682-8109-FECFF4CED9DC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {61DD145E-AC25-40C8-ACAC-B6671B4BCCB6} - System32\Tasks\{217DCD82-8EE3-4550-AFB4-17D6A322F071} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {62318AED-4E49-4D83-A1B1-8939632D8EF6} - System32\Tasks\{892A673E-78BD-4F82-A49A-6DA94699661A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {63EDECE1-44F7-45C7-92B6-BF7B2D3BF1CD} - System32\Tasks\{8E9A3AF9-FF8A-484F-B976-BCA724FB930B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {64201B07-4B83-4F2F-A0B9-B342B0A4D5AE} - System32\Tasks\{F759C602-46AF-476B-97C7-BBBDE5686626} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {666D3E6C-573A-4AC0-9C32-B3320855A42B} - System32\Tasks\{E67DD114-AC23-48CE-A19E-EBDBD90E41E2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {69804C87-4BC4-4C2E-B0CC-165F7FEA6A46} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS) Task: {6988BB09-C3AB-4437-990A-48142877CC94} - System32\Tasks\{15315535-85CC-4BB5-9EAC-5815F9669126} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6A5B7410-CCD8-4513-9243-D301C0CA5AD1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {6A5F56E0-E271-4DBF-AF02-3EF0C77F2405} - System32\Tasks\{CF8E5DB3-E23D-4669-9E49-5DE79D3D82E3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6B01B163-A9FC-433C-B33D-CC22C7F6780E} - System32\Tasks\{3443B3C5-809C-436A-904D-33C784764478} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6C483818-31CD-4545-ADC0-2CAF891518A2} - System32\Tasks\{F02D00FB-B8A5-4D8C-9ED2-BD124D868692} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6C4A42A7-D855-4BB1-AFB4-49CF03C76E18} - System32\Tasks\{A5F9B302-124D-434D-B8CE-1E61D1B5F8AA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6C7FACB0-4BB8-4009-9866-5219EB5DF178} - System32\Tasks\{E6A413AD-6E75-4EB4-80F0-5DD27A06358D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6D5D9525-6811-44B4-A6E3-D1BABDF5D61F} - System32\Tasks\{19302274-A815-41E2-981B-358A9261CEFD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6F43306D-2A39-47A0-BBF3-C5FF794BD386} - System32\Tasks\{47D7BA31-DF29-4EFE-8945-3C62F333CA75} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {6FEC4EE7-C41C-413F-B639-42B3F5EEEDC2} - System32\Tasks\{240A334F-D949-42CB-B0B8-76FF27FCE16C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7011F323-FA52-444F-9FD2-EBE5738547E4} - System32\Tasks\{8126E1ED-736C-443F-8E28-00E7F4931846} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {726008AE-563B-44F1-A5A6-220042D3BE40} - System32\Tasks\{1C4F1D00-E89A-4A0E-9947-F399C0B932DB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {73E54753-7BB5-4122-98F0-F5860EB2D213} - System32\Tasks\{1687F846-A15F-454E-A739-C977E3FA1594} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {79A4AD02-9069-484D-8528-B7E32E679725} - System32\Tasks\{0F399F0C-A665-4D21-8DDB-533DA5F09298} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7BDD8B16-FF01-488F-B5FD-318F75AC24CC} - System32\Tasks\{CE13E26E-3B4D-40E3-84C7-56D1E396AE1E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7DCD9EE7-5B6E-407A-9C7C-651AB876685A} - System32\Tasks\{6273AFF2-5714-4661-BF47-8FA4B70888C4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7E695853-79EA-4332-8A9D-DEE63B9A20CC} - System32\Tasks\{48C1BBB8-7221-48CF-928C-EC841EAC289A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7EFA625C-9134-442F-91AC-BE71326E23D4} - System32\Tasks\{0D324B12-8E9F-460C-A3AE-A53B2F233AE0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {7FBDF05D-C652-4435-8E17-6BBADCD07AF4} - System32\Tasks\{AA6F9F4D-B555-4F6B-8C83-BCC1B47E62D0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {80A04D2E-24A3-4B1C-BC03-DDB1B1247743} - System32\Tasks\{E94435B5-B7C7-4EEA-94EF-58A4E2120CDF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {80B65745-41C1-4E73-86F0-F6F2AEBE0E9D} - System32\Tasks\{B9CE8C51-39CD-4342-A6F8-79DAE639A39E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {81A1F1F3-045A-4BB5-9FC4-EC54B8DECB1E} - System32\Tasks\{CF9C6B54-38D3-49B7-86EA-D9F0D0F8E17E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {84076024-5B7F-4CEB-AB8F-E14FFEE18175} - System32\Tasks\{6709C7BF-6CC2-4206-93E0-1CEF660502BD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {844D8FC7-469D-44B2-BD18-20D185B2BB78} - System32\Tasks\{28971330-855D-4EEF-A443-649A32F0D10D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {84538636-9C9F-41AF-8668-04BF7498B572} - System32\Tasks\PandaUSBVaccine => C:\Program Files (x86)\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] () Task: {84C2633A-2CE5-4595-A746-BC9F1B7E8D0F} - System32\Tasks\{C02E1490-5E71-433D-ACEF-1C32615C5B9C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {84EFBC51-C5D7-48F8-B894-857F414DBB74} - System32\Tasks\{9FC94B47-C51A-4E67-9B55-91450B30BDC0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8503C7BC-6726-4EE7-BE25-E8586B0F318F} - System32\Tasks\{57924561-0ABE-4337-8FD4-4A1853288374} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {85A8F832-10F1-419E-9080-053DC7431923} - System32\Tasks\{1162C06B-2136-4348-8950-AD5F1D0A63B4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {85D27317-EF39-4C01-B2B0-8DD1D80768CE} - System32\Tasks\{48696A54-F10C-4C56-9951-B7F452E1D312} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {85E77937-238A-4B5B-B749-825F43325133} - System32\Tasks\{12E716F4-BDB2-4B9D-88DC-B2455D48D3AD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {868AAC0D-E58E-41B9-B134-12053C9EC5D8} - System32\Tasks\{77ECDF74-BB89-4CDE-BF0E-35B8E7645914} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {86EA2B41-163E-421A-A25F-CC1F932BDCC8} - System32\Tasks\{62DE1103-5D6A-4AEC-8D55-EF818007B453} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {878F3C8F-6210-4199-B72B-00AD4108A0B5} - System32\Tasks\{52462C6D-77EF-4B0C-8457-75FF9C21497C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {88806592-C54E-4847-84F5-FB0B6278D227} - System32\Tasks\{3EC2E3F9-D9EA-4DEC-AA61-E24308469809} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8AC591B6-DF2D-447F-99AD-26855271FE67} - System32\Tasks\{B5D1C085-58D7-409D-902C-D1053B5503D2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8BF5F4D8-AADC-4D3E-8F5F-CA026AF458A4} - System32\Tasks\{898479F1-31A2-4EAD-9A8E-CA2602836EE5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8BFDA221-E6BC-408F-99BD-62D85AFB12E0} - System32\Tasks\{2216AC00-F7BF-4928-A6D1-2CC6C9DB6EC1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8C0943E4-1E5F-493B-8150-46A61F9D4206} - System32\Tasks\{20697777-F83A-4243-9D55-2D17425BEB4C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8D114E29-46CD-4E17-BCBF-A68007561FCD} - System32\Tasks\{CE5D1FD2-ECE2-4B55-A7BE-BE32CF0BA711} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8DE1667F-5264-4FF9-A133-D4C7C0C7EF03} - System32\Tasks\{F57C438F-5022-459A-947D-08718FC78742} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8DF0682B-2E1E-4D5D-926E-F5E51C97A928} - System32\Tasks\{33FE496F-1CD3-4226-8DDB-F7BB59197F8D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8EB4984C-0851-47C4-9D96-DEB15D715161} - System32\Tasks\{983E6E11-BDB0-4EBB-B0C4-E6C04B5294F0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8F678695-DE7A-4443-BB29-E7101D54D42A} - System32\Tasks\{3BA564B5-ECDD-468E-99ED-58B2E4082ABE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9053109F-2969-4A5F-B99D-759B07C9F161} - System32\Tasks\{0CAA4CF6-6CE5-4DB2-96BF-AEDD37E275B4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {91510620-6020-4D7C-A25F-3C2B3A4170C8} - System32\Tasks\{177A3480-D2F2-4E43-A631-86C318B3C33C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {91B2858C-CBBD-467C-A358-07CF73A6F112} - System32\Tasks\{D27BA931-1DB4-4F36-BC0C-3B331DFD0275} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {930A7EF0-8F80-4AF9-A368-3F1B32D61535} - System32\Tasks\{228E0034-114C-4652-96A2-92D031C67FAC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {97140EB0-879A-4221-BAA2-15EBED65134C} - System32\Tasks\{F97802DC-3374-4662-96CC-F095E9CA57D5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9893BF10-8E88-4035-8B50-EE5B75701F09} - System32\Tasks\{B2C81616-FC01-4102-B5F9-EF7F5F4271AB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {99A59F88-2474-4D67-9AD6-8D18FB7EAAB1} - System32\Tasks\{750DC8D5-B6F5-4F00-BE17-FE6B51239153} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {99B28FC4-85CB-4553-80ED-04BD574E9910} - System32\Tasks\{95BBA5FE-6B05-4CD2-B16B-354F55A3B187} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9C4D01CB-E2C2-4A6F-93B0-1FC736311C24} - System32\Tasks\{1189B055-1048-46E3-8F02-F2568AF90F91} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9E558935-155E-41E4-9929-56400895C988} - System32\Tasks\{D824FE5B-660E-47DB-818D-ED775441849F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A450F29B-B84B-4F24-AD93-D89DEFEA2C06} - System32\Tasks\{6AB2F423-C2B7-450C-A1F0-EC3DD05E29FB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A63C98D0-CBE8-4E38-AA2B-B9CD89708EB0} - System32\Tasks\{4D7878DA-0D40-410F-ABE0-BC07319682C0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A7199FAA-51F6-4CF7-AB31-2342BF4243C0} - System32\Tasks\{49605E2F-DAE9-4905-8BF7-651DF7F60693} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A75D3AE8-93D5-480C-AC9C-B57A194C7F11} - System32\Tasks\{0D9444D4-59F2-453D-B774-D6F11E64E415} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A7B7802E-28F8-4187-8DBB-94A61F9046A4} - System32\Tasks\{31703DC6-B6C2-4ED0-ADC5-605D1A82FD5B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A7DAD5F7-02B9-4960-827A-DD3776D7E860} - System32\Tasks\{55A3A05B-3223-4149-A2C0-DF43C720686D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A89F8872-EF90-47B9-9608-2C92D99F1F1A} - System32\Tasks\{4D9D0D13-7639-4574-AAE1-512DAF7DA560} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AA1CF2AB-AB72-42D6-B62B-6048D713FC6A} - System32\Tasks\{949642B9-4831-40FB-90A6-292E3D39C1E6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AA6B9DD2-E82A-4EF3-B425-B1D383ED167C} - System32\Tasks\{CC3923DA-D71F-43AF-863B-5ABB3ABA0775} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AD054644-6B22-47C2-ADA7-85FBED8061CC} - System32\Tasks\{59095751-E04D-4C85-87D8-17BA5A795647} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AEAF516A-D932-44D2-8665-992A32AC499D} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {AF815C9C-CE2F-4392-B77A-70BDF0E5B6B9} - System32\Tasks\{0400B23E-058D-4FBF-B43F-040E2FE16F79} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B0F3595E-1C1E-40A7-B65B-B7BA545776E8} - System32\Tasks\{191B1F18-1E38-4854-ACE5-3264A22BC4CC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B149D4BD-DFB4-4AB8-8FDE-A0CCA36D415B} - System32\Tasks\{CA2BF6EB-4122-4727-9D0C-C68C127D364E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B23DD8F3-9FC5-4920-BE11-84D09D31192B} - System32\Tasks\{164DB455-FEB5-4B34-A97B-3F9559741D68} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B3A4D122-B0FB-4F2C-87ED-A5A4BD6D95C7} - System32\Tasks\{EB3AFE32-3796-4470-91E5-284EC41C67CB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B424F409-A68C-4617-9BE0-81688EFA94D6} - System32\Tasks\{BA336F2F-638A-490F-B045-6AD017CF11ED} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B69E319B-EF45-479C-B559-69E1B6DFAE16} - System32\Tasks\{6D05ECE0-ABF7-4AA4-9706-51A9FE378BB6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B7860344-A75B-41C8-A8D5-1E13F2205F39} - System32\Tasks\{B85997DF-3F4C-4D58-AF01-139BD9C98D50} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B7EE4298-AE75-4BE5-AE52-DB7A0C195AD9} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] () Task: {B9B18774-2DF9-431F-81D7-5B91C0C6D0D1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-26] (Google Inc.) Task: {BB6440E5-F382-44AD-A235-3ED562FD7118} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-26] (Google Inc.) Task: {BE5F9B03-C6A4-42E1-BF41-594C43EE0BD1} - System32\Tasks\{B693EF54-879F-4457-8214-0E62533EB16F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C2255484-EAFE-461C-B260-3853731098B8} - System32\Tasks\{F1366A62-99F4-48B5-A68F-6F4F24231445} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C3D5C242-7FA9-4427-8C81-83D08FF813CB} - System32\Tasks\{8BD73FC9-0826-4C63-8308-9F7BF369F89D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C4042DFF-220F-4A49-A1A8-DDDC7DF8A05B} - System32\Tasks\{F7D0EF2D-58EE-477F-B9D6-40B6687B1814} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C42FDC63-4531-4798-99B9-0DD6A3C3F196} - System32\Tasks\{ADA7DA06-CF5B-4670-9CFA-1AB376CD0696} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C4D747B7-E3CF-43B2-89C5-91C2187217F4} - System32\Tasks\{48C3BA08-403D-4A3A-99E5-43D823FAE046} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C85E75D2-4B4B-458C-B31E-B33F8354AF85} - System32\Tasks\{44FDA611-2311-4610-9853-7570031D0B1C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C9EB8EC3-AB96-4A1A-AA03-7B2564722A94} - System32\Tasks\{1CBBA1E2-553C-4135-925D-A56A12723A92} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CB660D61-CA3A-4D7C-8E62-511FE4E205B2} - System32\Tasks\{2D71129E-E49B-4050-B0EF-A821582A59C7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CCE6CBF9-C7F8-4EFA-BD84-624BD8E708B8} - System32\Tasks\{DB0228A7-6DBF-432B-AE3F-D150B134382B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CDCD50F3-A7FD-4507-8401-1E07395290AB} - System32\Tasks\{695911EC-1504-4F9C-A79D-412AACAFD337} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CE9ECAA1-BCF4-4642-BB6D-4D3313688775} - System32\Tasks\{27DBEED7-2FB3-40C6-BD69-3A1A0EEE8A3D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {D19FD417-2826-4502-A543-F0F882E98B2F} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-04-03] (ASUSTek Computer Inc.) Task: {D1A13256-ED94-4408-A95F-461A044193EE} - System32\Tasks\{C7D62223-4FC6-4600-8BC0-8F625FA724E2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {D1F7FDC8-F47A-4033-BB6E-7BD1E3994598} - System32\Tasks\{6B5DE8FE-5C0F-4901-B23A-65333D46CE7C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {D5D1AF83-4383-47D9-8651-090CA54FA77F} - System32\Tasks\{A94963FE-FF06-45BD-B229-7140954B8CB6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {D9B99920-A734-4066-94DF-6871BC625F10} - System32\Tasks\{C0EC8212-D2BF-4B0D-91BB-B1797055CC3F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DA6F74FE-CF2B-4372-9413-8D4851C4BEA6} - System32\Tasks\{C5ED1157-E580-4DE1-BD6C-068E4FFBC2DF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DBBD89D1-DFAB-44E8-859B-BF751BA5F091} - System32\Tasks\{F039868D-2C7F-40C4-9C29-51AF95310D49} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DBED63CD-6706-4723-8B83-0611EB4DDD30} - System32\Tasks\{FD670DC8-481C-4132-A4E9-82E12B26E761} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DC304DF8-396A-4251-8234-D940FEABF18E} - System32\Tasks\{3DF41DE3-7D51-4633-8375-55593A6B6AF8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DD60DC0B-D775-4E86-9A37-41C5A1032446} - System32\Tasks\{097BAD95-8541-4B5A-9967-0C9C2E2A9459} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DDD32AC5-E919-46FC-A4E9-2F575B571A0B} - System32\Tasks\{F70C6D38-6DEA-413B-A4A7-D1DAACC2D7C0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DDD40F22-7612-401C-8FC8-39AAC8C7B94C} - System32\Tasks\{2EF976B8-8BA0-4C83-B728-CB01813AFF30} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {DF586A9D-5BFC-4FAF-ADF6-B4E1E0749CBE} - System32\Tasks\{B067EFF3-8130-49B6-9935-DA34EC8B18F5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E0C6D4DD-B4D2-48D5-8158-52CCDBDF7BE1} - System32\Tasks\{D3941A39-F745-4294-BC98-CE1661FC6547} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E1AB0704-AA6F-48C2-A87A-9AB0CF2526EA} - System32\Tasks\{103D0387-739A-4BC7-AB77-C1F270698507} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E2BA0C93-B6E7-40A0-B4C4-1C5EE7C8D62A} - System32\Tasks\{42F2FD00-9419-4D7C-BA22-58D0B4C88EBB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E32F1FF4-F7F3-4F91-BA6E-43ECED5BAD90} - System32\Tasks\{C72E62A4-22D9-413F-B34B-7AACD123D07E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E5C30882-B1A0-457B-A92A-4A1147C10CEB} - System32\Tasks\{6840AFAE-E85A-4951-816A-AB695C844563} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E5E6DE78-82FB-4F8B-9634-69D2BFDE3CB6} - System32\Tasks\{3B4F9FC5-0782-4011-A6E5-54EDB1675C73} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E655A113-8297-40BC-BB80-9D8E18C0AA45} - System32\Tasks\{0EEAAD34-19BE-43F0-8CCD-FD83BD82BEE3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E65EE36F-4CF6-49C5-9117-D42E482B75C5} - System32\Tasks\{301BD591-CFAE-4E72-B465-CC86C46D9B17} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E73E3EFF-C57A-4492-B3F5-3B40280A6B4D} - System32\Tasks\{24AA084E-AAA2-42FE-8F55-FAE64D63B012} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E9320F83-0FC0-44EC-AD8F-473BB740AC47} - System32\Tasks\{5A58A535-5A30-4B8E-9EB1-5EFDCC607FD1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E9811937-C3DD-4E94-BCFD-6B20BDC42AA7} - System32\Tasks\{F987AC36-5D01-4E49-B7A5-B997C5C19C3F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EB0E735D-172C-425A-9F38-D08A4B05F79B} - System32\Tasks\{F5E79996-C170-4086-99C0-A6FBE5E0AA1D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EB22AF0A-D5AB-49AA-B9E8-E3B03E36EAB5} - System32\Tasks\{481AC641-9BD7-4D3C-BB10-2759A49541A4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {ECF2577A-52CD-437A-82DD-E6EDBBF5A300} - System32\Tasks\{1BB48CAC-3015-4E8C-987F-9C936BFE7BEA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {ED8CB67F-51EF-4EF9-A2E7-ED8976F5F379} - System32\Tasks\{F0FC2ABD-601D-4D2F-9044-7F734E76CD92} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EDA80D2F-07AA-400E-9354-DE5591116E92} - System32\Tasks\{B0D717BF-CB4F-414A-A9C4-FB4EBF7195A7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EF6AEFCE-82F7-478C-87F4-4C0737A7423B} - System32\Tasks\{261F6AAD-43B3-4B87-B64B-F1B608E6A1F1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EF72663C-C7D0-4D37-9B35-739485674763} - System32\Tasks\{75DA428B-937E-4737-8901-6B8E9D4B180F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EF935F79-ECDF-427F-98BC-2D7F7B7908E4} - System32\Tasks\{3110578A-BC7B-4485-BB52-FC6B3031EB05} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F1F60DB3-9DCB-4EC9-A135-63A6D44DA5BA} - System32\Tasks\{3A59247A-FD93-4335-ABC4-A55E2383E120} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F6EC7C4D-CA8B-403C-8BA4-F50D5E4E9FF8} - System32\Tasks\{2E952AE4-B626-428D-B1D4-06216083E056} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F930B0FF-E6F6-4C75-BF37-56E5644FEDF5} - System32\Tasks\{4C910DB7-CF71-4625-8CEF-6439882947A0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F97D2424-0B83-479C-9C60-047F3C377001} - System32\Tasks\{CF75BE27-DCE3-47E8-A1B4-C8A98863616E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F98DD4AE-E5B0-4CE7-BD50-56CDCEAD8F2E} - System32\Tasks\{74E4C0AA-44E4-4652-88B1-EFA5E74BD2AF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F9D25730-F402-4238-A0DA-F635DA3DA741} - System32\Tasks\{C64D7C0D-8C56-4FC3-8399-F0BF98D72FDD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {FAA37E12-E48A-470F-A9AD-67C498A9C2DB} - System32\Tasks\{635A7DBB-F7EF-44FF-B9F5-1C06B2C9CC98} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {FC158403-9EE6-4141-BA15-F3AB13B76724} - System32\Tasks\{8FC9014E-4053-4261-8517-5056C89D6DCC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {FCE3B6E1-AE50-4805-BA03-0CB996DC225C} - System32\Tasks\{3F4AC976-9CF7-40FB-AF4B-24798C744422} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {FCFE8054-77C2-4315-A3B6-65453E453F1A} - System32\Tasks\{5D193E50-73FA-4ACC-A4C8-EE5D2B615B90} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: C:\Windows\Tasks\AIRecoveryRemind.job => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-03-05 17:21 - 2010-03-05 17:21 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll 2010-01-11 18:27 - 2010-01-11 18:27 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll 2010-05-06 02:22 - 2010-05-06 02:22 - 00108544 _____ () C:\Program Files\P4G\OvrClk.dll 2008-10-01 07:02 - 2008-10-01 07:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2010-03-05 17:21 - 2010-03-05 17:21 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll 2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2013-10-31 19:48 - 2013-10-10 19:14 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2012-11-28 14:13 - 2012-11-28 14:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-11-28 14:13 - 2012-11-28 14:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2010-02-23 23:14 - 2010-02-23 23:14 - 00071680 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll 2010-02-23 23:11 - 2010-02-23 23:11 - 00076288 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll 2010-02-23 23:12 - 2010-02-23 23:12 - 00186880 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll 2010-02-23 23:14 - 2010-02-23 23:14 - 00050688 _____ () C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll 2013-10-21 13:37 - 2013-10-09 01:01 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libglesv2.dll 2013-10-21 13:37 - 2013-10-09 01:01 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libegl.dll 2013-10-21 13:37 - 2013-10-09 01:02 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll 2013-10-21 13:37 - 2013-10-09 01:02 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll 2013-10-21 13:37 - 2013-10-09 01:01 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:2F370DA6 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2013-11-01 22:32:35.870 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-11-01 22:32:35.624 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 42% Total physical RAM: 3884.48 MB Available physical RAM: 2216.29 MB Total Pagefile: 7767.13 MB Available Pagefile: 5516.57 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:74.52 GB) (Free:14.2 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Data) (Fixed) (Total:204.03 GB) (Free:184.4 GB) NTFS Drive e: (STAT_ LOKAL 2011) (CDROM) (Total:0.87 GB) (Free:0 GB) CDFS Drive f: () (Removable) (Total:7.39 GB) (Free:3.33 GB) FAT32 Drive g: (CMR_DATEN) (Removable) (Total:7.52 GB) (Free:1.2 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: E0C5913D) Partition 1: (Not Active) - (Size=20 GB) - (Type=1C) Partition 2: (Active) - (Size=75 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=204 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 7 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=7 GB) - (Type=0B) ======================================================== Disk: 2 (Size: 8 GB) (Disk ID: 2C6B7369) No partition Table on disk 2. ==================== End Of Log ============================ |
04.11.2013, 09:19 | #10 |
/// the machine /// TB-Ausbilder | USB-Stick: Ordner auf einmal versteckt & teilweise .exe DateienESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
04.11.2013, 23:07 | #11 |
| USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien Schrauber, vielen Dank schon mal für deine Hilfe. Werde die letzten Schritte allerdings erst am Freitag durchführen können, da ich bis dahin (ohne Laptop) unterwegs sein werde. Freitag bzw. Samstag gibt es dann auch Rückmeldung |
05.11.2013, 14:59 | #12 |
/// the machine /// TB-Ausbilder | USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.11.2013, 21:08 | #13 |
| USB-Stick: Ordner auf einmal versteckt & teilweise .exe DateienCode:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=0f9ee88ab2b81d47b867a02668dc9ceb # engine=15826 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-11-10 08:00:34 # local_time=2013-11-10 09:00:34 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1799 16775165 100 94 9255 2684792 5643 0 # compatibility_mode=5893 16776573 100 94 375477 135743484 0 0 # scanned=185228 # found=0 # cleaned=0 # scan_time=8692 |
11.11.2013, 11:09 | #14 |
/// the machine /// TB-Ausbilder | USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien dann den Rest bitte
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.11.2013, 11:47 | #15 |
| USB-Stick: Ordner auf einmal versteckt & teilweise .exe DateienCode:
ATTFilter Results of screen317's Security Check version 0.99.76 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 10 Flash Player out of Date! Adobe Reader 9 Adobe Reader out of Date! Google Chrome 30.0.1599.101 Google Chrome 30.0.1599.69 ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by Christina Maren R (administrator) on FREIER_GEIST on 17-11-2013 11:36:54 Running from C:\Users\Christina Maren R\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe () C:\Program Files (x86)\XSManager\WTGService.exe (4G Systems GmbH & Co. KG) C:\Windows\service4g.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (ATK) C:\Program Files\P4G\BatteryLife.exe (ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (ASUS) C:\Windows\AsScrPro.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (4G Systems GmbH & Co. KG) C:\Windows\starter4g.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe (asus) C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Users\Christina Maren R\Downloads\SecurityCheck.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.) HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] () HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.) HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation) HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [GoogleChromeAutoLaunch_5F1959BD232E006F56CACFDD116D8381] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752 2013-10-09] (Google Inc.) HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\CyberLink\Shared files\brs.exe [75048 2010-02-24] (cyberlink) HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.) HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.) HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-08-26] () HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [7350912 2010-02-04] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-01-05] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [starter4g] - C:\Windows\starter4g.exe [157968 2009-06-17] (4G Systems GmbH & Co. KG) HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-05-10] (Hewlett-Packard) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-10] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [95848 2010-03-27] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll [90216 2010-03-27] (NVIDIA Corporation) Startup: C:\Users\Christina Maren R\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.) BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Chrome: ======= CHR HomePage: hxxp://www.google.com CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Extension: (YouTube) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Gmail) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-10-10] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.) S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [111616 2013-11-12] (Microsoft Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] () R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [304592 2009-06-22] () R2 XS Stick Service; C:\Windows\service4g.exe [125200 2009-06-17] (4G Systems GmbH & Co. KG) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-10-10] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-10-10] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-10-10] (Avira Operations GmbH & Co. KG) S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2011-01-11] (Mobile Connector) S3 cmnsusbser; C:\Windows\SysWow64\DRIVERS\cmnsusbser.sys [117888 2008-10-31] (Mobile Connector) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] () R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] () R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-02-24] (CyberLink Corp.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] U3 tmlwf; U3 tmwfp; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-17 11:28 - 2013-11-17 11:28 - 00891184 _____ C:\Users\Christina Maren R\Downloads\SecurityCheck (1).exe 2013-11-17 11:27 - 2013-11-17 11:28 - 00891184 _____ C:\Users\Christina Maren R\Downloads\SecurityCheck.exe 2013-11-17 11:23 - 2013-11-17 11:23 - 00003088 _____ C:\Windows\System32\Tasks\{55B6EFEC-E765-4AE3-9A41-C5D09DD8B938} 2013-11-12 22:23 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-12 22:18 - 2013-11-12 22:18 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-12 22:18 - 2013-11-12 22:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-12 22:18 - 2013-11-12 22:18 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-12 22:18 - 2013-11-12 22:18 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-12 22:18 - 2013-11-12 22:18 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-12 22:18 - 2013-11-12 22:18 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-12 22:18 - 2013-11-12 22:18 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-12 22:18 - 2013-11-12 22:18 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-12 22:18 - 2013-11-12 22:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-12 22:18 - 2013-11-12 22:18 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-12 22:18 - 2013-11-12 22:18 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-12 22:16 - 2013-11-12 22:23 - 00009768 _____ C:\Windows\IE11_main.log 2013-11-12 22:15 - 2013-11-12 22:15 - 00003088 _____ C:\Windows\System32\Tasks\{D0EB07EE-9AF6-4999-A8F6-514C015651DC} 2013-11-12 18:56 - 2013-11-12 18:57 - 00000000 ____D C:\Users\Christina Maren R\Desktop\seltsame Dateien 2013-11-12 18:46 - 2013-11-12 18:46 - 00155899 _____ C:\Users\Christina Maren R\Downloads\4. Sitzung Einführung BRD EU.pptx 2013-11-12 18:44 - 2013-11-12 18:44 - 00170925 _____ C:\Users\Christina Maren R\Downloads\2. Sitzung Einführung BRD EU (1).pptx 2013-11-12 18:43 - 2013-11-12 18:43 - 00167506 _____ C:\Users\Christina Maren R\Downloads\3. Sitzung Einführung BRD EU.pptx 2013-11-12 18:33 - 2013-11-12 18:33 - 00128541 _____ C:\Users\Christina Maren R\Downloads\(1) 14.10 (1).2013 2013-11-12 18:31 - 2013-11-12 18:31 - 00128541 _____ C:\Users\Christina Maren R\Downloads\(1) 14.10.2013 2013-11-10 22:48 - 2013-11-10 22:48 - 00003088 _____ C:\Windows\System32\Tasks\{9D27886F-B7E7-4E89-BED1-8C50FF7E0EDC} 2013-11-10 18:32 - 2013-11-10 18:32 - 00003088 _____ C:\Windows\System32\Tasks\{0D8E0A8E-31B5-4BC3-9B2D-C9ACC07D9FA2} 2013-11-10 18:31 - 2013-11-10 18:31 - 00000000 ____D C:\Program Files (x86)\ESET 2013-11-10 18:30 - 2013-11-10 18:31 - 02347384 _____ (ESET) C:\Users\Christina Maren R\Downloads\esetsmartinstaller_enu.exe 2013-11-07 11:54 - 2013-11-07 11:54 - 00003088 _____ C:\Windows\System32\Tasks\{783A7A63-CBD2-4DED-A29C-1EF0FD84DAEA} 2013-11-07 11:21 - 2013-11-07 11:21 - 00003088 _____ C:\Windows\System32\Tasks\{0347E89A-B28A-423B-9534-F2E2A7C15153} 2013-11-06 13:35 - 2013-11-06 13:35 - 00003088 _____ C:\Windows\System32\Tasks\{F1FF6BBB-09B8-43E6-83CA-4AABC585FBC4} 2013-11-06 12:44 - 2013-11-06 12:44 - 00003088 _____ C:\Windows\System32\Tasks\{BA4728AA-34EC-4809-80C8-ACF3BB5F67E1} 2013-11-05 10:30 - 2013-11-05 10:30 - 00003088 _____ C:\Windows\System32\Tasks\{F997992A-531E-45F2-ABF7-E45C1E24C568} 2013-11-03 17:11 - 2013-11-03 17:11 - 00000000 ____D C:\Windows\ERUNT 2013-11-03 17:10 - 2013-11-03 17:11 - 01033335 _____ (Thisisu) C:\Users\Christina Maren R\Downloads\JRT (1).exe 2013-11-03 17:09 - 2013-11-03 17:10 - 01033335 _____ (Thisisu) C:\Users\Christina Maren R\Downloads\JRT.exe 2013-11-03 16:57 - 2013-11-03 16:58 - 01060070 _____ C:\Users\Christina Maren R\Downloads\adwcleaner (1).exe 2013-11-02 23:13 - 2013-11-02 23:13 - 00003088 _____ C:\Windows\System32\Tasks\{C0EC8212-D2BF-4B0D-91BB-B1797055CC3F} 2013-11-02 21:33 - 2013-11-03 17:06 - 00000000 ____D C:\AdwCleaner 2013-11-02 21:32 - 2013-11-02 21:32 - 01060070 _____ C:\Users\Christina Maren R\Downloads\adwcleaner.exe 2013-11-02 19:02 - 2013-11-02 19:02 - 00003088 _____ C:\Windows\System32\Tasks\{CE13E26E-3B4D-40E3-84C7-56D1E396AE1E} 2013-11-02 19:02 - 2013-11-02 19:02 - 00001107 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-02 19:02 - 2013-11-02 19:02 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Malwarebytes 2013-11-02 19:01 - 2013-11-02 19:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-02 19:01 - 2013-11-02 19:01 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-02 19:01 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-11-02 19:00 - 2013-11-02 19:01 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christina Maren R\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-01 23:54 - 2013-11-01 23:54 - 00152704 ____H C:\Windows\SysWOW64\mlfcache.dat 2013-11-01 22:38 - 2013-11-01 22:38 - 00021366 _____ C:\ComboFix.txt 2013-11-01 22:19 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-11-01 22:19 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-11-01 22:19 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-11-01 22:19 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-11-01 22:18 - 2013-11-01 22:38 - 00000000 ____D C:\Qoobox 2013-11-01 22:18 - 2013-11-01 22:35 - 00000000 ____D C:\Windows\erdnt 2013-11-01 22:17 - 2013-11-01 22:17 - 05143186 ____R (Swearware) C:\Users\Christina Maren R\Downloads\ComboFix.exe 2013-11-01 22:15 - 2013-11-01 22:15 - 00003042 _____ C:\Windows\System32\Tasks\PandaUSBVaccine 2013-11-01 22:15 - 2013-11-01 22:15 - 00000000 ____D C:\ProgramData\Panda Security 2013-11-01 22:15 - 2013-11-01 22:15 - 00000000 ____D C:\Program Files (x86)\Panda USB Vaccine 2013-11-01 22:14 - 2013-11-01 22:14 - 00848856 _____ (Panda Security ) C:\Users\Christina Maren R\Downloads\USBVaccineSetup.exe 2013-11-01 22:14 - 2013-11-01 22:14 - 00848856 _____ (Panda Security ) C:\Users\Christina Maren R\Downloads\USBVaccineSetup (1).exe 2013-11-01 11:26 - 2013-11-01 11:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files\iTunes 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-11-01 00:08 - 2013-11-01 00:08 - 00003088 _____ C:\Windows\System32\Tasks\{55A3A05B-3223-4149-A2C0-DF43C720686D} 2013-10-31 23:59 - 2013-10-31 23:59 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Desktop\FRST64.exe 2013-10-31 23:36 - 2013-10-31 23:37 - 00045427 _____ C:\Users\Christina Maren R\Downloads\FRST.txt 2013-10-31 23:35 - 2013-10-31 23:37 - 00064259 _____ C:\Users\Christina Maren R\Downloads\Addition.txt 2013-10-31 23:33 - 2013-10-31 23:33 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST64.exe 2013-10-31 23:33 - 2013-10-31 23:33 - 00000000 ____D C:\FRST 2013-10-31 23:32 - 2013-10-31 23:32 - 01089445 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST.exe 2013-10-31 23:19 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files\iPod 2013-10-31 22:34 - 2013-10-31 22:34 - 00003216 _____ C:\Windows\System32\Tasks\{76C0DB9E-0DA2-43FF-8932-A7E8E0DF8E6E} 2013-10-31 22:33 - 2013-10-31 22:33 - 00388608 _____ (Trend Micro Inc.) C:\Users\Christina Maren R\Downloads\HijackThis.exe 2013-10-31 22:33 - 2013-10-31 22:33 - 00015357 _____ C:\Users\Christina Maren R\Downloads\hijackthis.log 2013-10-31 20:00 - 2013-10-31 20:00 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Avira 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-10-31 19:51 - 2013-10-31 19:51 - 00002064 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\ProgramData\Avira 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\Program Files (x86)\Avira 2013-10-31 19:48 - 2013-10-10 19:14 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-10-31 19:48 - 2013-10-10 19:14 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-10-31 19:48 - 2013-10-10 19:14 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-10-31 19:48 - 2013-10-10 19:14 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-10-31 19:43 - 2013-10-31 19:43 - 00003058 _____ C:\Windows\System32\Tasks\{90ED30BE-B4FE-4BEC-B171-738AB66C4A7A} 2013-10-31 19:41 - 2013-10-31 19:42 - 85269544 _____ (AVAST Software) C:\Users\Christina Maren R\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe 2013-10-31 19:37 - 2013-10-31 19:38 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de_14b411.exe 2013-10-31 19:28 - 2013-10-31 19:29 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de.exe 2013-10-30 12:59 - 2013-10-30 12:59 - 00000000 ____D C:\Program Files 2013-10-29 13:01 - 2013-10-29 13:01 - 00170925 _____ C:\Users\Christina Maren R\Downloads\2. Sitzung Einführung BRD EU.pptx 2013-10-28 15:46 - 2013-10-28 15:46 - 00003088 _____ C:\Windows\System32\Tasks\{8FC9014E-4053-4261-8517-5056C89D6DCC} 2013-10-28 14:25 - 2013-10-28 15:42 - 00092261 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr (1).pptx 2013-10-28 10:21 - 2013-10-28 10:21 - 00003088 _____ C:\Windows\System32\Tasks\{26FBFD2A-0450-47A4-8450-F6853D2C1E08} 2013-10-27 23:06 - 2013-10-27 23:06 - 00003088 _____ C:\Windows\System32\Tasks\{8BD73FC9-0826-4C63-8308-9F7BF369F89D} 2013-10-27 21:52 - 2013-10-27 21:52 - 00067489 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr.pptx 2013-10-27 20:54 - 2013-10-27 20:54 - 00680448 _____ C:\Users\Christina Maren R\Downloads\empiri-Vorlesung.ppt 2013-10-27 18:38 - 2013-10-27 18:38 - 01393664 _____ C:\Users\Christina Maren R\Downloads\cleavages_und_sozialstruktur.ppt 2013-10-27 15:51 - 2013-10-27 15:51 - 00003088 _____ C:\Windows\System32\Tasks\{7CA5E8F0-D8A3-46A2-8952-AE074F1A6394} 2013-10-26 18:03 - 2013-10-26 18:03 - 00003088 _____ C:\Windows\System32\Tasks\{1687F846-A15F-454E-A739-C977E3FA1594} 2013-10-25 12:41 - 2013-10-25 12:41 - 00003088 _____ C:\Windows\System32\Tasks\{19302274-A815-41E2-981B-358A9261CEFD} 2013-10-23 13:02 - 2013-10-23 13:02 - 00003088 _____ C:\Windows\System32\Tasks\{90191F87-D18E-4B72-B53F-EDC77F0141E8} 2013-10-23 12:26 - 2013-10-23 12:26 - 00003088 _____ C:\Windows\System32\Tasks\{1162C06B-2136-4348-8950-AD5F1D0A63B4} 2013-10-22 09:20 - 2013-10-22 09:20 - 00003088 _____ C:\Windows\System32\Tasks\{27DBEED7-2FB3-40C6-BD69-3A1A0EEE8A3D} 2013-10-21 14:58 - 2013-10-21 14:58 - 00003088 _____ C:\Windows\System32\Tasks\{8E9A3AF9-FF8A-484F-B976-BCA724FB930B} 2013-10-21 13:32 - 2013-10-21 13:32 - 00003088 _____ C:\Windows\System32\Tasks\{1189B055-1048-46E3-8F02-F2568AF90F91} 2013-10-20 18:58 - 2013-10-20 18:58 - 00003088 _____ C:\Windows\System32\Tasks\{46B12118-0293-4FB1-93FF-E5EC852F5362} 2013-10-18 14:30 - 2013-10-18 14:30 - 00256251 _____ C:\Users\Christina Maren R\Downloads\1. Sitzung Einführung BRD.pptx ==================== One Month Modified Files and Folders ======= 2013-11-17 11:34 - 2010-08-26 04:23 - 01343119 _____ C:\Windows\WindowsUpdate.log 2013-11-17 11:31 - 2009-08-04 10:51 - 00654852 _____ C:\Windows\system32\perfh007.dat 2013-11-17 11:31 - 2009-08-04 10:51 - 00130434 _____ C:\Windows\system32\perfc007.dat 2013-11-17 11:31 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-17 11:30 - 2010-08-26 04:50 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-17 11:28 - 2013-11-17 11:28 - 00891184 _____ C:\Users\Christina Maren R\Downloads\SecurityCheck (1).exe 2013-11-17 11:28 - 2013-11-17 11:27 - 00891184 _____ C:\Users\Christina Maren R\Downloads\SecurityCheck.exe 2013-11-17 11:23 - 2013-11-17 11:23 - 00003088 _____ C:\Windows\System32\Tasks\{55B6EFEC-E765-4AE3-9A41-C5D09DD8B938} 2013-11-17 11:23 - 2012-04-10 12:30 - 00000000 ____D C:\ProgramData\Skype 2013-11-17 11:23 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-17 11:23 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-17 11:19 - 2010-08-26 04:50 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-17 11:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-17 11:15 - 2009-07-14 05:51 - 00080200 _____ C:\Windows\setupact.log 2013-11-13 13:15 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\GIS WS13_14 2013-11-13 13:12 - 2011-01-11 00:01 - 00001419 _____ C:\Users\Christina Maren R\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-13 13:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-12 22:23 - 2013-11-12 22:16 - 00009768 _____ C:\Windows\IE11_main.log 2013-11-12 22:18 - 2013-11-12 22:18 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-12 22:18 - 2013-11-12 22:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-12 22:18 - 2013-11-12 22:18 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-12 22:18 - 2013-11-12 22:18 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-12 22:18 - 2013-11-12 22:18 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-12 22:18 - 2013-11-12 22:18 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-12 22:18 - 2013-11-12 22:18 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-12 22:18 - 2013-11-12 22:18 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-12 22:18 - 2013-11-12 22:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-12 22:18 - 2013-11-12 22:18 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-12 22:18 - 2013-11-12 22:18 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-12 22:18 - 2013-11-12 22:18 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-12 22:18 - 2013-11-12 22:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-12 22:15 - 2013-11-12 22:15 - 00003088 _____ C:\Windows\System32\Tasks\{D0EB07EE-9AF6-4999-A8F6-514C015651DC} 2013-11-12 20:39 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Statistik WS13_14 2013-11-12 18:57 - 2013-11-12 18:56 - 00000000 ____D C:\Users\Christina Maren R\Desktop\seltsame Dateien 2013-11-12 18:57 - 2013-10-16 17:58 - 00000000 ____D C:\Users\Christina Maren R\Desktop\EU WS13_14 2013-11-12 18:49 - 2013-10-16 17:57 - 00000000 ____D C:\Users\Christina Maren R\Desktop\BRD WS13_14 2013-11-12 18:47 - 2013-10-16 17:57 - 00000000 ____D C:\Users\Christina Maren R\Desktop\PoWi WS13_14 2013-11-12 18:46 - 2013-11-12 18:46 - 00155899 _____ C:\Users\Christina Maren R\Downloads\4. Sitzung Einführung BRD EU.pptx 2013-11-12 18:44 - 2013-11-12 18:44 - 00170925 _____ C:\Users\Christina Maren R\Downloads\2. Sitzung Einführung BRD EU (1).pptx 2013-11-12 18:43 - 2013-11-12 18:43 - 00167506 _____ C:\Users\Christina Maren R\Downloads\3. Sitzung Einführung BRD EU.pptx 2013-11-12 18:33 - 2013-11-12 18:33 - 00128541 _____ C:\Users\Christina Maren R\Downloads\(1) 14.10 (1).2013 2013-11-12 18:31 - 2013-11-12 18:31 - 00128541 _____ C:\Users\Christina Maren R\Downloads\(1) 14.10.2013 2013-11-12 18:14 - 2012-02-14 16:38 - 00000000 ____D C:\Users\Christina Maren R\Desktop\GEO 2013-11-12 18:13 - 2013-10-16 17:53 - 00000000 ____D C:\Users\Christina Maren R\Desktop\IR WS1314 2013-11-10 22:48 - 2013-11-10 22:48 - 00003088 _____ C:\Windows\System32\Tasks\{9D27886F-B7E7-4E89-BED1-8C50FF7E0EDC} 2013-11-10 19:54 - 2012-07-05 14:01 - 00000000 ____D C:\Users\Christina Maren R\Documents\Outlook-Dateien 2013-11-10 18:32 - 2013-11-10 18:32 - 00003088 _____ C:\Windows\System32\Tasks\{0D8E0A8E-31B5-4BC3-9B2D-C9ACC07D9FA2} 2013-11-10 18:31 - 2013-11-10 18:31 - 00000000 ____D C:\Program Files (x86)\ESET 2013-11-10 18:31 - 2013-11-10 18:30 - 02347384 _____ (ESET) C:\Users\Christina Maren R\Downloads\esetsmartinstaller_enu.exe 2013-11-07 17:48 - 2011-11-09 15:54 - 00045056 _____ C:\Windows\system32\acovcnt.exe 2013-11-07 11:54 - 2013-11-07 11:54 - 00003088 _____ C:\Windows\System32\Tasks\{783A7A63-CBD2-4DED-A29C-1EF0FD84DAEA} 2013-11-07 11:21 - 2013-11-07 11:21 - 00003088 _____ C:\Windows\System32\Tasks\{0347E89A-B28A-423B-9534-F2E2A7C15153} 2013-11-06 13:35 - 2013-11-06 13:35 - 00003088 _____ C:\Windows\System32\Tasks\{F1FF6BBB-09B8-43E6-83CA-4AABC585FBC4} 2013-11-06 12:44 - 2013-11-06 12:44 - 00003088 _____ C:\Windows\System32\Tasks\{BA4728AA-34EC-4809-80C8-ACF3BB5F67E1} 2013-11-05 10:30 - 2013-11-05 10:30 - 00003088 _____ C:\Windows\System32\Tasks\{F997992A-531E-45F2-ABF7-E45C1E24C568} 2013-11-05 10:28 - 2013-01-02 16:42 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Apple Computer 2013-11-03 17:11 - 2013-11-03 17:11 - 00000000 ____D C:\Windows\ERUNT 2013-11-03 17:11 - 2013-11-03 17:10 - 01033335 _____ (Thisisu) C:\Users\Christina Maren R\Downloads\JRT (1).exe 2013-11-03 17:10 - 2013-11-03 17:09 - 01033335 _____ (Thisisu) C:\Users\Christina Maren R\Downloads\JRT.exe 2013-11-03 17:06 - 2013-11-02 21:33 - 00000000 ____D C:\AdwCleaner 2013-11-03 16:58 - 2013-11-03 16:57 - 01060070 _____ C:\Users\Christina Maren R\Downloads\adwcleaner (1).exe 2013-11-03 16:51 - 2010-08-26 04:57 - 00216788 _____ C:\Windows\PFRO.log 2013-11-02 23:13 - 2013-11-02 23:13 - 00003088 _____ C:\Windows\System32\Tasks\{C0EC8212-D2BF-4B0D-91BB-B1797055CC3F} 2013-11-02 21:32 - 2013-11-02 21:32 - 01060070 _____ C:\Users\Christina Maren R\Downloads\adwcleaner.exe 2013-11-02 19:19 - 2012-06-30 20:17 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-02 19:19 - 2009-07-14 03:34 - 00000513 _____ C:\Windows\win.ini 2013-11-02 19:02 - 2013-11-02 19:02 - 00003088 _____ C:\Windows\System32\Tasks\{CE13E26E-3B4D-40E3-84C7-56D1E396AE1E} 2013-11-02 19:02 - 2013-11-02 19:02 - 00001107 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-02 19:02 - 2013-11-02 19:02 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Malwarebytes 2013-11-02 19:02 - 2013-11-02 19:01 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-02 19:01 - 2013-11-02 19:01 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-02 19:01 - 2013-11-02 19:00 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christina Maren R\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-01 23:54 - 2013-11-01 23:54 - 00152704 ____H C:\Windows\SysWOW64\mlfcache.dat 2013-11-01 22:38 - 2013-11-01 22:38 - 00021366 _____ C:\ComboFix.txt 2013-11-01 22:38 - 2013-11-01 22:18 - 00000000 ____D C:\Qoobox 2013-11-01 22:38 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2013-11-01 22:35 - 2013-11-01 22:18 - 00000000 ____D C:\Windows\erdnt 2013-11-01 22:33 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2013-11-01 22:17 - 2013-11-01 22:17 - 05143186 ____R (Swearware) C:\Users\Christina Maren R\Downloads\ComboFix.exe 2013-11-01 22:15 - 2013-11-01 22:15 - 00003042 _____ C:\Windows\System32\Tasks\PandaUSBVaccine 2013-11-01 22:15 - 2013-11-01 22:15 - 00000000 ____D C:\ProgramData\Panda Security 2013-11-01 22:15 - 2013-11-01 22:15 - 00000000 ____D C:\Program Files (x86)\Panda USB Vaccine 2013-11-01 22:14 - 2013-11-01 22:14 - 00848856 _____ (Panda Security ) C:\Users\Christina Maren R\Downloads\USBVaccineSetup.exe 2013-11-01 22:14 - 2013-11-01 22:14 - 00848856 _____ (Panda Security ) C:\Users\Christina Maren R\Downloads\USBVaccineSetup (1).exe 2013-11-01 11:28 - 2013-01-02 16:39 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-11-01 11:26 - 2013-11-01 11:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files\iTunes 2013-11-01 11:25 - 2013-11-01 11:25 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-11-01 11:25 - 2013-10-31 23:19 - 00000000 ____D C:\Program Files\iPod 2013-11-01 00:08 - 2013-11-01 00:08 - 00003088 _____ C:\Windows\System32\Tasks\{55A3A05B-3223-4149-A2C0-DF43C720686D} 2013-10-31 23:59 - 2013-10-31 23:59 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Desktop\FRST64.exe 2013-10-31 23:44 - 2013-01-02 16:41 - 00000000 ____D C:\ProgramData\Apple Computer 2013-10-31 23:37 - 2013-10-31 23:36 - 00045427 _____ C:\Users\Christina Maren R\Downloads\FRST.txt 2013-10-31 23:37 - 2013-10-31 23:35 - 00064259 _____ C:\Users\Christina Maren R\Downloads\Addition.txt 2013-10-31 23:33 - 2013-10-31 23:33 - 01957098 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST64.exe 2013-10-31 23:33 - 2013-10-31 23:33 - 00000000 ____D C:\FRST 2013-10-31 23:32 - 2013-10-31 23:32 - 01089445 _____ (Farbar) C:\Users\Christina Maren R\Downloads\FRST.exe 2013-10-31 22:34 - 2013-10-31 22:34 - 00003216 _____ C:\Windows\System32\Tasks\{76C0DB9E-0DA2-43FF-8932-A7E8E0DF8E6E} 2013-10-31 22:33 - 2013-10-31 22:33 - 00388608 _____ (Trend Micro Inc.) C:\Users\Christina Maren R\Downloads\HijackThis.exe 2013-10-31 22:33 - 2013-10-31 22:33 - 00015357 _____ C:\Users\Christina Maren R\Downloads\hijackthis.log 2013-10-31 22:33 - 2011-01-10 23:55 - 00000000 ____D C:\Users\Christina Maren R\AppData\Local\VirtualStore 2013-10-31 20:06 - 2010-08-26 05:16 - 00002168 _____ C:\Windows\system32\AutoRunFilter.ini 2013-10-31 20:06 - 2010-08-26 05:16 - 00001364 _____ C:\Windows\system32\ServiceFilter.ini 2013-10-31 20:00 - 2013-10-31 20:00 - 00000000 ____D C:\Users\Christina Maren R\AppData\Roaming\Avira 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-10-31 19:59 - 2013-10-31 19:59 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-10-31 19:51 - 2013-10-31 19:51 - 00002064 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\ProgramData\Avira 2013-10-31 19:48 - 2013-10-31 19:48 - 00000000 ____D C:\Program Files (x86)\Avira 2013-10-31 19:43 - 2013-10-31 19:43 - 00003058 _____ C:\Windows\System32\Tasks\{90ED30BE-B4FE-4BEC-B171-738AB66C4A7A} 2013-10-31 19:42 - 2013-10-31 19:41 - 85269544 _____ (AVAST Software) C:\Users\Christina Maren R\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe 2013-10-31 19:38 - 2013-10-31 19:37 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de_14b411.exe 2013-10-31 19:29 - 2013-10-31 19:28 - 123853152 _____ C:\Users\Christina Maren R\Downloads\avira_free_antivirus_de.exe 2013-10-30 12:59 - 2013-10-30 12:59 - 00000000 ____D C:\Program Files 2013-10-29 13:01 - 2013-10-29 13:01 - 00170925 _____ C:\Users\Christina Maren R\Downloads\2. Sitzung Einführung BRD EU.pptx 2013-10-28 15:46 - 2013-10-28 15:46 - 00003088 _____ C:\Windows\System32\Tasks\{8FC9014E-4053-4261-8517-5056C89D6DCC} 2013-10-28 15:42 - 2013-10-28 14:25 - 00092261 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr (1).pptx 2013-10-28 10:21 - 2013-10-28 10:21 - 00003088 _____ C:\Windows\System32\Tasks\{26FBFD2A-0450-47A4-8450-F6853D2C1E08} 2013-10-27 23:06 - 2013-10-27 23:06 - 00003088 _____ C:\Windows\System32\Tasks\{8BD73FC9-0826-4C63-8308-9F7BF369F89D} 2013-10-27 21:52 - 2013-10-27 21:52 - 00067489 _____ C:\Users\Christina Maren R\Downloads\Positivismus 27.10.13 2120 Uhr.pptx 2013-10-27 20:54 - 2013-10-27 20:54 - 00680448 _____ C:\Users\Christina Maren R\Downloads\empiri-Vorlesung.ppt 2013-10-27 18:38 - 2013-10-27 18:38 - 01393664 _____ C:\Users\Christina Maren R\Downloads\cleavages_und_sozialstruktur.ppt 2013-10-27 15:51 - 2013-10-27 15:51 - 00003088 _____ C:\Windows\System32\Tasks\{7CA5E8F0-D8A3-46A2-8952-AE074F1A6394} 2013-10-26 18:03 - 2013-10-26 18:03 - 00003088 _____ C:\Windows\System32\Tasks\{1687F846-A15F-454E-A739-C977E3FA1594} 2013-10-25 12:41 - 2013-10-25 12:41 - 00003088 _____ C:\Windows\System32\Tasks\{19302274-A815-41E2-981B-358A9261CEFD} 2013-10-25 11:26 - 2012-07-16 20:52 - 00000000 ____D C:\Users\Christina Maren R\Desktop\Uni 2013-10-23 13:02 - 2013-10-23 13:02 - 00003088 _____ C:\Windows\System32\Tasks\{90191F87-D18E-4B72-B53F-EDC77F0141E8} 2013-10-23 12:26 - 2013-10-23 12:26 - 00003088 _____ C:\Windows\System32\Tasks\{1162C06B-2136-4348-8950-AD5F1D0A63B4} 2013-10-22 09:20 - 2013-10-22 09:20 - 00003088 _____ C:\Windows\System32\Tasks\{27DBEED7-2FB3-40C6-BD69-3A1A0EEE8A3D} 2013-10-21 14:58 - 2013-10-21 14:58 - 00003088 _____ C:\Windows\System32\Tasks\{8E9A3AF9-FF8A-484F-B976-BCA724FB930B} 2013-10-21 13:32 - 2013-10-21 13:32 - 00003088 _____ C:\Windows\System32\Tasks\{1189B055-1048-46E3-8F02-F2568AF90F91} 2013-10-20 18:58 - 2013-10-20 18:58 - 00003088 _____ C:\Windows\System32\Tasks\{46B12118-0293-4FB1-93FF-E5EC852F5362} 2013-10-18 14:30 - 2013-10-18 14:30 - 00256251 _____ C:\Users\Christina Maren R\Downloads\1. Sitzung Einführung BRD.pptx Some content of TEMP: ==================== C:\Users\Christina Maren R\AppData\Local\Temp\avgnt.exe C:\Users\Christina Maren R\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-03 17:57 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- --- --- --- Das Symptom ist immer noch da, ja. Ich hänge mal einen Screenshot von der Explorer-Ansicht meines USB Stick's an. Da erkennt man ja, dass die Ordner/Dateien noch immer "versteckt" angezeigt werden sowie dass zu einigen Ordnern eine Anwendungsdatei existiert (siehe gelbe Markierung, u.a. "PoWi WS13_14"). Soll ich bei den Ordnern einfach den Haken bei "versteckt" rausmachen und die Anwendungsdateien löschen? grüße |
Themen zu USB-Stick: Ordner auf einmal versteckt & teilweise .exe Dateien |
beschreibung, datei, dateiname, daten, erschienen, fehlte, gen, komplett, nicht mehr, ordner, pup.optional.babylon.a, pup.optional.datamngr.a, pup.optional.delta.a, pup.optional.opencandy, schei, speicher, trojan.agent.ck, trotz, verliere, versteckt, versteckten, virus |